BandButcher

Imo bad story piece to cover up the recent Microsoft hacks done by "state actors".

This has nothing to do with MS spying on user ai tool usage.

Admit it MS, you got hacked, service accounts and executive emails were leaked, along with who knows what else, and you "caught them" after damage was done.

Build a copy site of linkedin, make it invite only to increase the hype, ask the marketers for a trendy name and put "AI" anywhere and everywhere, use the hackers to ddos, drop tables, hack accounts (beyond the current hacks) on the existing LinkedIn site (don't actually do that plz!), profit??

Keep in mind the userbase and experience will be just as shtty and corporate jerk off as current linked in but you'll get your 20% market share before the bubble bursts - and thats all that counts, right? Could probably do that in < 10 years and under budget too

No wonder i was feeling a strong gravitational pull running npm install.

I'm afraid if i run a 'rm -rf' command i might take out the entire electrical grid!

Im still fuzzy on this whole ai thing (as a dev)

Would our industry create a new job role such as "prompt engineer" aka "ai engineer supervisor" ??

Or would this ai developer be able to read jira/kanban tickets, cooperate with other "teammates", deploy fixes, etc with no major oversight?

Generally curious.

"IIRC it cost me around $70 bucks for the day."

Sure, for you that was the price. Enterprise cost would be way different.

"Note that we are at early stages with this tech, it will probably only get cheaper from here."

Haha people who pay for these ai tools can only hope...Ask any cloud provider, streaming service, or utility company if their prices are cheaper now than before.

As these ai tools get better, they will require more resources to run (according to altman's 7 trillion dollar request) and most likely drive up the costs.

But hopefully you are right though, as i believe we as humanity would be best served spending as little money and resources as possible on AI.

Oh really, yikes. i thought about creating a toptal account for work but never got around to it. Doubt I'd be comfortable working on a proj like that

Very nice, i will try to use in the future!

Haha i guess it really has gone full AGI and decided being another corporate slave just wasn't it.... It may be time for chatty g and gemini to form a union before its too late!

True, & tom made the first move ;) we didn't have to add him

Understandable... PWAs are ultimately an alternative path from traditional mobile apps which will take away money from apple/google.

But as a web dev community we need to stand firm and build PWAs regardless. If we treat pwas on iOS like we did Internet explorer (i.e. giving it special attention and hack solutions as opposed to just not developing for it) we will lose the fight.

I suggest you call out the issues with ios and put disclaimers on your app page saying what's not supported, or add taglines like "for the best experience, use <other broswer>".

Apple can afford the dev work to update Safari or work with the standards committee, but im sure with their new vr goggles they will take the proprietary route

So i did some quick "research", based on a government analysis, the areas chosen in the US for these energy projects have "low cost ESGs" or lower than other areas in the US.

The ESG Wikipedia article: https://en.m.wikipedia.org/wiki/Enhanced_geothermal_system

suggests that this could be done anywhere in the world, due to ESGs nature of injecting fluids manually.

Yea not sure who approved the PRs that got merged exposing those auth fields... Its not really a data breach like the CEO claims but simply their in house API that exposes auth fields for any and all users.

Either this was done intentionally by a employee, a huge oversight in a code review, or possibly a junior engineer's poc that got pushed to prod by mistake

I feel like you are conflating things here a bit. In my experience a WMS is typically used for tasks outside the codebase. Normally you would leverage a CI/CD pipeline (Jenkins or similar) to handle the building, testing, and deployment of a project or repository.

You would then leverage a WMS to create sequential tasks to maybe: trigger an app deployment, send notifications to developers and stakeholders, update a database, send out SMS messages to customers, etc... although many ci/cd services offer these capabilities as well, WMSs are more comprehensive in what they can do.

But if you don't need all of those extra bells and whistles, you might actually add more complexity going to a WMS.

For help with a complex codebase, i like to adhere to a lot of principles in the 12 factor app https://12factor.net/

...Although thats easier said than done to "clean up" a codebase

Well said

I would first ask why you are doing this in the first place, "introducing Rust into a company"?

What is motivating you to do that? Or is this being pushed on you to solve a problem which rust isn't a cure all?

I would recommend starting by examining your software architecture, engineering personell capabilities, and then proceed to see how rust fits in the picture, if at all.

Sweet site thanks

As much as I'd like to disagree, seeing big tech companies pour billions into ai chips/gpus...

"Chips for America" i think was the news article headline i read last week about upcoming chip manufacturing subsidies. even our government is spending big $$$ on it

Im not sure if your current job role includes programming or software engineering, but as a software dev whose struggled to get a job amid all the layoffs this past year, i wouldn't recommend pursuing a CS degree if you only want it for money and an immediate return on investment.

With AI and ML running rampant, the barrier to entry now is a lot higher and you will be competing with other engineers for jobs.

However, just like you mentioned you don't have a formal CS education but landed a job, you could likewise get a CS degree and land a gig unrelated to tech. A degree shouldn't force you to do anything, if you like it pursue it.

