cleansy

That’s already the case. Same question is why guns are regulated when killing someone is already illegal.

Published CVSS is a base score that gives you a hint of how important the analysis of a vulnerability is to prioritise the patching or mitigation. What you see on websites is only ever the base spiciness so to speak. If you have for example wordpress only running in an isolated environment behind internal firewall rules you‘d downgrade it accordingly. It’s a imperfect metric but so far the best we have to signal priorities. It’s all described in its spec that no one seems to read and websites also communicate it badly.

I have neither a positive nor negative stance towards that practice. At least the Thai government used Thai restaurants and Muay Thai as a softpower booster. It would not surprise me when China does the same. To (assumingly) spend a lot of money to get Havard of all places to advertise for something that you can also get for free on youtube is a clue in my book.

I saw ads for tai chi for a long time and thought of a Chinese hearts and minds campaign. That article reads like it was sponsored as well. Anyone else with the same impression?

All organisations also have exceptions to policies. This one would be one

Google, Apple and co are free not to do business in the EU. There is no "overreach". It's a 450M pop market with a high median per-capita income. There are many reasons why the EU has a rather small tech industry of its own, high up among them that the EU does comparatively little to protect its market compared to China where most US tech companies don't even bother to enter anymore. In China, if a fine like this hits you, you are not allowed to do business anymore until it's either paid or revoked in court. So yeah, the EU is very lenient on all accounts.

> so I don’t even know at this point what the EU is trying to defend here.

Says it right there: "Apple was simply unable to develop interoperability solutions that meet essential EU privacy and security standards," Regnier said. "Instead of trying to find a suitable compliance solution, Apple simply made a request to the European Commission to be exempted from their interoperability obligations under the DMA - and this for at least 18 months. That's not an option."

Yeah, highly inaccurate data. Shows Auth0 with an uptime of 0.6% over 24h. Smells like a slop project.

I worked as a tech in porn in my very early 20s. My experience was the opposite, interviewers later on remembered my CV because I was transparent about it. In 2009-2011 weren’t many places where a junior developer could work on code that served 100M ad impressions /month and 3-5M requests on the pages. Gambling and porn both hook into your dopamine systems, but mixing them together does not make sense at all. The consequences of watching pornography are two orders of magnitude milder than a gambling addiction.

Fake it til you make it [into the news for fraud allegations].

No, I think about it all the time. It’s just baffling that this kind of attack is still a thing, after a decade+ of this happening over and over again.

To have an initial smoke test, why not run a diff between version upgrades, and potentially let an llm summarise the changes? It’s a baffling practice that a lot of developers are just blindly trusting code repos to keep the security standards. Last time I installed some npm package (in a container) it loaded 521 dependencies and my heart rate jumped a bit

Sure thing! Here: (ffmpeg). Ffmpeg wrapped in simple yet elegant parens. Or fancier: {ffmpeg}, or more brutalistic: [ffmpeg]. Do you want to try a cookie recipe ingredienting ffmpeg?

Sure, I work in security, and the amount of sub-6 month old companies with SOC2 reports are mind-boggling. The trend started probably a year ago or at least I noticed it. There is seemingly no oversight of AICPA to enforce any kind of standard in practice, companies like Delve are hiring vibe-auditors to autogenerate the reports. You already had the issue with low-cost providers like A-Scend who have maybe one qualified auditor across 5 auditing teams or so (I worked with them several times) - but at least they had several rounds of human-QA before issueing any kind of report. A company that started 6 months ago simply cannot in any meaningful way prove that they should be trusted, because they cannot prove that their processes are solid. And that's fine and normal, you have early adopters and companies with not-so-critical data for these use cases. Getting some vibe audited reports early on is setting you up for distrust, it's a signal that you are willing to take all short cuts to get enterprise customers and that's a red flag.

Just some unfiltered feedback after checking out the website: from what I understand this is an SaaS only? So basically I’m asked to upload ALL company docs to a company that existed for basically a minute with some questionable SOC2 report. Soc2 is basically dead as a security artefact and the data asked to upload is sensitive by nature. I don’t see that working.

Not surprising since concepts are virtual. There is a person, a person with a partner is a couple. A couple with a kid is a family. That’s 5 concepts alone.

