jeremya

It’s a thneed!

This is fantastic. I’ve always enjoyed the cypher language that the neo4j team created for querying graph data. The connected k8s api objects seem like a great place to apply that lens.

Whether or not that is the case, surely the substance of the article more worthy of your analysis than something as intangible as the authors internal motivations? Assuming positive intent is worthwhile frame of reference that keeps my world looking a bit brighter and something I always hope other do for me.

> Any principal in your management account, by default, is able to assume the OrganizationAccountAccessRole in each and every one of the accounts created using the organizations:CreateAccount API.

This is an untrue statement. For a principal in the management account to assume OrganizationAccountAccessRole, they need to have a principal-based policy that gives sts:AssumeRole permissions for it. Otherwise, great article. We use this pattern at $DAYJOb

I think this feature lends itself well to tight feedback loops, as you said. However, after I crossed the painful divide from CloudFormation novice to... well, whatever is after that, CloudFormation rollbacks became a friend instead of an enemy. The ability to return to the last known good checkpoint is a powerful feature that is extremely useful in production systems and the pipelines that deploy them. In those scenarios, you're not experimenting and learning, but enhancing and evolving existing infrastructure.

Copilot generates CloudFormation templates based on the Copilot-specific config files. There’s a place where you can add your own additional resources in CloudFormation syntax IIRC. It also has the ability to create a CodePipeline for app deployment. That creation is also done by generating a CloudFormation template and deploying it for the user. I’m not sure why it’s not clearly documented that this is happening, but it is a selling point to me because if I want to, I can “eject” from Copilot and just maintain/enhance the CloudFormation templates.

I found this very helpful. It gives clear language for a number of things I’ve thought and felt about public discourse in America. To name a few in particular, the belief that complicated explanations are suspect and that certainty is strength. I’ve repeatedly observed that successful people seem to have very strong opinions and wondered if that was a contributor to their success.

While it seems most things in this list stem from one or more logical / informal fallacies, the way the principles are categorized and described makes the fallacy obvious and, for me, familiar. Since 2003 when this was published, I believe the network effects of social media have significantly increased the frequency at which these sorts of fallacies are uttered.

What are the systems at work here that lead to this so-called cargo cult? Is it easier, psychologically speaking for people, and Americans in particular, to walk with these mental crutches? Is our education system broken? What variables are at play here?

This is interesting. I think the weird underscore between words (which indicates space) is throwing me off though. I'd recommend removing that.

What do folks think about this? I have encountered the licensing challenges of local development with RHEL 7 containers. The workaround for it put us in a weird spot with licensing even though we were paying for RHEL 7 on the host OS. We had reached out to our Red Hat reps and even they did not seem to understand the issues at play. It seems like this move will really simplify the whole thing. The post is a little unclear on the technical details. Will these images have access to install packages from RHEL yum repos even for users who do not pay for RHEL support? Also, what, if any, effect do folks here think this will have on CentOS? I certainly like the option of being able to start with UBI or UBI minimal images with no support and being able to buy support when needed without re-tooling the stack.

I see that the course begins on August 27th. What is the deadline for applying to Startup School?

I think this article may be guilty of overstatement. It's an ever more common sin, as overstatement seems have become a preferred method for communicating thoughts and ideas (and products, though that's nothing new).

Is there a need to overstate to cut through the noise and get your point across or your message heard? Maybe, but it seems unfortunate that when people have some truth or wisdom to share, there is a felt need to amplify and polarize it.

This article has good things to say about the importance of simplicity in code and implementation. I'm fine with value judgements as long as they convincingly define the values they are judging and show evidence that the facts have been thoroughly weighed. 'Correctness' is an ill-defined villain here and the article would do better to state the benefits of simplicity and experiences the author has had with systems designed without simplicity as a first-order goal.

Then again, perhaps I ask too much. Also, I've never had an article on the front page of Hacker News, so what do I know.

It's not exactly the same thing. Encryption at rest on S3 is good, but security is about layers. If you only use that, then you are one mis-configured S3 bucket policy away from exposing your secrets. Bad bucket policies are one of AWS' biggest footguns- plenty of intelligent people have done it before, don't assume it's a mistake you'll never make. It's so easy because S3 is a service that has to make publicly-accessible storage easy to achieve.

KMS keys on the other hand, do not have that use case. If the secrets in your S3 bucket have been encrypted using a KMS key (or better yet, a data key derived from a KMS key) and your bucket is compromised, your secrets are safe as long as the attacker cannot ALSO get access to the KMS key. By all means, enable encryption at rest on S3, but don't make that your only defense.

