DishyDev

Very cool. Should flush out a few bugs.

I'd be interested to know why Valgrind vs the Clang AddressSanitizer and MemorySaniziter. These normally find more types of errors (like use-after-return) and I find it significantly faster than Valgrind.

The thing I don't like about day rates is where I've seen large consultancies pile in large inexperienced teams propped up by one or two seniors to do the actual job that needs doing.

With pay per day deals sometimes success for the consultancy is how many people they can get on a project, and less experienced people give higher profit margins. Being successful doesn't pay better than running late, and few clients have the knowledge or oversight to not get ripped off.

I know reality is far murkier than that and fixed price comes with different problems.

Looks like you can get a bit of a Node stack trace on mobile

```

  Error: Choose failed Missing field "user_id" in context for bucket_val = user_idError: Choose failed Missing field "user_id" in context for bucket_val = user_id
  at Decider.choose 
  (/src/packages/applications/monolith/bin/index.cjs:19115:41)
  at isCustomFeedsDisabled 
  (/src/packages/applications/monolith/bin/index.cjs:266576:32)
  at Object.shouldInclude 
 (/src/packages/applications/monolith/bin/index.cjs:266612:66)
  at Resolver.shouldIncludeChild (/src/packages/applications/monolith/bin/index.cjs:175841:26)
  at /src/packages/applications/monolith/bin/index.cjs:175901:40
  at Array.reduce (<anonymous>)
  at Resolver.iterate (/src/packages/applications/monolith/bin/index.cjs:175899:22)
  at Resolver.iterate (/src/packages/applications/monolith/bin/index.cjs:175938:55)
  at Resolver.iterate (/src/packages/applications/monolith/bin/index.cjs:175938:55)
  at Resolver.iterate (/src/packages/applications/monolith/bin/index.cjs:175938:55)

```

Looks like you can get a bit of a Node stack trace on mobile

```

  Error: Choose failed Missing field "user_id" in context for bucket_val = user_idError: Choose failed Missing field "user_id" in context for bucket_val = user_id
  at Decider.choose 
  (/src/packages/applications/monolith/bin/index.cjs:19115:41)
  at isCustomFeedsDisabled 
  (/src/packages/applications/monolith/bin/index.cjs:266576:32)
  at Object.shouldInclude 
 (/src/packages/applications/monolith/bin/index.cjs:266612:66)
  at Resolver.shouldIncludeChild (/src/packages/applications/monolith/bin/index.cjs:175841:26)
  at /src/packages/applications/monolith/bin/index.cjs:175901:40
  at Array.reduce (<anonymous>)
  at Resolver.iterate (/src/packages/applications/monolith/bin/index.cjs:175899:22)
  at Resolver.iterate (/src/packages/applications/monolith/bin/index.cjs:175938:55)
  at Resolver.iterate (/src/packages/applications/monolith/bin/index.cjs:175938:55)
  at Resolver.iterate (/src/packages/applications/monolith/bin/index.cjs:175938:55)

```

I've had to do a lot of scraping recently and something that really helps is https://pypi.org/project/requests-cache/ . It's a drop in replacement for the requests library but it caches all the responses to a sqlite database.

Really helps if you need to tweak your script and you're being rated limited by the sites you're scraping.

Not a great week for managed Kubernetes services as Digital Ocean have been having an ongoing issue since yesterday morning on their service https://status.digitalocean.com/incidents/fsfsv9fj43w7

My cluster was down this morning around 11 UTC. Not sure when it started working again but I'm back in business. Some comms from DO that there was an active issue and they were investigating would have saved a lot of time trying to debug.

I've had a good experience doing a couple of bug fix bounties for urllib3 https://github.com/urllib3/urllib3/issues . I'd be interested in how the maintainers how found running the bug bounty and if it's given them more useful fixes or if it just adds more noise to deal with

Average is around $120 for an hour for them.

Great write up on something I depend on a lot but don't understand well.

This also answers something I've always wondered about which is how Twisted and Tornado fit into the Python web framework landscape and whether I should use them. Tornado always seemed popular but slow and less intuitive than Flask/Django. And then Twisted was a far lower level library but people were still building APIs on it.

Where does Eventlet fit into the picture? Is it a similar box of magic monkey patches like GEvent?

I've used respondent.io successfully for a few years doing surveys on new developer tools and cloud provider portals.

This solves a really tricky Terraform problem I have at the moment about wanting to create Dev environments quickly but not wanting to recreate DNS, VNets and other core functions for every user. Will definitely be having a play with it.

Really well put on the risks and how outcome based projects aren't necessarily better aligned for good outcomes.

The best company I worked with did a multi-drop "agile" contract where there were several incremental prototypes and product releases with feedback and tuning the requirements to ensure we got what we needed in the end. That felt far more aligned and how I'd prefer to work but it took a lot of trust and a long relationship with the vendor.

I love the idea of doing independent technical due diligence work after enjoying doing software auditing and investigations in my current job. Looking at Gitlab's processes it seems like company structure, finances and legal checks make up a lot of the investigation. The software/infra/tech side seems quite short (Gitlab suggest their early technical diligence should be turned around in 2-3 days).

Do you think there's enough demand out there to have a company that does just technical (e.g. software quality, security) due diligence?

I always enjoy seeing what a good awk & sed user can achieve in bash.

However one of the not so good Devs I worked with used awk to load a large, deeply hierarchical JSON file. They refused to use a library to parse JSON. It was a many hundreds of line monstrosity.

Luckily when they left we were able to parse it in JQ instead .

I think Gitpod is a great product, and I've had a massive amount of use of their free tier. There's something pleasant about throwaway Ubuntu development environments. I can cover pretty much all of the major development use cases in it, even container work.

I just hope they survive long enough to take off as they're giving a lot away for free currently. Their dedicated instance setup looks like it'll cover the majority of businesses who'll likely have their own landing zones and cloud controls they can integrate into. Not being able to self host is a loss, but it might the right trade off.

I don't understand the AGPL bit well other than it was seen like poison by corporate risk types at my previous jobs.

I remember a colleague who was critical and pretty much the only person who knew how part of the business worked. He had a great analogy that for every new initiative and fresh recruit they brought into that area, it was like the organisation was hooking in another IV into him to draw more blood out. It's an image that always stuck with me to describe people in the situation Jeff found himself in.

As someone whose job involves maintaining uptime of a critical system that's dependent on Cosmos DB this sort of thing is scary. Where there's been other reliability issues with Cosmos before we've not had an understanding customer base, and it feels very out of my control.

I'm finding a lot of the reliability guarantees of Azure PaaS services are overblown or come with big caveats when you start to work with them in a serious way. For example I've had some bad reliability issues with Azure Functions not firing, or their premium function runtimes becoming unresponsive. And it seems like that's just the start of the outstanding issues with them https://github.com/Azure/azure-functions-host/issues

I think people need to look more carefully at these PaaS guarantees and look at what that 99.999% reliability Microsoft are claiming actually means.

This is a cool project, and really well presented.

I've looked doing similar, trying to query a large dataset through ranged lookups on a static file server in the past. I ran into issue of some hosters not providing support for ranged lookups. Or the CDNs I was using having behaviour like they only fetch the origin data source in 8MB blocks meaning there was quite a lot of latency when doing lots of small reads across a massive file.

It would have been interesting to find out a bit more about these topics, and see a bit more on performance.

I've had good results with https://typora.io/ writing articles a couple of years ago.

It was free when I was using it because it was in beta, it's now $15. If I needed to write in markdown more regularly I'd probably buy it.

This tool has reminded me a few years ago I created a helper web utility that let me search Python libraries and get a tree view of their dependencies, and some license info. I had to do a lot of manual Python library compliance before we had tools like Blackduck.

It accepts dependencies in requirements.txt format (e.g. Django==3.1 or tensorflow) https://pydepchecker.z33.web.core.windows.net/

It's got a few shortcomings. Dependency resolution in Python is pretty difficult to work out when you've got a lot of libraries with common dependencies. And the license info on Pypi isn't always correct. But it's always been a quick useful tool for me.

That's awesome. I don't think Lego are likely to approve though. There was an awesome looking project to do a Rolls-Royce UltraFan Jet Engine that was rejected a few years ago https://ideas.lego.com/projects/f18a11c6-f704-4827-b06a-fba8...

This is a little poll I built to track sentiment for decision making. I've been in lots of awkward meetings recently where sales and management want a product to go live. And engineering and ops do not.

What the meetings needed was a snapshot of how people were feeling. People needed to be able to contribute anonymously. And we needed to track which direction sentiment was going. This would have facilitated a productive discussion.

Instead people didn't feel safe to voice their opinions, and there was false harmony.

My organisations problems are far deeper seated than can be solved with an anonymous poll. But I enjoyed making this tool anyways, and will use it to gauge how my own teams are feeling.

It's built using Flask-SocketIO, SQLAlchemy (Sqlite), Vue and Bulma. Source code is here if you want to look around - sg3-141-592/AnonymousStrawpoll (github.com)

I got an Azure AZ-203 Developer Associate and AZ-400 DevOps Expert about 2 years ago. It took about 3 months for each exam, passed each first time. I was studying in the evening reading Microsoft docs and doing the quickstart tutorials for all of their services. https://www.isaaclevin.com/post/az-203-study-guide/ this guys guides were a massive help.

I got them because I wanted to move on from an embedded developer role to a more cloud centric role. And it worked. Having the qualifications got me through the HR wall at companies and got me into the face to face interviews.

I also think the AZ-203 is especially good because it covers so much content and forces you broaden what you know about. Like I would have avoided learning things like RBAC and OAuth if they weren't on the exam.

I got a new job and now work daily in AWS but I'm still glad I did them.

I really like this, I think this is a great foundation. I've pen and paper done this type of tracking to try and see how long I get to spend on task during a day, what sort of categories of work I'm doing, where am I losing the majority of my time etc. I do encourage it if you've got the sort of job where this is an issue.

I'm not sure its something I'd do long term, but it's nice to sample a few days and re-calibrate your time every now and then.

Shameless plug. I've got my own little online multiplayer game I made for fun I'm pleased with. https://yatzyonline.azurewebsites.net/

At the start of lockdown I was inspired to make my own version of Yatzy (Yhatzee?) to play with friends. We tried to find somewhere to play Yatzy together and all the versions we found were full of social media signups and micro-transaction.

We wanted something simple to jump in and play in the browser. The https://www.horsepaste.com copy of CodeNames is a really good example of this done well.

It took a couple of days to make. There's some bad development practices in there. Like heavy use of polling (I've since learned about WebSockets). And I wish I hadn't made the frontend in JQuery. But I'm quite pleased with result. Its had a few hundred successful games finished through it and I learned a lot. Once I sort some of the awful code messes I'll open source it.

Anyways if anyone's interested its very easy to jump in and start a game.

https://yatzyonline.azurewebsites.net/