skysight-inc/HackerNews huggingface dataset:
That is a good question. Is this a fireable offense regardless of the content? If not, what kind of content is fireable, subject matter that is political, religious, vulgar, or offensive?

Putting this into an internal tool does seem unprofessional in my opinion. Why bite the hand that feeds you?
TLS 1.3 with 1-RTT should improve this situation at least somewhat. I suspect HTTP3 will help in high packet loss situations but it's going to be a while until that's deployed. Also wikipedia is still perfectly reachable via http if you disable the HSTS preloading in your browser
Well no, but considering that she seems to have followed the correct processes if she had done that I'd have expected the response to be rolling back the commit and a follow up postmortem to document what was missing from the process that allowed it to happen and changes made to the process to prevent it from happening in the future. Not firing the employee. You shouldn't blame workers for system failures.
The Path to Becoming a Data Engineer
One of the most use-full things of Rust is to have a clear "conversion" trait:

https://doc.rust-lang.org/std/convert/trait.From.html

This is my #1 thing with rust.

Is a stroke of genius to have a clear API for make conversions.
LastPass... :-(
>With that said, I do believe AI will replace most developers in our lifetime

I'm skeptical about the idea of coders programming themselves out of a job, and I can make that skepticism rigorous. The following slides explore structures intended to capture the core essence of computer programs writing computer programs, and these slides culminate in a theorem suggesting doubt. https://semitrivial.github.io/MeasuringIntelligence2019.pdf
Thank you. I actually thought I was overestimated the interest. Then again, I did not think that my blog post would attract the interest of the HackerNews readers.
I'm vacillating between using Drafts and nvAlt. I like nvAlt because it's plaintext, but it's not as readily available as Drafts - I haven't found a mobile client that I like for working with plaintext yet.
Your salary is not your total cost to the company. Having said that, 5x your salary is a bit high. It may be including other costs.
Besides performance, I do enjoy the feedback of incremental builds. It's not a
huge deal but it's not uncommon that I spot a problem just because the build
doesn't behave in the way I expected. Out of the top of my head:

- I forget to add a dependency to the Makefile, I modify said file and
notice that `make` doesn't do anything, hinting that something is wrong. If
the build system rebuilds everything every time I probably won't notice the
problem immediately.

- I edit code in a project but run make in the wrong location (because I'm
working on two projects at one for instance). Again, make will tell me that
there's nothing to do when I make changes.

- I run the latest build and it behaves in an unexpected way, I'm thinking that
maybe I haven't actually built the last version of the source so the code I'm
looking at isn't what's being executed. If I run "make" and I see that it
starts rebuilding some artifacts I know that I'm out of date and need to try
again. If nothing happens then I need to stop looking for excuse and actually
start debugging.

- I pull code written by other people (or apply a patch, or unstash old
changes). Running make will give me some insight on what parts of the
codebase have been impacted. If I see that it's rebuilding something I didn't
expect to change it'll probably catch my eye and get me to double check what
happened.

So I definitely wouldn't trade a Makefile for a shell script, especially since
if you build system can easily be replaced by a simple script you'll probably be
able to do just fine with a very basic Makefile.
There must be so many websites vulnerable to this sort of attack, or similar.
I don't buy this analogy. If there's one thing news reporting has demonstrated over the last few years, it's that Google is not lacking in actual digital equivalents of noticeboards where people can put up the equivalent of posters. This seems like she decided that wasn't aggressive enough and implemented the political equivalent of slipping adware into a browser extension instead.
I have not kept them handy.
Show HN: .Net Middleware for HTTP-Triggered Azure Functions
There is some disagreement that 1.5C might be where the diceyness kicks in although there is a fair amount of it happening now.
To me the whole concept of chess always getting better is a little puzzling. Most games of this type don't change, and therefore don't get better. The point is local challenge, not global optimization. To most, the point of games (and much other human endeavor) is competition for competition's sake, not a search for some maximum of abstract skill.

To avoid chess (real chess, with castling and all that) because AlphaZero exists is like avoiding singing because Taylor Swift exists. Or like avoiding painting because Chagall existed. Or like avoiding Starcraft because Serral exists. Yeah, with a 99.999999% chance, you're not going to exceed the performance of these individuals (or others I could name) in their respective fields. That doesn't take the joy out of learning and growing, at least not for me.

AlphaZero and similar add a few more nines to chess, in terms of the likelihood of being the best-performing entity at that game. But that should hardly make a difference except to maybe the two or three very best human players in the world.
The particular popup looks pretty official and scary as security popups should.

And portrays that Google management is endorsing this instead of a grassroots poster.

IMHO this is at minimum a misrepresentation case. And I would be pretty pissed if it was used for Earth day. Don't mess around with crying wolf.

Working for Google.
They did say Mac Pro:

https://www.hardwarezone.com.sg/tech-news-fully-spec-apple-m...

