Hacker Newsnew | past | comments | ask | show | jobs | submit | merrvk's commentslogin

People need visas and that’s all they care about

Why are government organisations which handle sensitive information using Wordpress?

There's not anything obviously wrong with using WordPress for publishing documents like this - they are meant to be public after all.

The problem was essentially that, through a misconfiguration, they published it early.


"On the reason for the early publication, Prof Martin said it was related to the software the OBR chose to publish to its website, which was more suitable for a small or medium company than a major publication of critical market-sensitive data."

Using WordPress plugins (with the exception of a limited sub-set) is like chewing gum you find on the sidewalk.

A technical oversight fail at multiple levels.


This is a reasonable question. I mean yeah it’s supposed to be made public anyway, but evidently there is a non-trivial amount of interest invested in its contents by people who don’t usually qualify when we think of “the public”. Otherwise what would be the big deal?

My guess is that the team responsible for this didn’t anticipate or at worst were not informed of its value to particular groups of people, at least not to a degree that would’ve warranted extra security measures.


In huge org's, doing computer-related stuff the "right" way often involves so many meetings, sign-offs, and miles of red tape that your grandchildren would die of old age before anything actually got done.

Vs. if you just let Will and Pete do it in WordPress (or on Facebook, or such) then needed tasks might actually be accomplished.


There's a UK government policy to try and use open source, they even have a github profile https://github.com/alphagov

It's not sensitive information. It's public information.

Before it’s been released I would consider it sensitive for many reasons.

They maintain a public repo.


Yea. I can see what the parent is getting at. However the linked PR's contain the employee name. Their username is the same name mentioned in the article. So it would have been the same even if the author had just mentioned the username instead (which would be completely acceptable in all cases). I think junior employee or not, it's clear that they have the autonomy to check a PR for errors and fix it. So it's very much on them.


That maintainer seems clueless


Nice its in the app, trying it out, seems damn buggy at the moment.


Wow, didn't realise there was more than one tab


When you open it for the first time there is a display that tells you all the shortcuts.

Beyond that, if you move your mouse while Spotlight is on-screen, it shows the tabs and tells you the shortcuts as you hover over them.


Amazing, congratulations to all involved. Great day for the nation.


You could say this about any Google technology.


I know right? Just like Golang, Kubernetes, Chrome APIs, etc /s


They're even keeping GWT alive somehow. That was a major mistake, though. I remember building a large GWT project and the compile times just started getting into multiple minutes. Debugging was hard.


They are not. It's a third party fork that's keeping it alive. It's dead because Google didn't put any resources into it and just threw it out to see if it sticks. Then didn't keep up with the capabilities of JavaScript frameworks and didn't release any proper templates.


Did gmail migrate off GWT?


It never used GWT. They claimed GWT can be used to build apps like gmail and that was misleading. They didn't write it using GWT since it predated the existence of GWT.


Thanks. Did any well known Google apps use GWT?


I think Wave was written in it... Not sure if there were others.


When I checked 2-3 years ago, Google Cloud portal was based on GWT.


I’m not sure why sarcasm is needed. Go lost to Rust as the mainstream safe systems language, k8s is a meme for wasted engineering resources, obviously Dart/Dash failed in its intention to replace JavaScript (I don’t know what ‘Chrome APIs’ are).


Go lost to Rust. Citation?


Is one needed? Rust is in the Linux kernel, in the Windows kernel, and is used by the most active blockchain.


Those are some true measures of success right there.


Yes, those are incredibly important projects.


Despite ostensibly being a “systems language”. I see Go used more often for writing CRUD apps or APIs. There’s a lot more work in that then working in rust, thought I’ve admittedly been surprised with the amount of rust jobs I’ve seen.


I don't even know how to write a linked list in Rust... Dang! I'm doomed... :o)


V8; GCP; Protobuf;


App Engine or even GCP. Reader etc.

Android is also terrible. As an Android developer it's the absolute worst when compared to iOS development. Google is an Ad company, everything else it does is a hobby.


I use the core section 3 days a week for work. It’s brilliant, quite the feat of engineering. The scale of the stations is like nothing else on the TFL network.


Yes, it’s brilliant and you can avoid Bakerloo and Central line to get to Liverpool/Bank station


This is something I think we are still getting wrong in the UK. We are building something that should be largely utilitarian with some basic flourishes, perhaps, but instead we end forking out enormous amounts for "high architecture" and the associated build costs for something that rarely pays itself back.

I feel that somehow we hark back to the Victorian days where everything had to be epic but unlike the Victorian days, we are not making enormous profits by stealing resources from the empire that pay for the epic buildings.

In Japan, I think they have it right, basic concrete buildings designed for efficient boarding.


Whilst I can agree that overspending is an issue, I don't believe the cost of the "fancy" architecture is a major contributor to the costs. What's more, it's nice to have some beautiful public works. Obviously, we want punlic infrastructure that works well, but beyond that, it should be a joy to use.


The cost of this is fraction of a percent of the whole project.


It is strange, especially as it’s designed to have automated reversing at Paddington so the driver can change ends.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: