skysight-inc/HackerNews huggingface dataset:
Nothin here is remarkable, you could even get these from the CSPs websites. What is remarkable (unfortunately) is that a large enterprise is going to this effort to optimize their cloud architecture. Far too many enterprises move to the cloud, without taking advantage of the flexibility the cloud offers, then claim something is wrong with the cloud. Kudos to the British government for encouraging this.
This is a mischaracterization, if you read what the extension is used for: Showing popups when people visit certain sites. For example, popping up a notice to remind users not to upload Google data to Dropbox when they visit Dropbox.

So no, she wouldn't have "added arbitrary JavaScript". She would've added an additional message and triggering website to an existing script.
I'm not a lawyer, but on the surface this seems clearly illegal on Google's part based on the National Labor Relations Act of 1935. Does anyone know of any similar cases to this?

EDIT: Found one in Purple Communications. It was ruled workers can use work email to organize. https://www.littler.com/nlrb-creates-right-use-corporate-e-m...
Genome-wide analysis identifies variants associated with income
I'm honestly a little surprised (and worried) about all the commenters who argue Google is in the right here.
i still use https://neverssl.com daily. I hope it never goes away.
Sure, but the question is, would they react this way if the injected content was something else?
What happens if we run the simulation backwards through time?
> Spiers, 21, said she went through the standard approval process, which requires two co-workers to greenlight changes, before updating the Chrome browser extension

That sounds like code review approvals, not actual project/management approval of the 'feature'.

We have the same: Cannot commit any code change unless 2 other team members have reviewed it. That has nothing to do with having actual project/management approval for the change.
college is overrated.
The deafening silence regarding the fudged OPCW reports is an indictment on most outlets (WP is mentioned explicitly):
https://www.moonofalabama.org/2018/07/syria-many-media-lie-a...
https://caitlinjohnstone.com/2019/12/15/deluge-of-new-leaks-...
You definitely do not want to make GNU Make the default on a system that ships with another implementation of Make, because then you break other builds.

The solution, like the other people were saying, is to name the makefile as GNUmakefile if it is using GNU Make specific features.
True, if they can convince him or her of that then that could be a third option. On the other hand, the employee did display a willingness to be deceptive. Again, it's all up to the parties involved.
Usually communities arise around something useful. Dev.to is different , they must have insistently promoted to developers and curated the list of initial users. Indiehackers has community promoters who constatnly try to get people engaged. it's work, but it works, i guess. just by building it, doesnt mean they will come
Certainly bold and perhaps ill-advised, but I would hardly characterize this as "injection"

> Spiers told NBC News that she was inspired to create a digital notification because “a poster in the cafeteria is not the best way of reaching the majority of Googlers.”

> The message included a link to a statement that the NLRB required the company to post for employees following the settlement of a complaint that was filed against Google in 2016.

> Spiers, 21, said she went through the standard approval process, which requires two co-workers to greenlight changes, before updating the Chrome browser extension. Another source at Google familiar with the update approval process confirmed to NBC news that those two approvals are standard practice for a browser extension update.
that's the problem with seeing one side of the story, and the other side being a megacorporation which will never explain the firing more than "abusing privileges."
Bain Capital Funds A Cloud Guru's Acquisition of Linux Academy
This is something that I implemented in Swift while working iOS engineer at XING.com 2 years ago, it was really a fun widget to work on, that recognized the link and loaded title/body/descriptions along with their `og:image` for the image preview.

Now in my own product [1] I was a long time without implementing the right tags on my landing / marketing page, and blog posts. I wish I would have done this since I launched, but just started doing this 2 months ago since I switched to Gatsby for our marketing page. They have a very easy to implement SEO component [2], that allows you to focus more on the content than on tweaking the meta tags for social.

[1] https://standups.io

[2] https://www.gatsbyjs.org/docs/add-seo-component/
It's not really designed for that use and probably wouldn't be that helpful. It's more for finding things in areas larger than houses. e.g. Factories and Warehouse's, knowing where things are on a supply chain e.t.c
The article says that she went through the standard approval process.
It just removes a large swathe of current possible lines I guess. Analysis through an engine becomes tough, for example, because it might produce a line which hinges on castling at some point in the future (this restriction is obviously lifted once both players have moved their kings). I don't think it'll produce amazingly creative chess, it's true, but it may produce more interesting opening games?
"Spiers, 21, said she went through the standard approval process, which requires two co-workers to greenlight changes, before updating the Chrome browser extension. Another source at Google familiar with the update approval process confirmed to NBC news that those two approvals are standard practice for a browser extension update."

She alleges it was done by the book.
Interview with Multi-Talented and Rising Star EMM
Unfortunately all of them since there is such a mess of support across browsers. SVG should be king by now but it's not.
So, when I registered for my primary email account (many, many years ago), Firstname.Lastname@provider was already taken, so I took FirstnameLastname@provider.

Are you suggesting I shouldn't be allowed an account with you if the person who beat me to my preferred email address also beat me to registering with you?
This is fascinating! Thanks for the share, I had no idea this even existed. Some of the posts are impressive too. Walther is known for their short reset triggers on their handguns for example.
That's an email chain I'd have fun forwarding on to jeff@amazon.com.
No one ever gave you cash? Did you ask for it?
From the article, it doesn’t appear to be the case. She said she was allowed to inject JS code as a “digital extension” to putting a poster up.
Social engineering isn't better than other forms of hacking.
Wrong. She went through the standard review process to get the notification change out.

Read the article.
Awesome idea, would be great to talk to you and see how we might be able to help you. My email is david@got-it.com
You either can't read or you're a shill. Sucks you can't delete HN comments huh.
That sounds like a code review, which is not the same as project/management approval for the 'feature' at all.
Did you read what the extension is for?
A billionaire Family join now
If it is well understood, could you tell me how it works? I know the mathematics of entanglement just as I know the the mathematics of a collapse of a wave function, so I wouldn't take any mathematical argument as a valid answer.
This was the process: "the standard approval process, which requires two co-workers to greenlight changes"

In my company, I could put in travel orders to let me go to and from Hawaii on the company dime, have a vacation, and have my supervisor approve (which is following the standard process), but doing that should get me in a lot of trouble and/or fired.
I doubt thats the spirit of the rule. I would no more want that injected into my browser than any other political message.
I'd argue there's no "shield" to begin with. The "shield" was thrown away when a real employer/employee relationship ceased to exist. When, regardless of slightly better offers, employees would stay due to such relationships. When businesses had downturns, they sheltered their dedicated employees by shielding with resources from past successes.

Today, pretty much every medium- to large-scale employer I've anecdotally interacted with is focused only on efficiency and ROI. You're a tool to drive business success and if you're not doing so or a slightly better tool is available: you're gone.

This culture shift means people really don't care about any sort of culture propoganda your business spews to them. They nod, smile, and play along because everyone involved knows it's merely a facade.

It's no longer true that happy employees don't leave jobs. Employees will seek their maximum ROI in the same fashion as businesses do and that culture was established by business practices.

As far as "loving" a job, very few people get paid and get paid well to do things they truly love. This alignment happens but it's not all that common. The fact is, survival in modern life is expensive and people will do whatever they need to do to pay their expenses. They'll do their best to find something enjoyable in that process but the vast majority will settle for something that doesn't make them miserable. The pigeonhole principle almost assures this (IMHO).