Taking into account the exchange rate that works out to about 55K USD.
Going through my own Ring camera traffic requests
Software: Vimwiki[1]
System: Johnny Decimal[2]

[1]: https://github.com/vimwiki/vimwiki
[2]: https://johnnydecimal.com/
This isn't a cut-and-dry issue. The internal tool was purportedly used to alert about privacy and security issues on external websites. But the message sent to users was not privacy or security related.
Exactly. What if the pop-up just said “not using disposable cups helps the environment”, or “the Holocaust happened”. Or even something like “Trump is a bigot”. Would she have got the sack? This is the true question. She was just stating a fact...
If it was a code review, it would judge code quality and similar things. Not whether that change is in Google's interest. I guess if she was a product owner and added this feature, she would have been fired as well, despite following the process. She just acted against the company's interest.
Completely and utterly crazy. Literally off her rocker. She should be taken to an institution for doing something so insane.
Show HN: Top 100 Shopify stores online now
Based on the Google engineer's LinkedIn profile, it is obvious that using any gendered pronoun will be a touchy subject.
1Password is better and unlikely to be acquired. They are quite profitable on their own.
How about Calm businesses and Calm codebases. "Code should need the least possible amount of knowledge and attention"
That's true, but cross-signing is right around the corner for Matrix [1], which will enable e2e by default in direct chats [2].

Encryption is useless for most public rooms, and actually counter-productive most of the time. If the room is public, anybody can join it, idle there and save the logs on their computer, or publish them. Activating encryption is just annoying: from the top of my head, you can't read what was posted before you joined (unless someone sends you their keys), search is client-side only, it's hard to link to attachments or reuse mxc: (matrix content such as images) from one channel to another.

[1]: https://github.com/vector-im/riot-web/issues/2714 and the two links below

[1]: https://github.com/vector-im/riot-web/issues/10605 and associated labels

[1]: https://github.com/vector-im/riot-web/issues?q=is%3Aissue+is...

[2]: https://matrix.org/blog/2018/11/02/user-experience-preview-e...

[2]: https://github.com/vector-im/riot-web/issues/6779
Well, there have been plenty of stories about toxic managers in tech companies. If your manager said it was okay to hit on your coworker does that absolve your responsibility to have good judgement?

And as far as having “bargaining power” they are tech workers at Google. If they have even a modicum of skills they have the ultimate power - they can walk away and get another job.

Heck, I’ve worked at a bunch of no name companies over 20 years and even I can walk out of the office and have another job in two weeks and this is nowhere near the west coast.
> I'm honestly a little surprised (and worried) about all the commenters who argue Google is in the right here.

i, honestly, want to know why you think otherwise. what she did is wrong.

but assuming she didn't know and that's what the "by the book" process at Google truly is... that's even more concerning
> I don't feel like my employer is a rival or an enemy; I feel like they are a partner in our mutual goal to make a lot of money [...] it's not hard to understand why many of us feel no draw to unions.

It's hard for me to understand when you look at other similar industries. We're not talking about blue collar unions here: we're talking about white collar unions. They're very different.

Take Hollywood as an example. You have incredibly wealthy individuals who are all members of unions. Kevin Feige makes Disney billions of dollars, but he still pays his PGA dues.

The purpose of unions like the WGA, PGA, DGA, SAG, and Equity aren't to "make it harder to fire poor employees" - they're to provide equal protection to all members regardless of whether they're making millions upon millions of dollars or just getting started in the industry.

Sometimes I feel people in tech forget there is a highly skilled, highly unionized industry just a few hundred miles south of Silicon Valley that seems to be doing OK. Is it perfect? No, definitely not. Is the film industry better to work in with the unions than without? Almost certainly yes.
Impressive given Berkshire had 300k+ employees. I guess he's good at delegating.
So if she escalated her privileges and bypassed the approval process, yes, of course that should merit severe punishment. But that's not what happened, according to Spiers.

Giving her the benefit of the doubt for the sake of argument, you'd agree there's a huge difference between adding malicious phishing code to a company tool, versus displaying a text notification that doesn't fit the tool's original intent?

The text in question read, “Googlers have the right to participate in protected concerted activities.”, which is arguably different than the usual privacy/security warnings that the tool was intended for. But is it a fireable offense, versus an offense that warrants reprimand?

To put it another way, I think very few people would be bothered by Spiers being fired if the text notification she added were "Heil Hitler!". But that kind of content is fireable for a number of reasons. Whereas Spiers note about union rights, while inappropriate for the given plugin, is not patently against Google policy, and (again, assuming it's just a text notification) did not endanger the company.

