Puts

Well, he certainly doesn't have to. There's no worldly force automatically granting you a bonus as well. But on the other hand there's no worldly force keeping you at your job either.

But if you feel you can demand complete fairness, then everybody else on this planet can too so why don't you give a "bonus" to someone homeless who doesn't have anything – even tough you didn't get one from your boss? That is true morale because it requires strength to exclude yourself from the equation.

I would argue that perceptions of fairness and morale is not the same. In fact they can even be the opposite. When we grow up we learn that the world is not fair, and that even tough we where being mistreated we can not mistreat others to make it "fair". Morale is the ability to go against your gut feeling and do what is intellectually right.

Children have a strong perception of fairness. If cookies are being handled out there better be a cookie coming your way too. If you keep this mentality going into adulthood you are most likely a psychopath.

I have a hard time to see how Europe would be any more bureaucratic then the US. Working for a European company that do business with American companies every now and then I can say that the contracts lengths and the legal staffing is a factor of ten higher every time we try to deal with an American customer. Heck involving lawyers just to sign standard contracts is not even something we have to do with European customers generally.

I would turn that question around. How have the US become this hub for tech-companies? Probably culture and momentum. The same reason a small country like Sweden managed to become the third-largest music exporter in the world.

And also European companies are moving to the US to start and/or grow their businesses there. Why is Spotify even listed on the NY stock exchange?

Companies should really stop collecting domains as Pokémon-cards. Not only are abandoned domains risking to be hijacked, either by the fact that the whole domain expires or that you have records pointing at servers no longer in your control. But also you are teaching your customers to click on phishing-links, because apparently the e-mails you send out to customers contain a new domain every time.

Also, a general tip is to treat all domains and subdomains as information assets within your ISMS. Meaning they should have an explicitly assigned responsible owner within the organization.

Well if you are a somewhat serious company you probably have a clean-desk policy, workstations that lock themselves after a couple of minutes inactivity and encrypted hard-drives. Also there are probably areas where you don't let the cleaner go, like that closet with all the switches. And the cleaner has in some form been vetted. You see that person a couple of days every week and start building a relationship. You can see if he/she suddenly shows up drunk every day.

With security and risk it works like this. You can accept some risk if you at the same time find solutions to mitigate any dire consequences. With third-party javascripts you are giving away all control. Now if you are in an nonsensitive business maybe it's okay to use some third-party javascripts here and there, but is it reasonable to have those on an e-commerce checkout for example? Also Subresource Integrity has been mentioned a couple of times already here to mitigate the risks of third-party javascripts.

Well we can absolutely talk semantics. Code written by a third-party is third-party code however it is hosted. Your conclusion is right however. If you are serious with your security and change management you host all scripts yourself. Or use sub-source integrity:

https://developer.mozilla.org/en-US/docs/Web/Security/Subres...

I don't know what industries you've been working in but in any sensitive business third-party javascripts are under the same tight controls as any other code, and changes in javascripts are going through the same change management controls as any other code before entering production.

Even Google have had issues with malware being distributed via adsense: https://www.businessinsider.com/google-has-shut-down-a-malic...

Not to speak of the Megacart hacks: https://www.riskiq.com/blog/external-threat-management/magec...

I think the most helpful thing with five whys is that it counter acts blame-games within an organisation. Normally when something happens the natural reaction is to blame someone that did something which is counterproductive, it feels good for everybody else but it doesn’t change anything. But five whys is just a method, for it to work there needs to be a true will to actually change and improve things.

Well this is not true. There has been debate about an emerging inflation threat for many years now even long before the pandemic due to the rapid rate central banks are printing money to keep the economy floating since 2008. However in the financial market there are many people whose lives depend on constant growth creating a strong sentiment to either willfully mislead the market or just lie to themselves for comfort and self-preservation.

There's been a lot of talk about how newspapers are dying because nobody wants to pay for digital subscriptions. I think this industry seriously gets to blame themselves for this. I've tried subscribing to a couple of magazines back in the days and with every one of them it was a living nightmare to get out of the subscriptions. Once ending the subscription one even started sending what looked like regular invoices with due date in red and everything, but if you read the fine print at the bottom of the page it just said that "this is to start a subscription, if you are not interested ignore this mail".

Generally I don't have a problem paying for culture, and I also like reading both news papers and magazines but now days I always buy them at the local news stand. I've got enough proof that newspapers and magazines can't handle the trust with personal information and payment details.

I've also always admired journalists and the craft of good investigative journalism. It's sad that these creatives are stuck with the most hostile sales people in probably any industry (except maybe phone companies).

