-
- Pleasure: Altered Carbon by Richard K. Morgan
- Book Club: My Brilliant Friend by Elena Ferrante
- Learning: The New Father: A Dad’s Guide to the First Year by Armin A. Brott
-
I don’t find this post useful or interesting. It explains nothing and offers no insight. It is literally just a list of seemingly random classes and methods from Java that have some specific properties but why the properties are important or useful is never explained.
-
- Google is going to warn people about my site being “not secure.”
- Something bad could happen to my pages in transit from a HTTP server to the user’s web browser.
- It’s not hard to convert to HTTPS and it doesn’t cost a lot.
- Sure, both Google Chrome and Firefox (to an extent) will start warning about this.
- I’ll come back to this.
- It’s not. There’s a bot that will handle it for pretty much all major OS/server combos.
Let’s look into 2 a bit more. Verizon and Comcast both inject ads into unencrypted traffic. Other companies then piggyback off their tracking headers for more ads. China injected malware into Baidu’s unencrypted JS to DDOS Github. Several nations are trying to slurp up all the unencrypted data they can. Yeah, I’m OK with raising the bar slightly to keep that all from happening. HTTPS isn’t hard. Certbot and Let’s Encrypt has lowered the bar significantly.
-
magikid
6 months ago
|
link
| on:
IBM Java CTO: Devs shouldn't have to learn Docker, K8s, 30 other things to deploy an app
That read like an IBM ad and didn’t actually address why devs shouldn’t have to a complicated deploy process.
-
Because it is most likely an ad in disguise.
-
-
You roll 5 six-sided dice to create a 5 digit number. The exact order of the numbers does not matter. Then you compare that number against a wordlist, and based on the roll you pick 6 or more words which you like, string them together in a phrase you can remember.
That doesn’t sound right.
-
-
Well, I know how diceware is supposed to work, so I can figure it out, but otherwise I’d have no idea how I’m supposed to turn five dice into six words. Usually you don’t pick the words you like. That kind of defeats the purpose.
Also, I’ll add that even six times five dice is 6^30, which is nowhere close to your bare minimum of 36^32.
-
-
-
-
“I am smart enough to do it safely” - you probably are, but I can’t help hearing echoes of the last words spoken by every person about to do something dangerous.
-
-
-
-
Also, I’ll add that even six times five dice is 6^30, which is nowhere close to your bare minimum of 36^32.
You made an error here in your math. When combining the dice rolls, it’s not6^(6*5)(which is 6^30) but6^(6^5)(which is 6^7776).Comparing the correct number of diceware possibilities to a regular password we see:6^7776 = 8.0 x 10^6050 36^32 = 6.3 x 10^49edit: I miscalculated 6^5 so I corrected it.edit: public math is hard
-
-
Did you mean rolling five dice six times? The math works out differently for rolling six dice five times.Each roll of the die generates a number in the range 1-6. When you roll a die once, you have 6 possible numbers you could get. When you roll a die twice (once for the tens position and once for the ones position) you have6*6 (6^2)possible outcomes. Continuing in the same way, for a five digit number, you have6*6*6*6*6 (6^5)=7776possible combinations.Using the same pattern, if I want to generate a list of six five-digit numbers, we raise the length of the list to the number of combinations power. We want 6 five-digit numbers so the base is 6. The number of possible five-digit combinations is what we found above. There are6^5possible five-digit numbers. So we end up with6^(6^5)=6^7776.-
I apologize, my snark was unproductive. Your math is wrong and tedu’s is correct. Rolling
ndicemtimes is equivalent to rolling one dien * mtimes.The particular mistake you made is
we raise the length of the list to the number of combinations power
this is precisely backwards: we raise the number of combinations to the length of the list. A five digit number has ten possible digits in the first position, ten in the second, etc. for a total of
10*10*10*10*10or10^5possibilities. In the case of our dice, five six-sided dice gives6^5 = 7776combinations, six times give7776^6 = 2.2e23 = 6^30total possible permutations. (Rolling six dice five times gives(6^6)^5 = 46656^5 = 2.2e23combinations as well, because(x^y)^z = x^(y*z)and multiplication commutes.) -
-
-
-
-
-
Also, I’ll add that even six times five dice is 6^30, which is nowhere close to your bare minimum of 36^32.
Isn’t the bare minimum given here for a generated pw while the diceware pw is for the master pw to access the pw database? Being on your own machine adds additional security.
-
-
-
-
Wow, I like vim but this just seems over the top.
I can’t say that anything in vim has caused me to think of learning its arcane incantations as “game-like” (except of course the excellent Vim Adventures)
As for new users, vimtutor will teach you the basics but this downplays exactly how slow you’ll be until you’ve committed to muscle memory the various keys and their uses.
-
Implementing tar create, list, and extract in rust.
-
obestwalter
edited
1 year ago
|
link
| on:
DoD Announces the Launch of “Code.mil,” an Experiment in Open Source
The most overfunded and most euphemistically named institution on the planet needs help from the OSS community. Makes me wanna hurl.
But thanks for sharing - it is interesting to know that this exists. I hope it’s gonna be an epic fail.
-
It doesn’t help anything to be so negative, and it can even discourage people from sticking their neck out for bigger changes if even little things like this get shit on and ripped apart. I’m not a fan of the DoD (or the government in general), but I’d rather they do this than keep all of their code private. We’re paying for it, we should have access to it. It’s a small step, but it’s better than nothing.
Also, I think you missed the point. I don’t think they’re really “asking for help”; they’re just making the code available on GitHub. People can submit issues and pull requests if they want, but they can also just grab it and go use it for their own purposes.
-
It doesn’t help anything to be so negative
I am not negative. I am voicing my honest feelings about this. I am absolutely terrified about what is going on in the U.S. at the moment. No objectiveness or positivity intended - raw feels. I am not a citizen of the U.S. I am watching from the outside and … I have to repeat: I am terrified.
Just to summarize: the biggest army in the world by far is about to up their budget by 53 billion. Do you have any idea how mind boggling this is? WWIII anyone? So please forgive me if I have trouble to rustle up positivity when I read anything about the US military complex.
Also, I think you missed the point. I don’t think they’re really “asking for help”; they’re just making the code available on GitHub.
No. I think you’re missing the point.
Call to action
In true open source fashion, DDS is hosting an open call to developers, lawyers, and other members of the open source and free software communities across the government and private industry to comment and review a draft open source agreement that is currently available on Code.mil. The agreement will outline the terms of use and participation, and will be finalized by the end of March. The draft can be found at https://github.com/deptofdefense/code.mil/blob/master/LICENSE-agreement.md.
Who will pay me if I participate in this process? Right. Nobody.
I am awfully, awfully sorry. But I feel very strongly at the moment, that the US military complex is sucking up too much energy already. I think it would be good for all of us if they would get less attention, less money, less anything.
-
-
I never get why they create/announce these things without at least one project for the public to get an idea of what will typically be there. I’d like to know if this will be web stuff, out of date cobol code from the 80s, embedded code or something like maths/geometry/mapping software and libraries.
-
-
-
Agreed. It’s pretty damn anticlimactic to announce that you’re going to “do open source” and start with a call for help to nail down license details.
The best case for them is that they’re already asking some internal and external lawyers, contractors, project leaders, and project owners to weigh in on the license, but want the process to be visible; worst case is they don’t have the bandwidth to identify people to ask and ask them and are “We’re on GitHub!”-ing through it.
-
-
-
Thanks for your email. I’m very interested indeed. I have nothing against an interview. However, there is one condition: I have to be interviewed by the person I will be working for. By my future direct manager. The recruiter who gets this reply never gets back to me.
I’m not surprised. You’re dictating to them how you want the interview process should work. The majority of companies have a definitive interview process for vetting candidates that is tailored for their business, why would you expect them to make an exception just for you?
That being said, a good recruiter will send you a positive response highlighting at what part of the process you will get to meet with the hiring manager and clarify why they follow a specific process.
-
why would you expect them to make an exception just for you?
I understand that most companies have a normal process but they are approaching him saying that they need him. If he truly has some skill or talent that the company needs to survive, he has the upper hand. He would hold the fate of the company in his hand and they would bend over backwards to get him aboard. His email response is just a litmus test.
-
-
-
I don’t want to learn a DSL for my commit messages.
-
I think the commit message formatting becomes more relevant when you have hundreds of people working on a small set of files in the same repository. We did this with the administrative portal for Cisco Spark and found that having a standard format for people to follow means that there is less confusion and more summarization for each change that comes through.
-
I agree with @zg although I think it becomes relevant much earlier than having hundreds of people. Being able to parse and read the history of repository is more than a nice thing to have when working with other developers. When you even have 10 developers all doing their own thing and putting up long messages, some putting issues in the subject, some where the issue number is the subject with no body, it makes figuring out what happened and when that happened very very hard. While I might not like this particular format, standards like this aren’t about preference, it is about consistency and consideration for the other developers on the team.
-
-
I’ve contributed to Karma several times, and it wasn’t really a lot of work. The project setup installs git hooks to check the commit message. It makes a lot of sense for maintainers as it is possible to generate a changelog.
The recommendations are pretty much what I would do anyway, except for the type/scope prefix.
-
-
They’ve disabled the search functionality due to negative comments on HN
-
For school:
- I’m working on my first project for a Design and Analysis of Computer Algorithms class. I’m building a system in Java to examine the the Big-Theta of merge sort (both recursive and iterative methods).
- For my Computer Graphics class, I’ll be writing a Java program to create an animated scene with JOGL.
If that weren’t enough, I’m also working on beefing up my resume for landing a software developer job so I’m learning Spring and Hibernate.
-
I have no idea who this person is but that job sounds fiendishly interesting.
-
It seems like she’s at FB:
-
-
-
-
magikid
1 year ago
|
link
| on:
How I fixed my biggest mistake with implementing Rails background jobs
The examples are all written against the Que library but using DelayedJob solves the problems you’re writing about without the need to write or rearrange any code.
