skysight-inc/HackerNews huggingface dataset:
True it allows the majority union opinion to be expressed. But it doesn't change the fact the workers are still enabling the company to spread it's message by virtue of working there. They can avoid the latter by working for a different company.

Furthermore, there isn't anything that's preventing those employees from voicing their opinions without a union. The story linked in the OP is exactly that. Unless tech companies are firing thier employers for their political views, employees can make their views known regardless of union status. While we have seen a few instances of that, most were views that I doubt the average pro software developer union person wants to see defended (then again a lot of people proposing unionizing developers want to limit H1Bs so you never know).

Contrast this with people who are against what the union is doing. The only way to avoid this is to leave the union. In some states (including California) this may mean leaving the entire field of work. Right to work states guarantee the ability to work without union membership, but many (most?) tech jobs are not in those States.
Why is Equifax in business still? I don't get it.

A company like Bear Sterns got "killed", Enron and others got litigated out. But it looks like Equifax did not face any consequences. Its high time we treat data as an asset class and regulate accordingly. Particularly personal information is acquired by every company and is treated as a valuable commodity. Companies get acquired purely for the amoutn of data they have. The market has already declared it as an asset why is it not regulated?
Pure science missions must compete for funding against efforts that inspire and capture the imagination of the people.

Getting humans into Mars to study Mars geology is priority. Once humans have been in Mars few times and the public interest vanishes–as it did during moon missions–there may be more money for telescopes and probes and cheaper robotic exploration.

53 million households in the US (over 580 million globally) watched the Apollo 11. The numbers dropped dramatically after the first mission. Apollo 13 was dramatic exception. People get bored easily and lose intrest.

---

If I would have a say, the priority should be the Overwhelmingly Large Telescope (OLT). US and other countries should have joined with Europeans to make it happen. The cost was 'just' 1.5 billion. Europeans opted for Extremely Large Telescope (ELT) instead and US is dong thirty meter telsecope. OLT would have been really something.
EXCELLENT READ, THANK YOU FOR POSTING IT.
I’m not entirely convinced that you’d actually get more equitable outcomes, but I would definitely appreciate the transparency. I can’t help but think that some people would just stop reading altogether if they saw that article stated their agenda of X, but the reader held their own of Y.
No, I disagree.

If unions REALLY wanted everyone to have the opportunity to be heard and respected feelings, there would be no violence and intimidation when people move to cross a picket line.

It happens. It's ugly. And it shows unions are NOT about respect for anyone's feelings that don't align with the 'endorsed' way of thinking.
ARM is Funding 64-bit Armv8-a support in PyPy
Isn't your counter-example about as unrealistic as the notion that such a union would want to promote software patents? As in, that's a zany example but the (more-or-less) inverse seems about as zany.
Because sometimes a completely preventable thing caused it. Dismissing any attempt to reduce causes because "it will just burn anyways" doesn't seem right.
Neither of those were true 3D. In fact, even Doom wasn't fully 3D.

The view could only ever be at 90 degrees for example (no looking up or down) and the environments couldn't have more than one floor and one ceiling at any given location.

I think the limitations made the genre even more successful because it forced people to "evolve" into 3D by going from Wolf3D > Doom > Quake. Step by step. True immersive 3D was actually a jarring (but undoubtedly fun) experience for the first time. Anyone here remember Descent?
Simpleator is an innovative Windows-centric x64 user-mode application emulator
If the House's conclusion is that software of this complexity is impossible to secure, then it seems reasonable that we should treat any data stored in it as insecure. Maybe companies as complex as Equifax shouldn't have access to the data they have access to.

I'm pretty tired of companies telling me that it's fine for them to hoover up extremely sensitive information like my social security number and then turning around after a breach and saying, "well, there was nothing we could do."

It can't be both. If it's impossible to secure companies, then maybe Merriott shouldn't be asking for anybody's real name when they sign up for a hotel. Maybe we should stop using credit agencies for identity verification and start investing government resources into a separate 2-factor system. Maybe you should have a legally protected right to lie to businesses that ask for your personal information.

Equifax leaked personal information for 50% of the US population. If you were voting, and there was a 50% chance that your ballet and voting history was going to be leaked publicly after the election, you would expect either:

A) Someone is so incompetent that they're going to jail, or

B) The system we're using is so fundamentally broken that we need to rethink the core paradigms of how it's built.

To me, a report like this sounds like the House is saying that where corporate security is concerned, B is the answer.
I get the impression that they did connect with yolo root access.

