Ask HN: Have you seen a mediocre, stagnant developer become a "rockstar"? - <AUTHOR> If it's a programmer that started out okay but then stagnated for a long while, and then through some visible changes has recovered from stagnation and built a good reputation whose experience meet the expectations.<p>Whether it's a co-worker you've had over the years or a peer that you've talked to and seen grown pretty well in experience, jobs, and reputation. What was your experience with them like? How did they improve? <comment><USER2> There are relatively few 'rockstars' that perform at that level in every position throughout their whole career. I have seen people struggle at a company because they do not seem to fit into the culture/dev processes/hierarchy that are excellent performers at another company when everything gels for them. And also visa versa.

I think half of your performance is not your technical ability but the environment you are in and how it suites you. Some like a free wheeling, high pressure small company feel. Others prefer a structured large company where they have a well defined set of tasks. Some developer take a few years to figure out which is best for them.

</comment><comment><USER3> I've seen many mediocre, stagnant devs become rockstars. They switched fields to something they enjoyed more and was better suited to them.

Having a background in programming is helpful in lots of non-programming career tracks.

<comment><AUTHOR> Oh I see, so they switch fields but not improve in the field they were mediocre at. You haven't seen any programmers improve themselves without leaving the field behind?

<comment><USER3> No, and what's the point? Why struggle at something that isn't a good fit?</comment></comment></comment>


Ask HN: How much is a utility website worth? - <AUTHOR>

A friend of mine (for real :)) received an offer to buy a website he owns and he's a bit lost as to the valuation of the deal.
The site is a certain utility application in use by users all over the world. The service is free, the site requires minimum maintenance, and the sole source of income is AdSense.
100% of incoming traffic is organic, and the site is ranked 4th on Google for the site's keywords.
Raw data: - 6K daily absolute unique visitors - 110K monthly absolute unique visitors - $1200 monthly revenue (AdSense) - Google PR 6
Any thoughts on how he should approach this proposition? How this deal should be valuated? <comment><USER2> To the best of my knowledge, the going rates (at Flippa etc.) for sites generating revenue solely via AdSense are anywhere from 10X to 15X monthly revenues.

Also, in general, the more the age of the site and the longer the traffic/revenue history, the more comfortable the buyers are; even willing to pay higher monthly revenue multiples on long track records.

Furthermore, all this (what I mentioned above) is usually for _content_ sites. Since your friend has a utility app, it _could_ fetch more value.

I'm assuming all traffic is 100% organic. At valuations like this, I guess the potential buyers will perform a _lot_ of due diligence on traffic sources, quality (and quantity) of backlinks, proof of traffic history (i.e. logs) and revenue history (AdSense account screenshots etc.). Be prepared with all this and then name a price.

All the best, HTH. :-)

Edit: Fixed minor typos

<comment><USER3> Completely agree with all of it. I personally wouldn't accept less than 12x monthly revenues for even a content site, but for something as turnkey as this, they're either betting that they can extend the app or easily increase traffic to it significantly.

The other consideration is that if this is a PR6, that should fetch a premium as well -- I don't know how much additional that factors in, but I would try to ask for at least an additional 25%, and see what happens there.

<comment><USER4> What is PR6?

<comment><USER5> PR is Pagerank. Which Google uses for its Algorithms. However, despite what people tend to believe a PR6 isn't that hard to obtain.

<comment><USER2> As a matter of fact, the PR (as shown on the Google tool bar) ceased to be (anywhere near to) an accurate measure of the _real_ pagerank (the actual algorithmic score, as calculated by Larry and Sergie's formula) of a website's link popularity _many_ years ago.

If you _do_ have the Google toolbar installed on your browser (probably not,) you may have noticed sites showing PR 0 (i.e. a white bar) ranking _above_ sites with PR2, 3, 4 or even higher.

</comment></comment></comment></comment></comment><comment><USER5> 100% of his income off is off Adsense and its pulling in $1200/month? You should tell him to look at the advertisments which his users are clicking on, THEN replace the adsense ads with CPA advertisements (of which the users are clicking on) and make even more than that per month as well as, diversify and protect income if he gets banned by Adsense.</comment>


Show HN: I made a light&free menubar app for taking Notes (Mac) - <AUTHOR> https://apps.apple.com/app/id1513115773 <comment><AUTHOR> Hi Guys !

My name is Théo and I made a little app to resolve a little pain.

Plume is a free Light menubar app for taking Notes.

I've been looking for a long time for a simple popup app in the menubar to get a little notepad.

I found different solutions like Tyke for example which is really nice, but a little too simple for the job and it has a too small writing area. I also found other nice solutions but the apps were always no free and too complex for the need. I couldn't find anything I liked, so I took advantage of the confinement to make this app!

Plume is a Free, Fast and Light app for taking notes, I made some basic features from now long : \- Activate minimalist interface for full focus on text edition \- Activate magic mode to allow smart text completion \- Manage Popover dimension (small, regular, large, xlarge)

It's a simple version for the moment, but if people like it I could work on a more complex version with : \- Advanced Backup \- Several notes \- Checkboxes \- Management of bold, italic, ..

And if people really like this application, they can find a link in the settings to financially support the project!

I would love to get some feedback on my little lockdown project :) Best. Théo.</comment>


Blockchain and how it will change everything - <AUTHOR> http://www.theage.com.au/business/banking-and-finance/blockchain-and-how-it-will-change-everything-20160204-gmmd6e.html <comment><USER2> This site immediately lost me because of autoplaying videos... :-/

</comment><comment><USER3> It's been changing _everything_ for quite some time already...</comment>


We are likely created by a computer program - <AUTHOR> https://www.reddit.com/r/SubSimulatorGPT2/comments/caaq82/we_are_likely_created_by_a_computer_program/ <comment><USER2> Took me a few comments to realize something was fishy. The comments all seemed to be trying really hard to be philosophical, but I couldn't actually parse real meaning. Realized all the posts had the same author, and that the whole sub is simulated content... discussing simulations. Very odd.</comment>


What Apple could do to improve the Touch Bar - <AUTHOR> http://stephencoyle.net/touchbar <comment><USER2> A Vim user here ... I just wish they had a conventional ESC key to the left of the touchbar. (EDIT: wrote 'spacebar' at first)</comment>


Ask HN: Working in US with J-1 visa - <AUTHOR>

Hi, guys.
I'm a Japanese, who want to work in US. I hold a Bachelor of Economics and have 3.5 experience as a system engineer.
The visa which I need to work in US would be... H1B>E-2>L-1>J-1(difficulty order)
Now I want to work for a smaller YC (or 500 Startups) backed company and am planning to get a j-1 visa. What process do I need? The most appropriate program for me seems Trainee Program(http://j1visa.state.gov/programs/trainee). Do I only need to find a employer and be sponsored by a current sponsor? Or do I need to find a employer and ask the employer for becoming a sponsor?
Thanks in advance. <comment><USER2> Hey,

You need to find an employer that will sponsor you. I would advice you to explain to companies what is J1, that you will basically do everything yourself(that you pay for the procedure, you will have your health insurance covered...) and that they just need to sign.

There is a job board specialized in US visa's sponsored offers that will open soon [http://signup.techmeabroad.com/](http://signup.techmeabroad.com/)

</comment><comment><USER3> Perhaps you should consider the Diversity Immigrant Visa a.k.a. green card lottery. Japanese citizens are eligible.

<comment><AUTHOR> That's harder than h1b. The winning rate is around one percent...</comment></comment>


If it Didn't Happen on Twitter it Didn't Really Happen - <AUTHOR> http://www.bothsidesofthetable.com/2012/11/13/if-it-didnt-happen-on-twitter-it-didnt-really-happen-heres-why/

<comment><USER2> Am I the only one that has no idea what in the hell this guy is talking about? There is not a single specific in the entire article.

"I got a phone call about some bad stuff happening, so we talked to someone, but it wasn't tweeted, so everything was cool."

<comment><USER3> The point of the article is to highlight how the nature of press relies more on Twitter these days. The anti Streisand effect advice is interesting.

</comment></comment><comment><USER4> If you don't use specifics, nobody will understand your blog posts.

</comment><comment><USER5> But twitter is still pretty stupid, right?

</comment><comment><USER6> In that case, I must not really exist.

</comment><comment><USER7> tl;dr: Don't provoke the storm if looks like it might pass you by without raining on you.

<comment><USER8> Quite a difficult piece of writing to follow actually, lots of we/our/their/the company/they ambiguity.

the tl;dr is a fair summary.</comment></comment>


Whiteboard- Focus on what matters most in your day - <AUTHOR> http://whiteboard.co

<comment><USER2> Meh, as someone who is almost constantly fighting to keep on top of my things to do, having tried out various methodic approaches, and slowly, but surely getting better at it – this sentence _immediately_ disqualifies this approach/app: _«(...) you want to work on Today and pushing others till Later.»_

If there's one thing I learned so far, one of the keys to get shit done is not putting it off (duh), but _planning_ it.

But I just saw this seems more about collaboration – which comes only across after viewing the video (The bit at the bottom feels somewhat like an afterthought). Why not writing about it a bit more detailed than sound-bite- sized paragraphs? At least this keeps in tune with the feel-good video. Which I turned off after 1.5 minutes: too much chanting, too little information.

Sorry to be mainly negative here. Your typography seems nice.

<comment><AUTHOR> Appreciate the feedback. You should tune into the end of the video. Would love to hear your thoughts on it.

Also would love to get the app in your hands as well.

</comment></comment><comment><USER3> How do you have a private beta for apps on the apple app store? Only giving out 100?

<comment><AUTHOR> Currently private beta is with the web app. We should have the iOS app in the app store soon.

</comment></comment><comment><USER4> "all your devices"... that are IOS/Mac.

