8organicbits

One of the SRE tricks is to reserve your capacity so when the cloud runs out of capacity you're still covered. It's expensive, but you don't want to get stuck without a server when the on-demand dries up.

I wrote about real world collisions, including that particular library last year (https://alexsci.com/blog/uuid-oops/).

There are a bunch of constraints that must be strictly held for UUIDs to be collision resistant, I'd guess there is a problem with your random number generator.

There's a good index of major DNSSEC outages here, https://ianix.com/pub/dnssec-outages.html

One challenge is that they have a ton of usage under their free tier, especially by free and open source projects which have near zero budgets. Its an artificial economy of projects that cannot pay for their own usage.

Another challenge is that the GitHub Actions paid tier is already very expensive, the quality of service is poor, and they have major security challenges. They could load shed by raising prices, driving customers to other platforms, but they already charge 10x what others charge (https://runs-on.com/pricing/#runner-pricing, https://www.ubicloud.com/docs/about/pricing). Anyone using GitHub Actions at scale would be somewhat price insensitive already.

I'm a DevOps freelancer and I've moved projects off GitHub Actions in prior years (cost and security driven). Everyone uses GitHub a little differently, so there isn't a single migration path. It seems like all parts of GitHub are on fire now, but I'd generally recommend moving in stages.

For my personal work I did a hard cutover to GitLab last month. The issues import is the most complex part as the default import messes up issue authors.

> 'ba*s'

Is this balls? You can curse here.

Thats kind of my point, everyone has a different set of GitHub features they rely on. Some people even want the AI bits.

I think the correct middle ground is a site that lets you select the parts of the platform you rely on and ignore the others. For example, GitHub is "down" for me when I can't push, process PRs, or release packages, but I don't care about Actions or AI features.

The human readable version is "Sun May 03 2026 03:09:37 GMT+0000".

Found via the Wikipedia list of works based on a copyright-free Mickey Mouse (https://en.wikipedia.org/wiki/Works_based_on_a_copyright-fre...).

I don't follow the analogy.

When I was in high school a classmate did their chemistry homework by buying the teachers edition of the textbook, which had the answer key. The whole class knew this trick existed, but most of us slogged through the work manually. I knew another group who divided up the homework problems and then combined. Students have always known how to cheat on homework, but enough students actually do it anyway.

What makes ChatGPT unique here?

> every student just gets ChatGPT to do it

I don't believe every student uses a calculator to solve their math homework, so what makes ChatGPT unique here? For certain subjects the ability to cheat has been trivial for a long time, yet there was no crisis.

Is there a measurement that would work better for your organizations setup?

I'm not sure that graph shows a time-based correlation. The 60% line stays inside the 95% confidence interval. Is that not just a measurement of noise?

Pushing agent workflows over email has some risks not present for HTTP. Transit security is still a problem for email as we're stuck in the opportunistic encryption stage. If you decide to use email-based agents, look into MTA-STS as a way to prevent downgrade attacks. It looks like Cloudflare supports this, but it isn't enabled by default or called out in the on-boarding process.

https://developers.cloudflare.com/email-routing/setup/mta-st...

This is still a partial solution as the user needs to know that their locale is being used and know how their locale is configured to understand the format. This is most problematic on shared computers or kiosks, especially when traveling.

Isn't that something different? If I prompt an LLM to identify the speaker, that's different from keeping track of speaker while processing a different prompt.

The defense healthcare market is big for these sorts of apps. Personally, I like the US department of veterans affairs PTSD Coach app. While it's geared towards PTSD, the tools work great for anxiety as well.

https://apps.apple.com/us/app/ptsd-coach/id430646302

Have you tried using starting templates for projects? For many platforms there are cookiecutters or other tools to jump over those.

I switch between languages a lot and I'm currently learning PHP. I've found that syntax similarities can be a hazard. I see "function" and I think I'm writing JavaScript, but then I try to concatenate strings with "+" and I realize I'm actually writing PHP and need to use ".". These challenges are especially noticeable in the early days of learning.

I've been doing this. Here's an example page: https://alexsci.com/rss-blogroll-network/discover/feed-41e7a...

I don't like counting the number of subscribers, that ends up surfacing things like major news websites, or the hacker news feed. But I've found the graph to be useful in finding recommendations.

I've been building an index of planets and related projects. There's a lot, especially for technical topics, but I also wish there were more.

Ctrl-F for planet: https://alexsci.com/rss-blogroll-network/blogrolls/

There's an older list at https://web.archive.org/web/20170823064412/http://planetplan...

I think you need to account for the base rate. There's a lot of WordPress plugin vulnerability disclosures because there's a lot of WordPress plugins and there are enough deployments of the plugins to make searching for those vulnerabilities is worthwhile.

That site warns that WordPress plugins can be abandoned, but that's clearly not a WordPress specific issue. Sure some site could use SSG, but that's a different design.

I certainly don't want to claim WordPress security is good, but I'm not sure that site is measuring anything meaningful.

I don't think it's the code that makes WordPress valuable. I've been learning WordPress recently and haven't been too impressed with the internals. WordPress is valuable because of the ecosystem and support. I have no doubt that WordPress will still be a thing in ten years. What's the support plan for EmDash? I see commits are mostly from a single developer.

E: Oh, I think it's an April fools joke, I'm embarrassed.

E2: Apparently not a joke.

Thanks, looks interesting. I think that's being tracked here: https://github.com/mastodon/mastodon/issues/22720

I'd like to move off GitHub, and I deploy some websites using GitHub Pages, so I took a look at the availability of static web hosting; GH actually does really well on this metric, although Fastly, the CDN they use, should get the credit.

https://alexsci.com/blog/static-hosting-uptime/

What incompatibilities do you know about?

This is also my take and I feel like we've seen this play out enough times to see where it's going. The protocol seems to allow decentralization, but that hasn't happened enough to protect against enshitification. If bsky decided to disconnect their main instance from the others, most bsky users wouldn't even notice, but third-party instances would likely implode.

The happy developer relations is to encourage people to develop on top of this "open" platform, but it's hard to imagine that's not just growth hacking.

Why not build on top of protocols that are actually open and will still have decentralized usage in a decade?

Have you seen many examples of websites labeling themselves, perhaps using rating meta tags (<meta name="rating" ...>)? Self-labeling seems valuable in some ways, but I don't think I've seen it catch on.

The terms of service and privacy policy links are not working.