>Although the ACIS application required access to only three databases within the Equifax environment to perform its business function, the ACIS application was not segmented off from other, unrelated databases. As a result, the attackers used the application credentials to gain
access to 48 unrelated databases outside of the ACIS environment.
With gitlab-ce being ~500mb this must be a gigantic improvement for them.
Which, considering the article itself says cloud stuff is broken and they have no concrete proposals, felt like a sarcastic joke.
If there are no private contractors then the US Military would just takeover those duties itself.
Big paychecks:  the typical employee salary at big Bay Area tech employers
The current situation is working perfectly fine for plenty of tech workers. We have some of the best ratio of compensation to working experience in the country. There's a reason why so many people want to get into tech. Forced arbitration or not, I highly doubt the average Google Dev would want to trade life situations with the average American.

Are we not technologists and engineers? Don't we know enough about the pitfalls of trying to fix a system that isn't broken?
> Someday people will learn.

Not convinced of this at all. There just isn't sufficient financial incentive.
Expecting corporations to stop lobbying is laughably unrealistic, so "no lobbying" isn't available.
I didn't noticed it in the imgur link, the image was probably compressed. You can see it in the google maps link.
I do not agree. At all.

Quake has some of the most amazing maps/episodes and utterly terrifying aesthetic of any FPS, despite how disparate levels were at times.

I can think of few older FPS that hold up as well as Quake 1's single player campaign to this day, and the mapping community is still running amazingly too.

Quake certainly took its toll on ID, and was when Romero was ousted. It may not have been the original game they planned, but I don't think the game turned out any bit less amazing of a campaign than OG Doom IMO.
Doesn't seem new at all, just like functional programming with lazy values. The new part isn't the async it's the visual programming of which there are others. Does incorporation async make visual programming different?
I'm just guessing that if the only thing that given box is doing is handling very specific internal S3 API, you can probably optimize a few things over a multi-purpose architecture.

I'm totally blue and I'll be honest - when I want to learn about something, it seems that stating some thesis gets me way more information from HN vs asking a question, especially when it turns out to be wrong ;)
You're making the large assumption that Equifax runs a single, global, interconnected network.
It may not be "home grown", depending on how you want to define that term, but it does point to a vector for Intel's business model to be disrupted.

Going to ARM for chip IP, tweaking it, and then going to TSMC or some other manufacturing specialist could steadily eat away at Intel's market share and margins. Apple has now gone this route, Amazon is testing the waters, and other tech giants probably aren't far behind.
I would support a government initiative that deprecated social security numbers entirely.

Come up with an alternative plan, give businesses some reasonable number of years to stop relying on them, and after that point they'll no longer be issued to anyone new who's born.

Or if you don't want to get rid of them, treat them like public information. Give businesses X years, and then say, "past this point, we're just going to make these searchable by anyone who makes a request." They're an ID number, not a password.
> "national ID with a cryptographic token" means that OpenID / Paypal-based single-sign on logins are illegal.

Why? Why doesn't it just mean that there's a canonical government system that doesn't touch PayPal or OpenID that can be used for stuff that would currently be tied to your social security number?
Spot on. As an admin the saml situation was a nightmare: it took so long for them to update the saml library, so for a time it wasn't even compatible with their docker images because the library version they were using required mbstring, while many moons ago an updated version of the lib was released upstream without the need for mbstring. I still can't get ss-logout to work either.

We use SOGo as well, and at some point I will get around to integrating SAML into sogo, so at least when users click on the "external sites app" icon for SOGo, they'll be signed in automatically. Either that or add support to use external contacts and calendar dav servers.

I feel like in general there will come a point where PHP's execute and die model won't do. I really wish they'd implement some sort of backend daemon to carry out long running tasks.
I'm sorry, I don't see anywhere where I said there were only two ways.
The vulnerability did not affect all of the users.
> PHP has a type system equally as [sic] bad, if not worse

PHP 7's type system is worse than Javascript's type system? I can't imagine any developer who has worked with both those languages agreeing with you. It sounds like you haven't done any serious PHP work for the last ten years or so, and your opinions haven't kept pace with reality.
A-are you sweating?
Got it. Thanks for the explanation!
Son of a .... &%$!
> I am sorry balloting members individually on every policy is madness that's what conference is for.

We have technology for this, and it's not hard to take a vote. I will never be a part of any union that presumes to speak for me on individual issues without my individual consent. And if the union is doing so many things that the number of votes are too much for individual members to deal with, it's doing too much.

(By contrast, it does seem entirely reasonable to give broad parameters to people doing negotiation, rather than doing negotiation ballot by ballot; the members should then vote on the resulting negotiated proposal, though, before it gets finalized.)
Super cool car you have. My former accountant had one too, he always took it on trips to France for holidays every year. A bit finicky to keep running well but with a good mechanic that should be doable as long as you don't start using it as a daily driver.
It is. The US spends enough money on elections that it really wouldn't be crazy to just switch over to public funding of elections and take money out of the equation entirely.

