Great news would be Amazon white-listing compliant cables, I have a hard time imaging El Cheapo Cables Inc. being overly concerned about a bullet point in the amazon ToS.
Anecdotes are fun. My 2010 macbook pro lasted 4-years and needed 2 new power cords in that time, my thinkpad from the same time is still fine and hasn't needed anything.
Java is the defacto standard for enterprise applications. The vulnerabilities rarely affect how most Java is actually used, they almost exclusively effect the browser plugin and the security manager. They (or really sun) should have made the browser plugin opt in a decade ago.
With capital intensive industries there isn't a good way to encourage competition short of using eminent domain to seize the lines and selling usage back to companies. I recall that the US government tried paid telcos to install fibre but they didn't offer it once installed...
The problem with this analogy is that with startups if they fail you lose your investment entirely (and this is the majority outcome), that is almost never the case with major companies.
Most people never need to do math more sophisticated than multiplication nor write an essay on Shakespeare yet those are taught. Ultimately the goal shouldn't be to make everyone a developer, but software is ever present and many non-menial jobs require people to dabble a little, e.g. excel, sciences, etc. so understanding the basics can only enable people.
When the author pushed to npm he granted them a license, given its an open source license it is not a violation for npm to continue to distribute the code.
The trouble with this approach is over time you can lose track of whether this file is precisely the released version, a snapshot or was tweaked locally for some reason.
For business you probably want to start using a caching repository manager.
There is no 'moral' aspect here, the author chose to provide his code under an open source license through npm. Then threw a hissy fit when npm quite reasonably followed trademark law.
Great news would be Amazon white-listing compliant cables, I have a hard time imaging El Cheapo Cables Inc. being overly concerned about a bullet point in the amazon ToS.
Because North Koreans have such great open access to the internet?
Instead of script kiddies and organised crime trying to make a buck with their botnets.
Anecdotes are fun. My 2010 macbook pro lasted 4-years and needed 2 new power cords in that time, my thinkpad from the same time is still fine and hasn't needed anything.
Didn't Facebook use Cassandra?
Java is the defacto standard for enterprise applications. The vulnerabilities rarely affect how most Java is actually used, they almost exclusively effect the browser plugin and the security manager. They (or really sun) should have made the browser plugin opt in a decade ago.
Having tested j9 on a major application you'd also run into places where the code relied accidentally on implementation details of a JVM.
Didn't they simply use the harmony libraries as a base which were presumably Apache licenced?
There were/are some claims that Google/Apache harmony copied some code (though famously the judge learned to code and pointed out it was trivial)
With capital intensive industries there isn't a good way to encourage competition short of using eminent domain to seize the lines and selling usage back to companies. I recall that the US government tried paid telcos to install fibre but they didn't offer it once installed...
Did they? My recollection is both companies offered something significantly better than what was already on the market.
The problem with this analogy is that with startups if they fail you lose your investment entirely (and this is the majority outcome), that is almost never the case with major companies.
Usually you don't manage to sell the Eiffel tower this many times before people wisen up
They probably work for 10-cents an hour making license plates...
I thought this wasn't allowed and they had to choose Linux or OSX
Most people never need to do math more sophisticated than multiplication nor write an essay on Shakespeare yet those are taught. Ultimately the goal shouldn't be to make everyone a developer, but software is ever present and many non-menial jobs require people to dabble a little, e.g. excel, sciences, etc. so understanding the basics can only enable people.
They're running the systems that saw larger orders/sales and actually crashed the system.
I've always thought this interconnected pile of stuff, linking across a bunch of domains was lazy, dangerous, and likely to be very brittle.
That isn't what this is about at all
I'd say the person who needs to learn a lesson is the author, not Node.
Lets be honest, server side scripting was already capable of tracking your every move.
When the author pushed to npm he granted them a license, given its an open source license it is not a violation for npm to continue to distribute the code.
The AC is too busy to respond, he's currently fixing the 9999999 security flaws in his hand-rolled SSL library.
The trouble with this approach is over time you can lose track of whether this file is precisely the released version, a snapshot or was tweaked locally for some reason.
For business you probably want to start using a caching repository manager.
Its also worked for Apache Maven for a decade, though central is treated as immutable short of content illegally uploaded.
There is no 'moral' aspect here, the author chose to provide his code under an open source license through npm. Then threw a hissy fit when npm quite reasonably followed trademark law.