jimmychangas

To anyone interested, this video touches on the greater themes behind the original Deus Ex, and may inspire you to play the game :)

https://www.youtube.com/watch?v=g_CBF318nBY

Honest question: what, in you opinion, is the state-of-the-art approach? Something like BeyondCorp?

Exactly. Comparing open source to begging on the street? Yeah, sure, pretty accurate comparison if you are living in a parallel universe where street beggars run the world's infrastructure.

I guess it is pointless to argue about what topics are the most relevant. This "vital articles" list seems completely arbitraty and, frankly, not very important.

The author has a point, but one of the defining characteristics of HN (in my opinion) is that sometimes comments are more valuable than the actual link.

Some HN comments are incredibly insightful and well informed, and some threads have real historical value (i.e. the original Dropbox and Redis posts).

Does someone keep an archive of legendary HN comments that you could share?

The default cross-origin blocking behavior is useful for many things, such prevention of data exfiltration via XSS vulnerabilties. CORS is a way to relax this behavior.

I read the PDF version and donated 10 dollars a few months ago. The book is worth more than that, but given the numbers he expose I didn't even feel guilty.

> UX should be a mindset, not a step in the process

Every specialist in every branch of software engineering thinks like that. Designers, architects, testers, compliance people, everyone seems to think the software development process should be framed according to their priorities. Who knows, maybe this is a healthy way to establish a balance of power.

Care to elaborate? Do you mean S3 VPC Endpoints? Because this could screw many in-VPC Lambdas that need S3.

They were very open about the reasons, they are simple and make total sense. I like the new brand.

You are right, thank you for your reply. The "user behavior is non-linear" and "optimization yealds diminishing returns" are powerful insights.

Better yet, the things you listed are qualities. They encompass every feature in the product. I think parent is generalizing too much on his assumption that only mature companies should spend time in optimization. Early stage startups can sometimes make mistakes, and optimizing early on can help them save the precious resources needed for them to survive another six months.

Can you elaborate on what do you think would be a good solution to this problem? In my opinion, having big central sources of libraries makes it easier for security scanning services to operate. Companies hosting libraries locally (e.g. with Sinopia, Nexus, Artifactory) have to proactively monitor them, but most commonly will let them frozen at a specific version and miss all security patches.

Kotlin is great, but I think the "it" syntax was derived from Groovy.

I guess the point is you just can't defeat life. Just like in the Rocky movies, life will hit you eventually. It's easy to forget that while we are young and dreaming of being the next billionaire, but it's better to be prepared. You can be a Stoic and still achieve things, as long as you accept that you are not entitled to any achievements.

This book made me feel normal again. I am constantly being embarrassed by doors. Now I know I am not alone.

Yeah, absolutely, if your engineers decide to adopt serverless due to hype or just to improve their own curriculum, you are going to spend a lot more on infrastructure than you would by provisioning VMs or running containers. By being selective about which workloads are eligible to become FaaS and doing a little of optimization, however, you can cut some costs and avoiding overprovisioning, with automatic and efficient scalability.

I believe that, in most cases, it is better to control the exit costs of your architectural decisions than to avoid lock-in at all costs.

> It may be illegal to monitor networks for MAC addresses, especially on networks that you do not own

Isn't it odd that you can't read electromagnetic signals penetrating your walls without your consent?

Parent probably implies "with the exception of unsafe" when he says "normal code". Unsafe code is supposed to lack many of the benefits of Rust's memory model.

Not related to the core of the article, but it taught me I can pipe random gibberish (such as tcpdump) to the audio output and I am finding it amazing.

> there's no intrinsic reason that the same company that gives away labour as OSS should also make the best complements to that OSS

There are no guarantees that they will provide the best complements to their own product, but the common sense is that they will. From a marketing perspective, I think it makes complete sense, especially when selling to enterprise customers.

So the tool can generate a CA cert and automate it's installation. In my experience it can be painful to teach other developers to generate and install their own, especially if the Java keystore is involved, so this could be very useful for large teams.

Babel + a million lines of Javascript, and a few other build steps. Durying development, only the required modules are built, so it takes only a few minutes to get up and running, but a full build takes ~1 hour and produces ~100mb in bundles.

> the time it takes for clang to compile a full actual database engine (SQLite) in Debug build, with all 220 thousand lines of code, is 0.9 seconds

I immediately thought about some Java (Gradle) projects at work that take 10 minutes to build, and other transpiled javascript projects that take an hour or so. What am I doing with my life?

Software i18n is still hard to do, even in 2018.

Not completely related to the post, but sometime ago I had to build a calendar widget, in javascript, capable of displaying ISO and Hijri dates simultaneously. It turns out the most reliable way to convert between the two is to use a lookup table, similar to what Java Time does. Algorithmic implementations available started to drift in odd ways after a certain number of days.

People are quick to criticize Facebook here on HN, but this release is awesome. I believe open source speech recognition is still lacking, and any contribution is very welcome. CMU Sphinx and Kaldi are great, but it feels like the most recent advances in the field are still hidden behind paid services.

If you have to optimize the image pull time, i.e. when using Fargate or something like it, it makes sense to choose a very small distro.

I think you can use API Gateway as a proxy for Kinesis, removing the need for Lambda.

Wonderful pictures. The 360 views really help capture the feel of the city. Wish there was a way to fix the black hole at the bottom, though.