HN user

crandycodes

290 karma

@crandycodes on twitter

Posts2
Comments74
View on HN

If the government was also addressing the concentration of power in the American social media apps, I’d buy it. If this was about making laws on what info phones could record about you, I’d buy it. If this was about establishing transparency laws to allow the government to better enforce the privacy laws it has, I’d buy it. If it was a law saying recommendation algorithms can’t be used for political content, I’d buy it (though not sure that’d be constitutional).

Instead this says it’s fine to spy on and manipulate US citizens and concentrate media power, so long as you’re “American”.

It's possible that "Open Source" here is the OSI definition, which FSF has some objections to. If "Closed Source" just means "not Open Source as OSI defines it", then it is true that some non-OSI software is "free" software. Free software still requires source to be available and that you're allowed to modify and distribute it.

I disagree. If just expecting good outcomes worked, why would we have any laws at all?

Before we had laws on child labor, we had children working and falling into heavy machinery. Before we had laws on food quality, you had to guess which milk provider was going to give you the least amount of formaldehyde poison. Before we had laws enforcing civil rights, over half the adult population in the US was disenfranchised. Was Western society exhausted at enforcing religious/ethical norms back then or is it just a recent thing?

Using the "social contract" theory for why governments and countries exist, you could say that we don't need laws until we do. Once an undocumented part of the social contract (e.g. ethical or religious norm) is no longer sufficient to maintain the integrity of the contract, it must be written down and enforced via government as a last measure. I do expect my car manufacturer to sell me a car which is relatively secure. If they are failing to meet that expectation from society, then it falls to that last measure to enforce compliance with that norm. Laws are also often used to add clarify where there is ambiguity. Different cultures and religions have different norms. If those norms conflict (does the gender of my partner matter in a marriage?), it falls to law to clarify.

It's a fair debate about how much guardrails should we put in. There's likely value in allow kids to hurt themselves as long as they aren't at risk of being permanently maimed or dying. It's a fair debate to discuss the root causes of criminal behavior, be it the issues with modern religion or systemic issues which prevent people from successfully participating in mainstream society and the economic opportunity therein. However, there is no value in allowing easily stolen vehicles (a good which has been regulated for almost a century) to be sold, where they can then be used to enable other crimes.

The situation that the VCs and founders are in is often enviable, but isn't really relevant here.

Respectfully disagree. It's relevant to the extent the parent comment was talking about employees wanting to have someone else "hold the bag".

Regular employees need to be financially responsible about accepting jobs with private-company equity comp, and not expect miracles.

Agree that it's their responsibility and no one should be starting a kickstarter for them or anything. But that doesn't mean you can't sympathize with them. They are often fairly young people who aren't experts on contract law. It's not unreasonable to say that at least some of them have been exploited with excessive promises. The industry would be a better place if rather than say "they should have known better", we instead said "employers shouldn't exploit people". A precedent of bad behavior shouldn't excuse it.

That seems like an odd way to frame it, imo. "Holding the bag" usually implies something negative, as in someone will be "caught" with something bad. As in the employees are looking to dupe someone into buying what they are selling. But employees, outside of company officers, do not control what information investors get about what they are buying. They can't trick anyone into buying something, although they could theoretically benefit if someone else did trick buyers.

But it's a weird take, because employees are already the ones "holding the bag". Office space, cloud compute, etc. are all sold as COGS. VCs usually have some ability to sell their shares on the private market since they can negotiate to get their capital. Employees are often the only ones which are taking an IOU for their time and effort compared to what they could get elsewhere in the market. Employees are often the lowest class of shares which get paid out last and often reliant on the board to be able to sell on the private market. Yes, the employees decided to take this offer, on good faith, that their management would look after them. They are adults who made a, theoretically, informed decision. But structurally, they are set up to be the ones "holding the bag" if things were to go wrong with an exit.

So of course they want an exit. They literally have no other choice to get a return on their time/effort than for that to happen. (or some odd third thing like private dividends, but again, they have practically no control over that happening)

Handle what, exactly? Are you actually experiencing any issues from not doing these things or are you experiencing FOMO? You've not articulated any problem you're facing.

Accusing others of being fake and producing crap may make you feel better for not being good at it, but it won't help you either way. I hope you're not a Principal Engineer I'm forced to work with - the work of those people are important for what we work on to succeed, whether you value it or not.

It is rational for governments to be defensive of practices which externalize costs onto 3rd parties, and they have to balance it with a number of factors including innovation.

It is easier to understand this with health, as compared to privacy, I think. The meat packing industry used to use substances such as formaldehyde to preserve meat longer. This wasn't transparent to the end customers and the health issues lead to lower productivity of the population as a whole. Soldiers eating this meat lead to lower fighting capabilities and higher illness. The meat packing industry fought against any transparency here knowing that it would hurt their profits. After an enormous amount of advocacy over decades, there was regulation added. There is a balance here - some substances are outright banned and some are just required to be documented on the food. This makes sense, in my opinion, because we can't expect every person to be a food chemist and know what's good and not good. Market makers have relatively large amounts of money to spend to confuse customers with misinformation, if given the option.

Applying this to privacy, the question that governments have to find out is what is fair for end users to be allowed to make a choice on and what is outright harmful such that a rational, informed person wouldn't make that choice. It is a tricky thing to get right and this bill may be overreach, but that is the nature of government and any policy - iteration. But there is always a place for a government to be in the market. Otherwise the market will be dictated by the powerful, not the people. Without perfect information transparency and the ability to interpret that information, there is no such thing as a free market.

(Disclosure: Work at Microsoft, but I work in Azure and some open source stuff, not on or directly with Fluid/Office/etc.)

That's just a trademark clause for Microsoft logos and brands. The Fluid Framework itself is MIT licensed [0] and doesn't require exposing any of those logos/brands when you use it, so the framework itself is fairly open for usage.

I think the main thing that would slow down adoption for Fluid is that the only "production" backend is an Azure service, which isn't part of the open source Fluid Framework. Other open source backends[1] aren't recommended for productions. Until there are some open source ones, I'd assume adoption will be limited to folks in the Azure ecosystem.

[0] https://github.com/microsoft/FluidFramework/blob/main/LICENS...

[1] https://fluidframework.com/docs/deployment/service-options/

No one things FB is evil because they aren't transparent. It is because of the observable harm on society and their perceived reluctance to mitigate that harm. Internally, they also suffer with retention because employees don't want to work at an evil or perceived to be evil place.

Thus, FB decides to have more transparency, gets a little credit that they want to fix the problem. All good.

Now, FB then revokes that after it leads to criticism (which is the point of being transparent...), so they revert to the previous state, only now there is even more evidence and the problem is worse.

It's the height of irony that a company that profits from selling information about you would ever try to defend itself with a right to privacy. Not only is that not the issue at hand but it speaks to the lack of self-awareness that I can only hope will doom FB to irrelevance or legal destruction.

For me, I never really made friends in the office, but I did make friends from the office and my profession from outside of the office activities. Conferences, education, meetups, big morale events. These things have stopped, for me, since the pandemic, so I've not made any new friends this way. I'm full-time remote now, and moved away from the west coast, but I expect I'll still do conferences and the big morale events. I've not explored the meetup scene here, but I am hoping to also make some friends doing non-tech activities finally, since my new area is less tech focused.

As someone who's needed to maintain complex, high-performance database drivers that needed to work across a bunch of different platforms, I've been following them and their predecessors of OpenTracing/OpenCensus. The problem that's always been interesting to me as a library maintainer is consistency across platforms and well maintained multi-platform libraries.

I hadn't really found an acceptable solution that would work across Java, Node.js, browser, and so on. We'd invented our own formats and then we owned all the integration problems with various monitoring tools. I left the team before we started to adopt, but they've started doing it and it looks like it's help with reducing integration burden. I also think using someone else's opinionated library can help avoid bikeshedding on concepts not related to your core value.

I work at Microsoft and in Azure Cosmos DB, the same org as Steve.

Leadership believing in remote makes all the difference. We'd been doing more and more remote hiring in the years before COVID, especially when remote made a specific skillset's talent pool larger. This led to some remote-friendly, bordering on remote-first culture. When COVID hit, we adapted really fast.

I had taken a short break from Cosmos DB before COVID hit, and then accepted a new management role back on the team right as COVID was hitting. I've never seen my team all in the same room; but it's been fine/normal-ish. Now that full-remote just takes manager approval, we've had folks move away from Seattle/SF. I've got reports in the UK and NYC. It's pushed our culture to be a lot more communicative, intentional, and organized, which is good for everyone, Seattle based or remote.

What's great about all this is now there isn't even a question of "is remote ok"? We don't need to be looking for a specific skillset or a certain level of seniority. It really opens up the talent pool; recent hires have given us a lot more selection. (P.S. - I'm hiring Product Managers; permanent remote. Check out my pinned tweet on the twitter profile in my bio)

Distasteful speech is legal and so is kicking distasteful speech off your private platform. The primary limitation on what businesses can and can't do with who uses their platforms are that they need to avoid affecting protected classes.

If you think we need to protect MAGA supporters as a class, I just flat out disagree that there's any cause for it. That group of folks are largely already brimming with privilege that protects them (see walking away from storming the Capitol after killing multiple people).

If you think that the government should force private entities to not enforce consequences to speech they disagree with, I believe the government would struggle to prove that that doesn't itself impact the free speech rights of the private entities and it face immediate law suits to overturn such a law. The 1st amendment protects us from the government, not us from each other.

Quitting a New Job 6 years ago

I've done this as well. Been at MSFT for 7 years, been on 5 different teams, and switched between PM and Dev a few times. It's been great from a quality of life perspective, I think. I've got a lot of experience I wouldn't have had if I stayed on the same team and work has stayed pretty interesting. I've also got a pretty large network of folks I know, which is helpful for a variety of reasons.

Biggest downside is economic; can't negotiate new pay when changing teams by policy and you've gotta build a new case for promos/etc. People who have changed companies 2-3 times are likely making significantly more money than I am. I try to keep it in mind that I'm paying for quality of life by staying, so I need to get my money's worth or it's not worth it.

(disclosure I work for Microsoft but not on this stuff)

Biggest benefit for me has been how simple it has made ssh on Windows. I got a nicer spec'd Surface Laptop 3 during my last hardware refresh and haven't missed Macbook at all.

If the field just needs messaging and positioning info, you're good. In my business, customers usually assemble a bunch of our products (and potentially competitors) together into a solution. We usually have 3-4 different options for each flavor because folks want to optimize for different things or have different opinions/skillsets in their org. It's effectively impossible to be clear 100% of the time for all those permutations, so you really have to be accessible to the field to help clarify when it matters. 99% of the time they handle it, but that 1% that they can't are often because it's a complex, demanding customer that also usually means $$$. In my business, the top 10% of customers can easily drive 80% of your revenue, so it can really matter in the end that the field WANTS to work with you, and not pursue a more accessible alternative.

I'd also give a suggestion that if you're working on a B2B product (especially one with "Enterprise Sales"), you might be CEO of your product, but you're not gonna be able to boss around the COO/VP of sales and the field. You need to understand how the field works, who the decision makers are, which folks cover which areas, how can you enable them, etc. You should be talking to your field at least as often as you talk to individual customers - it's an easy way to scale feedback/etc. and if something is wrong between your product and the field, you need to fix it ASAP.

Azure Cosmos DB (Microsoft) | https://www.joincosmosdb.com/#section-5ae2d219f99c1-title | Redmond, WA | Vancouver, BC | Full-time | REMOTE

The Azure Cosmos DB team is looking to continue to grow its SDK and drivers team. Specifically, we're looking for folks with deep Java, Scala, JVM, or Spark experience to help us build and optimize our drivers. You're a great fit for the team if you have an obsession with perf, interest in hard distributed computing problems, and love working with users. You'll also have the chance to not only influence Cosmos developer experience, but Azure wide as we have a seat at the table for Azure wide guidelines and enjoy pushing boundaries.

Perks: - Microsoft benefits/pay - Remote first culture - half our team is remote, the other half is WFH most of the time - Open by default culture - SDK team does most things on public GitHub repos, including our planning (checkout our hub repo https://github.com/azure/cosmos)

If you're interested, checkout the rest of the details and how to apply here: https://www.joincosmosdb.com/#section-5ae2d219f99c1-title

I was confused by this comment but I think what you're trying to criticize is this: "Mariott didn’t take enough precautions to pretend being victim of a hacker."

I agree with that criticism. It's not a crime to be a victim, but being a victim also doesn't mean you're not guilty.

Marriott might, however, still be liable for some damages due to not following common security practices for sensitive personal information. Anyone from California, for example, would have § 1798.81.5 [1] and § 1798.91.04 [2] which would backup their right to have their data handled properly. The FTC might also get involved with their fairly broad powers to protect users privacy (though that agency has been limited in this administration).

[1] http://leginfo.legislature.ca.gov/faces/codes_displaySection... [2] https://leginfo.legislature.ca.gov/faces/billCompareClient.x...

Put another way:

Marriott is the victim of "cyber" crimes.

Marriott's customers are victims of Marriott's negligence.

I'd argue it has nothing to do with corporation or non-corporation. If someone is injured in a car accident due to an unfastened seatbelt, the driver is also potentially both a victim (assuming they weren't at fault for the accident) and guilty of negligence (for not making sure safety equipment was used properly).

Why Personas Fail 8 years ago

Persona as a "mascot" for a scenario has been helpful for me. It helps to think through the idea from the user's point of view, not how the software wants to be written, so to speak. Having two personas for a scenario also helps to delineate a spectrum (i.e. a casual and pro user) when you're going to have users with different requirements going through the life cycle of your product.

Asynchronous I/O refers to the fact that all I/O interactions default to being asynchronous in JS, not the fancy new `await` keyword, which is nice, but just sugar around Promises. The result of this default is that makes a best practice into a feature, not something I have to manage as a developer.

I'm one of the devs on Azure Functions.

In general, the trick is to basically never be cold. When you get assigned an instance, you keep it for a while before we put it to sleep. On the first call, you get assigned a "pre-warmed" instance that helps optimize load time. You can still help out by making sure your dependencies are lightweight.

We've still got some work to do for the JVM before we GA Java, but it's a pattern we're pretty happy with so far.

Microsoft Flow 10 years ago

And I think that's why the "Satya U-Turn" is so promising. Vista and Lumia were Ballmer-era failures. I work at Microsoft on Azure; it feels like a new era. The open source feel is real, even if we might fail at it here and there. PMs on the freaking SQL Server team were using Macs, because they want to feel the pain of SQL users on Macs. It's really good stuff.