<comment><USER5> "all your devices" ... eventually.</comment></comment>


Traditional journalists may abandon WikiLeaks' Assange at their own peril - <AUTHOR> https://www.washingtonpost.com/lifestyle/style/traditional-journalists-may-abandon-wikileaks-assange-at-their-own-peril/2019/04/11/45ae985c-5c84-11e9-842d-7d3ed7eb3957_story.html <comment><USER2> I have frequently seen the argument that Assange should be incarcerated because he is dis-likeable. Thankfully, that is not a crime in the U.S.

It seems that the federal government is trying to prosecute Assange for obtaining classified information from a source, a practice that is common among investigative journalists. (The details, I suppose, are in exactly how he obtained that information from the source). This seems to me to be clearly protected under the 1st Amendment of the U.S. Constitution.

A democracy that prosecutes civillians who obtain secret information from sources for the purpose of disseminating said information to the public will likely not remain a democracy for long.

<comment><USER3> That's not what they're trying to prosecute him for. They're prosecuting him for conspiracy to break into DoD computers. That's kind of similar, but it's not the same thing.

<comment><USER4> > They're prosecuting him for conspiracy to break into DoD computers.

So for doing source research.

<comment><USER5> I suspect that if someone did source research by breaking the security of your computer, you would want them prosecuted, too. Journalists can't be persecuted for what they write, but they're not above the law.

<comment><USER6> Persecuting journalists for what they write is becoming more and more common.

"[Reporters Without Borders] is also still troubled by the arrest of journalists during #Blacklivesmatter protests in Baltimore and Minneapolis."

[https://www.npr.org/sections/thetwo- way/2016/04/20/475017281...](https://www.npr.org/sections/thetwo- way/2016/04/20/475017281/u-s-ranks-41st-in-press-freedom-index-thanks-to-war- on-whistleblowers)

</comment></comment></comment></comment></comment><comment><USER7> >and who thus should be afforded the same First Amendment protections given to news organizations

The news media likes to pretend that there is a special status for news organizations and journalists. This is a common misconception that we need to fight against. The First Amendment is not just for news organization, it is for every US person. Back when the First Amendment was proposed and ratified, anyone could obtain a printing press. The First Amendment makes no distinction for a news organization or other publisher vs an ordinary citizen.

An example of new organizations trying to give themselves special status is Chris Cuomo assertion that if you were not a media organization it would be a crime for you to possess the Wikileaks emails.

[https://www.washingtonpost.com/news/volokh- conspiracy/wp/201...](https://www.washingtonpost.com/news/volokh- conspiracy/wp/2016/10/17/remember-its-illegal-to-possess-wikileaks-clinton- emails-but-its-different-for-the-media-says-cnns-chris-cuomo/)

<comment><AUTHOR> I agree that people misinterpret the 1st Amendment as providing protections specific to "news organizations" (though various states have given various state-level protections to news orgs). But the author here doesn't appear to be doing that. The full paragraph and the next:

> _Is the WikiLeaks founder, who until Thursday had been holed up in the > Ecuadoran Embassy in London for years, essentially a publisher — though a > notably strange one — who believes in taking radical steps to expose > government secrets, and who thus should be afforded the same First Amendment > protections given to news organizations?_

> _Or is he a reckless traitor — and by no means a journalist — who deserves > no such consideration and who should be prosecuted without worrying about > free-press concerns._

Her rhetorical question allows for Assange, an individual, to be considered a publisher, i.e. a news organization. In the next graf, it's clearer she's framing the conflict as: "Is Assange a journalist and thus are his actions protected by the rights to a free press?". But I agree that the sentence you quoted could have been better stated as:

> and who thus should be afforded the same First Amendment protections given > to _journalists_.

But I assume the reason why she said "news organizations" is because her intended audience are people who work at news organizations, i.e. they should be reading it as:

> and who thus should be afforded the same First Amendment protections given > to _you_.

<comment><USER8> Well, regardless of your opinion of Assange, he cannot be guilty of traitorous activity. He is not a US citizen or even resident. He is not in a position to have committed treason against the US. Might he have committed crimes against the US? Sure, if the conspiracy to break into US Gov systems charge is true.

Now Manning? That was treason, arguably during a time of war. Once upon a time, that was a summary execution. Manning got off easy with the 35 year initial sentence and even easier after Obama commuted the sentence.

<comment><USER9> Manning wasn't convicted of treason though. You cannot apply sentencing for charges not convicted.

35 years was excessive sentencing for Manning's conviction. Considering the volume and seriousness of conduct a sentence of 5-8 years would have been more appropriate as compared to other related convictions.

<comment><USER8> Whether convicted or not, Manning was found guilty of disclosing tens of thousands of classified documents to someone/some organization Manning knew that was intent on publicly disclosing that information, thus aiding an enemy in a time of war, aka, treason.

Manning may not have been convicted of treason, but it is obvious from the crimes Manning was convicted of, and the circumstances under which the crimes were committed, that treason was committed.

IANAL, but it seems to me that given the conviction they were able to get, prosecution could have easily gotten a treason conviction as well. Seems to me to have been more of a political play. Obama got a "win" in being tough on leakers of classified info, got a tough sentence, and then with a wink of the eye on the way out the door after 2 terms commutes the sentence (yes, not a full pardon).

Like I said, stinks of political interference and nothing to do about the totality of the crime(s) committed.

<comment><USER9> Manning was convicted of a real crime, a felony. It doesn't matter how much you wish Manning were convicted of anything else. Manning could only be sentenced for the crimes convicted.

</comment></comment></comment></comment></comment></comment><comment><USER10> WL publishes documents with minimal context and no subtext, no added commentary or presentation whatsoever. Which shows how dependent on presentation has news reporting become. What Assange accomplished should be viewed as a priceless resource for journalists, reams of data and pure info, in unedited original words, there to speak for itself. If "fake news" is the grand enemy today, then the feds are after the one and only purveyor of hard facts without color, what they purport to favor in reactionary ideology.

<comment><USER11> What you _describe_ sounds great, but that's not what WikiLeaks was like. They exposed stuff like "information for every female voter in 79 of Turkey's 81 provinces — more than 20 million entries' worth of addresses and cell-phone numbers".

Is that the kind of "reams of data and pure info", "hard facts without color" that should be viewed as a "priceless resource for journalists"? Of course not. That's negligent exposure of people's private information, towards absolutely no public interest whatsoever, and causing much public harm.

[http://nymag.com/intelligencer/2016/07/why-did-wikileaks- hel...](http://nymag.com/intelligencer/2016/07/why-did-wikileaks-help-dox- most-of-turkeys-adult-female-population.html)

</comment></comment><comment><USER12> Outline link: [https://outline.com/spbLvB](https://outline.com/spbLvB)</comment>


Managing a Secure JSON Web Token Implementation - <AUTHOR> https://cursorblog.com/managing-a-secure-json-web-token-implementation/ <comment><USER2> If you are going to use JWT besides its failings, you should use it safely. But not all advice in this piece is equally strong.

1\. RS256 vs ES256 - you shouldn't use either. RS256 not just an old standard on the way out. With safe keys sizes tokens are often going to be too large and signing too slow for you. ES256 on the other hand, suffers from many theoretical flaws and at least one practical flaw that (complete breakdown if nonce is reused) that helped jailbreak the PS3.

The only reasonable asymmetric signature algorithms implemented for JWT are Ed25519 and Ed448, but they are still not supported by most libraries.

2\. Key IDs - always include them, even if you're just using 1 key for now. Otherwise you cannot rotate keys securely without having to reject all existing tokens.

3\. Have relatively short lifetimes for JWTs if you're not using a blacklist. A token that lasts for 180 days with no possible way to revoke it is a dangerous little thing.

4\. Always verify that you only accept JWTs signed by the algorithm you're expecting. Otherwise you might be fooled by a JWT signed with HMAC-SHA256 by your RSA public key (which is known to the attacker: [https://auth0.com/blog/critical-vulnerabilities-in-json- web-...](https://auth0.com/blog/critical-vulnerabilities-in-json-web-token- libraries/#RSA-or-HMAC-)

5\. Under no circumstances accept tokens signed with "none". The standard is just bonkers.

6\. Rotate keys every month if you can, not every 2 years. This is keeping your joints well-oiled.

7\. Damage control is still possible when using JSON Web Signature (JWS). JSON Web Encryption (JWE), on the other hand, is just a train wreck that is very hard t ouse properly. Avoid it all costs. PASETO provides a viable alternative for most cases it makes sense to use an encrypted token.

8\. If you can avoid JWT, just avoid it. It's just too hard to implement securely. In the past there weren't any widespread alternatives, but PASETO is supported in most common platforms now and is clearly a better option.

[https://paragonie.com/blog/2017/03/jwt-json-web-tokens-is- ba...](https://paragonie.com/blog/2017/03/jwt-json-web-tokens-is-bad-standard- that-everyone-should-avoid)

<comment><USER3> Nonce reuse is easily preventable with deterministic nonces or sufficient randomness. PS3 used a fixed nonce which is a whole different problem.

I agree that JWT has all sorts of flexibility that make it hard to use well but NIST curves work just fine.

If you think they are backdoored then sure, Ed25519 is a better option but real world constraints may require you to use a NIST curve for now.

<comment><USER2> I don't think the NIST curves are backdoored, but they obviously have some serious theoretical and practical issues. [1]

As far as I know, neither of these issues is relevant to their usage with ECDSA (although invalid curve attacks should be a good enough reason to avoid using these curves with ECDH completely), but experience with SHA-1 and RC4 has thought us that algorithms with theoretical problems are likely to be practically broken sooner or later.

But NIST curves are not even the main issue with the ES __* algorithms in JWT. The real issue is ECDSA:

1\. Verification is slow. P-256 is about 2-4 times slower than Ed25519 [2]. This kind of speed hit may often be unacceptable. 2\. Nonce reuse is an issue. The PS3 implementation was extremely bad, but random number generators can often be broken. This is not a theoretical issue - it used to happen verify often with docker containers until recently. There are alternative schemes that allow using ECDSA with a deterministic synthetic nonce [3], but this is not supported by any JWT implementation I know of. Ed25519, on the other hand, uses a synthetic nonce.

[1] [https://safecurves.cr.yp.to/](https://safecurves.cr.yp.to/) [2] [https://bench.cr.yp.to/results-sign.html](https://bench.cr.yp.to/results- sign.html) [3] [https://tools.ietf.org/html/rfc6979](https://tools.ietf.org/html/rfc6979)

</comment></comment></comment><comment><USER4> Anyone have any experience implementing PASETO[0]?

I have read the papers and seen the talks -- it seems fairly compelling.

[0] [https://paseto.io/](https://paseto.io/)

<comment><USER5> I haven't implemented PASETO but I was thinking about adding support for another language. If I were to implement it, I would just use libsodium for most of the cryptographic primitives whenever possible since the reference PASETO implementation uses it as well as most of the other language implementations too (Except for the Go version).

PASETO does seem like a cryptographic secure alternative that addresses the pitfalls of the JOSE standard and has most of the mitigations mentioned in this blog-post (No cryptographic-algorithm agility) and it supports the same functionalities of JWT/JWE and JWS. So I am convinced on getting that standardized, but it also needs XChaCha20-Poly1305 AEAD to be standardized too [0].

Fernet was also around as being a secure alternative, but it has been mostly replaced by Branca [1] and PASETO.v2.

[0] - [https://github.com/bikeshedders/xchacha- rfc](https://github.com/bikeshedders/xchacha-rfc)

[1] - [https://branca.io](https://branca.io)

</comment></comment><comment><USER6> As long as all supposed consumers of JWT are on my infrastructure I prefer to make all tokens revokable. Tokens TTL is smaller than 1 hour so I keep 1 hour worth of revocations on all servers (pushed via queue). If key is on list it is refused (without database hits)

</comment><comment><USER7> Now, what is the (currently accepted) best way to store that refresh token in a ReactJS frontend? I send the JWT via Cookies as "httpOnly; Secure", would the refresh token go the same route? If so, wouldn't compromising of the JWT also mean the same for the refresh token? And therefore give the person unlimited access until key-rotation?

Or, like with Oauth2, is the idea that JWT gets transmitted back to the server with every request, and the refresh token only when needed and therefore having a slightly smaller risk of intercepting both keys (assuming the refresh token is not stored in cookies)?

<comment><USER8> You should not store any token in the frontend. Instead, have a server doing that and use a classic secure cookie session. The session is bound to the token / refresh token and can then do the token management.

Alternatively, don't use access token / refresh token but an ID token. The refresh of the token will be done via the ID token and the user's session (cookie) to the OAuth provider.

<comment><USER9> Agree this stuck out to me - I think a lot of confusion stems from how to handle refresh tokens - the oauth spec I feel is responsible by the confusion of how it calls apps "clients" and how flimsy it is about implementation (should/shall/must). If you are keeping refresh token locally on the user agent, you really urgently need to provide the user session management tools to revoke those things, and you need to be doing more advanced threat/abuse detection of their usage.

<comment><USER10> Most people should probably follow the pathways laid out by IdentityServer4 and oidc-client, even if not not using .NET Core (you could absolutely deploy it standalone). Lots of sane defaults, even for refresh tokens and revocations and other difficult specs to understand. It's well maintained and well thought out.

</comment></comment></comment></comment><comment><USER11> When is the refresh token meant to be expiring? Can't the man in the middle just use the refresh token to get a new valid jwt?

<comment><USER12> From the article, refresh tokens are revokable. The whole point of JWT + refresh token is that for normal operation, you don't need to hit the database but still able to revoke a token.</comment></comment>


World's Simplest Electric Train (YouTube Video) - <AUTHOR> https://www.youtube.com/watch?v=J9b0J29OzAU <comment><USER2> Definitely one of those things that's cooler than the HN title implies.</comment>


What if your domain model could validate the UI for free? - <AUTHOR> http://gcanti.github.io/2014/08/12/what-if-your-domain-model-could-validate-the-ui-for-free.html

<comment><USER2> The tcomb library seems to do quite a lot, some of which might be sort of useful, but the example supplied here doesn't really seem to support why you might use it. The code in fact just seems weird to me: if you're having to use a try/catch to do some really basic form validation, then obviously that's horribly wrong... but the example below, under "Further Reading", which is (I think?) proposed as the better solution, doesn't really seem any different from how you might go about solving this problem were you not to use any library at all, except you wouldn't have the struct stuff. Very unconvincing, if you ask me.

Contracts.js is quite a different approach, maybe even to an orthogonal problem, but perhaps is more interesting: [https://github.com/disnet/contracts.js](https://github.com/disnet/contracts.js)

</comment><comment><USER3> I think this looks pretty cool; I like how simple and general the last validation function is. If you're generating the UI from the model all the better (it looks like there's a note on this front at the bottom of the tcomb.js readme). This would be remarkably easy to do with React, and it all could be abstracted into a simple configuration framework.

Looks like there's a typo in the last example: you probably want to use the Struct param in the fetch function rather than explicitly creating a User.

Seems like the makings of something like Bootstrap for domain models here. Neat.

<comment><USER4> To address the "explore using tcomb with React.js" point in tcomb's README, you'll find that it's a perfect fit, so go for it! Already having immutable instances all-but guarantees an easy performance boost down the line, and React's rendering takes so much fluff out of displaying and redisplaying forms in any state. Just have a component give you a callback to let it know when state has been updated and it should be easy enough to integrate.

I switched my port of django.forms away from using my own DOM library to generating React components: [https://github.com/insin/newforms](https://github.com/insin/newforms)

<comment><USER3> I've seen your newforms library before and been interested but I got frustrated trying to read through the examples. The leading commas are so distracting! Sorry to harp on a minor point.

</comment></comment></comment><comment><USER5> > What if your domain model could validate the UI for free?

Then your domain modeling language will be as detailed and error prone as the UI designing language, and completely unsuitable for the task. As the article exemplifies.

Abstraction and detail are at odds against each other. You simply can not have both.

Also, why verify the domain description? You must check that the UI fits the problem, not a short description of it.

</comment><comment><USER6> What if you could sell your one measly old cow for three magic beans. ;)</comment>


Repudiating the National Debt - <AUTHOR> http://mises.org/daily/1423

<comment><USER2> This entire website is hilariously out of touch with reality.

<comment><AUTHOR> Well, I am glad you were entertained even if you couldn't learn anything.</comment></comment>


Russia 50 years behind the times in science, Nobel laureate says - <AUTHOR> http://www.vancouversun.com/technology/Russia+years+behind+times+science+Nobel+laureate+says/3642015/story.html

<comment><USER2> Here's a reason I have trouble believing in the next Silicon Valley in Skolkovo: what about the previous one that was going to be in Dubna? (<http://en.wikipedia.org/wiki/Dubna#Economy>) News about it first appeared in 2002, but nothing has commenced since. That's why, unfortunately, I have to come to the conclusion that this new Silicon Valley project is nothing more than government propaganda aimed at fixing the country's self-image within Russia.</comment>


How Silicon Valley Can Kill Your Startup - <AUTHOR> http://venturebeat.com/2013/11/01/how-silicon-valley-can-kill-your-startup

<comment><USER2> As much as I like Vancouver, the article reads like excuses and whining for an inability to hustle.

I know people that thrive for around $2 a day in both valleys full stop. So the cost point is specious.

Furthermore, the talent war is nonsense. There are plenty of corporate experienced, startup compatible people globally looking for an opportunity to be part of an adventure. Finding what exactly motivates each candidate is key, because it's probably not napping pods: is it telecommute time, catered lunches or time for yoga? Candidates that are too demanding will be toxic or unmanageable. Also, having every imaginable perk at the beginning doesn't make sense; periodically add neat things as they can be afforded.

Finally, being entirely located in one particular place is also unnecessary and not a panacea. Eschewing either valley entirely for too long doesn't sound particularly wise either. 37signals and others have shown a global virtual office can work.

PS: Ramen isn't food, try oatmeal.

</comment><comment><USER3> Failing to list the #1 reason: Your VC could decide that they want their money back at any moment.

(#2 would be bad employees/decisions foisted on you by those handing you money)</comment>


I took a risk leaving school and now I need help - <AUTHOR> HN has always been one of the first things I've checked when I woke up. I know there is an amazing amount of experience and intellect here. 4 years ago, I applied to Stanford as a direct result of reading (here) about getting out of our comfort zones. I was living in a Bureau of Indian Affairs dormitory for high school students when I got the news that I was accepted. This was a huge deal, because statistically I am part of a demographic the comprises the bottom 1% of the income spectrum here in America. But I left Stanford after a year, partly because it was such a huge change, but also because I wanted see if I could succeed on reservation I grew up in (the Navajo Nation). I'm now 22, and I can say I used what little I had to try to make a difference. I've made mistakes - one of which was lying to my peers about leaving because I wasn't prepared for the change that Stanford demanded. Another was not asking for help when I needed to. And, finally, I didn't pursue a regular job when my family demanded it. And now, I don't know what to do. I have about $20K in debt - student loans that have already been deferred, money I used to buy a computer (pretty much the only thing I own), and medical bills from a year of battling cancer. And, as of today, I had to get out of my step-parent's house because it was not a good place for me to be anymore. I am at a park in the next town over - a town that tends to be particularly disdainful of Native Americans wandering the streets. I don't know what I am looking for here on HN. It's always been a source of encouragement to me, especially in those times that I felt the most uncomfortable or hopeless. I've learned a lot for living on a reservation where the nearest IT-related job is 100 miles away - and it really is thanks to you. <comment><USER2> My wife and I own a salon in New York City. We're looking for someone to help work on our salon software which was built a few years ago in PHP. Do you know how to code or have any inclination to learn? We could start with something small - maybe $100/week to get you started while you learn and fix a few bugs, then ramp up to a $30k or $40k/yr gig.

Not a ton, I know, but it would be a start :)

If you're interested, my e-mail is in my profile.

(Note: you don't have to be in NYC, just have an internet connection)

<comment><AUTHOR> Wow, seriously!? This is great! I just got started learning how to use CakePHP (PHP was my first love). I will definitely be in touch!

<comment><USER3> I have worked with quite some PHP frameworks in the past. Do tell me if I could help you with anything at all!

</comment></comment></comment><comment><USER4> I would say go back to Stanford if that is an option. You'll grow a lot there. I don't know what you mean by "change," but if you need pointers on how to handle the schoolwork or on how to take advantage of the resources you would have at your disposal, just let me know here and I'll get in touch.

<comment><AUTHOR> I really do want to go back to Stanford. The change I was referring to was the culture. There is so much brilliance in a place like that, and I was not prepared (as someone that rode the school bus 4 hours a day for most of my public schooling) for such a huge change. I owe Stanford tuition, though, so that isn't an option until I can pay it off.

<comment><USER4> I would revisit this. Financial aid at Stanford is extremely generous... I was a beneficiary myself. Someone in that office will help you figure this out. I am still in the Bay Area, so if you need someone on the ground, let me know.

To be honest, your $20K loan sounds like an error. Alumni like myself do not donate back to Stanford so that things like this happen.

EDIT: Added the final paragraph.

<comment><USER5> Yeah, I'm trying to think through how that could have happened in one year.

</comment></comment></comment></comment><comment><USER6> We all make decisions and they guide us in different directions. I don't really believe in a "right path". I'm not really sure what type of help you're looking for. I was a once computer science major, now clinical social worker. I work with people that have different stressors in their lives and are learning how to live a life they feel good about. In most cases I find, even with past horrific traumas, people are very resilient. So the little I'll offer you right now is this. In my own journey of healing and getting my life together, there is always a lot of noise. Things to "worry about" things to "figure out". These often include career goals, life goals, etcetera. I have found often that much of my energy has been wasted on things that have not yet come to pass. The future stuff that I'm not quite ready for in that moment anyway. Of course plans are important, but in terms of getting "help now", often we overlook or neglect our day to day basic needs for loose ill defined hopes. It's not these things are not important, its just we very likely are not yet ready to hold ourselves up with enough firm ground to withstand the tremendous amount of unknown that entertaining such things requires. With that said, Maslow's hierarchy is a helpful frame to start from in any trying times. You'll find that when you consistently knock out a 100% of your basic needs (healthy food, shelter, meaningful relationships, meaningful daily activities, etc.), you'll start naturally taking on bigger things. You must be a smart guy if you got into Stanford. Something the pressure of a "name school" has more baggage than its worth. I know what that's like. I once went to a "name school" and found that I spent just as much energy on deflecting the image of what it meant to goto a place highly regarded and what that meant to the world around me - as I did on just trying to survive the experience. With that said, an important step for me, was to forget and let go of that image and build a real foundation of self-respect and confidence in myself that I felt. Once you tap into that, and you spend the time defining what YOU want to do, not what the world wants you to do - then you will begin to let the important things in and you will get better at passing on the distractions. I'm still learning how to do this. I graduated from my undergrad a decade ago. I've changed my career, felt lost, loved and lost multiple times, and am better for it. I hope you find some inspiration for yourself in these words.

<comment><AUTHOR> I want to have enough stability to go back to school and to be in a place where I can explore technology and create amazing stuff. I beat cancer, my work has been featured in the newspaper, I've helped people by connecting via technology, and I've generally done what has made me happy. But there are genuine cultural differences between me and my (Caucasian) step-father that I finally decided to leave behind. I have looked after my mentally-disabled step-brother for a long time, and I am sad that I had to leave him behind. Right now, I am worried that I won't have a bed to sleep on anymore. But, I did manage to apply with a local startup (I got amazingly lucky) and I will see them on Monday. I feel I am starting to focus more on myself - which is something that resonated with me in your reply. Thank you for offering perspective.

<comment><USER6> It sounds like you're noticing important cultural differences and have had a history of heavy responsibility. Best tomorrow, and remember, any decision you make isn't the last or the defining one...those labels generally come after something has passed. You always have choices in front of you. They will likely never be what you have envisioned exactly but they are indeed the ones in front of you. Letting go of the image we've envisioned and embracing what's in front of us I think is one of the hardest things to do in life. Take good care.

</comment></comment></comment><comment><USER7> I grew up in Navajo County(Holbrook & Snowflake) and now live in Downtown Palo Alto. I understand the drastic change you've experienced more than anyone on HN. These Ivy league pricks have no idea. No matter what you do...don't give up. Learn as much as you can and keep growing. I went to ASU and when I was your age I went through a similar experience. All you can do is keep innovating, keep learning and find a support structure. AZ is not known for that...not even in Phoenix. Get out of Tuba City or wherever you are. The rez is not for driven people. I have some Navajo friends in SV if you need help. Reach out...there are always options.

<comment><USER8> Nitpick... Stanford is not an Ivy, but instead part of the Pac-12.

</comment></comment><comment><USER5> I'm an undergrad at Stanford right now, and my understanding is that they do everything they can to meet demonstrated need. I could be wrong, but I think nearly all student loans (public and private) can be deferred indefinitely while you're in school. I'm not sure what you plan on studying. There are many fields that can put you in a position to pay your loans off rather easily, given that you put in the sweat. Is there anything else stopping you from coming back? The finances seem to work if you want them to.

<comment><AUTHOR> Leaving mid-term was the big mistake here. I didn't understand how outside scholarships would be cancelled. There was a balance on my student account for the longest time that is now in collections. But other debts are simply medical related. It was a daily 100 mile round trip during therapy, and I let things get off track while I was getting treatment. At the time, it was the only thing I felt I could do.

<comment><USER5> Oh wow, my bad, I completely let the fact that you overcame cancer slip. Again, while I've never been in the position to have to learn if this was actually the case, I think fin aid would find some way to accommodate you. You're probably aware of this, but the NA community has grown here a lot in the last few years. Sherman Alexie came and gave a talk in Cubberley this past year.

</comment></comment></comment><comment><USER9> I hope you have found someplace safe to lay your head. I went through a very similar situation as you, attending an ivy league university only to find myself overwhelmed, unhappy, and feeling like there was no one I could relate to, culturally, due to growing up as part of a marginalized group in the very same city I attended university. I was as depressed as I ever was in my life and spent days locked in my dorm room with the shades shut and considering the most horrible options because my life was over as I saw it.

It's amazing to me to think that was 15 years ago because life has a funny way of going on. One of the most valuable traits you have already discovered, due to your battle with cancer, is your resilience. You will adapt, learn, and grow from your experiences.

Here is how I found my way out of the situation: with the help of my family, I transferred to a public college, worlds (but only blocks) away from where I was previously. I re-invented myself enough to succeed and have a meaningful career thus far and continue dreaming for better.

I recommend that you apply to a school like this, one with a somewhat decent computer science program, but one you can handle and possibly work a job to keep your debt low. Be the best student there and rebuild your confidence. Graduate and get on with life. Most importantly, do not look back with regret because each decision you made was simply a step to where you are now and only a step towards where you will be tomorrow.

<comment><AUTHOR> I have definitely reworked my short-term plans, and I've set aside the long- term hopes to focus on getting into a local community college. With $1K tuition rates, it's a huge difference from Stanford, but I'm still trying to work out how get in before the term starts. The past few days have been a rollercoaster, and I'm glad I waited the lowest parts out because I feel a lot better. Thank you for finding this thread and sharing - it helps!

</comment></comment><comment><USER10> It sounds like you've already had an incredible journey. You made hard decisions (leaving your home multiple times including just now), and you fought incredibly difficult battles (against cancer, maybe cultural ones as well). Now, your next move is a little more mundane. The most dramatic decisions are actually behind you I think - now you just need to decide to succeed through perseverance. That probably means getting a college degree (hopefully back at Stanford, but if somewhere else, so be it) while working nights to pay down your debt. Like everything else you've been through, it won't be easy, but it's a clear path with direction.

<comment><AUTHOR> This is reassuring to read. There aren't a lot of people around me that I can relate to, so when it comes to the situation I'm in, I guess I panicked a little because I'm actually on the streets now. I have a few cents in my bank account, but I am hopeful as ever. Thank you

</comment></comment><comment><USER11> Well, I know there are tech jobs such as web development here in Phoenix, AZ, but if you want to stay in the Navajo Nation then I don't know how to help you. I've been in Arizona for a year now and I hope I'll have a chance to get involved with some of the Indian communities around here, one way or another, but it hasn't happened yet.

For what it's worth, I'll tell you that sometimes, hitting "rock bottom" can be good for you. I bet you're pretty motivated now not to go further in debt, and not to waste your next opportunity! Lucky for you that you get to start over at such a young age. Find a way to dig yourself out of this hole.

<comment><USER12> Yeah, he is lucky.

</comment></comment><comment><USER13> My best suggestion is to go back home. I'm sure you still have friends, and family that have some smidgeon of care for you. Rather than going it alone, as others have said, you need a support structure.

I know it can be tough, but suck it up (in terms of the family situation). And while you're there, take some of the remote gigs that I see the HNers here offering to give you. Until you can stand on your own two feet, and then you have to leave and _remove yourself from abusive relationships_ (which it sounds like from what you wrote). But until you can do that safely, you're just shooting yourself in the foot.

<comment><AUTHOR> The thing about going back to my reservation home (the one that is offering a place to stay) is that there is absolutely no internet available. So, I've chosen to suck this up. Last year I did a 500+ mile walk, before I started heavy therapy, and I camped out every night. It's almost the same. For the time being, I'm happier. I've already had 2 interviews and applied wherever I could for work. But the home I just left - no. I left that place for good.

</comment></comment><comment> k-mcgrady If things are that bad and you don't want to go back to school your immediate concern should be a job. Forget about an IT job - you aren't in a position to choose the job you want. Apply to everything and anything that has an open position. At least that will help you get back on your feet.

