capableweb

Why is that so crazy? Happens all the time that people get assassinated and the public sides with the assassin. If the US was successful with any of their plots to assassinate Castro I'm sure the US public would mostly side with their government about it, as a relatively famous example.

Another more contemporary example would be the assassination of Yitzhak Rabin (prime minister of Israel) in 95, which had a lot of local public support.

It's country dependent. When I've been around in Europe, I barely see it. As soon as I go to South America, captchas everywhere.

My guess is that the "dotNet people" mentioned by parent didn't come from Linux, but from Windows. Different experience using Visual Studio on Windows compared to Linux, one would think ;)

Where in the south though? There is artillery/bombings/violence in the south as well, so still important to get information about where to find resources when you're on the ground in the south.

> CircleCI dutifully polling the ~750k-line stdout for the find command was taking up about 3 minutes of our 5 minute process. Was done so someone could debug a failing build... supposedly.

Doing it for a one-time CI run is fine. Forgetting to remove it is less fine. Doing it on CircleCI who have had builds you can SSH into since forever is a lot less fine, it should never have hit the config at all.

> I basically do not think "auto merge into prod" is ever OK, but then again, I let GitHub Copilot write 40-60% of my doc comments, so...

Funny how different people can be :) I'll always try to make the main branch so clean that it can be deployed at any moment, and production will always use the latest commit as soon as possible.

Basically, I'm doing CI + CD, but I understand it's not for everyone.

> Mostly I won't even look at a review until CI passes. I don't want to look at your code if some static analysis in CI would find issues.

> but we have a lot of static analysis that we run as part of CI, some of it standard some of it custom for people who violate our code style in some way.

Yeah, but why would issues that static analysis find stop you from doing the review? I never review things that automated tools can find, I care more about reviewing things only a human could review. "Does this make sense here?", "Is this decoupled enough/too much?", "Does this work well with the overall architecture?", "Does this test test the right thing?" and so on.

I wouldn't spend my review time on spellchecking people or pointing out issues like that, that's for the tooling to do. And even if the CI fails because of some analysis, PR author fixes it, every review comment should still be applicable, otherwise you're just doing robot work.

How often do you need weather services in the middle of the Atlantic though? Seems like a pretty niche use case, except for the various islands there.

Edit: I thought something was sketchy and rightly so, after searching for "Mid Atlantic Region" I learned that it's actually a region in the north-east US, not "the middle of the Atlantic". Well, learned something new today :)

> of all the things a human should be in the loop for, merging to main seems like one of them

That's what the review is for. And I'd argue that the review should be decoupled from CI, because you're not reviewing if you think the tests is passing before/after merge, you're reviewing the code and docs themselves.

And once the review is done, it should be fine to merge at any point, today or tomorrow, barring any merge conflicts of course.

Merging to main should be the most mundane task ever, and even a robot should be able to do it with confidence.

Seems to assume that people are actively/idly waiting for CI to pass and then start the review? Or they've done the review, wait for CI to pass then hit merge?

Most projects I've worked on with multiple contributors on have had a merge queue where you simply tell it to merge if/when the CI passes, then you can move on with your day.

Ok, so then what is this discussion about? Java Streams have existed basically forever, as a 3rd party library, but that doesn't matter here in our conversation about Java language features, where 3rd party libraries somehow changes what the language is...

> Whether it ships with it or not is, however, irrelevant

When talking about projects in the wild, sure. But if we're specifically talking about language features, then "something being a part of the language" is wildly different than "installable 3rd party library".

But again, that issue appears no matter what reason the card didn't work, it's not exclusive to someone who themselves "paused" the card and the business continued to try to charge them.

I'm all for a borderless future, but I see it as unlikely. What I think will happen will be extreme concentration of wealth in a few places, and those will put up sky-high walls (literal and figurative) to block out everyone else.

And yeah, life is a lottery, from where we are born, to where we can go and which biological body we got.

Ok, so what's the issue exactly? The person is no longer using the service, so won't matter if you retry one time one day then cancel VS retrying for weeks, their usage wouldn't impact you, and eventually the account will be deactivated/suspended?

Wouldn't it be the same if the card was rejected for any other reason, including that the card is no longer active, don't have enough funds or anything else? What makes this particular behavior "real bad customer behavior", compared to the other reasons a payment could be rejected?

Seriously, what is the alternative? For `git status` to make a request to each of your remotes every time you run it?

> Rust has rayon `input.par_iter()`

rayon is a 3rd party library though, not part of the language itself, compared to the Java streams discussed here.

With C# I'm not sure if .NET can be called a library or not? All C# tooling ships with .NET by default or not?

> therefore it cannot be acted upon, therefore it is totally useless

From the examples, this seem to be the point. If you receive a 429, you know you can just backoff a bit and it'll work at a later point, but if you receive 999, you're not sure how to proceed, which seems to be what they (the service) wants.

> Is it though?

Yes, yes it is.

origin/master is not saying that the remote has/hasn't changed. It's comparing your local copy of origin/master, not giving you the status about if remote has/hasn't changed. You need to explicitly ask if remote/origin/master has changed or not if you want to know.

Which in your analogy would be like if the store forgot to actually ask the bank if the customer had the money or not, and instead relying on whatever information they have "cached" in the store. Instead, the store has to first ask the bank (remote) if there is any changes.

I do agree that it could be worded better to actually help the user understand, as it seems to be a common misconception.

Sidenote: I'd be driven to absolute insanity if `git status` started doing remote requests to check the remote origin/master status each time I invoked it.

The "category of business" they are going after is businesses that harvest users personal data without their full consent. Is that a category of business you think should still exists?

> Do you live in a country that has enemies?

Who doesn't?

> You may not have suffered an attack yet

But I literally shared in my previous comment that I have?

> thinking the world is a peaceful place in which small players have no worries is naïve

I agree, and I guess I'm lucky for not holding such opinion then.

> He's accelerated the switch to electric cars.

Which, in today's industry and world might have been too early as we still haven't figured out if mining all that lithium is better for the world or not, right now.

> He's made transport to space a lot cheaper, saving a lot of taxpayer's money.

Yeah, for ~4% of the world's taxpayers. We'll still see if SpaceX is a net-win for humanity, too early to tell.

> The vast majority have never met him and, if they were honest, have probably been positively impacted by him (or not at all).

Why would people most probably been positively impacted by him? He seems to constantly have knee-jerk reactions to things happening around him, and his companies seems to frequently have issues with overworking employees.

> Rust DOS : Creating a DOS executable with Rust

https://github.com/o8vm/rust_dos

POC||GTFO does this with their releases, where the file released usually doubles as multiple file formats, and contains a ton of hidden messages all over the place. https://pocorgtfo.hacke.rs/

From the latest edition (#21):

> Technical Note: The electronic edition of this magazine is valid as both PDF and ZIP. Thanks to Ange Albertini, it is also a PCAP-NG packet capture of an experiment by Yannay Livneh. See page 7.

Edit: Ah, and of course, Cosmopolitan (by @jart) that produces an amalgamation of formats bundled into one file (including ZIP) that runs across a bunch of OSes https://news.ycombinator.com/item?id=38101613

Please do take note that I'm not saying anything like what you claim I said. I'm asking if it's something people commonly get hit by, as I myself haven't had severe issues with it.

I'm not saying others are misinformed or cargo-culting anything, just that I'm seeing lots of people who probably never get hit by DDoS in the first place (couple of visitors per day) adding CloudFlare by default as that's what they see everyone else is doing.

Of course if you do frequently get hit by DDoS attacks, there is nothing wrong with trying to protect yourself against it...

There seems to be multiple entities:

Raspberry Pi Ltd - No.08207441 (the one who received this "investment")

Raspberry Pi Foundation - No.06758215 (registered charity)

Raspberry Pi Foundation North America - (registered 501(c)(3))

https://www.raspberrypi.org/about/

How many little sites do you run that get hit by DDoS? I personally run about 10 tiny websites myself, some of them have around ~1-2K daily active users, but neither of them have suffered from any DDoS frequently nor do they use CloudFlare at all. One has been hit once by a DDoS that kept trying for ~2 days to bring the site down, but a simple "ban IPs based on hitting rate limits" did the trick to avoid going down, so wasn't a very sophisticated attack.

It seems to be a common misconception that people defaults to, that you have to use CloudFlare or some alternative, otherwise you'll get hacked/ddos'd for sure.

Repeat after me: Git is more than just files. Git is more than just files.