Skip to content

Using Clouds for too long might have made you incompetent

Technology
82 31 5
  • I disagree. On paper that sounds good, but I firmly believe good engineers are curious, so they'll learn a lot more than necessary to do the job.

    For example, when I worked at a company that designed antennas as a software engineer (built something tangentially related), I didn't need to know anything about electrical engineering, but I was curious so I asked a ton of questions and now I know a fair amount about EE. These days I work in a very different domain and still ask a ton of questions to our domain experts. In my own field, I look into all kinds of random things tangentially related to the tools I use. In each case, that curiosity has come in handy at some point or another.

    In each role, I can tell who's there to clock in and clock out vs who is genuinely curious and looking to improve, and it's the latter group who tend to produce the best work and go on to great roles after leaving our company, while the 9-5 warriors who just focus on the requirements tend to do pretty mediocre when it comes to advancement.

    When I hire, I look for that curiosity because you never know what you'll need to know to fix a prod issue quickly. My esoteric knowledge about SSH helped keep my team productive for a few days when IT was being slow revolving our issue, and likewise we've had quick resolution to prod bugs because someone on the team knew something random that ended up being relevant. That's what I mean when I say I look for a diverse team, I want people with different strengths who all actively seek to improve so we'll have a good shot at handling whatever comes down the pipe (and we get a lot of random stuff, from urgently needing to embed 3D modeling tools into our reporting app to needing to embed complex C++ simulation code or rewrite Fortran code into our largely CRUD Python app).

    Most of these cases of "focus on one niche" are often symptoms of lacking curiosity and just wanting to tick boxes to quality for a role. I'd much rather someone miss a few important boxes but tick a lot of random ones because they're curious; they'll take longer to on-board, but they'll likely be more useful long term.

    I don't work in the security space, but I think the same applies to most technical fields. Breadth of knowledge in an individual provides depth of knowledge in a team.

    now I know a fair amount about EE

    But, did you ever use a Smith's chart to assist in antenna design / analysis?

  • My take on how a decade (or more) of using cloud services for everything has seemingly deskilled the workforce.

    Just recently I found myself interviewing senior security engineers just to realize that in many cases they had absolutely no idea about how the stuff they supposedly worked with, actually worked.

    This all made me wonder, is it possible that over-reliance on cloud services for everything has massively deskilled the engineering workforce? And if it is so, who is going to be the European clouds, so necessary for EU's digital sovereignty?

    I did not copy-paste the post in here because of the different writing style, but I get no benefit whatsoever from website visits.

    That has been my experience with security people, too. They are button pushers and copy pasters. But I don't think it's cloud computing causing it. They were like that before clouds.

  • That and also - humans not knowing something can man up and learn it. When they need, they'll learn.

    And OP's question about European clouds - it depends really. A lot of what this endeavor needs is just advanced use of OpenStack. I'm confident there are plenty of people with such skills in the EU countries.

    As for the post content - I dunno, my experience with Kubernetes consists of using it, but not trying to understand or touch it too closely, because it stinks. Maybe those engineers were like that too.

    When they need, they'll learn.

    100% agree. But.
    If you are a principal engineer claiming to have experience hardening the thing, you would expect that learning to have already happened.
    Also, I would be absolutely fine with "I never had a chance to dig into this specifically, I just know it at a high level" answer. Why coming up with bs?

    Maybe those engineers were like that too.

    I mean, we are talking about people whose whole career was around Kubernetes, so I don't think so?

  • You were at screening level #1. When I applied for work in Manhattan in 1988 it was like that: 9/10 jobs you applied to weren't the actual employer, they were agents building a pool of candidates to be able to present to the actual employers at a moment's notice if the employer should ever actually call asking for candidates.

    Today I bet it's rare to get hired without at least 3 screenings before you actually meet the people you might be working with.

    Maybe, but that doesn't quite track with what I experienced. It was for a fairly well known company that builds industrial tools and machines, and I interviewed at their HQ, so I don't think it was an agency building a pool.

    The screening part sounds right, but I think these guys were doing it in-house.

  • That has been my experience with security people, too. They are button pushers and copy pasters. But I don't think it's cloud computing causing it. They were like that before clouds.

    Yeah, they are frequently just parroting things like CVE notices as highlighted by a fairly stupid scanning tool.

    The security ecosystem has been long diluted because no one wants to doubt a "security" person and be wrong, and over time that has made a pretty soft context for people to get credibility as a security person.

  • My take on how a decade (or more) of using cloud services for everything has seemingly deskilled the workforce.

    Just recently I found myself interviewing senior security engineers just to realize that in many cases they had absolutely no idea about how the stuff they supposedly worked with, actually worked.

    This all made me wonder, is it possible that over-reliance on cloud services for everything has massively deskilled the engineering workforce? And if it is so, who is going to be the European clouds, so necessary for EU's digital sovereignty?

    I did not copy-paste the post in here because of the different writing style, but I get no benefit whatsoever from website visits.

    Nah brah, knah waddahma? Running my own Nextcloud instance is basically what drove me to become a linux novice.

    I used to be a windows gamer. Now I run my own home-LLM server for the self hosted cloud assistant.

    People should try, it's fun!

  • Nah brah, knah waddahma? Running my own Nextcloud instance is basically what drove me to become a linux novice.

    I used to be a windows gamer. Now I run my own home-LLM server for the self hosted cloud assistant.

    People should try, it's fun!

    Juat as a reality check:
    What you and me consider fun isnt fun for moat outside of the lemmy techie bubble.

  • Maybe, but that doesn't quite track with what I experienced. It was for a fairly well known company that builds industrial tools and machines, and I interviewed at their HQ, so I don't think it was an agency building a pool.

    The screening part sounds right, but I think these guys were doing it in-house.

    That tracks with expectations. Many larger companies don't use external recruiters at all, I'd guess the threshold is probably around 10,000 employees - more or less - above that they'll have it vertically integrated in-house.

    I've worked with a 100,000 employee company where HR will pre-screen candidates at job fair type interviews, just to file them away against potential future openings. They won't usually task actual staff with doing interviews for openings that aren't funded, though sometimes it feels like they are doing that - sending so many bad-fit candidates that it takes us 8-10 to find one that might possibly be a net-positive asset to the team.

  • My take on how a decade (or more) of using cloud services for everything has seemingly deskilled the workforce.

    Just recently I found myself interviewing senior security engineers just to realize that in many cases they had absolutely no idea about how the stuff they supposedly worked with, actually worked.

    This all made me wonder, is it possible that over-reliance on cloud services for everything has massively deskilled the engineering workforce? And if it is so, who is going to be the European clouds, so necessary for EU's digital sovereignty?

    I did not copy-paste the post in here because of the different writing style, but I get no benefit whatsoever from website visits.

    nah, I was incompetent long before cloud services.

  • When they need, they'll learn.

    100% agree. But.
    If you are a principal engineer claiming to have experience hardening the thing, you would expect that learning to have already happened.
    Also, I would be absolutely fine with "I never had a chance to dig into this specifically, I just know it at a high level" answer. Why coming up with bs?

    Maybe those engineers were like that too.

    I mean, we are talking about people whose whole career was around Kubernetes, so I don't think so?

    Ah. OK. Yep, people lie in their CV's.

  • Indeed, Glassdoor to cut 1,300 jobs amid AI integration, memo shows

    Technology technology
    13
    114 Stimmen
    13 Beiträge
    39 Aufrufe
    B
    When being asked about the hole in my resume I hope I can save face by saying : "I used AI to replace my employer for the said time because AI is such a revolutionary technology" .
  • 0 Stimmen
    1 Beiträge
    13 Aufrufe
    Niemand hat geantwortet
  • Converting An E-Paper Photo Frame Into Weather Map

    Technology technology
    2
    1
    113 Stimmen
    2 Beiträge
    21 Aufrufe
    indibrony@lemmy.worldI
    Looks like East Anglia has basically disappeared. At least nothing of value was lost
  • Role of Email Deliverability Consulting in ROI