If an employee tries to set fire to company equipment, they should be fired. If they draw a swastika on a bathroom stall, they should be fired. If they post up a pro-labor pamphlet in a bathroom stall, where it's against company policy to post any materials (regardless of content), should they be fired or reprimanded?
Rightly punishing the connection for having the trappings of security when it actually lacks it doesn't mean we need to punish openly insecure traffic. End users have been told time and again that http is insecure, and so it's fine to leave it. End users should also be able to trust that https means secure without having to distinguish between secure and secure unless I'm being mitm'd and needing to understand what any of that means.
Certbot might not do this out of the box but ACME lets you pass one challenge at a time, collect a new one, repeat. The tokens which show you passed a challenge will "keep" for at least hours and it might even be days (when Let's Encrypt was new it was weeks!) so you can collect them up to get your cert over a time period.

So, as long as the challenge taking is serialised you can get away with just giving a single TXT answer at a time.
And make journalism a registered profession like doctors, dentists, structural engineers, architects etc with a legally enforced professional code of conduct. Every article should be cryptographically signed by the journalist in a way that links to their professional registration. If a story is found to be inaccurate then this gets noted on the journalists professional reputation page at the 'institute of journalists' or whatever you call it, a whole bunch of stories with major inaccuracies would lead to them being struck off, to be judged by a jury consisting of other journalists, lay representatives and representatives of the legal profession[0]. If you want to use the word 'News' anywhere to describe your newspaper or website, then you must use a registered journalists and their reputation badges would need to be displayed by every article.

[0]This is how it works for Architects, I don't see why journalists should be any different given that they can influence the direction of whole democracies.
Is this a precedent that Google or any company wants to have, though? Engineers with access to company-wide tools or extensions can put political or divisive content into them?

This is more than just a "poster in the cafe" because of the reach and invasiveness of the approach.

Disclaimer: I work for Google, speaking for myself only.
Author here: I wrote this article because data engineering is a hard field to get started in and people often bombard you with several tools and buzzwords. Hope it helps some people get started. Let me know if something's missing.
As an employee, you have no right to put up posters anywhere in the workplace unless condoned by your employer. She must be conflating this concept with the requirement for your employer to put up posters informing employees of their rights to unionize when there's a unionization effort.
If you think about a very popular federated system called email, it's pretty easy to see why the local controlling body is not only fine but in some cases a very desirable property.

And the "scale" argument for email centralization is obvious bunk for all properties of "scale" that aren't "some people can redefine what email is on a whim", but even without centralization google is still pulling that one off.
The best way is reading the spec: https://pubs.opengroup.org/onlinepubs/9699919799/utilities/m...

But to get you started Chris Wellons does have a pretty nice blog post about writing POSIX Makefiles: https://nullprogram.com/blog/2017/08/20/
The second example is vulnerable to command injection.

./test.sh ls -la
I know 0 large companies who would tolerate what you just described from a security team member.
And doesn't work on Linux.
I think you vastly under estimate the process. We cannot even get a state of the art AI to recognize large stationary objects on a highway, so how are they supposed understand customer requests? If, and that is a big if, we ever get to a Strong AI scenario I'd be worried, but not until then.

It is, IMO, far more likely that we'll see someone come up with a general purpose SMB system like WordPress.
I am asking for actual code that shows his statement is still true.

The statements I read as an answer to my question contain zero value and still lots of very unrelated words.

If you are sure there are vulns right now, please publish them. If not, shut up.

Nillywilly "computers might be insecure" is on a level I would not expect to read on a side like this one.

I just want to keep the quality level high for this news discussion site.
A Dimensional Interface: Varjo Workspace
But how much meat do you get from each culture?
Keepass; open source, can store the file wherever you wish, isn't liable to be acquired by a private entity since you can just build your own copy.

Use open source software wherever possible, it's just better that way.
Yes I should have mentioned that one too, no internet connection. In my case TV simply works, there is nothing a software update can bring to improve it but plenty to annoy.

Its like an air-gapped notebook with Windows that you only run Notepad. No need to update it with unknown stuff in patches from Microsoft.
Exactly what does union activism have to do with security and privacy of potentially dangerous websites?

I’m surprised how many people are jumping through hoops to defend this sort of thing.
I like how OP commenter is essentially arguing that the government should regulate journalism, which fundamentally misunderstands the role of journalists -- that is, it is a direct check and balance on the government, except that it relies on the free market for competitive regulation. A journalism outlet which consistently gets things wrong SHOULD fail. Trying to regulate journalism massively fails not only in its intent to reduce errors, but also in its implementation.
What about this [1] ? It is from "respected" WaPo, and this is one of the most mind blowing examples.

You might not want to go through the 1h30 rant from Richard Lewis, so feel free to skip to 31:00 and 34:30 for the content of the original article.

I really don't know what to make of this. I just can't imagine what would prompt people to write and then actually publish this.

You can read the comments on the article [2], there is no errata on the article and I haven't seen any official response from the Washington Post.

[1] https://www.youtube.com/watch?v=Fay_X1Cu9Uc

[2] https://www.washingtonpost.com/local/obituaries/abu-bakr-al-...

Edit: Actually there is an official response, at 39:20, a tweet (sigh) which might be even more scandalous than that headline
These guys must really be pessimistic about their future if they are accepting a deal of $86/share. Their 52 week high was $96/share, and as high as $120/share last year.
They approved the code that implemented the feature, but I doubt they were responsible for approving the feature to begin with.
> "Crazy people and drug addicts" can be rehabilitated.

Not if they don't want to be rehabilitated.

Unless you are suggesting you don't give them a choice? That is an asylum.

So, crazy/drug addicts are an unsolvable problem without some kind of force. Which isn't going to happen.
SICP, JavaScript Adaptation Going Public
See also: https://rosetta.alhur.es/compare/Kotlin/Java/#
Research Briefing: Social Media: How Much Regulation is Needed in UK? [pdf]
You can LD_PRELOAD an .so that overrides `open` and family of functions, and drop opens based on a whitelist/blacklist.
Because some bully will decide that his opponents are all liars, revoke their credentials, and ban their speech. This happens all the time around the world.
Bitwarden is a nice alternative. And you can self-host the server part if you want.

edit: LastPass is owned by LogMeIn, that's why I mention this alternative.
What if your manager told you it was okay to post “Make America Great Again” or “Hope” (Obama’s slogan) slogans on everyone’s desk because he was staunch Republican/Democrat - would you just shrug and say “my manager said it was okay”?
There are literally hundreds of build tools and workflow engines that replace or extend some or all of Make. Many of them are domain-specific (especially to bioinformatics or machine learning), many of them are not.
Azure just released free SSLs as well after years of feedback - https://docs.microsoft.com/en-us/azure/app-service/configure...

Static hosts like Netlify & GitHub also enable free SSLs. The barrier is so low most people trip over it.

I am sure there are still very unique edge cases though. If I had one of those edge cases I would sit down & really weigh the pros & cons though of not using HTTPS. I would not take it lightly.
Does it work to sync between Linux dev machine and iOS phone?
Their browser extension is a non-shitty experience and works cross-platform.
? Would you want a majority of your wealth tied to a business you used to work at? Or would you rather use it towards things you are actively working on?
> Is this a precedent that Google or any company wants to have, though?

Google is free to pull the tool or change the documented process. (I admit, the process seems lax.) Instead, they fired the employee. That’s an aggressive response.

> the reach and invasiveness of the approach

It’s a pop-up generated when one visits the site of the “firm that Google hired this year amid a groundswell of labor activism at the company”. That sounds like a reasonable scope.

Again, using a tool whose entire purpose is to serve site-specific pop-ups.

[1] https://www.nbcnews.com/news/all/security-engineer-says-goog...
Related: Homelessness is Solvable - Malcolm Gladwell

> https://www.rockefellerfoundation.org/solvable/solvable-podc...
API Observability Is More Than Just Testing and Monitoring
I agree with this and think it touches on a more fundamental issue with our industry; in general, developers are not viewed as professionals by their employers or eve themselves. I think many of the negative aspects of the profession can be mitigated if developers would just take a different perspective on their work like viewing themselves more as plumbers, electricians, doctors or lawyers and less as clerks.
They have recently taken quite a bit of VC money though.

https://techcrunch.com/2019/11/14/fourteen-years-after-launc...
I'm not sure exactly what the article is trying to accomplish but it does feel in about the right ballpark for the levels. I don't think I'll ever get to the vacation one but simply paying last debt off really took a lot of weight off. Sure borrowing at low interest makes math sense but having a paid off house just feels good.
It's not a "political" statement, it's a notice of Googlers' existing obligations under labor law and pursuant to a NLRB settlement. She was indeed correct to warn any Googlers who might interact with the external consulting firm about those obligations.
I use a paper notebook with an index with page number in the front.
LogMeIn is remote access software. The LogMeIn refers to a local machine,not a website.
Technically it worked so the approvals would have gone through. These people would not have direct insight into her business objectives or intent.
You are probably a pedestrian on wheels then
What am I supposed to do with all of these torches then?
The purpose of the extension within Google is to notify you of privacy and security risks for potentially dangerous websites.

The comment she injected into a benign law website has nothing to do with that and whether there was some weak approval process that missed this glaring fact doesn’t make it okay.
I bet that probably increases the number of visitors visiting for free too. Since, many parents and families may not be able to take a specific day off if they work in low-wage service industry jobs. It’s probably better all around, but has more cost with mailing vouchers.
> If you're putting in 30 hours a week for SB Nation, and they are your only contract, it's pretty clear that you are an employee and any other arrangement is a dodge.

Why does it matter? Why can’t citizens freely arrange their own working conditions?

Why can’t the editor decide to work for who she wants?

Because she lives in California