<comment><AUTHOR> Advice taken. I've already had 2 interviews, and I'm still applying around town.

</comment></comment><comment><USER14> OP, I've been in your shoes, or at least similar ones. At Stanford, and out of it, years ago. I wish I'd had someone like my current self to talk to back then. PM me if you'd like to talk. There are no saviors, but you're not alone, and it gets better. Anonyfish: satnightfever.

<comment><AUTHOR> Thank you - I know what you mean by 'there are no saviors'. Hoping for one is tiring.

</comment></comment><comment><USER15> The good news, there is a hack to your problems. Here's some practical advice on getting out of debt, budgeting, and focusing on your career> [http://www.daveramsey.com/category/tools/](http://www.daveramsey.com/category/tools/)

</comment><comment><USER16> Go back to Stanford. It's the best university in the world and the fin aid is great.

<comment><USER17>
        > It's the best university in the world

Source?

</comment></comment><comment><USER18> Byron, if you need a place to stay in the Los Angeles area, shoot me an email. I'd be more than happy to help you get back on your feet.

<comment><AUTHOR> Thanks! I'm getting situated here slowly, but I'll follow up with you if I decide to get out of AZ.

</comment></comment><comment><USER19> Do people use paragraphs anymore ?</comment>


Boeing 737 Max ordered by Ryanair undergoes name change - <AUTHOR> https://www.theguardian.com/business/2019/jul/15/boeing-737-max-ordered-by-ryanair-undergoes-name-change <comment><USER3> > Photos have emerged of a repainted 737 Max in Ryanair colours outside > Boeing's manufacturing hub, with the name 737 Max replaced by 737-8200 on > the nose.

Now I'm worried about boarding any 737

<comment><USER4> Why? Do you think their safety record is worse than driving?

<comment><USER5> You're comparing apples to oranges.

Compare pilots to drivers or cars to planes.

I would guess that somewhere north of 90% of crashes are human error mainly or completely.

<comment><USER4> I didn't actually do the comparison. I asked a question. You can choose your own methodology.

But if you die, it doesn't matter whether it's human error or not, so it might be better to compare overall risk from all causes?

<comment><USER5> I understood it to be a rhetorical question, apologies if I misunderstood.

Driving encompasses both mechanical and human risks. Here we are talking about just the mechanical, so I don't think the comparison is particularly fair.

</comment></comment></comment></comment></comment><comment><USER6> Out of all the possible solutions, let's go ahead and choose the one that further destroys people's trust in our abilities to make sound decisions!

/s

Ridiculous.

<comment><USER7> Immoral yes. Ridiculous no.

People have a short memory and a strong affect toward symbolism.

Marketing just pulls the desired psychological tricks to reach their objective.

It works. Just like lying in politics works. Just like making corporate PR statements work. Just like in your face ads work. Just like showing boobs work.

It will work as long as people are cruising in their life instead of trying to build it. It will keep working because it goes with the flow of our internal mechanisms, and it takes conscious efforts to not be influenced by it. And it will keep being used because the value of doing so it far superior than the cost.

<comment><USER8> Immoral-as-the-norm is itself ridiculous.

<comment><USER7> I tend to see bad apples just like tornadoes or forest fires. They are natural catastrophes, and they will always be there, not matter the society we build.

The important part is how we react to those people. In that sense, I feel we are more responsible for the problem than them. Indeed, why blame a tornado ? Better learn to behave in case of one, and make houses the proper way.

So I don't think we should focus on the immorality as much as we should make sure we create generations of persons than know how to deal with it: remember bad deeds, detect manipulations, choose what they consume, etc.

<comment><USER8> You're absolutely right to focus on making sure we know how to deal with these things. The difference is that there aren't two sides to a tornado. We should _also additionally_ focus on the people and systems that make this happen.

<comment><USER7> Sure, but no matter how much you do this additional focus, there will be always be a few terrible persons going through the net. The only way to avoid it would be to cut down on freedom to an extreme.

It's also very expensive. The legal system, prisons, and the whole gov web is a big, slow and inflexible machine.

Removing the incentive to be an asshole is just better. But it's our job, not the job of some higher power.

</comment></comment></comment></comment></comment></comment><comment><USER9> This is disgusting misdirection and frankly feels fraudulent to me.

The definition of fraud is as follows:

Wrongful or criminal deception intended to result in financial or personal gain.

What Boeing is doing meets that definition of fraud if you ask me.

<comment><USER10> If there is fraud here then I think it would be committed by Ryanair. There are essentially 2 transactions to consider here:

1\. Boeing-Ryanair: both parties know this plane has been rebadged and have agreed to it. There is no deception.

2\. Ryanair-customer: one party has rebadged a known faulty product, claiming it to be something else. There is deception on the part of Ryanair, the entity financially benefiting from the transaction.

Maybe consider that everything the 737 MAX 8 touches dies. Airlines, flyers, shareholders.

Boeing made this dumpster fire and now they should sleep in it. I'm with other posters here who will now avoid any 737. Lots of fish in the sea, lots of planes in the sky.

<comment><USER9> True enough. Both parties seem to know that they are trying to deceive passengers though. Both are at fault if you ask me.

</comment></comment></comment><comment><USER8> >Airlines fear some passengers will refuse to fly on the Max.

Well this sure solves that problem in an anti-customer way.

Your partner doesn't want want duck for dinner? Order it anyways and tell them it isn't duck. If you make up a new word for duck, it's not lying and you're a good partner. /s

<comment><USER11> In Amsterdam there is a steakhouse that has been serving horse steaks as just 'steaks' for over 40 years.

People thought they were great and prefered them over beef, untill they found out it was horse.

Its all in the mind!

(Steak doesn't kill you though, airplanes do)

Edit: resto is called Piet de Leeuw

<comment><USER12> To be fair you can make a steak from horse meat, or any beefy animal for that matter.

</comment></comment></comment><comment><USER13> On the one hand, I personally feel that trying to avoid the Maxes specifically, once they are allowed back in service, would be an excess of caution that overemphasizes the legacy of one issue. On the other hand, could they have found a better way of sending the message that they think the problem is passenger perceptions, rather than in systems engineering and adequate pilot training?

<comment><USER14> It's not an excess of caution, and it isn't one issue. This whole debacle has shown that safety is not a priority at Boeing at all, with misstep after misstep; we've only scratched the surface of the cancer running deep within this company.

Remember, when the first plane crashed, they tried to blame the pilots. Then the second plane crashed, and they continued to insist it was safe. All the other nations' air safety agencies had to ground the plane before the FAA would. Then after that they continued to refuse to admit fault, they wanted to make a small, lame patch to the MCAS software instead of making it triply redundant, they didn't want to retrain pilots, I could go on and on. In short, they didn't really want to fix the issue completely, they just wanted to gloss over it and get the planes back in the air as quickly and cheaply as they could, which proves my original point: safety is not a priority with Boeing today. And they certainly haven't fixed their internal management or engineering to make sure this kind of thing doesn't happen again.

So why would you trust this company at all at this point?

<comment><USER15> I personally would not worry if my next flight is Boeing 737 max, the probability it will crash still very low, even if it do crash, I will be dead anyway it won't matter.

Doesn't mean I trust Boeing, I trust market force, I trust that other people will keep the uproar to keep airline in check.

<comment><USER16> > I trust that other people will keep the uproar to keep airline in check.

I agree with you, and expect that engineers/regulators to do their jobs. But I think this is a form of the bystander effect. [1] I'm not sure what we can do proactively except be cognizant of what we choose to ride in.

[1] [https://en.wikipedia.org/wiki/Bystander_effect](https://en.wikipedia.org/wiki/Bystander_effect)

<comment><USER14> The engineers and regulators have already proven they can't be trusted to do their jobs. Thankfully, the EASA has stepped up to do some proper regulation now that they've seen that they can't trust the FAA any more, and are keeping the plane grounded.

</comment></comment></comment></comment></comment><comment><USER17> I wonder what happens if 737 max becomes the first Ryanair plane to crash(even with no fault on Boeing's part)?

Would that bring down the trust for low-cost airlines too?

Maybe cheap tickets can get associated with low security?

"Yeah, don't buy that ticket they are probably using the crashy plane"

</comment><comment><USER18> 50/50

The name is not new but still the motive is unclear...

[https://www.flightglobal.com/news/articles/new-name-for- ryan...](https://www.flightglobal.com/news/articles/new-name-for- ryanair-737-max-is-not-actually-new-459666/)

<comment><USER19> Did you mean "the motive is clear", but got autocowrekted?

</comment></comment><comment><USER20> Boeing is not going to disappoint you when it comes to shady stuff. I think now I am going to avoid any 737 models from now on-wards.

<comment><USER14> Unfortunately, it's pretty hard to avoid the 737 for a lot of routes because it's so ubiquitous. Also, most of them were engineered and built before the current management, and have proven themselves with a good safety record so far, so they really should be OK. It's the new MAX model you really want to avoid, and it's probably a good idea to avoid the 787 as well.

<comment> 52-6F-62 Why the 787? It's been my favourite ride so far—comfort-wise.

<comment><USER14> 1\. It was created during the current management era. 2\. It was built in South Carolina at a new plant that had huge production issues, such as leaving metal shavings inside the airplanes where they would get into wiring harnesses.

<comment><USER21> Let's not forget the exploding batteries which were fixed by putting a metal container around them and a hole in the hull, so when they inevitably explode again, they'll at least vent outside.

It'd be okay with that shit on a bus. Not on a plane in the middle over the Pacific. How the 787 got it's ETOPS rating is beyond me.

(actually it isn't. We have all witnessed how corrupt the FAA is by outsourcing it's own job to Boeing itself - the equivalent of a professor outsourcing paper grading to students themselves).

<comment><USER22> And this software bug that requires the plane to be turned off and on again every 248 days to prevent an integer overflow and loss of power.

[https://www.theguardian.com/business/2015/may/01/us- aviation...](https://www.theguardian.com/business/2015/may/01/us-aviation- authority-boeing-787-dreamliner-bug-could-cause-loss-of-control)

[https://s3.amazonaws.com/public- inspection.federalregister.g...](https://s3.amazonaws.com/public- inspection.federalregister.gov/2015-10066.pdf)

</comment></comment></comment></comment></comment></comment><comment><USER23> Just yesterday I wondered when Boeing would do this and what the name would be.

The new name is about as humdrum and forgettable as you can get, which is exactly what Boeing hopes will become of the memory of all that has transpired with the MAX.

Fortunately the plane has some distinctive and memorable exterior features: A sawtoothed trailing edge on the engine nacelles and bidirectional winglets.

<comment><USER24> The split scimitar winglets on 700s and 800s can be hard to tell apart from the MAX8's AT winglets (the AT is more raked). You're right about the giant sawtoothed LEAP engines being distinctive. Also MAX8s have a sharp rear tailcone that protrudes past the base of the tail.

</comment></comment><comment><USER25> So now we have to keep track of a whole constellation of aliases. Great.

<comment><USER26> I've found an easier way, chose an airline that uses Airbus instead of Boing. I only have to keep track of two identifiers and filtering becomes very easy.

<comment><USER27> which airbus planes do you avoid?

<comment><USER28> I suspect the filtering is Airbus vs Boeing

</comment></comment></comment></comment><comment><USER29> Was "NG" originally printed on the previous gen aircraft, but later shifted to just 737-800/737-8? I always thought the MAX name was kind of like "New" - <USER2> something that would disappear.

<comment><USER30> The 'classic' ones were -300/-400/-500, and the NG were -600/-700/-800/-900. The MAX 8 is a replacement for the -800, and it has been called a 737-8 for a while – their FAA type certificates are 737-7, -8, and -9.

</comment></comment><comment><USER31> question- if you are a pilot, and you fly 737s do you think that you are now unaware of the differences? Do you think that given that awareness you may be apt to want to learn about those differences, even if not for curiosities sake, but so that you don't wind up fighting a plane and losing? Now dont mistake this as sympathy or support for the management of Boeing. I think they need to pay fines/spend time in jail/have their ability to lead a corporation revoked. This was gross mismanagement, and they deserve civil and criminal charges for it.

However, it sounds to me like _if_ you know about how the new 737 behaves, and you are aware of/trained on the procedure to fix an incident similar to what happened in the 2 crashes then you are likely to recover without any issue. On the flipside, I used to love to fly SWA because they had only 737s and all their planes were more or less the same and maintenance would be standard across all planes and therefore something that is repeatable and more likely to be mastered by the technicians. Parts would be easily available for their fleet. The pilots know the flight envelope. Sounds to me like one of southwest's biggest selling points is about to go out the window for me, even if this is a laymans perception that is completely wrong. It still seems like they have fragmented their fleet.

<comment><USER32> This.

I'm surprised by the number of HN readers going bananas about never flying in this plane again. Every pilot on the planet knows about this issue now, and commercial pilots are already used to broad differences in airplane handling characteristics and how to avoid a stall in different configurations, as long as they're not forced to fight against 120 lbs of pitch trim.

If the _only_ thing Boeing does is add an "MCAS off" button, pilots will be able to get the thing back on the ground in an emergency, even without new type rating, and even if pitch is a little bit squirley for ten minutes.

This is the same mistake we accuse the public of making when they freak out over terrorism and demand more TSA theater. We have steel cockpit doors and a new cultural understanding of what a hijacker can do. This is what prevents a 9/11 style hijacking from happening again, not the TSA.

</comment></comment><comment><USER33> Will this prompt some fliers to avoid 737-anything or Boeing-anything?

<comment><USER34> Definitely not. Time and time again, it's been proven people only care about the cheapest ticket price. You can nickel and dime them, treat them like cattle, and physically beat your customers and they will continue to use your airline and airplanes.

<comment><USER35> I wonder what the true market equilibrium between ticket price and not dying would be if the FAA let people find their own balance. If a life is valued at $2,000,000 then people would accept a one in a million chance of dying for $2 off their ticket.

<comment><USER36> People would make irrational choices, certainly in deciding whether to drive or fly. I don't think the market would come up with an equilibrium price for a micromort: at best you could find an equilibrium price for taking some risk of dying in a particular way such as a high-profile airliner crash.

Also, it's hard for even an expert to estimate the current chance of a 737 MAX flight crashing: historically it's around 1 in 5,000, but if they were cleared to fly tomorrow it's hard to say if the rate would be 1 in 10,000 or 1 in 1 million.

</comment></comment></comment></comment><comment><USER37> Maybe Boeing and Ryanair should change their names as well ...

<comment><USER38> Ryanair never flew 737 MAX commercially yet.

</comment></comment><comment><USER39> Do passengers have a right to refuse to fly on the 737 "max"?

<comment><USER19> ...Yes?

Though I think what you may be actually intending to ask is is the airline bound to provide with a flight to your ticketed destination on another plane if they have to sub-in a MAX because of reasons.

That is a question with a far less straightforward answer; the last time I read terms they reserved the right to swap in hardware as circumstances warrant. You'll want to take it up with the carrier. Which I recommend everyone does; as they only pay attention when sizable customer groups start making a fuss.

</comment></comment><comment><USER27> that feel when isitmax8.com is already taken

</comment><comment><USER40> What about naming it A-351 ?

</comment><comment><USER41> What a very Ryanair thing to do.

<comment><USER42> Can't blame Ryanair by themselves too much. Their whole company and business depends on the 737, and their foreseeable future on the Max. Not a pleasant situation to be in. Even Ryanair is not that big to handle the dumpster fire Boeing started.

I'm more irritated with IAG who is ordering a bunch of Maxes while they are still grounded and who knows when will fly again, and what the hell is wrong with them. Even giving up a part of their Airbus fleet maintenance to Boeing. Truth be told, the Max will probably fly again and it will be a very scrutinized aircraft so this is a wise business decision. Just don't mind me considering it joining the dark side.

</comment></comment><comment><USER43> A question: they still have to ground the "whatever re-branded 737 max" until the conclusion of the investigation, right ? This can't be a loophole to avoid the interdiction to fly, isn't it ?

<comment><USER44> Yes, MAX is a tradename, -8200 is like the model-number and FAA uses that. Still grounded.

</comment></comment><comment><USER45> Regardless of the name change they are still grounded. Given all the scrutiny, when they finally do fly again they will likely be one of safest planes in the sky.

<comment><USER46> On what basis? They're trying to fix a fundamental aerodynamic design failure with a software patch. The entire physical design if the airplane is flawed, and they arent rebuilding the entire fleet, just pushing another software patch.

<comment><USER47> A downside of there being so many threads on this fiasco is that many of the same points get made each time.

I'll post the usual counterpoint: this isn't a new. The F-16 for instance is also famously unstable, and cannot be flown without computer assistance.

[https://en.wikipedia.org/wiki/General_Dynamics_F-16_Fighting...](https://en.wikipedia.org/wiki/General_Dynamics_F-16_Fighting_Falcon#Negative_stability_and_fly- by-wire)

<comment><USER48> General Dynamics never claimed the F-16 was just a slightly modified Cessna in order to avoid having to retrain pilots and have it safety tested, however.

</comment></comment></comment></comment><comment><USER5> Well considering Ryanair's predilection for renaming random airports after a large city it's not really anywhere near, this seems like a logical step.

</comment><comment><USER49> This is not the first time an airline rebrands an airplane due fearmongering after an accident.

The Fokker-100 was rebranded as MK-28 in Brazil after an accident (trust reverse deployed after take-off). The news reported every incident with the plane afterward. I remember my parents avoiding flights with Fokker-100. The MK-28, on the other hand, had a very good safety record.

<comment><USER50> Is it appropriate to call this fearmongering when the issues are real (for the 737)?

<comment><USER49> Yes. I think it is appropriate to call this fearmongering.

The planes with the faulty software are grounded and won't be flying until they new software is proven to be safe. The re-certification process will likely be stricter than usually is. Thus, any fear about flying in those planes are unjustified.

<comment><USER50> > Thus, any fear about flying in those planes are unjustified

No they aren't. Not until the new software is indeed proven to be safe, and a review of the Max program completed to ensure corners weren't cut elsewhere as well.

It will be fearmongering if all the above is done, and media are still trying to push fear. This is not the case today, so it's not fearmongering.

<comment><USER49> I see your point. I think I might have failed to express my point of view clearly.

I was talking about reason Boeing chose to rebrand the 787-MAX.

</comment></comment></comment></comment></comment><comment><USER51> Does that help them to get around regulatory scrutiny (ie get the planes on the air faster)? Or is it just to fool consumers?

</comment><comment><USER52> This should somehow be illegal. Any time where a product is under scrutiny, it should be illegal to change the name the public has been given previously.

This is just disgusting, corporate greed. People don't trust Boeing and this isn't going to help.

</comment><comment><USER53> Reminder at how simple it can be for an organization to rebrand itself, even with social media I feel many individuals will still be unaware of this change that will be occurring.

</comment><comment><USER54> I knew this was the next step for these companies. They don't want to lose millions and the easiest thing to do is change the name. At some point, the public will forget.

</comment><comment><USER55> Well if I were concerned about safety I wouldn't fly Ryanair in the first place, I don't think the repaint was necessary

<comment><USER56> You wouldn't fly on an airline that has had zero fatalities in its 34 year operating history? Ryanair definitely has had issues (particularly in the early 2000s with pilot fatigue) but there's a lack of basis to suggest they're unsafe.

I won't fly on Ryanair myself, but it has nothing to do with their safety record (which is fair to good), it has to do with the way they treat customers and employees.

</comment></comment><comment><USER57> Just curious: are there any calls for the resignation of the entire management board?