"mood-tracking the owner and trying to influence his mood through AI"

It would actually be interesting to know how to interpret the usage of AI in the context of GDPR. Since the purpose of the processing must be pre-determined, yet with AI the data collected may be used for a purpose determined by the AI. Also "mood-tracking" will certainly fall under article 9 - special categories. You might end up in a situation where you have to delete all previous data and renew the consent every time someone installs a new "app".

Well let's be honest. For most startups the short-term eject button is the whole business plan.

First of all management systems and ISO is a way of working, a method or a framework. Just like scrum and agile are methods for project management within a team, management systems within the context of ISO is a method or framework set up by the management to lead the company. If you don't believe in ISO as a method, then you should not do it. Simple as that.

Personally however I think that ISO and management systems solves a lot of the problems that most companies deals with, and it gives a structured way of setting goals and reaching them.

Secondly the certification is not the most important part. The certification proves that your management system works and that you are reaching your goals, but if your goals are shit then the certification rather proves that you are a shity company. In other words the certification in itself is not a quality badge.

I actually noticed this too the other day with my regular brand. The beans in the package was brown. Never seen that before so I was mildly confused.

That's the thing tough. As it is now I think there are plenty of alternative outdoor brands that are doing a better job in this balancing act.

I have mixed feelings about Patagonia. I think corporations should have high standards and I share a lot of their outspoken values. At the same time however, they do have polyester in almost all clothes which risks ending up in the ocean as micro plastics when washing them. They also according to themselves still use DWR-treatment with fluorocarbons. It's sometimes like they think that publicly recognizing a problem is enough while there are other brands who's already banned all forms of fluorocarbons and don't use polyester or spandex in all their clothes still making less fuzz and bragging about their environmental efforts.

I think anyone complaining about the price is missing something. Anything produced in small quantities will be expensive and I wouldn’t even assume they themselves thinks this product is gonna be profitable. I suspect a lot of the projects TE puts out is more about showcasing their design language to then be able to do collaborations with other brands like IKEA who can take a product to a broader market.

In other words their products are like business cards sold to a niche category of people who like products that look like a collaboration between Dieter Rams and Simone Giertz.

Yes, it is going to depend on the font. All fonts don't have real small caps meaning the browser will just scale down the normal capital letters and not appropriately adjusting them to the x-height. Choosing a font is however not just about how it looks, it's also a technical decision. If you gonna print on a certain paper your font may need ink traps, if you want your font to appear centered you want a font that supports true small caps.

Small caps are actually a solution to the problem of otherwise uneven proportions created by capital letters only occupying the upper half of the letters body and a good way of creating a "boxy" layout with text.

Here's an example https://jsfiddle.net/y4uk07jL/1/

If you want the box exactly like the author in the blog post (don't really know why anyone would want that?) you can do that by adjusting the line-height.

I can recommend Ellen Luptons book Thinking with type. Turns out some typographic problems was actually solved long before CSS and even computers. :)

Sometimes I click on Google ads just because I don't like a brand and feel a little bit of joy knowing I just cost them a dollar.

The fitness pod is like the most ironic thing ever...

I could really recommend you the book A Bug Hunter's Diary by Tobias Klein which is a practical walk-trough in finding these kinds of security bugs.

https://nostarch.com/bughunter

And it was at that time they got the idea to actually do it! :D

First of all, there are many free fonts but most of them contains a very narrow subset of characters. If you want a complete font with 3000+ Latin+Greek characters and variations like old-style numbers, small-caps, ligatures and so on, that's a massive work behind it. And also, as an individual, of-course it's expensive to pay hundreds of dollars on a complete font-family, but for a company making money on graphic design that's really not a problem.

Fool me once...or whatever Bush said.

When people face a new problem they intuitively try to find something they can add as a solution, not thinking about what they can remove to prevent the problem from occurring in the first place. This becomes apparent in the way marketing works. You sell products by promising they will solve a problem. You don't sell things by telling people what they really need to hear, that they just need less of everything. Simplicity is unfortunately not a product you can sell.

GDPR is a subsidiary law to any other. If there's another law that contradicts GDPR then it gets precedence.

But it is yet an interesting question since the reason for GDPR is that privacy is considered a basic human right according to the European Convention of Human Rights.

Probably. I think the point is that if you as a women is underpaid at your current job it will continue when you switch workplace. Even if the same applies to men it doesn't matter if they presumably had a fair pay already in the previous job.

Just feel the urge to point out that Varnish by default do specifically not cache requests with a set-cookie header. :)