Live data from Hacker News

Company as Code

blog.42futures.com

111–120 of 135 posts

Re: Company as Code

#112

If you want this to extend to all compliance checkboxes, I think it'd be an endless can of worms. How do you enforce (with code) that all new applications created by various teams get added to the right inventory? At some point a human has to determine if an application is in- or out-of-scope for certain restrictions. If a compliance framework requires certain hashing algorithms for certain types of data, how does yo…

Learn about dependent types and then hit an undecidable or incomplete problem lol

Re: Company as Code

#114

This is not a new or novel idea. I proposed such a thing at the start of my career in tech, and repeatedly propose it when I feel I have ears willing to listen. The problem - and I do mean the problem, the only problem - is the threat this poses to power dynamics in the organization. Compliance people do not benefit from their outputs being readily searchable and indexed like this, because it means there’s less need…

> That said, I would love to work for an organization placing importance on this degree of internal cooperation. I suspect I’d thrive there. I've been looking for such a org my entire career but recently resigned myself[1] to the fact it'll probably not happen unless I come into a situation when I can create it myself. --- [1] https://blog.webb.page/WM-081 >

When/If you do want to create one yourself, there are a handful of tech cooperatives out there for inspiration: https://github.com/hng/tech-coops

Re: Company as Code

#116
post #10

It's all cool as long as you keep all of this up to date, and that requires a lot of scrutiny and discipline. Once I had to go through a security audit at a job I had. Part of it was to show managing secret keys and who had access to them. And then I realized that the list of people who had access to one key was different than the list of the code owners of the service I was looking at, which was yet different than t…

Isn't the point that this is the source of truth? If someone needs access to a secret, you would implement it in this DSL and commit that to the system. A side effect would run on that which would grant access to that secret. When you want to revoke access, you commit a change removing that permission and the side effect runs to revoke it.

From my experience, there is always a parallel process. But if you make the system painless enough, most of it will be in there, yeah.

> When you want to revoke access, you commit a change removing that permission and the side effect runs to revoke it.

For this to work, you’d need to also rotate the secret, or ideally issue one for each person (so that others don’t have to update their configs).

...but sometimes you can’t reliably automatically rotate the secret, because they could have used it for something in production.

Re: Company as Code

#117

I think that it is a narrow view of a "developer" that imagine reinventing what basically already exist in decade with HR/"people management" management software that are widely distributed. It is sometimes also done by big ERP and basically available in any big directory and access management platform like Microsoft Entra ID (or whatever is the last current name) and co... In some big companies, for expenses or perf…

I’d love to reinvent an HRIS one day. Most examples I’ve seen are kinda painful to use.

Re: Company as Code

#118

This is not a new or novel idea. I proposed such a thing at the start of my career in tech, and repeatedly propose it when I feel I have ears willing to listen. The problem - and I do mean the problem, the only problem - is the threat this poses to power dynamics in the organization. Compliance people do not benefit from their outputs being readily searchable and indexed like this, because it means there’s less need…

> This is not a new or novel idea

Yep https://x.com/fduran/status/1134283398594387969

Re: Company as Code

#119
Very narrow spec of how company can fit into code.Try Integrating ERP system in non-tech business. You will see how resistant the people are to use a software that streamline their business and need customization that fit their operation procedures or outright resistance because it would make things a lot easier and make them irrelevant.

On successful integration all they would use ERP system would be for signing in , chatting, producing invoices, the rest would still be done manually, if lucky in excel files.

Re: Company as Code

#120

Earlier quoted context omitted.

Keith Johnstone: Impro

Is it ISBN-13: 978-0878301171? Or ASIN B01K2J06SY

The first one is the classic. Don't know about the second one.

Power dynamics have been extensively investigated by the "Johnstone school" of improv, because humans are (mostly preconsciously i.e. usually are not but can become conscious about it) interested in power dynamics -- especially in situations where power balance is switching -- so this is the key if you want improvise acts that feel realistic and capture the audience attention.

To really understand it, I would recommend taking some improv classes that are based on Johnstone's teachings. But the book will give you the idea.

Post reply on HN