The bizarre shield metaphor is part of the never-ending push you see from HR trying to reestablish the illusion of a real employee/employer relationship. Maybe the people in HR really are decent human beings and do care, so they take the defensive position. What they need to realize is they're not really in charge and really just the face of business propoganda from upper management and investors.
Seems like they need to rethink the book. I'm not sure a Googley culture of permissiveness can exist at the kind of scale that they have now, and with the competing activist factions that they have cultivated.
As noted later in the article, she got two thumbs up; doesn't this justify her actions 
.
Agreed, but the engineer's claim is that she followed the standard approval process "which requires two co-workers to greenlight changes". The article says another Googler confirmed that this is the process. But the article doesn't say that Spiers' assertion (that she went through the process, and had two colleagues sign off) has been specifically confirmed.

Presumably, audit logs would make this an easy thing to set straight.
I still think it is my camera, even if I chose a camera that is dependent upon third party services.

I've had similar frustrations with them, though. The Ring doorbell is so slow to respond that it borders on uselessness for certain tasks. I really wish that I could just monitor an RTSP feed from it. I'm thinking that it will be replaced with one that is able to do that eventually.
Sysdig 2019 Container Usage New Kubernetes and Security Insights
Not quite "full stop", no. That is a utilitarian view of language that does not take into account the social side of speaking a certain way.

There is an abundance of social stratification in language, and the ability to code switch in different social environments is an important skill. It doesn't matter that you would still be understood if you did not do so, what matters are the pragmatics and social labeling attached to speaking in/out of the current group's mode of speaking.

It is true that the formal study of linguistics (which was my own area of advanced degree) does not consider there to be an absolute correct way of speaking, that "grammar" is not some unchanging and inherently correct set of rules. They are, instead, a social convention. And like many other social conventions, breaking their rules has consequences, and understanding those rules and consequences is important to navigating in social environments.
Unsecured backup devices continue to be a hot mess
Hey, happy for you to ping me at david@got-it.com and we'll be in touch end of q1 next year when Android is released.
The can has been opened, i doubt it will stop with this. Any opinion that is not the companies position will not be tolerated. I bet the people who encouraged Google to "act" of opposing views did not think it through
And the popup message is one Google is required by law to make available to its employees.
I understand what happened. I'm just sad this is what we're talking about in 2019.
Military contractor?
I see contradictory impressions about what this article is even saying.

My contribution is that it’s foolish to react too quickly to a story like this.

If the headline were accurate, it would be such an obvious own-goal on the part of Google HR, it beggars belief.

I think the wise course is to wait until more details are made public before getting worked up about it.
The method in which she tried to notify co-workers is the real headline to me. It tells me that they really struggle to be able to communicate broadly with co-workers.
I Built My Second Progressive Web App (PWA)
It's quite a stretch to call this a political issue.
Even if she followed the rules that doesn't mean she should be absolved of guilt. You can follow the rules and submit a PR, have 2 code reviews and plenty of tests, if you brake production then you can still be fired for incompentency.

The fact that 2 reviewers approved her change doesn't mean that she has the right to send notifications like this through a browser extension.
I haven't heard of the Loader model, but as an (ex-) Particle Physicist, I should point out that photons are just one example of the more general phenomenon of gauge bosons. In terms of the particle content associated with nature (and the predictions the _existence_ of those particles imply as emergent phenomena from "gauge theories" in quantum field theory), the photons of electrodynamics as well as their counterparts, the weak bosons of the weak force and the gluons of quantum chromodynamics, all make very specific predictions about how certain particles ought to behave and the strength with which they should do so.

In that light, photons (and to a lesser extent, the other gauge bosons) play a significant role in theoretically calculating the dipole moment of the electron (how strong the electron interacts electromagnetically) which has been calculated to about 12 decimal places theoretically and experimentally measured to roughly the same precision. And the prediction fits _beautifully_, I believe it is the most (numerically) accurate prediction in all of science. So at the very least, photons are meaningful descriptions of some kind of quantum field oscillation whose existence is, implicitly, extraordinarily well determined.

Typing this in a rush, but just to say, photons are a very specific kind of energy quanta, and I don't think the loader model really replaces them in that sense.
What did we get for our $X TRILLIONS of dollars?
Here you go:

https://news.ycombinator.com/item?id=21693944

https://news.ycombinator.com/item?id=19614957

https://news.ycombinator.com/item?id=18857255
I am quite familiar with that kind of setup and it's even further from equivalent than what I assumed you were referring to. Shared web hosting is the common example, but some other protocols are capable of distinguishing between hostnames.

google.com and maps.google.com resolve to the same address but are not equivalent. Even if your example and many others are equivalent, there are many that aren't. A general library should not make assumptions like that, unless they hold 100% of the time.
People love to make excuses for their bosses because they believe their interests are aligned :(
Of course Google is right. She happened to get two coworkers to approve what she was doing.

If I got a manager who I was friends with to approve my purchase of a fully decked out $53K Mac Pro so I could finally use Slack at a decent speed when I am working from home, wouldn’t you think there was something fishy?
The internal extension displays pop-ups when you visit particular sites. All she did was add a new pop-up and associated site to the list.
Nope, I am not siding with Google, if you'll see my other comments in this thread. It's just not super clear to me that there's agreement on what actually happened here.
How would they complain to you? How would they know what the problem is?

Assuming they don't just fail to register and move on ...
6 people were killed paragliding in 2017 in the US. There haven't been any US fatalities on the 737 Max (which is the group I'm interested in, since I'm willing to believe that there are relevant differences in pilot quality across countries.)
This came up just a few days ago[0], and someone suggested you could use either of these:

#!/bin/sh
set -e

case "$1" in
build)
;;
run)
;;
clean)
;;
*)
echo "unknown: $1"; exit 2
;;
esac

OR

#!/bin/sh
set -e

test $# -gt 0

build() {
:
}

run() {
:
}

clean() {
:
}

"$@"

Personally, I find makefiles to be ubiquitous and well-understood, and if I want to do anything complex, I can always put that complexity in a shell script that's called by a make target.

[0] https://news.ycombinator.com/item?id=21735176#21754331
When a cop pulls speeders but strongly focuses on one demographic group, even though each pull is justified in that the one pulled was violating the law, the pattern that emerges shows a greater level of injustice and the actual reasoning used is quite different than the stated reasoning because the stated reasoning is not consistently being applied.

In this particular case, does Google consistently apply the stated reasoning? Google says it does, the engineer says they don't. Do we just trust Google despite a very long history of corporations taking illegal or unacceptable actions against employees engaging in similar actions, or do we let it go before a court to be decided?
You can follow the rules and submit a PR, have 2 code reviews and plenty of tests, if you brake production then you can still be fired for incompentency.

The fact that 2 reviewers approved her change doesn't mean that she has the right to send notifications like this through a browser extension.
If you think Google’s anti-union tactics are limited to onsite propaganda, I’ve got some bad news for you...
Because adding harmless code and stealing plane tickets, hotel fare, and maybe a rental car are the same thing.

How do you think old-school labor organizing went down? Do you think the bosses stood there smiling as employees handed out flyers at lunch? Google shouldn't have a say in how employees unionize. They have every reason, literally EVERY SINGLE REASON to sabotage it at every stage to make it as ineffective as possible.
It feels like a lot of astro-turfing going on here. Why would any sane person be against unions?
>because then you break other builds.

[citation needed] Gnu make is a superset of posix compatible make standard.(with very few exceptions) It shouldn't break. If it breaks, I think it's a bug, and the makefile should be altered into posix-compliant compatibility with gnu make.
We are are already screwed at the current temperature the 2 degrees is just the point that the politicians thought they could sell to each other.
Spiers, 21, said she went through the standard approval process, which requires two co-workers to greenlight changes, before updating the Chrome browser extension.
Mac Pro 2019 Teardown
I am just going to put it here.
This wikipedia article is about an ancient Indian school of thought which believed that everything is composed of atoms, but the aggregation and nature of these atoms was predetermined by cosmic forces. They also believed in absense of "Free Will".
https://en.wikipedia.org/wiki/%C4%80j%C4%ABvika
Sorry, but could you clarify what you would be fired for in your hypothetical situation? Presumably, it's not automatically against company policy to expense a trip to Hawaii.
I run a one person company in the UK and I definitely don't fall under IR35.

