AngeloAnolin

I wonder when the next article titled:

"GraphQL is the new REST"

or

"<Insert Tech Here> is the new <Old Tech Here>"

will hit top of HackerNews.

Site is being blocked by FF and Chrome due to insecure certificate configured.

What's concerning here is that they could have easily bought a certificate and configured it to their site.

Instead what they did as preventive measure is to buy the domain name that Troy mentioned as one of the possible vector to spoof their site.

Hate to say this, but whoever made that decision as a course of resolution should be axed.

Noticed that this page worked on Chrome, but not on FF.

On FF (57.0.2) Windows 7, the message is as below:

Error 1010 Ray ID: 3cc3b2b85d0b9300 • 2017-12-12 21:15:17 UTC Access denied What happened?

The owner of this website (fly-io.ghost.io) has banned your access based on your browser's signature (3cc3b2b85d0b9300-ua48).

Not sure if the author or website owner had a beef with FF.

Aren't government officials supposed to be working FOR the public, rather than some vested interests by a few?

And shouldn't you be listening when the people who have made internet possible today (Tim Berners-Lee, Steven Bellovin, Steve Wozniak and Brewster Kahle to name a few) is very much against it?

The vote, the process and the resulting decision otherwise should be done in an objective and transparent manner. Just the way that the internet has been envisioned to be.

Really enjoyed this even after playing a few minutes. Good graphics and nice controls.

Is there a non-pay-walled site to read the whole article?

I'd suggest then to put perhaps even a small team to help with the recruitment process? Maybe 2-3 person who can review and screen around 100 CVs per day? Tedious task, but doable.

Maybe I can help?...

From the article:

"We finally got to a point where the system asked for our information in order to set up a 90-day alert. I provided my Social Security number, two phone numbers where I can be reached for verification, and a “please hold while we process your request” message."

What if someone who got a hold of another person's SSN call the number, and gave them a bogus number to contact? Any lender then tries to call the bogus number and they get a "YES, I ALLOW THAT TRANSACTION TO HAPPEN" brings more problems then.

Equifax could have made a system that performs this option and then it would be the person whose SSN has been exposed to provide the authentic number which they can be reached at to alert them of any transaction happening with their SSN number being used.

Quote:

"The BOD calls on departments and agencies to identify any use or presence of Kaspersky products on their information systems in the next 30 days, to develop detailed plans to remove and discontinue present and future use of the products in the next 60 days, and at 90 days from the date of this directive"

That number of days could be critical. If they have intel telling them that Kaspersky can be used as a vector to exploit their systems by Russia, then this could be used outright to further exploit their systems and possibly (?) plant more ways to attack, even after Kaspersky has been removed.

I am assuming that DHS will already have in place another security company to handle other potential scenarios and ensure the security of their system while the transition process is happening.

"The only thing Social Security numbers should be used for is to pay our taxes, which identity thieves are welcome to do."

Likely they may not be paying taxes, but have already found a way to circumvent the system such that they collect something (aid, EI, etc).

Quick instructions on how to install this:

1. Download the .CRX file

2. Open the folder where the file was downloaded.

3. Open Google Chrome. Type in chrome://extensions/ in the URL.

4. In the Extensions page, ensure that Developer Mode is checked.

5. From the folder, drag and drop the crx file to Chrome.

6. A notification would appear that HN: WIH Search By Tags has been added.

7. Enjoy.

Bottomline is, you need to deliver something usable - regardless of its size or the technology behind it.

Overall, I feel this is a good move by Microsoft. Admittedly from their side, they won't (or cannot) cover all security holes from their system. Asking help from external sources and rewarding them appropriately is also good, allowing them to patch their system. In turn, end users will (hopefully) get an OS that is secure. Win for everyone. Way to go MS!

> Every technology that I know of has been tried to address these issues, such as data mining, machine learning, rule-based expert systems, etc. and none of them has addressed the root cause, which is the basic system is fundamentally flawed.

There's no technology cure for the insatiable greed of a few. Sad reality.

The juries may have been watching a lot of "Lie To Me" type of series.

Internet is taking the world....

Web is taking the world...

Mobile is taking the world...

Regardless of the technology platform, there's a decent chance that anything connected digitally has some JS in it.