</comment><comment><USER58> Will they change the scalloped trailing edge of the engine nacelle?</comment>


China, India, and the Socioeconomic Determinants of Their Competitiveness - <AUTHOR> http://www.hindawi.com/journals/econ/2010/860425.html

<comment><USER2> Upvoted solely because one of the authors is named "Axel Rose."</comment>


App Icon Wars - <AUTHOR> http://appiconwars.com/

<comment><AUTHOR> Try scrolling to see a really nice CSS3 transition.

<comment><USER2> I don't see it on chrome 21. Either it's too subtle, or it's not working, or I'm too dumb.

<comment><USER3> It's not subtle, but it might be Safari-only.

<comment><USER4> Works for me in Chrome on OS X.

</comment></comment></comment></comment><comment><USER5> HN really jumped the shark with this one.

</comment><comment><USER6> I thought this was going to be a site that compared app icons against each other...

</comment><comment><USER7> These would be more viable as icons without the backgrounds.

</comment><comment><USER8> These are horrible icons.

scaled down to the actual size they would be displayed at, they lose all clarity and shape. An icon needs to have a very simple and clear basic shape. Tiny details can be added on top of that, like texture on a paper, but must only be a compliment to the main shape.

<comment><USER9> If the purpose of the icon was to actually use them for apps, I would agree. However, I don't think the designer intended them as anything other than a tribute to Star Wars in app-icon format. On that account, they're a pretty awesome tribute and pulled off really well within such a constraint.

<comment><USER8> > pulled off really well within such a constraint.

That's the thing. They _didn't_ follow the app icon constraint. The only constraint are that they are square with rounded corners.

I get that it's an art form in it's own, but calling them "icons" is just stupid.</comment></comment></comment>


MySpace To Hire MTV Exec As MySpace Music CEO - <AUTHOR> http://www.techcrunch.com/2008/10/29/myspace-to-hire-mtv-exec-as-myspace-music-ceo/

<comment><USER2> They do this, of course, because we all know that MTV is "Musical Television" and MTV actually plays music. ;-) </sarcasm>

Nah, I'm sure they hired this guy cause he actually knows something about what he's doing. More than likely he's done something in the past with the big record companies.

</comment><comment><USER3> Ah, but AOL did it first with Bob Pittman, and they weren't even selling music.</comment>


GoDaddy no longer on SOPA supporter list. - <AUTHOR> http://www.godaddy.com/newscenter/release-view.aspx?news_item_id=380&isc=buyxxxb <comment><USER2> I've seen Bob Parsons lording over an elephant's carcass as if his contrived conquest of nature by a man with superior force and unlimited money was an incredible accomplishment. I don't care if elephants are a pest in Zimbabwe, his glee over killing such a majestic animal seems out of place. If he wants to kill something, he's welcome to come to some wildlife areas here in Maryland and cull the deer population when we have annual bow hunting season.

I've passively suffered through Godaddy's blatantly sexist use of women to sell the company's services. There is _no other company_ that I do business with that runs this kind of advertising. Imagine the kind of hellstorm one of the Y Combinator sites would endure if they decided that a Godaddy-ish marketing plan was right for them as well.

I've fought my way through the Godaddy site each time I've wanted to register or renew a domain, once even confused to the point where I've had to call their support line to make my way to something that should be obvious to find. I'm tired of breathless upsells, scary threats about needing things I don't need, and a ten-step process that attempts to push their lame-ass additional products.

For me, Godaddy's SOPA support was just the last straw, the one that finally made me get up off my ass and do something about paying money to a company whose morals and practices I despise. Think about those other issues before you give Godaddy a pass for its SOPA reposition.

<comment><USER3> Politics and style aside, I don't get all the vitriol at their checkout process. Log in, click "ok" (or "next" or whatever it is) a couple times and you have a domain. It's not _that_ bad. Sure, they try to upsell you, but the default click is always "no".

I have had a much, much worse experience with vista print, for example, who signed me up for a subscription to Essence magazine (yes, a paper magazine aimed at black women - for which I am very much not the target), despite the fact that I opted out (yes, I had to) of that silliness.

Think for a moment about how slimy the business practice is there. They aren't just upselling crap, but purposely distorting circulation numbers to rip off advertisers of their magazine partners.

<comment><USER4> Yeah, but vistaprint is a _business card company_! What could you possibly expect out of their domain registration services?

</comment></comment></comment><comment><USER5> I know why GoDaddy is doing this but looking at that list is pissing me off because many of the entries are really the same company. For example, on the list is:

ABC, ESPN, Disney Publishing Worldwide, and Marvel Entertainment, LLC.

They are all owned by Disney, so really that is just one damn company. Other companies are also on there more than once. I bet this list would be a bit shorter if you get rid of the shell games being played here.

<comment><USER6> Good observation. It seems that Lamar Smith has been doing every dirty trick he can to beef up that list, like including the names of companies who had only agreed to a generic statement about fighting the sale of counterfeit goods [1][2].

[1] [http://www.techdirt.com/articles/20111222/16384317175/gibson...](http://www.techdirt.com/articles/20111222/16384317175/gibson- guitar-others-sopa-supporters-list-say-they-never-supported-bill.shtml)

[2] [http://www.techdirt.com/articles/20111223/09051617180/law- fi...](http://www.techdirt.com/articles/20111223/09051617180/law-firms- removing-their-name-sopa-supporters-list-sopa-support-crumbling.shtml)

</comment></comment><comment><USER7> Let's see a public statement by the CEO that not only says "we've been removed from a list" but also "we will never support SOPA or any other far-reaching legislation designed to undermine the Internet."

<comment><USER8> Honestly, until they shell out for lobbyists to help push through a bill I _like_ , I don't consider them redeemed.

<comment><USER9> Not even just a bill you _like_ , a bill that doesn't actively hurt many of their present customers and the community as a whole.

GoDaddy's not just the asshole at the party, GoDaddy's the one who's been calling the cops.

<comment><USER10> ...from inside the party.

</comment></comment></comment></comment><comment><USER11> I don't think godaddy really understands that, at this point, none of this matters.

They _supported_ this bill. Don't they think that that gives us some insight into their corporate culture?

Let's get this straight: you supported a bill which would destroy the internet; something that the tech community is vehemently against and, only when we absolutely dragged you kicking and screaming did you eventually retract your support?

No thanks.

This is like holding a gun to somebody's head and telling them to say that they like your cooking. It's nonsense.

<comment><USER12> Are you saying that all those times those people did not really like my cooking?

</comment></comment><comment><USER13> Interesting that they've chosen to publish the list of current supporters directly in their news release. It's almost as if they're saying directly to the internet, "Leave us alone. Here are the people you should be angry at now."

Also some of those companies have already withdrawn support like the Graphic Artists Guild <https://www.graphicartistsguild.org/sopa/>

<comment><USER10> They're selfish enough to be fine with merely muddying the waters.

</comment></comment><comment><USER14> GoDaddy is no longer on the _list_ of SOPA supporters, but does that mean it no longer supports SOPA??

</comment><comment><USER15> I find it interesting that there is no way for GoDaddy to get out of this one. They withdrew their support and... now what? I didn't think the mob was going to let them off the hook anyways, and it looks like they won't.

Not that I mind, I should have moved my domains a long time ago for dozens of different reasons besides the SOPA charade and won't use them again regardless of their stance on any legislation.

<comment><USER16> Here's my view of it:

        Supporting SOPA: -10 reputation
        Ceasing support of SOPA (but not opposing it): +5 reputation
        Helping write SOPA: -100 reputation
        Having a special exemption from SOPA: -100 reputation

        Total reputation: -205.

Once they get back "in the black" (by, say, lobbying against SOPA), I would _maybe_ consider using them again, if they had a significant product value-add over whoever I'm using at the time.

<comment><USER17> Flippant disregard for customers and their intelligence: -100 reputation

</comment></comment></comment><comment><USER18> From an outside perspective to this (I don't own any GoDaddy domains) I'm finding the corporate response from them quite amusing.

Why don't they just get someone senior to go on camera and say "look we originally supported this motion but after reviewing the bill and a massive outcry from our customers we feel we should put this notice out to describe our position on the matter...." and then go on from there.

These drip-drop press releases are just like a child trying to fit in with the cool kids after some previous altercation

</comment><comment><USER19> Great. But for many people it's too late. What would help GoDaddy at this point is making large, public donations in opposition of SOPA and anything like it. Even then, it's time for their business to make some big changes (see: <http://kottke.org/11/12/the-internets-go-daddy-issues>).

</comment><comment><USER20> Damage has already been done. With the story of Weebly also making a point that they are not with the proliferation of free speech and Internet. Instead they are more about control.

</comment><comment><USER21> The can still support SOPA, even if they aren't on the list. It would be nice to see a definitive "I was wrong about SOPA." statement from Bob Parsons and a personal commitment from the company stating the reversal of their position.

This move only seems to make it look like they don't support SOPA on the surface, with no underlying commitment to oppose it or even stay neutral. It also serves to throw every other company they've stood with to support SOPA by throwing them all under the bus.

</comment><comment><USER22> And my name is no longer on the GoDaddy supporter list.

<comment><USER23> Good to hear. What's the back story here?

<comment><USER22> Moved most of my domains when they had their elephant thing, but had a few left over that I wasn't sure I'd be renewing. As of today, I've moved everything I plan to retain going forward and have set any that I intend to abandon to not auto-renew.

All in, they've lost about 20 domains from me. Not a lot compared to some organizations, but maybe if they'd been more focused on the customers operating in the industry they serve rather than doing everything else they seem to do to get their name out there they'd have realized why SOPA wasn't in their best interest to support.

To add to the "GoDaddy acting shady" list, in their domain manager they changed the link which should bring you to accept or decline the transfer form to a link that simply refreshes the page. To accept or decline the transfer you now have to find the "Pending Transfers" item in a drop-down menu. Couldn't be happier to be leaving these guys.

