I love that this is open source, thank you. I'm not a fan of TypeScript on Node for this solution space. For a payment gateway, I'd want a program that can't modify itself from external sources. Programs in this runtime can rewrite themselves while running, and the Dockerfile doesn't lock it down. So as it stands, nothing at the runtime level prevents prototype pollution. And a config defect is the kind of bug that keeps on giving.
This isn’t really a new problem. Back in 1995, I was the Sr. Internet Mail Administrator at AOL. We were doing everything we could to fight the spammers.
We found that we would work on a new technique over a period of weeks or months, and then they would find a way to work around our technique in a single weekend.
Rinse and repeat.
The only thing that has changed is that the market for scammers has moved, and they’ve gotten a lot better and faster at adapting to your protection techniques.
Language is what people use to communicate, not what's written in the books. It's fluid, and adapts to requirements as the requirements change.
Would it be better if they invented a completely new word, with no clue as to what it means, rather than adapt an existing language structure to their purpose, which everyone understands immediately (even if they get grumpy at it)?
There will always be projects that share the same name. You can do quick search on Github: https://github.com/search?q=kairos&type=repositories. However it does not change the significance of what each project is building and the problem they sought to solve.
In general, the community tries to avoid/mitigate project naming confusion. It is usually a gentleman's agreement, but sometimes may get nasty with trademarks/copyrights (example: Arduino.)
If you are not associated with a core decision team, it is considered nice to avoid confusing the public. In my opinion, gleaning donations is just theft. =3
17 comments:
I love that this is open source, thank you. I'm not a fan of TypeScript on Node for this solution space. For a payment gateway, I'd want a program that can't modify itself from external sources. Programs in this runtime can rewrite themselves while running, and the Dockerfile doesn't lock it down. So as it stands, nothing at the runtime level prevents prototype pollution. And a config defect is the kind of bug that keeps on giving.
This isn’t really a new problem. Back in 1995, I was the Sr. Internet Mail Administrator at AOL. We were doing everything we could to fight the spammers.
We found that we would work on a new technique over a period of weeks or months, and then they would find a way to work around our technique in a single weekend.
Rinse and repeat.
The only thing that has changed is that the market for scammers has moved, and they’ve gotten a lot better and faster at adapting to your protection techniques.
Not something I need but super cool that this is both open source and shows the realtime flow.
this is a new one
https://news.ycombinator.com/item?id=49610571
Referring to "decisioning", which is unfortunately a real term in this space.
Don't get me started on people who use "decision on" to mean "enforce a decision" (i.e. by blocking an action)
Is anybody else annoyed by made-up words like "decisioning" and "proofing"?
You can't slap "ing" on a noun. It's for verbs. Stop nouning.
Language is what people use to communicate, not what's written in the books. It's fluid, and adapts to requirements as the requirements change.
Would it be better if they invented a completely new word, with no clue as to what it means, rather than adapt an existing language structure to their purpose, which everyone understands immediately (even if they get grumpy at it)?
yes, but don't blame OP for it. this is effectively a term of art in their field.
I blame OP for perpetuating it. And for extending it (to HN) outside their field.
There's a meta linux distribution with that name already :(
https://kairos.io/
And an identity verification company: https://kairos.com/
And an AI safety organization: https://kairos-project.org/
And a DARPA program: https://www.darpa.mil/research/programs/knowledge-directed-a...
Pick any ancient greek word and you'll probably find at least a handful of collisions.
There will always be projects that share the same name. You can do quick search on Github: https://github.com/search?q=kairos&type=repositories. However it does not change the significance of what each project is building and the problem they sought to solve.
and...?
In general, the community tries to avoid/mitigate project naming confusion. It is usually a gentleman's agreement, but sometimes may get nasty with trademarks/copyrights (example: Arduino.)
If you are not associated with a core decision team, it is considered nice to avoid confusing the public. In my opinion, gleaning donations is just theft. =3
"The community" of every single person that works on software and names things? For which you can speak?
Oh that community! Yeah we banned Joel_Mckay for speaking for us
"we"?