That is not really the case for each and every developer though.

The premise is that we seem to see things from our own bubble - like for example, in your case, you were lucky enough to land a great paying job and you correlate the amount of work you do with the amount of compensation you get and seem to think it is not balanced.

I know a lot of developers who are paid in the mercy of a whole lot of economic factors, and who are probably doing a lot more things than what their compensation pays them.

There's also the factor of the work itself - doing/making stuff that has never been done before, pushing technology capability to the limits, negotiating with your stakeholders, people and users. This is a whole ecosystem, where stress and pressure are the norm and that we as developers needs to be constantly learning and applying those learning every single day.

P.S. You might as well donate portions of your earnings to causes you believe in. Or save up for the rainy days. Or build a business where you can provide opportunities for others.

Wasn't there an article that says some printers were printing small marks on the document that provides some info on when it was printed, model, etc.? I suppose the printer during those times may not have the capability yet.

Found the HN discussion[1] related.

[1] https://news.ycombinator.com/item?id=14501894

Instead of resigning, wouldn't it have been better if she exposed the malpractice? Or would the consequences on her part damage her so much that their lives would be destroyed? Ethics would dictate she would fight otherwise.

This.

"developers are quick to pick up the workflow and can create working code and tests during classes/exercises/katas – and then failing in the real world."

The anathema of TDD is that people equate having well defined test cases to a solid product that brings the solution that the user wants. I have seen far more software projects boasting of >85% of code coversge for tests, but still failing spectacularly.

TDD failed because it was assumed as the magic wand that aligns the end product with what's on spec and the process that it would cover, but the reality of human behavior being merely coded to test cases is far out from reality.

Some of the criteria I use to upvote: - Article is very relevant to my line of work and technology preference (i.e. Software Development). - Well-written articles that provides very good insight and context on the topic being discussed. - Lots of insightful discussion about the topic. - Something that is essentially beneficial in terms of technical and social impact to people and the society in general. - Topics that cover breakthrough discoveries and better ways of doing things.

This.

"Ultimately I am sad that the company that is trying to reform the taxi industry is so corrupt."

"At least one per year that you actually ship (the hard part) at a minimum."

I would say that this would probably be on top of my list, because shipping a working and usable software is a testament to all the learning, communication, mentoring and pairing that you would get as you level up.

I like the concept. One thing that stands out for me though is its dependency with jQuery. Not sure if it is a deal breaker, but if one could ship quality and nicely looking apps with it, then the same won't really matter.

Tried Angular, ReactJS and VueJS and to me, they have their own strengths, but all are more than capable as frameworks for building large and solid enterprise level apps. IMO, productivity and simplicity has Vue winning my preference.

Reading the article, I was surprised at this part:

"Wait, did I just write Facebook? Check Facebook’s newsfeed."

I did checked facebook's newsfeed and certainly, the Vue Devtools lit up on my Chrome browser, which detected VueJS being used on that page. Given that FB has heavily leaned on React, I wonder why they would be using Vue on one of their premiere pages? Is it because they are also trying to analyze what's being offered by Vue and integrate it with React in the future?

This may sound too self-serving, but at the end of the day, you need to ensure your bottomline and well-being as well. You have responsibilities and the necessity to feed yourself (and those who may depend upon you) which involves in some ways some financial means, which would be perfectly alright that you start looking for places that may well use your skills/talent and compensate you accordingly.

One reason I use Chrome as a developer is because of the vast debugging tools available with it (i.e. React has React Dev Tools, AngularJS has Batarang, NG-Inspector etc..)

But I generally use all major browsers, IE included when doing actual application testing.

Trying to further understand, I am unsure why a top Uber executive would need to obtain an actual medical record of a customer who was assaulted in her Uber ride? I can't see what value the medical record would bring for Uber as a company, which in the likelihood will contain medical terminology, that substantiates whether the incident occurred or not. Wouldn't their lawyers be involved with the proceedings, as the likelihood that the company would be included in the trial can be deemed possible as the incident happened in the confines of the business that revolves around them?

On a side note as well, will the names of the people fired be published? Will these people fired be actually penalized, or would they simply be hired with another company and simply move on from the incident?