    Technology technology
    1
    2
    0 Stimmen
    1 Beiträge
    14 Aufrufe
    Niemand hat geantwortet
  • Taiwan adds China’s Huawei, SMIC to export blacklist

    Technology technology
    43
    1
    61 Stimmen
    43 Beiträge
    186 Aufrufe
    R
    Based decision.
  • 1 Stimmen
    2 Beiträge
    16 Aufrufe
    A
    If you're a developer, a startup founder, or part of a small team, you've poured countless hours into building your web application. You've perfected the UI, optimized the database, and shipped features your users love. But in the rush to build and deploy, a critical question often gets deferred: is your application secure? For many, the answer is a nervous "I hope so." The reality is that without a proper defense, your application is exposed to a barrage of automated attacks hitting the web every second. Threats like SQL Injection, Cross-Site Scripting (XSS), and Remote Code Execution are not just reserved for large enterprises; they are constant dangers for any application with a public IP address. The Security Barrier: When Cost and Complexity Get in the Way The standard recommendation is to place a Web Application Firewall (WAF) in front of your application. A WAF acts as a protective shield, inspecting incoming traffic and filtering out malicious requests before they can do any damage. It’s a foundational piece of modern web security. So, why doesn't everyone have one? Historically, robust WAFs have been complex and expensive. They required significant budgets, specialized knowledge to configure, and ongoing maintenance, putting them out of reach for students, solo developers, non-profits, and early-stage startups. This has created a dangerous security divide, leaving the most innovative and resource-constrained projects the most vulnerable. But that is changing. Democratizing Security: The Power of a Community WAF Security should be a right, not a privilege. Recognizing this, the landscape is shifting towards more accessible, community-driven tools. The goal is to provide powerful, enterprise-grade protection to everyone, for free. This is the principle behind the HaltDos Community WAF. It's a no-cost, perpetually free Web Application Firewall designed specifically for the community that has been underserved for too long. It’s not a stripped-down trial version; it’s a powerful security tool designed to give you immediate and effective protection against the OWASP Top 10 and other critical web threats. What Can You Actually Do with It? With a community WAF, you can deploy a security layer in minutes that: Blocks Malicious Payloads: Get instant, out-of-the-box protection against common attack patterns like SQLi, XSS, RCE, and more. Stops Bad Bots: Prevent malicious bots from scraping your content, attempting credential stuffing, or spamming your forms. Gives You Visibility: A real-time dashboard shows you exactly who is trying to attack your application and what methods they are using, providing invaluable security intelligence. Allows Customization: You can add your own custom security rules to tailor the protection specifically to your application's logic and technology stack. The best part? It can be deployed virtually anywhere—on-premises, in a private cloud, or with any major cloud provider like AWS, Azure, or Google Cloud. Get Started in Minutes You don't need to be a security guru to use it. The setup is straightforward, and the value is immediate. Protecting the project, you've worked so hard on is no longer a question of budget. Download: Get the free Community WAF from the HaltDos site. Deploy: Follow the simple instructions to set it up with your web server (it’s compatible with Nginx, Apache, and others). Secure: Watch the dashboard as it begins to inspect your traffic and block threats in real-time. Security is a journey, but it must start somewhere. For developers, startups, and anyone running a web application on a tight budget, a community WAF is the perfect first step. It's powerful, it's easy, and it's completely free.
  • 761 Stimmen
    187 Beiträge
    507 Aufrufe
    O
    Not being a coward.
  • 2 Stimmen
    8 Beiträge
    52 Aufrufe
    F
    IMO stuff like that is why a good trainer is important. IMO it's stronger evidence that proper user-centered design should be done and a usable and intuitive UX and set of APIs developed. But because the buyer of this heap of shit is some C-level, there is no incentive to actually make it usable for the unfortunate peons who are forced to interact with it. See also SFDC and every ERP solution in existence.