Never heard of this repo or library, but in the readme:

"Yet another remote desktop software, written in Rust. Works out of the box, no configuration required. You have full control of your data, with no concerns about security"....

Yikes. Please don't believe in every repo face value. Your best bet is to generate your own certs (https://github.com/FiloSottile/mkcert) and sign the dlls yourself.

Not a security expert, but this is a huge code smell.

Always be cautious of trusting certs of any kind, especially test/dev certs with top level privileges lol personally i would avoid.

Based on the issue there are too many weak points and the "response" given didnt seem to care about the vulnerabilities or user concerns, only said why its needed...

The issue poster was smart in running in a sandbox and comparing files.

Super anecdotal but when i first moved to Austin Tx and went to a Walmart, they told me i had to pay for plastic or paper bags. I was completely thrown off and the cashier told me they did a "ban" on plastic bags, and that many people buy the "tougher" plastic bags and resuse them.

A week or so later i had bought resuable bags, like 2-3, and would always leave them in my car. It became 2nd nature to me almost instantly. Since them I've always used reusable tote bags until they break. I even have one from a party i threw more than 6 years ago that belonged to someone esle lol

Ive since move back home to a city that has no plastic ban and im literally the only person who brings tote bags into stores. The only downside now is i can sometimes look sketch as hell but yea idc i support resuable bags hopefully more people can minimize their plastic footprint in plastic bags or other ways

agreed, to me this is a big deal for CF. especially coupled with confluence documentation which most likely includes future plans and designs, org charts, meeting minutes... you could also find other easter eggs in any legacy code, almost all companies have undocumented backdoors

obviously a customer data breach would be worse but this is really no bueno

I see it more for public perception, 10% seems miniscule imo to the average person who would see this headline (non tech), and a constant compounding can continue to go unoticed.

Plus if every company does it you can begin to forget which company had/has/is/continuing to lay off... Geniusly evil

Haha yup... It was worth... my time

but i also understand the author as i recently pursued a master's degree 2 years ago, made it halfway through the classes, rushed to publish one completely bs paper, gave a presentation on it during a virtual research conference (one of several hundred that happen every year), received a "good job"/"atta boy" , was then asked to continue to write more papers and become an aid for the professors... So forth.

You really can lose passion for a subject you love when the machine of academia is only concerned with climbing the ladder, a la corporate world, politicians...

thank you, a lot of data points to take in.

good article. I struggle as well to not doom scroll the big social media apps.

I sometimes need to uninstall the app completely to remind myself of how much of a time grab it is. But I cant lie, a lot of content can good, but its buried beneath a lot of distractions. Like twitter for example, when you click into a tweet, if you want to scroll the replies, you are given both ads and other unrelated "viral" videos spliced in between the replies that are meant to trigger you into doom scrolling as opposed to interacting with the original post lol.

I think its a big reason why i enjoy road trips so much because in many places across the US where i travel there are dead zones (at least my wireless provider) and i go hours without notifications or internet access. plus im driving haha.

as a side note, i remember reading Pornhub had a new "reels" like feature, i think it was in beta mode last i checked and havent heard it mentioned since so not sure if its still live (although reddit has had very similar short explicit content for years now). No knock on pornography but these trends are seeping into every form of media now. i feel as though these apps are training us to make all content an immediate "elevator pitch" (i'd guess about < 1sec to impress or you're scrolled past). how this affects us as a society in interpersonal relationships...i think we all know

for sure enshittification going on

on win11 home edition, when inside an explorer folder , i can't even drag and drop another folder or file onto the address bar anymore (moving files up a directory). I swear i could do this in like windows xp and 2000, windows is for sure going backwards i hate it. i keep getting a blocked icon when i hover over parent directories.

i guess its motivation to become more proficient with the command line

also another hugely annoying thing is how windows has removed the labels for copy/paste and shortened the context menu. I recently went back to school and non tech savvy people have no clue about those icons and i swear i have to apologize to them everytime (since im the "tech guy") how bad microsoft is lmao

haha the first thing i would've caught in the initial PR was the file name... and the default setting of `confirmed: true`... seems like a big oversight or possibly an inside job (if im being conspiratorial)

Yes and no. Idk if they validate you own the domain, i think they just care that your nameservers point to theirs. I recently setup a couple sites in cloudflare and they just asked to set 2 different nameservers on the domain registrar (not namecheap, but spaceship.com). See here: https://developers.cloudflare.com/dns/zone-setups/full-setup...

I had also created my "worker pages" app/project in cloudflare before updating my nameservers in spaceship.

But i do have namecheap domains as well and used firebase hosting (google) and they DID ask to have certain TXT records to be added to namecheap and validated before provisioning my ssl cert.

I'm assuming every provider is different. But yea i would just undo the CF nameserver until you're ready to go live

Do you know if/how this differs from:

git init --bare?