</comment></comment></comment><comment><USER24> This is too little too late. Just because they are "not on a list" doesn't mean they don't support it. They have already done too much to push this through.

</comment><comment><USER25> Well GoDaddy that doesn't change the fact that I've had my domains unlocked for 4 days now and all my authorization codes still come back as invalid. Is that normal? I've been transferring domains for 10 years, now all of a sudden I don't know what im doing.

</comment><comment><USER26> I would love to see more companies on the list getting targeted. The reverse- robo call idea is a nice one, but with good organizing a lot more could get achieved.

Does anyone know if it would be illegal to target employees individually instead of "the corporation"? For example scrape the web for email address and phone numbers for these people employed at the SOPA support companies and inform them about the fatal policies their organization is supporting. The issue is still to web-centric and needs to reach beyond that level. Most mainstream news platforms, e.g. drudge, huffpo have still very little issue related news.

</comment><comment><USER27> Godaddy's internal copyright policy is just as bad as SOPA, no court, only good faith, and remove before notification.

excerpt below and full text here <http://goo.gl/cytjm>

B. Copyright Claims

1\. If the Complaining Party would like to submit a copyright claim for material on which you hold a bona fide copyright, Go Daddy requests that the Complaining Party substantiate such claim by providing Go Daddy with the following information via email to email@example.com. The words "Copyright Claim" should appear in the subject line. A copyright claim can also be submitted by mail to: Copyright Agent, Go Daddy, 14455 N. Hayden Road, Suite 219, Scottsdale, AZ 85260

.......

A statement that the Complaining Party has a good faith belief that use of the material in the manner complained of is not authorized by the copyright owner, its agent, or the law. A statement that the information in the notification is accurate, and under penalty of perjury, that the Complaining Party is the owner, or is authorized to act on behalf of the owner, of an exclusive right that is allegedly infringed.

2\. For Copyright Claims, upon receipt of appropriate notification from the Complaining Party, pursuant to Section 1 of Copyright Claims above, Go Daddy will remove or disable access to the material that is claimed to be infringing.

3\. If the Complaining Party provides Go Daddy with appropriate notification, pursuant to Section 1 of Copyright Claims above, including information reasonably sufficient to permit Go Daddy to locate and remove or disable the material in question, or includes information concerning repeat infringement, then Go Daddy will forward the Complaining Party's written notification to such alleged Infringer and shall take reasonable steps promptly to notify the Infringer that it has removed or disabled access to the material.

</comment><comment><USER28> Too little, too late.

I didn't care about Bob shooting elephants. Didn't care about using semi- attractive B-list celebutants to sell domains.

But this SOPA thing was, is, a massive dealbreaker. This camel's back wasn't hurting, but this was like dropping a railcar on it. We've got over 100 domains and they're all getting moved 12/29.

</comment><comment><USER29> Not important, but there is a mildly amusing error on judiciary.house.gov: If you go here, you see the list without GoDaddy: [http://judiciary.house.gov/issues/Rogue%20Websites/List%20of...](http://judiciary.house.gov/issues/Rogue%20Websites/List%20of%20SOPA%20Supporters.pdf) If you go to the original misspelled URL that some people are still passing around, you see the list with GoDaddy on it: [http://judiciary.house.gov/issues/Rouge%20Websites/List%20of...](http://judiciary.house.gov/issues/Rouge%20Websites/List%20of%20SOPA%20Supporters.pdf)

</comment><comment><USER30> What's stopping us from boycotting the rest of the list?

<comment><USER31> Time to string up the music labels, right?

<comment><USER20> I have just asked a question related to yours: <http://news.ycombinator.com/item?id=3396823>

</comment></comment></comment><comment><USER32> In all fairness, this press release should be read in context with this other one:

[http://www.godaddy.com/newscenter/release- view.aspx?news_ite...](http://www.godaddy.com/newscenter/release- view.aspx?news_item_id=378&isc=buyxxxb)

I'm not defending go daddy (my comment elsewhere in this thread still stands), but this release on its own only shows a small part of their current stance.

</comment><comment><USER33> Godaddy always had a reputation for being a shitty company, I mean, just look at their website! Who would want to do business with that?

</comment><comment><USER34> I think this is a moral victory for all of us who took a stance and started the domain transfer from godaddy to other providers.

I personally shifted to Gandi.net, simply for the want of moving to a Europe based provider. I think US based providers are eventually going to be forced in if the Act goes through anyway.

</comment><comment><USER35> How will we know if any company won't flip flop again, or support something like this in the future?

</comment><comment><USER16> Does anyone have an early version of the official PDF? I want to diff the two, and see how things have changed. A lot of people have pulled support as it's become known that they're on the list.

</comment><comment><USER36> What's loreal and revlon got to do with SOPA?

<comment><USER37> most likely fight knockoffs

</comment></comment><comment><USER38> that ship has sailed go daddy. You can have my internet privacy when you take it from my cold dead hands.

</comment><comment><USER39> I guess that's a step...

</comment><comment><USER40> GoDaddy still doesn't oppose SOPA that they helped creating.

Just a PR stunt of a butthurt company.

Fuck them. Keep moving your domains, people.

<comment><USER41> Exactly. From what I understand, they were key in drafting the legislation and now no distance from it matters.

Action from the company in helping draft an alternative, or bring a discussion to more people would be a huge step forward for them, not more PR or web pages listing people they used to be publicly aligned with (and likely still aligned with in private).

<comment><AUTHOR> OK, you've convinced me to look into moving my dad's host away from godaddy (don't own any godaddy domains myself).</comment></comment></comment>


Ask HN: What CMS in 2018 for web apps? - <AUTHOR> What CMS in 2018 for web apps? <comment> shreyas-satish I've been using Airtable[0] as a headless CMS to good effect. I'm enjoying the flexibility of creating and modifying 'tables' using a spreadsheet interface, with the nice bonus of using relationships between tables as well.

The free tier should be more than good enough for simple sites. There's no real concern with lock-in either, since you can just export to JSON/CSV and move on.

You can do forms too. If you're using something like Netlify[1], you can write a function that receives a form request and adds that as a record to Airtable.

And if you're using Jekyll for your site, you just need a few lines of Ruby[1] that lets you pull in content from Airtable.

In the longer run, I'd prefer to use something that uses a similar spreadsheet-like interface, but something that's open source so I can self- host it. But for now, this works.

Note: No affiliation with Airtable or Netlify.

[0] [https://airtable.com/](https://airtable.com/)

[1] [https://www.netlify.com/](https://www.netlify.com/)

[2] [https://community.airtable.com/t/how-to-easily-use- airtable-...](https://community.airtable.com/t/how-to-easily-use-airtable- data-in-jekyll/3925)

</comment><comment><USER2> If PHP, then ProcessWire [1].

ProcessWire is a Content Management System, not a CMS which includes a design or layout system like Wordpress.

So as a developer you are free to develop the front-end the way you like. Which is easy with the provided API.

I use it for API's, small and huge websites. Love it.

[1] [https://processwire.com/](https://processwire.com/)

<comment><USER3> I second this.

</comment></comment><comment><USER4> Taking the question literally, I've been interested in building web apps on WordPress for a couple years now. I've spoken about it a couple times at WordCamps. [https://wordpress.tv/2017/06/05/corey-maass-rapid-web-app- de...](https://wordpress.tv/2017/06/05/corey-maass-rapid-web-app-development- on-wordpress/) It's an amazing platform for rapid web app development, as it takes care of common patterns out of the box like user management, routing and more. Do you have specific goals or questions?

</comment><comment><USER5> I wonder how many of you actually maintain and support enterprise CMS systems, like Sitecore or Sitefinity? Looks like the majority of the people here are homegrown hackers/devs, that either don't work in a company having a heavy CMS, or tend to prefer building everything themselves. Well, everything except the content management itself.

The tendency is to have very light front-end, while consuming the content from some services. At the same time, content clouds and headless CMSes haven't really taken off yet.

</comment><comment><USER6> This depends on the use-case. We have recently moved away (slightly) from using MODX as our main CMS, because the clients we have picked up need less content management but more bespoke functionality and better performance so have used things like Laravel +Voyager.

They are all managing content, but in different ways

</comment><comment><USER7> Depends what you mean by web apps or how you're going to code them.

If you're using something like React or Vue, then I'm guessing any CMS used as a headless API would probably be ideal, since the system would only be used for creating content/the admin area.

</comment><comment><USER8> For putting web apps in CMS?

Why risk your app on dependency of some CMS?

If you are looking for market in extending some popular CMS, then you probably should go for some more popular CMS, which currently is WordPress. Unless you are in an industry which has some nice CMS usage like Drupal or Joomla.

</comment><comment><USER9> What do you need from a CMS?

<comment><AUTHOR> Lightweight, easy to maintain and perhaps customize. I guess I'm thinking of a better alternative to Wordpress really

</comment></comment><comment><USER10> Wordpress?</comment>


Google: Security questions aren't secure - <AUTHOR> http://research.google.com/pubs/pub43783.html

<comment><USER2> I detest security questions. One time, a bank had a set of 8 security questions that I was supposed to choose from to be my security question. The problem was that none of them applied to me in a singular way.

* What street did I grow up on? Several of them, thank you for reminding me of my transient childhood. * Who was your childhood hero? I didn't have one. It never occurred to me to have one. * Some random genealogy question? Thanks for reminding me of my lack of familial knowledge * What was your first vehicle? I have no idea, because we went through several and I'm not a "car guy". * Name of your childhood best friend? That depends on where I was living and what portion of my childhood that you are talking about. * Favorite song? Don't have one. * Favorite food? I'm fat. I have a lot of them. * Democrat or Republican? Are you doing data mining on my answers?

</comment><comment><AUTHOR> Totally agree. Also, if someone asked me "What street did you grow up on?" or "What was your first pet's name?" I would probably just answer it. Neither of those are terribly threatening on the face of it.</comment>