LennyWhiteJr

Bravo. Aside from WSL, Windows Terminal is probably the best developer tool Microsoft has come out with in quite a while.

I've finally been able to retire my Cmder installation.

One thing a microservice architecture does really well is enforce bounded contexts. Oh you want to access that data? Well you need to go through the public API because it exists in a separate process. In a monolith it's all too easy to just 'call this piece of code and grab what I need' (no one will ever know). Project isolation can help but it's not a silver bullet.

The author makes good points though, there are many places doing microservices because it's the hip thing to do and a monolith would easily suffice. But if you have independent software teams in your org that should be able to deploy code independently, then microservices makes a lot of sense.

As in all things engineering - it depends :)

Potentially. GitHub at least already started collision detection after Shattered was published.

https://github.blog/2017-03-20-sha-1-collision-detection-on-...

The root certificate authority for my company's Active Directory is signed using a sha1 hash. What are the practical implications of this chosen collision?

How do I convince my IT department to update our CA to sha256?

> Croissants, cakes, Doughnuts

Those things are also loaded with sugar.

I keep trying to get my in-laws to drink whole milk but they've had it beat into their head for decades that dietary fat = bad so they continue to drink gallons of skim milk. May as well drink water!

True, but cancellation tokens allow you to alleviate backpressure by safely dropping in-flight requests once you hit a given threshold instead of adding to an unbounded scope.

I wish he would have commented on .NET's async implementation. Microsoft really got it right here and it's arguably the best implementation I've seen.

All .NET async APIs take an optional cancellation token parameter which solves his flow-control problem by allowing the async request to be canceled at any time. If the token is canceled, the async task will (or should) throw an OperationCanceledException which can then be cleanly handled in a standard try/catch block up the stack.

The best part about this is that it pervades the entire .NET runtime, the APIs, code examples, and has excellent documentation on correct usage patterns. Sure, a 3rd party library could choose not to support cancellation tokens, but they would be going against the entire .NET ecosystem by doing so. Every other async implementation I've seen has really seemed like a haphazard bolt-on.

I honestly don't know how I would write robust async code without cancellation tokens, so I guess he has a point when it comes to javascript and python ecosystems.

async/await in .NET is actually good because they added async equivalent APIs to nearly all blocking operations. There's also always (from what I've seen) an optional cancellation token parameter that allows an easy mechanism to alleviate backpressure.

Need an easy way to cancel 100 async requests? Easy, just pass in a cancellation token and cancel it when needed. All the requests will throw an OperationCanceledException which can be cleanly handled.

I haven't seen anything this nice in javascript or python.

Hybrid vigor https://en.wikipedia.org/wiki/Heterosis

It lets you create a sort of super crop... but it only works for a single generation. ‾\_(ツ)_/‾

Cash crops use something known as hybrid vigor (https://en.wikipedia.org/wiki/Heterosis) which breeds together two distinct, albeit mediocre, blends into a single offspring that is sort of like a super plant. The catch though is that it only works for a single generation, and if you were to replant the crop's offspring you would end up with a highly undesirable crop. For this reason, almost no farmers replant using their harvest. This pre-dates the use of GMO seeds.

Every summer in the midwest you get armies of workers who do something called 'detasseling' where you walk through the seed fields and rip off the male genetalia of one of the two breeds, which forces the seeds to be pollinated in a specific way. The result is the seeds that are used to plant next years crop.

source: I grew up on a corn farm.

How the hell do you pwn a server with iDRAC?

> The attacker gained access to the server — which had been active for about a month — by exploiting an insecure remote management system left by the datacenter provider, which NordVPN said it was unaware that such a system existed.

This screams for clarification and I'd love for someone more knowledgeable in the area to elaborate on it. Is this common practice for data-center providers? Do I now not only have to worry about my own infrastructure security but also worry that my IaaS provider hasn't installed some backdoor to my servers?

Wait till you find out that all the world's cash crops are essentially genetic clones of each other. We're literally one superbug away from global famine.

Code Signing and HTTPS are two completely unrelated concepts...

Can self-host behind an enterprise firewall and get all the benefits of open-source software model within the company without exposing proprietary software projects to the whole world.

The phone OS must natively implement the WebAuthn protocol by using built in biometrics like fingerprint/iris scanner.

Windows Hello is also starting to support this for desktop PCs.