I agree it's not easy to Google for the Declarative Pipeline or Groovy Sandbox. Here's the comparison of the two syntaxes available in Jenkins Pipeline (Scripted and Declarative):

https://jenkins.io/doc/book/pipeline/syntax/#compare

Here are details on the Groovy Sandbox (provided by the Script Security Plugin and installed by default when installing recent Jenkins). The Groovy Sandbox is on by default for Jenkins Pipeline:

https://jenkins.io/doc/book/managing/script-approval/

I've not used either, but Forestry seems like a CMS-to-static-pages tool while Contentful is a CMS-to-API tool.

Yes, you can alter the way tracebacks are printed (or not printed) for test failures:

https://docs.pytest.org/en/latest/usage.html#modifying-pytho...

Check out CDDirector[0]. I've been using it to model release pipelines and enjoying it quite a bit. Disclaimer, I work for CA Technologies though not on this product.

[0] https://cddirector.io/

This. In my parenting life, I feel there are so many decision where you have to choose between optimizing the short term or the long term. I tend to favor the long term and my philosophy is roughly: the difficult path becomes easier and the easy path becomes more difficult.

From my one data point of being a father of two girls (3 year old and 1 year old), I disagree. While some not insignificant percentages may line up with the generalization you've outlined, I think that parent/child relationships are more complex and nuanced than that.

In our household, I am the primary disciplinarian, but I have not sacrificed being able to play and be silly with my kids. Another commenter outlined the need for consistency. I wholeheartedly agree and believe that you can be consistent with your kids and still be silly, play and encourage healthy exploration of new challenges.

Great work! Everything looks really smooth on Chrome on Android. Is there a list of targeted mobile browsers on the site or at github? I could not find it.

How about a recorded screencast or youtube video showing the solution in use? It will not be interactive, but will show some of the interactivity of the solution.

I would recommend this podcast on lodash for some of the differences:

http://javascriptjabber.com/079-jsj-lo-dash-with-john-david-...

As of AngularJS version 1.2, the promises provider ($q) is fully Promises/A+ compliant.

http://blog.angularjs.org/2013/11/angularjs-120-timely-deliv...

I believe you were downvoted because your comment sounds like you are trolling. You have not said what it is about Playdoh that you would like to see in an AngularJS/NodeJS/CoreOS/etc stack. By the nature of Playdoh being a Django template, you cannot simply swap in NodeJS. You would be starting over from scratch with the goal producing (some of) the features of Playdoh with different technologies.

To answer your question, those attributes are not all required on the form element. From the docs on ngApp[1]:

  Use this directive to auto-bootstrap an application. Only  
  one ngApp directive can be used per HTML document. The 
  directive designates the root of the application and is 
  typically placed at the root of the page.

The ngController directive gives behavior to a scope. So, in this example, the behavior of the LoginController is available to everything within the form element. ngController could be placed on a div that encapsulated the form and the result would be the same.

The only thing really required on the form element for this example is the ngSubmit directive. The other two tags can be placed elsewhere.

[1]: http://docs.angularjs.org/api/ng.directive:ngApp

He is basically arguing that information cannot be free in the future because of the need for an information economy to replace the economy of goods and services that will soon be produced by AI/ML and automatons.

He argues that AI/ML create successful business (e.g. insurance providers which can use algorithms to ensure they only provide their service to those least likely to need it) that essentially radiate the risk out to society and, ultimately, society cannot absorb the risk.

I found this part about democracy and spying interesting:

    And so you can’t have democracy in a highly evolved 
    information society if information is free. You just   
    can’t. I mean, because you’ll be giving the government 
    an infinite spying license. And it might sound like an 
    odd idea, but I hope once you roll it over in your 
    brain, you’ll start to see that it’s just a very simple 
    and sensible idea.

While the ideas he presents are interesting, that may be all they are. It is difficult to imagine them being played out in real life.

ISP: Comcast Location: Winchester, VA

Does anyone know if there are similar programs for Django?

Unless I'm mistaken, a cursory examination of the certificate supplied to your browser should show that it is one of those "mitm" root certs and not the certificate for the website you are browsing. That should make it simple to at least know your encrypted traffic is being hijacked.

There is also Wand (http://dahlia.kr/wand/index.html), which, while still alpha, is a very nice ctypes-based, MagickWand API binding. It is also available in pypi, so is easy to install. Support for Python 3 is near-term goal of the project.

As mentioned by others, syte currently requires javascript to view blog posts.

For my projects, I have a little trouble deciding when it is ok to require javascript be enabled. What is the general consensus? Is progressive enhancement no longer a concern? How do you start new web projects, with javascript added after basic functionality is established or with it at the core?