I guess I just don’t understand why the ACID guarantees that Que provides make it the better choice in this case.
-
Que was just a library to do the work. There’s nothing in this related to ACID guarantees.
-
-
I’ve started using Rust to write a blog to familiarize myself with diesel and rocket. My end goal is to create a tool similar to rails for quickly designing websites.
-
-
-
I’ve just started using rocket and diesel in the last week — I didn’t think I’d be seeing STL-type error messages again so soon!
-
-
To start out with, I have a “dev” user account so that my work environment is completely separate from anything personal. This means I don’t have to worry about separate profiles for Chrome and Firefox or any other per-application isolation. This also means that my dock is filled with only the applications I will ever use such as all of the browsers and their betas as well as Textmate, Terminal, Github, Mail, Skype (some clients like to use that), and any folders local and remote for the projects I’m working on.
I use LiveReload in combination with a basic
sass --watchorcompass watchas a very basic way of automation. I run a very basicpython -m SimpleHTTPServerjust so that I don’t have to deal with browsers that try to open up other applications when I’m browsing files locally. I’ve always used the iOS simulators, but more and more I’ve relied on the responsive views in various browsers.I use RVM which I’m not a fan of just because it complicates the process, but it’s necessary to have some sort of manager for Ruby otherwise you’ll land into a bunch of weirdness that you didn’t even think about.
I’ve started using Digital Ocean to test projects remotely in which case I have a default nginx or apache server for dealing with the files that I scp (like an animal) to.
-
-
I took your suggestion and installed it. My main gripe is mostly with “kids these days” and needing to install all this extra stuff for Sass/Compass (even if Sass is extremely helpful and I couldn’t work without it).
I like that chruby is more “Unix-y” and simply does less, but I was caught off guard by the fact that it does not automatically switch rubies. I would recommend it to anyone who uses Ruby simply as a way to get something else done.
-
There’s
chruby-autowhich will automatically switch rubies, if that helps.
-
-
-
-
av
1 year ago
|
link
| on:
How Discord handles push request bursts of over a million per minute with Elixir’s GenStage
Firebase requires that each XMPP connection has no more than 100 pending requests at a time.
Does this mean you can have multiple XMPP connections, but each cannot have more than 100 pending requests at a time?
-
-
Every time I see a piece about Eve, I get a little more excited. But at the same time, since I haven’t played with it yet, it sounds almost too good to be true.
Am I alone in this feeling?
-
It’s a beautiful language, and I’m impressed with everything they’ve accomplished, but it definitely still has some rough edges: there’s no data-type conversion functions, no way to define your own functions without falling back to JS, and other quirks like that.
(This is true of the last version I played around with. Someone please correct me if I’m wrong.)
-
[Eve member]
That’s absolutely true. It’s pretty rough around the edges. There’s a whole heck of a lot that still needs to be done and we won’t claim it’s anything but 0.2.* at the moment. :) We’re working through these things as we start to build bigger/more real examples.
here’s no data-type conversion functions
We’ve added a couple via
convert[value: some-string to: "number"]no way to define your own functions without falling back to JS
That’s true at the moment, but you end up wanting functions pretty rarely in the language so it hasn’t been a priority for us.
-
-
I’ll email them to see what they say about that. And/or send a developer an invite. Might be interesting people to have in discussions here.
-
-
-
the Debian Project doesn’t seem to see anything wrong with the development and distribution of proprietary software.
I don’t see anywhere in the Debian Social Contract where it says that Debian is committed to freedom in the manner that the author of this article expects in fact, it says that they will support proprietary software and that their system (i.e. not all packages) will be free as defined by the Debian Free Software Guidelines.
The main thrust of the article is that Debian isn’t “free” and is therefore acting unethically. I know exactly how Debian defines free because they wrote it down in their document (linked above). I have no idea what the author of this post expects from free software because nowhere does he mention or link to any definition of “free” that he expects Debian to ascribe to. Further, even if we presume that this one aspect of Debian’s operations are unethical, I don’t think that somehow tips the scale towards Debian as a whole being unethical.
In conclusion, I don’t see any incongruities between what is in the Debian Social Contract and what Debian is doing.
-
I don’t understand why this matters. Both Windows and Mac versions can still be downloaded from the docker website without logging in:
I found those by googling “docker for $OS”. The Mac page was the top result and the windows was the third.
I searched docker for windows and it took me to this page. Which asks for a login to download. I think the big deal is how dishonest the reply from the docker team is.
“we’ve made this change to make sure we can improve the Docker for Mac and Windows experience for users moving forward.”
This is such obvious marketing BS and it’s insulting that they think the average developer doesn’t know this is so they can send more marketing emails and not to “Improve experiences”.
In their defense, it takes money to improve the experience, and marketing yields money. So indirectly, marketing allows them to improve the experience. I entirely agree that they should just come out and say that, however.
I love this reasoning! I wonder where else they could improve.
I think funneling more docker users into Enterprise plans would be big $$$, maybe they could cap the number of images downloaded from the store for free, and then sell licences for more downloads.
It’s required from >= 18.03