> If you care about performance that much you should be using neither.
Unfortunately by the time the coding industry understand this , we'll already have a fifth JS runtime that will promise to solve all the performance issues that exist within the 4 others...
Node.JS / Electron are some of my most favorite tech , but if I need performance I'll go with Kotlin / Go / Rust , it's just simpler IMHO.
I wish there was more accountability for International Institution.
Saying "WHO Director Declare X" is obviously more accountable than "WHO said X must do Y" with a shadow comity deciding for 7 billion people and claiming it's not their fault when they are wrong...
> Isn’t this what the German constitutional court already said was illegal?
This seems to be exactly that.
The trick here is that it's not 'sovereign debt' as being held by one country , but rather it's a 'package of debt' with a normalize rate and more guarantee...
It's what Pro-EU have been advocating for decades , to avoid 'spread' within eu-zone...
I'm a bit fed up with those "IDE" for web attempts.
Every 9 Month or so , we get a new attempt at fixing Web Dev lack of Visual Feedback and productivity issues.
The typical coder behind this type of project get "Mental Fatigue/ Coder Exhaust" after 6 Months as they generally ignore the complexity behind building such product and end up abandoning the project....
There is a google graveyard , but we should also build an "Front IDE / Webviewer" graveyard.
The only one I recall without googling anything : Deco[0] and PreVue[1]
The vast majority of Today's software is built by "Corporate Developers" and "Corporate Business Owner".
Generally these people don't have any background in UX or UI or simply commonsense about software ergonomics.
An example would be Stripe , as an Architect in Banking I've spend years explaining to Executives and Business Owner to invest in
"Partner Experience" and good "Developer Ecosystem" , something they've always refused because the current model "Answer the Need"
This is the same problem , the people who are building are generally not using the product, the people in charge simply don't understand the "Added Value" of making a change to the current software so it's doesn't weight "150 MB" but rather "1MB" and has "auto installer" with it , "we have always done it this way , why change ?".
Add to that software legacy you end up with mess like those which are obscenely hostile piece of software.
The author is largely overstating the job of software development and confusing "software engineering" with "software development"
SE is indeed a creative process that requires a lot of thinking , conflicting point of view and a often a crazy amount of research in order to do anything ( Database System , CLI etc... )
But for the rest , I'm an enterprise architect in banking , 90% of the project I'm in charge consist of "gluing" service together or adding a "screen" in the front end that calls an apis...
Startups like Bubble|0] have proven you can create web / mobile apps / apis without code ,
the only reasons we are still relevant today is for three reasons :
- There is no proper FOSS standard ecosystem to create codeless APIS and Applications
- There is no standard in the industry for the business and application layers
- Enterprise have "legacy" that is much cheaper to maintain with humans ( Devs + Architects )
rather than automate by R&D to create those ecosystem ( Labor Capital Substitution )
There is dozens of papers on 4th industrial software revolution ,
which at the moment won't happen because the tooling is simply not there.
Definitely 4G Software ecosystem largely automate 90% of the blue collar coding of today.
> Even if there was humiliation, it was humiliation with a $400M+ payout to Adam Neumann. Softbank set up a really bad example in the industry:
AFAIK has always been this way for at least a decade.
An example would be Docker , has raised more than 200M yet it had no decent stream of revenue , it's litterrally a dead man walking yet the CEO left the boat years ago with tens of millions...
Startups that failed and have their founders go "bankrupt" are startups that you never ever hear about... The rest of startups you'll find on HN or have raised 100M+ millions often have their founders pocket millions when they raise very large amount ( 50M+ )...
There no surprise here , once you manage to get a business to a certain valuation / run-rate it's worth a lot thus you can trade that for cash , regardless of the "humiliation"
> As a philosophical matter, we consider ourselves to serve the business, which means that limiting access to what we consider to be the business's own information feels a bit strange.
Maybe I'm wrong , but once a customer upload the document on Stripe Identity they are supposed to be YOUR documents.
I worked in Bank as a Service , fundamentally when a customer goes through a verification process , the documents uploaded are not the owned by the partner using our APIs. They are owned by us , the Bank.
For Stripe Identity the same should have apply. Here the goal is not "Lock the Partner" but rather to protect them.
Now that discord has access to my Passport , in case of an identity theft could you tell me EXACTLY whose liable for the leak in regards to the law ?
With BaaS it's pretty clear , the Bank carry the responsibility to keep those documents safe , thus it's safer to not give access to a basic business to the raw details.
With the current API design you are offering, it's more ambigous and more prone very large leak within a business information system like Discord or Uber etc..
> Why - in your opinion - is it worse for consumers when these-type businesses (which ask for identity), use their own-rolled id verification than using Stripe's?
The point isn't so much using third party , we use a third party on prem.
My point is very simple : Why on earth would you let discord view my passport ? JUST WHY ?!
Those documents are very sensitive and no one should have access to them unless they have a VERY good reason to do so. PCI DSS treat "card information" like hot lava, the same model should have applied here.
Stripe should have acted as a "Trusted Party" and securely store those documents without giving access to it but just let you extract the information from it.
Thus you would been able to have uniquely identified user , backed up by government id , but you can't get access to the documents and sensitive data should have been redacted .... just like Card Number...
Again unless you are a Fintech / Financial Instituion , with a VALID in effect license , you should not have access to those documents.
That's not my point , here my point is very clear and straightforward.
Some people at Discord now have access at the pictures of my Passport that I uploaded during the verification process because they use "Stripe Identity".
The FAQ is very clear , Stripe give you full access to those documents. It should NEVER do so.
Now the very smart people have Discord have access to my passport they can now take a 50K Loan using my documents and face-check video , social security and some fake income documents.
They can also destroy my entire life because I maintain a political blog with views they don't really like that they consider "hate speech". These are exaggerated examples , but you get the idea.
I'm concerned by this , because more and more startups are going to use it to increase the value of their userbase to reduce fraud and look more attractive for their planned exit.
In the meantime, people having access to my personal documents is going to go exponential...
Again , I'm an Architect in Banking we have 500+ Partners selling Loan for us , they have NEVER access to your documents / personal data. They can only tell if the document has been approved , income range and some basic information. You don't know what they are going to do those sensitive documents / info , even if you have contractual agreement with them.
Banking industry has had a very simple rule that everyone has been following for decade : DON'T TRUST THIRD PARTY. Stripe has decided to do otherwise I guess and I'm pretty scared about it.
Stripe Identity seems like Identity Theft as a Service.
It's unfortunate , I'm an Enterprise Architect in Banking and honestly I wouldn't have let that feature go in production.
Businesses that do not have a legitimate reason to view my sensitive document like Passport , should not be allowed to do so.
Only authorized institutions like Licensed Payment Institution / Banks / Insurances etc... should be allowed to do so and AFTER they've been approved.
It's sad because you can tell right away that this will we be abused by Stripe's customers inadvertently. Just like Uber "God View" thats you view any customer ride...
Pretty sure the amount of "Identity Theft" or "Privacy" Scandal is going to explode with such technology available for everyone.
I don't know how a product manager at stripe could tell himself that "Yes , it make sense to give access to sensitive documents" in an age where people are seeking more privacy.
> Just because they are attempting to address it does not mean they will succeed.
Strongly agree this statement , hence I don't see how switching from "npm" to "raw urls" will solve anything...
The problem with Node dependency is bigger than just "npm is not a good package manager"... Honestly in this case just fork node and replace npm with something else...
Here the problem relies on a mixture between poor built-in apis which are buggy a lack of vision with the language , which have been core to the language since it's origin.;.
Deno doesn't seems to address those at all...
Again it's just seems to be "npm is bad , and i want to use typescript natively with web apis"...
I just know very well that Ryan is redoing exactly the same mistakes as Node with the same obsession he had on "EPOLL"[0] back then that will end up in a new fiasco.
All the problem that currently exist in Node are being ported to Deno straight up.
The built-in apis provided by Node.JS are almost non-existent... hence most of them are buggy and quiet tedious to use , it's why the community has created thousands of packages to resolve those issues.
Here I don't see how Deno is solving this , all the APIS seems again so barebone.. instead of having 1000+ dependency from NPM you'll have 1000+ dependency from remote URL with everything set at "read/write" because they need to read one file from your ".env" folder or perform an arbitrary post install process...
The way Ryan managed Node and how the ecosystem as turned to chaos because of is lack of vision and strategy make me not want to try any of it's tech again. Ryan is the kind of guy that gets obsessed over ONE THING and goes berserk for 5 years on that topic until he overdose and quit abruptly.
I don't think that's how you manage a language , when I look at Zig I'm way more confident of what's being done that the current state of Deno...
Node.JS is one of my main language , but the ecosystem around it is an absolute disaster.
> Software is buggy. Since when does a court accept the uncorroborated report of software, without any other corroborating evidence, and sentence someone?
Former PwC Auditor here , the court accepts evidence from independent IT Auditing company who are qualified to perform an audit on the system and asses the reliability of the system or from the vendor himself who provide proofs that the system he sells is reliable ( testing , certifications etc..)
If you're developer you'll probably agree with me that this approach is of course a "non-sense" because no software was ever created "bug-free" or can be really defined as "reliable".
Yet , that's how the court works : "The vendor says the software has no bugs , thus the court is rejecting the objection of buggy software. The court found you guilty"
I'm sadden by this news because it depicts how much the mixture of "bad software" and "corporate/enterprise software" are tied together and how much it can impact people on their daily life with irreversible impact.
Unfortunately by the time the coding industry understand this , we'll already have a fifth JS runtime that will promise to solve all the performance issues that exist within the 4 others...
Node.JS / Electron are some of my most favorite tech , but if I need performance I'll go with Kotlin / Go / Rust , it's just simpler IMHO.