Hacker News new | past | comments | ask | show | jobs | submit | jppope's comments login

> it’s difficult to discern any coherent U.S. strategy—assuming one even exists

Not sure why there is a presumption that one exists or that its coherent. With even the slightest critical eye its easy enough to discern that this isn't about economic policy or trade and that the proposed "policy" doesn't make any sense. The guy in charge of this stuff is either seeing what he can get away with, fucking with people, or building a narrative...

that is to say what you are watching isn't "real".


came here to say this... I'd wager more urine ends up on the floor due to accuracy than urinal design. Still... glad they are focused on some of life's most difficult problems

I completely agree - though there are places where I trust an implementation of things like a well known algorithm.

However, to add onto this, I'm consistently shocked at how often it is much CHEAPER to "roll your own." We've done some reviews on systems after a few years and the number of bugs and security vulnerabilities we experience with code based around packages is much MUCH higher. Its hard to put a number to it because the time cost of fixing those issues is variable, but its substantial. Its also amazing to me that it can be cheaper to build your own vs using a 3rd party vendor for something that would appear to be highly specialized - of course opportunity cost is a real thing.


The low quality of modern libraries is something that REALLY shocks me.

The library space has become competitive, and people are running them as business. The goal is not to be correct or even good, but to be a "first mover" and selling tutorials, books, Github sponsorships, Patreon subscriptions...

It's bad not only in terms of security, but also in terms of developer experience.

I am constantly amazed at how little documentation things have, at how many BASIC cases they don't cover (let alone edge cases) and how many security holes those libraries have, and the number of dependencies just keeps getting bigger and bigger.

Another issue is that newer developers are being taught just the newfangled library and have zero experience with the foundations. The number of React devs who don't know how to use HTML forms without a library is nuts.


> The low quality of modern libraries is something that REALLY shocks me.

How could you be shocked? Everything that's happened in the software industry outside of medical/DoD has been about delivering features as fast as you can, quality be damned.


I am shocked because this was not always the reality.

I have qualified my statement with "modern".


Rolling your own, though, does come down to hammering in the extra nails... and hoping that whoever's doing the job knows where to put those supports in place. If you have someone who looks into the future and sees what issues might come up in a few years, then it's way cheaper than relying on frameworks. If you don't, then you're stuck with some janky software that no one else can fix. I think this is why the larger the scale, the more likely companies are to rely on frameworks which themselves are janky, but at least well understood.

How many could potentially discover security vulnerabilities in your code vs popular lib?

I love this! I'm reading through the criticism in the comments and I can't help but imagine all of the articles out there complaining about how the interview process is broken - sure enough even one tool that is slightly different than the standard interview process and what do people do? complain about its short comings.

Keep it up and iterate! This is a good direction, and it certainly is going to be useful for some teams :)


the problem with the interview process is that it is unfair, not properly capturing the actual qualifications and testing the wrong stuff. the complaints here are that this tool does not properly capture the actual qualifications either, and therefore it suffers from the same problem, just in a different way. it may work for a few people, just like the interview process works for a few people, and it may work for a few use cases (like finding a FOSS developer) but it doesn't provide a solution for the interview problem itself.

I believe the recommendation was to download or print out your existing payments/contributions so you can still get your money after they rm -rf / the whole thing

"Anyone who actually contributed to social security, please report to the 10th floor at 2 pm today. Before doing so, please email a bullet point summary of what your contributions have been in the past ~6 months, along with up to 10 screenshots of the most salient pay stub deductions."

   rm -rf /
Won't work on IBM mainframe, its far more secure and complicated than that.

The chainsaw will have the same end result. Can't read shredded drives.

in a chatGPT world, just flip it over to laravel and you're off to the races

There is something very very nice about the layout and the setup for this application. I can't quite put my finger on it but they got something right.


Thanks! Much credit goes to the Bulma[1] css framework, I guess. I am mostly a backend dev. I've just used bulma for the most part and tried to avoid anything fancy.

[1]: https://bulma.io/


Agreed. For me it is the ample whitespace and the controlled use of color.


I noticed that as well. Not sure what the differences are though its still very clickbaity. It also seems fairly inaccurate from the statistics out there. Except for the part about phones but thats really just like his opinion man.


and it really tied the room together.


I'd like to get a deeper take on this if anyone has any numbers to back it up.

To me it "feels" like the last 2 decades of easy money and lack of investment into building entrepreneurship as a whole has led to a place where theres a lot of good money chasing two few deals or bad investments. That is to say the growth machine is responding to bad inputs over the last 25 years. To make matters worse there are only 2 possible solutions to any problem now: Technology or Regulation.

These are hot takes/ observations though. I'd love to know what the average retirement is built out of, what its return has been. What has happened Entrepreneurship over the same time, and what has happened to VC/hedge fund returns in the last 10 years. If anyone has deeper expertise I would love to learn more.


I saw a post very much like yours 25 years ago - small details changed but the idea is nothing new.


the 80's was a little more than that ago.


how would one go about doing this?



Login to https://www.ssa.gov/ and click the "Your Social Security Statement" link at the top of your homepage to download a PDF or XML file of your earnings by year and total payments to SS and Medicare.


I'd say download both the PDF and the XML. The PDF is easier to read, but the XML has more information.

In particular the XML shows earnings for every year. The PDF shows earnings for several recent years, and then from groups of years before that. I don't know if it is the same groupings for everyone but mine is grouping 1966-1980, 1981-1990, 1991-2000, 2001-2005, then the individual years up to 2024.


This 100%, that's what I did. I should have said "and", thank you for calling that out!


Join us for AI Startup School this June 16-17 in San Francisco!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: