WhatsName

The most anticipated Django release for me personally. Async ORM access is a massive quality of life improvememt, same for async CBV. The later is also a blocker for Django Rest Framework going async.

Sure most CRUD applications work perfectly fine using WSGI, but for anyone using other protocols like WS or MQTT in their app this is kind of a big deal.

Can confirm, the number of project shower ideas, that I had resulted in at least a dozend bought domain names and only a small percentage of actual work.

The first step should be making an empty repo on github.

Can someone explain this to me? I've got a basic understanding of ML, but seem out of the loop lately.

I tend to disagree. If anything, it would make everything more expensive and at the same time more unstable.

The school of thought that I subscribe to in economy is that everything is priced in. Relaxing the terms of lending increases risk, drives up the price of said mortages und amplyfies the fallout in times of market turmoil.

Edit: Reread your comment, we are in fact in agreement.

I've tried FastAPI recently, as the idea matured, I came to regret the decison. It's not bad, in fact it was very pleasant to get started with, yet I found myself missing and reinventing the wheel as compared to django. I develop with Django since 2015 (1.6 or so), to me it is the goto for any web related project.

I used to think my distaste for new and upcoming Javascript frameworks is a sign of getting old and not being as adaptable as I used to. But nowadays my thinking has shifted to seeing it as a instant loss of productivity with little upside.

Just like musicians don't switch instruments every time they see something shiny. Neither should we, or at least without feeling guilty about it. Mastery takes time.

That's a wild guess and I have no insight into the industry, but I wouldn't be suprised if it's yet another race to the bottom?

Labor seems to be one of the few things where supply and demand dont apply.

Happy to be wrong.

Yeah, since it's common knowledge now, spammers know about this too and at least darknet resellers might also be incentivized to hide the true origin of the dump that they are selling.

I usually go about this now by having a dedicated domain for only EMail with a catch-all configured (Fastmail, Protonmail at least for Pro users allow this). That's great because everytime I'm required to provide an email for no reason at all for example hotel checkins i can just come up with a new one on the fly: hotelname2020@example.com

Bonus points for also preventing credential stuffing in case they get their badly secured passwords compromised too.

I don't have the numbers to back this up right now, but 90% of my spam comes from scraping my email from public documents, Github or one-off webshop purchases.

Should have linked this issued (given hard to find, since the bot went wild), for more context and comments by the bot author: https://github.com/EbookFoundation/free-programming-books/pu...

My personal experience with most of these bots is, most of them are promoting some kind of service (image/badge bots) or try to enforce a certain behavior onto maintainers ("Your are missing a [code of conduct]"). Haven't yet come across anything useful.

If your political issue is something you truly care about, please at least make the effort hand craft your pull-request. And even then, it would be awesome to keep politics out of code.

Honest question: Is this a bot reply? Because the previous answer was about the browser extension "Twitter Block Chain" which has nothing to do with blockchain technology.

I've been wondering for a while how come that so many online conversations derail to shilling cryptocurrencies.

Not sure, if it's bias due to being part of the netsec bubble, but there is a growing market of privacy as a feature. Also in the wake of countless breaches companies get more aware of how and where the data is stored.

If your product isn't addressing this, you're probably at a growing competitive disadvantage.

For one many countries have anti-discrimination laws that disallow including photos into a CV.

For me it's the asymetry in effort. If I interview with a company, I get to ask questions myself and get a feel for what working there might be like. When asked to record questions myself with no guarante someone ever looks at it beyond the initial 30sec, I would discard that as a waste of my time.

For example we, as a industry decided that whiteboard interviews about algorithm efficiency are a major red flag unless you are hired to solve those problems at your daily work.

If prerecorded interviews becomes a new industry standard among HR, I will go out of my way to find companys where I get to talk to real people at interviews.

In case you aren't aware, it's easy to explain by that fact that most finance departments are afraid to question your spendings on grounds of looking incompetent.

So it's less about 10$ and more about: "I understand what a wireless mouse is and it doesn't look mission critical to me."

"No idea what those items on that AWS bill mean, but I'll probably be better off not asking"

Second that, tried many even more expensive ones. Stuck with that model, pretty great especially if you are taller than average (190cm).

Anyone tried their new lineup JÄRVFJÄLLET?

I first thought this was a parody, but apparently this is serious, so here are some serious questions:

- Why should anybody trust you as central authority?

- How is this different from an Ponzi scheme?

- What prevents you from just making up accounts and printing coins for yourself and your friends?

- What happens if your datacenter catches fire?

- What happens if hackers get write access to your database?

- How do you 'encrypt' and email address, do you mean salt and hash?

> The fine is considerably smaller than the £183m that the ICO originally said it intended to issue back in 2019. > It said "the economic impact of Covid-19" had been taken into account.

Why do I get the feeling, that if £183m would not have mattered much to the bottom line of BA back then and now that it does they get a discount.

Is there any other non-business analogy where you get a discount on a fine, because you hit rough times financially?

> “If there has been any definite threat on our products and/or services, we will take immediate actions and make appropriate announcements to protect our customers’ valuable businesses and assets,” Ahn said.

I'm still surprised how the goto reaction on this kind of incidents is ignoring the researcher and than claiming nothing happend.

There should be a government agency to report this kind of findings to and those cases getting handled like the real world equivalent of a toxic spill.

I really don't get the recent hype around this topic. Sideloading pirated apps on android is a click on a button and a checkbox. Solving it seems close to impossible, without seriously compromising the users freedom to install apks and privacy.

Apple on the other end has a finite list of issued developer certificates and an even smaller list of enterprise certificates. If some are abused, it's as easy as revoking them, given iOS regularly checks the OCSP.

I guess they just spy less on their users, which for example means iOS might not phone home telemetry data of every app an user installs, which makes it harder to catch abuse immediatly. Also since taking down a small number of pirated apps might not directly translate into an equivalent revenue in legit app purchases (as the industry might claim), I guess there isn't too much of an economic incentive for Apple to enforce their TOS immediatly.

Maybe it's because I just skimmed the article, but what about the security implications of this? Doesn't dynamically loading third party ressources and serving them under your own domain open a whole can of worms?

What about privacy? Do you access users email?

The most important question for me looking at projects like git, httpie and youtube-dl being sold for 2,99€... Have they actually been submitted by their respective owner? If so kudos to this project for opening an additional revenue stream for opensource projects.

If that's not the case, this seems like yet another shady project, like plenty posted recently (I remember a similar one based on the softwarestack used), where the name of big successful opensource projects is used to collect money on their behalf and afterwards when enough money is piled up, they are offered to take the money on terms set by the marketplace.

Same issue, it seems to have become an "eierlegende Wollmilchsau" (German for Swiss Army knife, but with a negative conotation).

I recently move to gittea[1] for the very reason that I dont need 90%+ of Gitlabs features. Also Gitlab chews up RAM and IO, while gittea is barely noticeable even on a low end server. [1] https://gitea.io/

This is what bugs me a lot, when it comes to bugbounties including HackerOne. The absolute lack of accountability and transparency. One can only hope the companies act in good faith. In my opinion this should rather be handled by an independet organisaton like the CERT community or since it's a vital security interest at state level. Though latter might be prone to conflicting interests as well.

This is terrifying. In my country it is strictly illegal to monitor employees, not just cameras, but also private internet usage on work computers.

Also from a managers perspective I find this quite unproductive micromanagement. What do they get from this data?

If you look at their chart of "any bubble", it's pretty clear when they expect the crash: https://i2-prod.mirror.co.uk/money/article11613204.ece/ALTER...

Why do so many people still believe in security-by-obscurity?

  "Some security experts say that studying the source code of a product would make it far easier for a reviewer to spot vulnerabilities in the code, even if they did not leave the site with a copy of the code."

I would like to meet those experts that advocate, that not looking at the code makes the product more secure.

I always wonder if there is any substance to such claims other than that it is made by a russian company.

In which case one might as well claim "ties" between Symantec and US intelligence or Checkpoint and Israel.

You could make the same argument about any company breaking laws and regulations or at least operating in grey (eg. AirBnb, Uber,...)

This isn't about the lack of competition on the search engine market as it is about a single entity holding as much financial and political power to undermine every single one of your suggestions with ease.

I've always wondered how promises like this are possible since twitters public API allows only partial access to the stream of tweets?