sundayedition

Agreed. The archive appears to show it was meant to be a private/secret GitHub gist; which isn't really protected, because any user with the URL can view the content.

Wasn't meant for public dissemination most likely.

One of my chief complaints about the "gig" economy; large corporations get to avoid certain risks and (some) people ignore (or may be ignorant of) these risks which means society sometimes shares the burden. For example, not paying the extra insurance premiums when using their vehicle for commercial purposes.

I think of it similar to working under the table; some think "I get paid more than minimum wage and save money on taxes!" But the employer often saves much more and the worker is often to naive to realize what they're losing out on (social security contributions, potential workers compensation benefits, potential recovery of wages, etc)

If a team is great at pointing, and the lead/PM is good at scoping then I tend to agree with this.

I've seen 1 team good enough at pointing to do 2 week Sprints, call their velocity, and generally nail it.

It was a small federal team on a mature (7 year old) coldfusion application with a backlog that mainly involved minor features and bug fixes, where the app had a narrow clear scope.

The startups I've been involved in are too chaotic. When you have a team lead or project manager who never met a feature request they could say "no" or "that's not urgent" too, the problem is even worse. Also when your domain or features are generally not well defined "let's bolt a full CRM onto this now"

Among the chaos, I still go home on time every day.

I used to work for the government and we had a private gem server that introduced much for what you're asking about; delays in releases as a trade-off for security practices. Ultimately, I don't think there was any tooling available to automate the vulnerability scanning enough that a private server gives you much of a jump start on any kind of CVE that bundle audit wouldn't already catch. The workaround of needing to hit GitHub directly to get a current version and bypass the private server is also available.

Additionally, GitHub provides a bundler-audit like service for free. And, identifying those that are t CVEs yet seems like something scriptable but also obfuscatable (on the attacker end).

I don't think any team I've been on (federal or private) would pay extra for this kind of service given the frequency with which we do updates and the amount of effort that needs a careful developer spends when doing these updates. The most recent breaches have been noted well I'm advance of any updates we would have done.

I'd be glad to be wrong about it because I think a few more tools in this space would only help the community.

It would be nice if a service could summarize the differences in actual gem releases, to make things like the changelog and the diff easily digestable for all the available updates though (versus a scan/lint). That would let a developers more easily identify these kinds of breaches than cloning and diffing.

I include a very brief summary (< 1 line) that details most of my professional work history (not always tech related, but illustrates progressive responsibility), so I'm probably one of the people whose resume gets thrown out (per some of the posters) on the regular. I'm OK taking that kind of risk because I'm looking for a manager/team who understands a team member is more than the sum of what's on their targeted 1 page resume. Although I'm sure you're all great managers, I can appreciate being weeded out early.

I wonder what the footprint is do the SIM hijacking, e.g. is anyone a sufficiently high enough bribe away from the type of scheme that compromises their account because it only takes 1 employee to effect it.

I've been switching to hardware keys when I'm able but it's not always feasible. I just bought a Titan key combo and you can't use most 3rd party email clients with it so that made it kind of useless to me (since Gmail's mail app isn't that great)

I've found Google Maps review quality and quantity improved over the last few years so it's rare that I'd even open Yelp in recent months.

With this, I'm deleting my Yelp app.

This looks like it needs a "Show HN" tag. A founder knew to show up and a contributing developer posted it (twice)

I did this for a period of time as a federal employee. You see people's interesting (read: dirty) habits and learn that there's simply no amount of trash cans, disinfectant wipes, and cleaning supplies that can be provided (for "free" by the government) that will have people clean up after themselves.

I've also seen some interesting behaviors as certain people will become very territorial over their preferred workstation, and generally the quality of workstations in general is lower as it becomes easier to move to a new workstation than try to fix the issue, or file a "ticket".

Cables & docking station parts go missing, keyboards get breadcrumbs & soda, chairs disappear (?!), etc. Once accountability for personal space goes away it seems a certain level of apathy kicks in

If I lost GitHub access I'd lose access to a couple dozen gists, certain branches I decided I didn't need locally any longer, and certain repos I started years ago and never felt the need to re-clone when I upgraded computers.

Github is not a backup service, but I can reasonably see how he doesn't have copies of everything locally

There is a lot of what I'd consider "noise" popping up on Netflix that they won't let me filter out. I don't care for most dubbed shows, and I haven't had any luck with any of the foreign imports. No way to filter them out that I'm aware of, so half of the "New shows" don't appeal to me

I wouldn't give up Netflix for cable, it's more likely to be Prime only, or something with quality content that I wouldn't watch as often because they don't have as much variety (HBO, Showtime, AMC, CBS)

Stranger things was released and we watched that but I haven't been on Netflix in weeks since; another price hike and the values no longer likely there for me.

Related?

https://medium.com/@jonathan.leitschuh/zoom-zero-day-4-milli...

One product (power bricks for MacBooks) had over 1000 5 stars, then the 1 star reviews came in where people actually had their power adapters catch on fire. Amazon, or maybe the seller, shut the review/product down. Now, it's back:

https://www.amazon.com/KUPPET-MacBook-17inch-Compatible-MacB...

Lots of verified purchases. All the reviews are within the same date range. It doesn't take machine learning or advanced AI to catch this; a simple SQL statement should be enough to flag these. But still, they persist.

Refusal to work as a federal employee, especially if you're in a national security position, might be risky. PATCO comes to mind. https://en.m.wikipedia.org/wiki/Professional_Air_Traffic_Con...

Thank you for this. The deoplete defaults are much more sane than ycm. I've started using your plugin. I'm glad to see the author of tabnine has asked to feature it on his site.

That's the age range it replaces X with. It conducts the query multiple times, across that range.

It makes sense if you just press "Go" when you visit the page (don't change anything). My first instinct was to replace X with an integer and you only get one result when you do that.

Same on iOS

Excellent looking theme. This and the ITG Flat theme are two of my favorites.

Those are pretty good numbers. Great idea too. How do you find that here stealing content without a link?

If you CC maybe that will encourage others to share it properly. Are they stealing to boost their site or is it legit content that would generate a nice back link for you? If it's a content farm you probably don't want a back link.