But I do agree that there is no way companies would chose to refrain from lobbying if the option was available.
More like how the reason buildings in the USA don't have waterless urinals is because of the plumber's union.
Agreed.

Look I enjoy a good Daikatana joke like any other, but while Carmack was the technical wizard, Romero was every bit as important in regards to getting those games to pop with the character and attention to detail -- maybe more than any other person at ID at the time.

He deserves his props too, and I think its awesome he's still so engaged with these games and helping keeping them going after all these years.
Climate change is a global problem but will never be solved by politicians as politics is never the solution to wicked problems. Solutions can only be established sustainably through decentralized technological progress. Solutions that are based on the political climate are never the way to go. As priorities can change rapidly. There are no experts in what last chance means. This is a political claim not a scientific on.
I often have trouble explaining to people why this is problematic. I encounter the "I've got nothing to hide" or "Who cares if I get ads that I'm more interested in?" arguments.

What do you say to those people?
Indeed a great way to find accidentally pirated fonts. Here’s to the countdown of type foundries sending mass takedown requests to GitHub.
> but to say it threatens Intel is like saying that Amazon has introduced a server chip that will take over everyone's datacenters from Intel.

The implication is that Amazon is everyone's datacenter.
PayPal touches your SSN, as it is tied to your bank account. (Bank accounts require a "Individual Taxpayer Identification Number", which is the SSN for any citizen. Non-citizens get a different ID, but really its the TIN that is the cause of all of these security issues). So yes, really, the proposed wording would probably make Paypal illegal.

You have a point on OpenID, but my overall point is that OpenID would probably be sufficient for most financial transactions on today's internet. OpenID is basically equivalent to Paypal's security model.

Neither Paypal nor OpenID require 2-factor or security tokens. I think they're an optional feature. But in any case, the Paypal / OpenID model of identification (Paypal controlled website verifies password, and sends a token to the 3rd party website) would be sufficient for today's security.

----------------

Of course, none of this even touches upon Equifax. Equifax uses SSNs to identify people, and often without their knowledge or consent. Equifax is a service to the financial industry, to help keep tabs on individual's history.

So the Paypal model will NOT work with Equifax's use case, because the individuals don't always know when they are being tracked. Maybe it'd have to be something to OAuth's model.

In any case, I'm not an expert either. I just appreciate the difficulty of this problem.
Callback hell was never about promises, but callbacks (!) which would require a third-party library or some gymnastics to implement control flow. Promises and async/await both solve it reasonably well. The problem presented can be rewritten as:

Promise.all([
doA().then(a => doC(a).then(c => [a, c])),
doB().then(b => doD(b), b_; return b; })
]).then(([a, c], b) => doE(c, a, b))

No need for `new Promise(resolve => ...)`. Or with async/await:

const [a, b] = Promise.all([doA(), doB()])
doD(b)
const c = await doC(a)
doE(c, a, b)

Is it worth introducing the complexity of visual programming to solve this 'problem'? I have a much harder time understanding the graph than the code.
I could almost hear Larry Ellison snickering in the background as I read this. I wonder how much Amazon pays Oracle, anyway? I think in '16 is was around $60M (according to Ellison: https://www.forbes.com/sites/bobevans1/2017/12/12/oracles-la... )
Yeah I don't think so that on its own the visual programming makes any difference (or even adds any value). The main point here is that the "visual programming" is coincidentally a solution for async programming.
> Yes, I know AWS' target group is small startups and big enterprises who couldn't care less about how much their servers costs them.

When you choose a cloud provider you aren't just renting servers, you are getting access to an ecosystem of supporting services like load balancing, DNS, monitoring systems, container orchestration, cloud-specific databases and event systems, datacenters across the word, 24/7 oncall support, etc.

Nobody offers as many features as AWS. Not Google, not Azure, and certainly not Scaleway. And when they offer as many features I bet they'll charge close to the same price.

Dismissing the valid reasons people have for choosing AWS in the way you did is completely incorrect.
Zhejiang province pledges billions to drive tech, innovation
Similar situation with LDAP as well. The first login of a new user results in a crash. They haven't fixed this issue in 3 months.
Indeed, with networking it seems to have already happened, if I remember correctly Google also uses software defined networking based on their own hardware (not sure if FPGAs are involved)
I feel that I lucked out. My area code had a dialup BBS with 40 lines, on which they ran software to tunnel IPX.

On the client side you ran SIRDOOM, which then shelled out to Doom once the connection was setup.

Best part: it was all free.

I never got the background on why they did it, and why they never charged a dime. Maybe they had aspirations to be the next DWANGO?

