Hacker Newsnew | past | comments | ask | show | jobs | submit | throwaway5371's commentslogin

i have moved to this camp as well, and i don't mean in the "we don't understand it so we call it magic", i mean it seems more and more like actual magic.

people are talking about timing attacks on state updates in the universe, hopefully we can exploit it


> people are talking about timing attacks on state updates in the universe, hopefully we can exploit it

If the universe did happen to be a simulation (as opposed to just naturally holographic), I imagine exploiting it might be the only way to conclusively prove so. As an actual simulation, there would be a risk of someone and/or something observing it. If intelligence in our universe tends to eventually discover exploits and if the observers aren't fond of simulation errors, we might have ourselves an unexpected answer to the Fermi paradox.


you can say the same about the widget, as the website embedding the widget has access to the document's keydown


If the widget is in an iframe with a different host the parent documents JS engine has no way of interacting with the child.


The parent documents JS engine can replace the iframe with their own that looks the same


To be clear, that is exactly what the PCI SAQ A-EP questionnaire covers. It basically says "You don't access any cardholder data, but you own the page that hosts/redirects to the third party processor (like Stripe)." So the questions in the SAQ A-EP are about ensuring that your page has enough basic security (at least as can be asked in a questionnaire) to prevent hijacking, whereby a nefarious script (through an XSS vulnerability for example) sends them to a site to phish their cc details. Note that a decent content security policy on your website can prevent most of these types of problems.


That wouldn't help, at least with my bank in the UK, the iframe just shows a message to open the mobile app to approve the payment. The payment details are then shown in the app, you don't interact with the page in the iframe at all.


But that would still require an eagle-eyed consumer, which (coming from experience working in the fintech space) is quite rare.. I.e., you may know the iframe is supposed to just ask you to open your mobile app, but I think the vast, vast majority of users wouldn't think twice if that iframe had been hijacked and instead asked them to enter their credit card information directly.


aren't llm's used right now to rewrite all the cobol?


In a word no. There is a place for LLM in mainframe migrations but it is not in source code transpilation.

COBOL (or PL/1) to any other language is a deterministic problem, imagine transpiling millions of line of code and every time you run the compiler you get slightly different output...

Anyway transpiling from one language to another ie COBOL to java is almost the easy bit, the hard bit is making the behavior and execution correct, especially when there are multiple OS and product services that don't exist outside the mainframe.

disclosure I am CTO of heirloom computing, we migrate mainframe applications to the cloud.


How do people end up in mainframe application development nowadays? Honest question - I’ve never seen a single post or job ad on the topic in 9 years


well i spend all my time moving people and applications off the mainframe so probably not the best person to ask, however a quick google of mainframe jobs showed up 100's (for experienced people). I have heard some large companies are instituting their own training programs for hew hires but i have no details.



George Carlin is the type of person who would make the following joke: I hate racists, sexists, misogynists, and other people who hate people unevenly: I am the kind of person who hates everyon equally!

And then he would get a roaring applause for being the worst kind of cynic that exists: someone who has no ideas or thoughts other than pandering to people's sense of self-importance.[1]

Truly glad that that waste of space is dead and buried.

[1] https://xkcd.com/610/


not really

it turns out you need half the people to do the same job


pretty much with most groups, from the cdc to ftc to fifa :)


And most big companies too ... Faang / banks / whatever


home schooling is practically illegal in most of western europe

and school is taking more and more of the child's life


You can still teach your kid at home.

I for one am glad that Europe expects and enforced certain education standards.


it is education standard if you are on the right side of it, sometimes you see it as the formation of the new soviet man if you are not

https://en.wikipedia.org/wiki/New_Soviet_man


I’m sure homeschooled kids aren’t indoctrinated, at all.


of course they are, its a choice do you let the state do that or the family


ohh, how would the EU survive, the omnipotent, omnipresent and omniscient US tech that has improved our lives beyond recognition, and we are eternally grateful to the tech gods.


Fun fact: there was a thriving competition between social platforms in Germany before Facebook came in as an established US player and squashed the rest. There was actually a tendency towards purpose-built social networks (more akin to what we've been seeing recently) until Facebook. They also didn't rely on the same kind of algorithmic advertisement which meant they had to come up with more interesting ways to sustain themselves, which of course turned out to be a market disadvantage when directly competing against a US company that thinks privacy is the name of a place in France.

Constraints foster innovation. If US online services companies were unable to operate (directly or via subsidiaries) legally in the EU market, this could actually create an advantage for EU (and especially DACH) companies. Remember that the US has literally fought wars and orchestrated regime changes to convince countries to let its companies operate in them.


where are they gonna go when few allow wfh?


Even if none allow WFH, they might go somewhere with less of a commute, or to a more trustworthy employer that doesn't backtrack on promises.


People are still acting like the current job environment doesn’t suck. Where are these trustworthy companies currently that aren’t also announcing layoffs or that you can count on not to have layoffs?


I don't think you can count of any company not to have layoffs, that's quite dependant on the economy, company performance, sector, etc.

If a company promised no layoffs ever, I wouldn't believe them. But if they promised to continue WFH, I'd believe them, since that's directly under their control.


No you can’t. But the odds are better for not having layoffs if they are actually profitable.


Aside from FAANG, there's no evidence this trend is picking up.

In fact, I bet all the people that got laid off recently will be happily hired by remote first companies very quickly.


You mean all of the “remote first” companies that are profitable and not struggling?


Most employment is from small businesses, by the numbers. Most small businesses are struggling-to-fragile at best as most fail. The "not paying for office space is a sizable plus" contingent alone would give a substantial number of WFH jobs Counterintuitively there are loads of jobs from the companies who are struggling.


And how many employees at Dell would risk working for a small struggling employee in this market? Would that small employee pay as much?

This is my third time seeing this type of job market (2000, 2008 being the other two). This is the time where there is a “flight to quality”.


> And how many employees at Dell would risk working for a small struggling employee in this market?

The laid off ones.


In that case, they by definition aren’t “employees at Dell”.


No, I don't mean that.


So many allow WFH. There's thousands of open software positions in SF alone, and plenty are ok with remote. Some are even ok with me being in the taiwan time zone. I'm managed to stay consistently employed in the Taiwan time zone with SF and NYC based jobs the last 2.5 years.


Curiously, for some candidates, almost every letter of the FAANG, WILL give a full WFH offer, today, and they are willing to put this down with ink on paper.

Source: have a few of those on my desk right now.


In my case, more than likely change industries.


my advice is dont stress, whatever you do, some people will not like it

for some reason people think what we have now is good, and they say "dont reinvent the wheel" but there is no wheel, what we have is just garbage, 50 years and later we still cant beat the "unix pipe"

we have to keep trying to make a wheel


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: