I just looked at my AWS account and there seems to be a way to set budget, attach alerts to it and attach actions to alerts. For example there is an action to stop EC2 instances. Not sure if other AWS services have something similar, but at least you can kill your instances if something weird happens.

Actions weren't there last time I checked (few years ago).

Thank you, I'll check it out

Malice or selling out is not even required. Malware groups are perfectly capable of getting access to maintainer credentials themselves if needed.

Yes, I agree.

Well, do you want bad security practices changed because of a prank that hit millions of machines or because of a cryptolocker that did the same?

We should encourage old-style prank hacking.

I'm not sure what this prank showed beyond what all the previous malicious NPM packages already showed, other than that developers of free software are unstable and can sometimes ruin your day for lolz.

Even if you accept the idea of vandalism being used for a positive purpose, a better form of protest would have been to make the package just print a message saying "This software has been abandoned by its author. Please pin your dependencies to known good versions." and then exit.

That would still have been annoying to the people having to do that unnecessary version pinning work, but would at least have preserved some shred of sympathy for the maintainer.

I meant mostly in general.

For this particular case obviously previous packages didn't show it clearly enough. And yes, if you give thousands of 3rd party devs (or anybody snatching their credentials) direct access to your build machines or production systems, you should absolutely expect some of them to be unstable in all kinds of ways.

Insider problem is hard enough to guard against when you know the people involved.

That justifies using something like rollup or webpack to bundle all your dependencies into one huge file to make a "static build" of sorts. Then you can at least do a cursory check for anything obviously bad in the changes, if tree-shaking works well enough.

It leaves vulnerabilities open until next release, but deals with direct attacks.

Like they say: "In the end, average temperature in the hospital is approaching room temperature."

For arbitrage to be entirely fair, if a company can easily hire from 2 places, workers should be able to move between those places just as easily. So subunits of the same country if fair game, but countries must not be, unless both countries have effectively open borders with each other.

Expect the most generic "feedback" they can get away with.

"I'm sorry, we don't think you are a cultural match for our company".

Oh, there’s no way any HR department would approve including the word “culture” in the interview feedback boilerplate! Not as bad as literally referencing a protected class, but still too many ways it could backfire

It would make sense that pre-existing heart issues would be worsened by vaccine that has heart complications. Similar to how covid itself is much more deadly with pre-existing comorbidities while being mostly harmless for healthy young people.

Imagine having preexisting heart conditions and getting COVID, which is known to have much higher rates of heart complications.

The site is not called "asylum" for nothing I suppose...

"Needless to say, most Western health authorities have not yet acknowledged that their entire approach to the pandemic has been a complete failure."

Don't hold your breath for that one...

I thought you were joking at first, but looks like you are not? What else would PE grades be based on if not on physical performance?

Well though I somewhat agree, a lot of kids do not have parents who care or know better and may be on poor diets that cause obesity. Also some kids just don’t have the genetics. The grades should be based on effort applied at whatever skill level those kids are at. How do you grade effort? I don’t know but expecting a kid who comes in 100lbs heavier then other kids and expect him to run the same pace as some hyperactive kid really isn’t fair.

> The grades should be based on effort applied at whatever skill level those kids are at.

Are you suggesting that PE should have different grading procedures than other subjects (which reward measured results, or at least in my school did)? Or are you even suggesting in general that all subjects should be graded like this (and for example someone really bad at math but "trying really hard" should actually be getting A's and B's)?

Other subjects generally have a well-defined “100% score” and time limit, and assume some basic range of ability (and people outside this ability range are treated differently). It’s not like math tests are usually graded on how fast you could complete the test.

Of course, you could establish a similar grading schemes for physical education, but that would essentially look like grading based on effort and participation.

You are mixing physical and mental checks. If I think really really hard about moving a 20lbs ball on 40m I doubt it will budge. If I repeatedly punch a sudoku puzzle it will not solve itself.

Actually, I'm not. We definitely had outcome-based (not effort-based) grading for both physical and mental disciplines in my school.

We had this too. It somewhat frustrated me to be able to understand the theory and apply it but not being "good" enough in the eyes of the PE teacher. Excellent grades in other subjects though, just didn't see the fun in running after a ball or the worth of investing time and effort at being faster or better at it. College change that. PE was stil mandatory in the cursus but was more oriented towards a healthy lifestyle. Benefits of physical activity, research on muscle development and training methods, what consists of a healthy diet, how to enjoy physical activities and include them in your schedule etc.

Oh and in primary school, teachers would go in the teachers lounge to smoke while they were given a break by us being in PE.

I didn't see the fun in many subjects either, and got appropriately poor grades that reflected my level of knowledge or skill.

For PE we had normatives we were supposed to meet -- so many pullups, etc (based on old soviet army normatives I think :)), and if you don't you got corresponding grade.

I would make sense to break PE course into two -- one about theory and one about skill and have two separate grades for them.

In many areas, physical education and health education are combined. It is possible for an understanding of health to compensate for physical performance. The metrics for evaluation of physical performance can also be considered. Understanding and demonstrating technique may be a better metric in an educational setting where the rate of physical development is varied (especially in the middle grades). It may also be a better metric overall. Consider a coach: their goal is to help others to achieve their best, that does not imply that they are the best.

Like the above replies, effort and participation. Also set open objectives. Want the kids to do a 5k ? Give them an "inclusive" deadline. That way, if you already are a future champion you can get do it during class in be done in 15 mins or you have the option to split it into a few walks during lunch and after class.

Lots of comments going around that seem to be jokes to other people, apparently. Is it normal for people to expect physical education classes to literally just be various physical activities with grades handed out directly related to each student’s absolute performance in each activity? To me that sounds patently ridiculous.