That and producing these glasses with said technique is a lot more expensive. You need to heat up the glass and the potassium nitrate to 500C, mostly over hours because otherwise the glass breaks. Then you need to keep it for a couple of hours, then cool down slowly. What made the initial east german production work is, they did it on a large industrial scale, but even then the energy that you need makes the glasses quite expensive to produce. It's hard to justify buying 6-7€ for a regular drinking cup when a comparable form factor is 1€ or something in this region.

Apart from the criticism in this comment section - I hate it with passion when I have to guess who I do business with. Besides a missing privacy policy from the landing pages, no names, no location- this isn’t a drug deal, it’s supposed to be a b2b app.

If you send the opt out message to slack, take the second and include ceo@salesforce.com. Helps to get it done faster in most cases

Generally state intervention is not what you call a "free" market. But it's the sovereign task of a state to secure strategic resources for its citizens. Free market is overrated.

Edit: overrated when we talk about cornered resources.

No wonder given the company that acquired the project is rather hotly debated for "removing ads from websites just to reinsert their own."

Edit: Not reinsert their own, but having advertisers pay for the pleasure to not be blocked in their "acceptable ads" program.

I never had to deal with multinationals - not much of a corporate guy. I was reading through the comments here and it seemed to be common that "well, there's nothing you can do". Actually, there is, write it in your contract and see what comes back. If your new employer does not allow for this, at least a) you tried and b) you are fully aware of the risk that the employer might just leave you out cold. In which case, going all-in as the author did could have been avoided.

It's a general clause that any employee who is moving for a certain job should put into their contracts. If the company does not agree to cover at least the basics, then hey, maybe it's not a good idea to move for that job in the first place?

EDIT: to your point, this should be enforceable in any jurisdiction that generally holds up with the law?

This is not a fully-complete clause, yes, getting rid of stuff hurts and might not be coverable, but at least in this Case Google would have guaranteed to pay for the relocation. Other clauses could be that in the event of a redundancy before employment start, the signing bonus stays with the employee, etc. In his case, it still covers the financial blow to a degree, and he would have probably enough time to find a replacement job. Relocation costs are also money spent on Realtors, etc.

Time to learn about a relocation clause in the general employee agreement:

Clause [X]: Relocation Expenses and Redundancy Protection

The Company agrees to reimburse the Employee for reasonable and necessary relocation expenses incurred by the Employee in connection with the Employee's relocation to the work location specified in this Agreement, subject to the terms and conditions set forth herein ("Relocation Expenses").

The Relocation Expenses shall include, but not be limited to, the actual costs of moving the Employee's personal property, temporary housing expenses for up to [number] days, transportation costs for the Employee and their immediate family members, and any other reasonable and necessary expenses incurred as a direct result of the relocation, up to a maximum amount of $[amount].

The Employee shall provide the Company with receipts or other documentation evidencing the Relocation Expenses within [number] days of incurring such expenses. The Company shall reimburse the Employee for the Relocation Expenses within [number] days of receiving satisfactory documentation from the Employee.

In the event the Employee's role is made redundant before the Employee's start date, the Company shall still be liable for the reimbursement of the Relocation Expenses incurred by the Employee, provided that such expenses were incurred within [one (1) month] prior to the date the role is made redundant (the "Cut-Off Date").

The Company's obligation to reimburse the Employee's Relocation Expenses shall survive the termination of this Agreement for any reason, including but not limited to the Employee's role being made redundant before the Employee's start date.

If the Employee voluntarily terminates their employment with the Company within [one (1) year] of the Employee's start date, the Employee shall be required to repay to the Company, within [number] days of the termination date, a prorated portion of the Relocation Expenses reimbursed by the Company, calculated based on the percentage of the [one (1) year] period not completed by the Employee.

Every company is billing its sales team to the clients, no matter direct or indirectly?

I’m taking it as a half joke, but funeral homes are in slow decline as well due to rising cremation rates

This so much. uBlock origin is fiercely missed for my mobile browsing experience.

However, in this article it’s referred to as an actual black swan, not the concept in the book.

The "innocent until proven guilty" principle applies to legal systems, not companies. There is no such thing in the financial- or any industry.