Also IR35 doesn't provide any of the workers rights that employees get such as sick pay or notice of termination.
Securing an Inherited Linux System
no it shouldn't, your supervisor thinks that you should go to hawaii for company's benefit.
A 2019 sysadmin holiday gift guide
That sounds suspiciously like a continuous delivery approval process (like needing two approvers for a PR).
Does what she did even pass the sniff test? What if she got permission from her supervisor to inject $political_message_you_dont_agree_with in your browser. Would you be okay with that?
Check out this twitter account for some examples.

https://mobile.twitter.com/nyt_diff?lang=en
It would be really nice if there was a commit history on all news articles that are published. So many stories these days get silently updated or even rewritten with no acknowledgement.
Ask HN: What web framework to use in 2020?
I used to build my applications with Sinatra + Ruby as the front-end.

Using custom authentication parts, etc.

It's almost 2020.

There's a myriad of different (and new) web frameworks.

I need authentication / being able to create / delete new user accounts.

So keeping that in mind, how in the heck do I choose a framework to use?
I am so outdated. (Our company uses an internal licensed version of the JDK and we don't have JDK 13 yet)
What I did was:

1. Visit the link until it complains about adblocker

2. Disable JS for washingtonpost.com (using NoScript)

If I block JS directly I just get a GDPR (almost) blank page.
I just don't get the internet anymore. You're avoiding using gendered pronouns but needlessly displaying ageism?
Shocking the speed with which individual people will jump to the defense of billion dollar companies.
Vox Media to cut hundreds of freelance jobs ahead of gig economy laws
#1 is a problem that needs to be solved, yes. No, I don't think asylums are the solution.

"Crazy people and drug addicts" can be rehabilitated.

At this point, the only people in problem #1 are those that simultaneously have problem #2.
No. They aren't "only looking at feedback mechanisms that reinforce cataclysm." Modelers include every feedback that they can quantify well enough to include and the ones they don't understand well enough are studied carefully to be able to work out what the uncertainties are.

Scientists 50 years ago predicted that we would be at around 1C (1.8F) of warming by 2020 with a 40% over preindustrial co2 level. That's exactly what we have now. They predicted almost perfectly today's climate decades before it came to pass. That may not seem like a big deal until you understand that global temperatures haven't been this high in 130,000 years.

It isn't being recognized properly yet in the media, but the stunning accuracy of predictions by climate modelers is one of the greatest achievements in the history Earth sciences.
nothing really groundbreaking here
The paranoid part of me thinks it might be PR firms they’ve hired.
Toxic Masculinity and the Brokenness of Boyhood
So.... this is interesting. The answer is if they are strict authoritarians and go by the book, yes. There is no leeway. If they are flexible and are open to interpretation and intent then no... but then that leaves them open to risk.

Because of that most companies over time become very strict and unforgiving.
Only when I can see a human shaped AI put a duvet cover on a duvet would I be worried about AI.
ODNI has a record about FinFisher
> "The new Mac Pro is a Fixmas miracle: beautiful, amazingly well put together, and a masterclass in repairability... Motivations and quibbles aside, this is without a doubt the most repairable Apple product in recent memory."

It's good to see a signal like this that perhaps Apple doesn't have a universal anti-repair philosophy, just a "make it thinner" philosophy. But that when thin isn't a goal...
There is an objective definition of truth in any particular model. For any particular model M of, say, Peano arithmetic, there is an objective, unambiguous, perfectly well-defined notion of truth in that model (of course, the definition of truth cannot itself be formalized within the model).
Yeah I imagine something along the lines of Transmetropolitan, but without obviously alien stuff.

But like, odd, goofy, punk rock, etc.