SamuelAdams

I cannot find it, but I distinctly remember a post by Rachel on her blog (rachelbythebay) that talks about this exact problem in open source.

Sometimes the nuance of appealing to maintainers emotions is more work than writing the software yourself and maintaining your own private fork.

If someone could find that blog post (and subsequent hacker news ref) it would be a fun way to compare this discourse to Rachel’s discourse.

Edit:

Found it: Choosing to stay out of the community.

https://rachelbythebay.com/w/2018/10/09/moat/

https://news.ycombinator.com/item?id=18181409

I do this a lot when I am around my 6 month old daughter. We can already see a very clear difference in her engagement and curiosity when she sees a colored phone versus a monochrome phone. She grabs for the phone less and quickly returns to previous activity if she notices a monochrome phone.

> Our code sits in a monorepo which is further divided into folders. Every folder is independent of each other and can be tested, built, and deployed separately.

If this is true, and you still have problems running specific Actions, why not break this into separate repositories?

> Delete /tmp/framer.txt on affected hosts.

Isn’t the correct fix to assume compromise and rotate all SSH keys? I imagine there will be scripts created very quickly to grab this file from any servers, so even if it is deleted soon there is no guarantee someone else has not read it.

To quote a great play: “what comes next”?

What’s always missing from these calls to action is: what are you replacing it with? There are a number of healthcare programs across the world and every country has a variety of different problems. There are no silver bullets.

If you want a great read about a few different countries, I recommend The Healing of America by T.R. Reid. It has some suggestions, but in general it is great at illustrating how treating the same illness in different countries can be varied in terms of treatment and cost.

It’s easy enough to disassemble your thinkpad and unplug the mike. Use external mikes if you need them, they will be better quality anyways

This study seems flawed. It references the Xz backdoor, but then talks about malware in Linux distribution packages?

It would make more sense to study and interview package management systems like PyPy and Nuget instead.

This seems odd. If you need certain fees and line items explained to you, why not ask your lender? Surely you have a loan officer that can explain every item and why it is there.

If you don’t like some of the costs, go with another lender, or negotiate those with your loan officer.

I’m not sure what this tool is offering that individuals don’t already have.

Plenty of people still believe that using a VPN + Tor means they are “private”. What we need to teach others is that this is no longer the case - privacy is not a one size fits all solution. You may be private from other users on your network, but not nation state actors.

> there’ll be detailed comparisons between the AirPods Pro 2 and existing OTC devices in the near future once iOS 18.1 is widely available.

As someone with a diagnosed, severe hearing loss, I wonder how these compare to prescription hearing aids. I currently wear a pair of Phonak hearing aids and am looking to replace them, but I wonder if spending 5-6k on another pair is worth it versus the OTC or Apple AirPod options that exist today.

May also be useful for creating automatic language support from a single codebase. For example, Amazon uses JSII to build a typescript library into Python, Go, dotnet, etc.

Maybe this tooling will help add PHP to that list.

That way you are not maintaining 6 codebases.

https://github.com/aws/jsii

I am surprised Heartbleed is not on the list, it’s very easy to duplicate.

Exactly. Look at the Ashai Linux project. They are doing tremendous work, but getting basic feature parity with a now 3 year old laptop is still ongoing work.

Then once feature parity is done, performance problems are next, if they ever get addressed and completed.

I love the idea for open source software, but the very best software in todays world is always something you have to pay for.

This is the problem with “branding” and ranking in the American university system. People believe Caltech is a good school, so they automatically assume it is worth the high price.

Maybe a solution is to be clear if a class or program is taught by an FTE instructor, or if the program is outsourced? There’s nothing wrong with trying new things to make more money (student enrollments are declining), but be clear about who is teaching the course and how they are affiliated with your brand.

> A small number of people place the large majority of bets—about 5 percent of bettors spent 70 percent of the money in New Jersey in late 2020 and early 2021, for example.

By this logic, we should ban cars because 5% of drivers experience collisions every year. Or maybe we should ban Free to Play mobile apps (5% of users result in 70% of the profits). Or maybe we should ban firearms, because a small number of users harm people.

There are always risks with every industry in regards to the safety of those who participate. What is the "acceptable" number of problematic cases for a billion-dollar industry to be legally acceptable?

Is Reddit considered a news source now? Half of the posts on the front page are made up fictional writing, and the other half are politics and repeated questions, for the purposes of karma farming.

How do we know that the OP of this post did not make these claims up?

> The report found that the companies collected and could indefinitely retain troves of data, including information from data brokers, and about both users and non-users of their platforms.

As a non-user of many social media platforms, is there anything I can do to prevent companies from collecting data about me? It feels wrong that companies you do not sign up for are still finding and processing data about you.

You could also build software for fun, ie contribute to open source.

However remember that there are several other disabilities that can occur as you age. I know several people who developed Alzheimer's or MS around their 60’s. There is no way they could work a programming job today.

Be like Microsoft. Fire all your QA. QA is now done by developers and end users.

If a multibillion dollar corporation can do this, so can you!

> Make student loans dischargeable in bankruptcy again.

I would like to see the author back this up with more considerations.

Bankruptcy disappears from all credit reports after seven years. The average age of first time home buyers is 35.

So if a new grad’s credit is trashed from the age of 23-30, it makes no difference to them - they are not planning on using credit for anything substantial anyways.

What is going to stop every single student from declaring bankruptcy immediately after graduation?

I think what is always lacking in these reviews is: compared to what?

I’m always curious to see what other devices authors have used prior to this “best device”.

For example, I started with a 2010 MacBook Pro, then a T430 Thinkpad, then a dell, then a desktop computer, then Apple finally fixed the butterfly keyboard so now I use a 2021 MacBook Pro.

In my experience nothing comes close to the trackpad of the MacBook. But I haven’t tried something like a Framework or a Chromebook. So maybe those are better.

I really wish there was a “rent a laptop” service where you could check out a different laptop every month and see if you really like it.

I solve this by keeping a digital notebook. I have no idea why this is lost on so many people.

Each project gets a new note in Obsidian or OneNote or whatever note taking tool you are using. Each day gets a new #H1 heading with the day. Any relevant URLs get added to the note.

At the end of the day, review your notes and clean them up to be concise. Explain to your future self what you did and why those links are important.

Then close your browser tabs, they are saved in the notes.

If you need the content from the website itself (maybe you are concerned about the site disappearing), use something like Pocket or copy code snippets, text, etc directly into the note. Screenshots help too.

This is what I was thinking too. If you are going to use a different box, why not use a more feature rich solution that is much less difficult to configure?

Yes it seems odd how the medical community (and American patients in general) don’t really want to talk about obesity anymore.

Being obese and carrying a baby to term is risky. Everything is much more complicated.

I do wonder if they make the BMI of mothers available in a publicly available dataset somewhere, it would be interesting to test your hypothesis.

I used to work in healthcare IT. Running a code is not always only CPR.

Different medications may be pushed (injected into the patient) to help stabilize them. These medications are recorded via a bar code and added to the patients chart in Epic. Epic is the source of truth for the current state of the patient. So if that is suddenly unavailable that is a big problem.

You are very rare. Most people are not like you.

Apple tried this with iOS 2 and 3. Minor versions cost users roughly 5-10 USD per update.

Therefore many users did not install the latest OS on their devices. The cost, although small, was a barrier for many people.

Apple quickly pivoted and now all software updates are free of charge to all supported devices.

If Mozilla starts charging for Firefox, I predict either people stick with the oldest version that is free, or stop using Firefox and use a fork that maintains its free (in cost) license. Or maybe only 2% of users convert to a paid version of Firefox.

Yes, we use something similar for debugging lambdas locally. We use Dotnet, and this library:

https://github.com/Kralizek/AWSSecretsManagerConfigurationEx...

Normally Boto uses the current account context to get secrets, but if we run a lambda as a local build, it uses this library to pull secrets from the actual dev AWS account.

This makes it easier to onboard new developers, reduces problems of figuring out what secrets to get for each lambda, etc.

Also if secrets are rotated in dev, local stacks get them automatically.

I am curious to see if this tool is remarkably different.

It depends on how you define what data must stay on the device. You see this all the time with data processing.

Individual actions and usernames are recorded. Let’s call that personal data. That has to stay on the device.

But what if I also ran a “collect usage metrics” process that ran once a week and summarized your actions, removed your username and replaced it with a random GUID, and otherwise painted a profile of how you used my software over the last seven days?

Is that summary level data still considered protected? Can I send that back to my servers without telling you, or if I add a settings toggle for “share usage data to help improve our products”, is that ok?

At what point does data become generic enough to not be personal?

Wait until you run a PiHole and see all the telemetry and dns requests that are made to *.apple.com even when you are not signed into iCloud.

Another simple trick is to add the Russian or Ukraine virtual keyboard to your OS. I’m curious if this tool does this as well.

https://krebsonsecurity.com/2021/05/try-this-one-weird-trick...