Who knows... but I spent many a night fragging till I dropped.
API/backend services, event-based processing (e.g. emails with csv files attached kicking off a workflow), integration (serverless shims for horrible third party APIs), etc.

especially for workflows, lambdas and step functions are very interesting.
yeah I think the article actually starts with that Promise-based code snippet. Even the sequential graph is based on the promise-based code.
Because this is just their first generation of chips. Should Amazon stick with it, they will get better at it and costs will come down while performance goes up. This should scare Intel because they have been banking on the data center for future growth. This looks like pretty much their last stand for a place where they can maintain margins. They lost mobile very early on. More recently it's looking like PCs are at risk thanks to competition from AMD. If they start losing their large volume enterprise customers, they'll need to come up with a plan D.
I think all the current replies to this comment are slightly off-mark. In an n-to-1 relationship, forced arbitration favours the 1 party. (An example is a company and its customers or a company and its employees.)

The reason it favours the one party is that the cost of action is prohibitively high. As a customer/employee, suing your vendor/employer or taking them to arbitration requires you to dedicate much of your life to that cause. To them, it’s a small cost of doing business that has already been budgeted for.

The solution that was invented is class-action lawsuits. If an employer steals $1000 from every employee, it’s not worthwhile for them to sue. If market collusion raises the price of a RAM module by 10%, it’s not worthwhile for most customers to sue.

Forced arbitration removes that option. It is not possible to have class-action arbitration in any agreement I’ve read.

Another way of removing the option of class actions is class-action waivers, which are problematic for the same reason in my opinion.
>The Equifax data breach and federal customers’ use of Equifax identity validation services highlight the need for the federal government to be vigilant in mitigating cybersecurity risk in federal acquisition. The Office of Management and Budget (OMB) should continue efforts to develop a clear set of requirements for federal contractors to address increasing cybersecurity risks, particularly as it relates to handling of PII. There should be a government wide framework of cybersecurity and data security risk based requirements.

From my understanding of FEDRAMP, all of the things that Equifax failed to do should be already covered. Software patching, isolation of data, audit trails etc. etc. Seems more like a massive auditing fail.
I make enough that I have consciously chosen to work for a company that I endorse the values of. But this is the second job I have had after immigrating to Canada, the first one paid well and I needed work.

Being able to quit a job over a moral objection is a painted as a luxury to most employees (whether it actually is a luxury or not... I think is less relevant than all the media we're fed reinforcing the fact that having a job is a privilege we're lucky to be allowed)
Xylon's guide to computer security (2017)
Well I'd say it's certainly a big risk to Intel. For one, a lot of Intel customers are going in-house with chip design. Apple on its own might not hurt much, but add a few more like Amazon or Google, and things can really unravel. If you're an integrated chip designer and you lose volume, you're in for a lot of pain.

The thing that defines Amazon in recent years is their desire to make everything a third party service (AWS, Fulfillment, etc) and they may in fact do that for their own chips. So while Apple may never sell their chips to anyone, Amazon may decide to enter the merchant chip business (if they decide it's not a competitive advantage). Maybe they wouldn't sell it to Microsoft or Google, but certainly other companies that they don't compete with that operate their own servers (Facebook). And then Intel would really be losing volume.
“Pin 2 is high” God
C/C++/Rust/Go: Compiled language Stockholm syndrome.

Time difference between printf() & F5 vs. setting up breakpoints and watch variables in a debugger is going to be negligible in something like Ruby/Python/PHP.

Also, everything is so damn framework-heavy these days that stepping until you strike gold can take a very long time. Super-verbose logging would probably be more effective.
If you are small and have no government support you have to learn in order to survive. If you are monolith like Equifax and you only have to explain yourself to people who are openly soliciting campaign contributions (read: bribes) then learning is a waste of time when you can just buy off the politicians and buy out the little guys who are doing things better.
so in your code sample, would 'aOut' be a promise or a value? in case it is a promise, then basically doC() would needed to be re-written to handle when it gets a promised value instead of an actual value, and if not, then doA() must be invoked synchronously, i.e. the `let bOut = doB()` statement must be awaiting `let aOut = doA()` statement which is not what the desired async execution flow is.
Some more info here: https://perspectives.mvdirona.com/2018/11/1227/
That's a great website, I check it every now and then for a laugh. It's funny how similar every company portrays the acquisition experience.

It's almost always; a positive, reflective experience which dismisses any consequences to end users...
and so you're saying if they had 1 million dollars you would consider them financially "rich"?

The article is about the motivations of rich people.

it doesn't sound like the lifestyle you're describing is a financially "rich" lifestyle. It sounds like an "I could get by if I pinched pennies" lifestyle. One for which it would be obvious why they'd want more money.
McDonalds, Meet McPathogens