john-shaffer

Apple will ban them if they do that. You're not allowed to link to or even mention alternative payment methods. You can't even point out that the price is 43% higher to cover Apple's cut.

This is true, but I would hope that readers here know enough to at least keep WordPress up-to-date. Most attacks target old exploits. There are millions of small WordPress sites that may never get hacked if they stay updated. If you become big enough, however, you become a much more likely target for zero-days. In that case, you probably don't want to be running WordPress any more than you want to be running Windows.

It's often a requirement that non-devs be able to edit the website. WordPress is okay if you have a site that you don't really care about and isn't worth hacking, or if you can afford to pay Wordfence $99/mo and take the time to make it reasonably performant.

Gatsby is not a CMS. It would be very nice to have a well-designed and supported CMS that is actually secure and efficient by default.

> How much more complicated can it get then "Here is HTML, CSS and JS put it on a webserver."?

My favorite so far is the combination of WordPress and Gatsby in such a way that you get the worst of both worlds. E.g. building a single page requires creating 10-20 posts in WP, with zero ability to see what changes will look like without actually deploying the site. All this complexity instead of just setting rel="preload".

Epic had a lawsuit and an advertisement already prepared. They were not bluffing, and they were very confident that Apple would "call" them.

I agree that spamdexing is a huge problem, but could the rise of rel="nofollow" contribute just as much? The vast majority of user-generated content is marked as nofollow, but this is largely the same type of content that made early Google good. I often get better results doing a reddit search than using a search engine. It seems that by ignoring user-created links, search engines are ignoring 90-99% of the signal. The rest of the signal is mostly from commercial and promotional sites, so it's not surprising that these make up nearly all of the top search results.

I often do want results from commercial sites such as nginx.com, but I want results that real people have found valuable and not results that some paid blog post linked to.

I'm not sure if this will work. Google results are absolutely horrible for me, but not for my brother. It may be because they don't have a profile on me, but they have years of data on him. Using a proxy search engine may result in degraded results for someone who is currently getting good results from Google search.

> I thought we are trying to stop hate for characteristics someone has no control over (sex, sexuality, race, gender, disability, nationality).

Some of use are, but we seem to be losing.

> Shouldn't someone be judged on their character and thoughts, not their biology or circumstances?

This is considered racist now. This was explained to me by a friend that if a person wants to be seen as a "$race man", than not seeing him that way would be offensive.

How are landlords not a minority? Are 50% of people landlords? (Asking seriously - I don't understand what definition of minority is being used here.)

He could just use AWS.

KeePassXC asks for permission to share each credential with the browser, with a "Remember" checkbox. You can have convenience for your unimportant logins while keeping your sensitive credentials fully secure.

> Adam Smith... was hence a strong supporter of Labour Unions.

Do you have a source for this? I can't find anything but SEO junk.

You asked "Put another way, are there many people devoting their entire working lives to OSS with no other compensation or resources, essentially going bankrupt to write OSS?" He answered, "I wound up nearly going into debt". There are different meanings of "bankrupt", but "out of money" is a reasonable definition to use in this situation.

Besides that, it's in extremely poor taste to marginalize someone's sacrifice of two years just because you think they're privileged. It's usually better to make much of someone's contributions than to minimize them.

There are lots of random downvotes for no real reason. Sometimes perfectly ordinary posts are dead. I try to upvote gray posts if they're not worthless.

That said, my take (and that of siblings) is that I'm much better off building my own containers than serving as unpaid Q&A for Bitnami. It would be smart to use containers built by people more expert than I am. Containers that are broken by default do not meet that criteria. So, "reach out to community support" is not helpful to people that have already decided to ditch Bitnami.

> We're careful to pin versions, and hadn't anticipated someone would re-write history and break published code.

This is exactly the kind of thing that will make me ditch a company forever and never look back.

There are massive differences in how much of a problem this is across different platforms.

With Clojure, I can think of 2 times ever when a dependency caused an issue. It was extremely obvious since the issue was "won't compile", and the fixes were simple.

With PHP, I expect any change to potentially break something. Bump your AWS SDK which uses a different minor version of guzzle? Fatal error.

There's a world of difference between breakage being an everyday thing and a true rarity.

> Why people in US think that working a lot makes you rich, when the opposite is true?

Because many of us know people that worked their ass off and became wealthy. Does that not happen in Europe?

I've never thought about it before, but I've consistently used "image" ever since I learned about the <img> tag as a kid. It's very interesting that you can segment groups by which word they use.

That's because he has much more detailed knowledge of Android's backward compat story than he does of Windows's.

> [Google] contracted with a company called Bitnami to create a bunch of “click to deploy” solutions, or perhaps I should write “solutions”, because they don’t solve a fucking thing. They’re just there as checkboxes, as marketing filler, and Google never gave a shit whether any of them worked from Day One.

I've had similar experiences with broken Bitnami images that makes it seem like they aren't even tested before being released [1][2]. Their WordPress images do work, but the way file permissions are configured doesn't play well with the way they have WordPress set up [3]. Have I just had bad luck, or is this a common experience?

[1] https://community.bitnami.com/t/cant-authenticate-to-fauxton... [2] https://community.bitnami.com/t/couchdb-server-log-gives-wro... [3] https://github.com/WP2Static/wp2static/issues/598

This is a completely useless discussion if you're going to assume that code depends on "very weird edge cases" with no idea of what the code actually does.

While life in prison remains theoretically possible, your link makes it seem that it will most likely never happen:

> On July 10, 2009, Chadwick was ordered released from prison by Delaware County Judge Joseph Cronin, who determined his continued incarceration had lost its coercive effect and would not result in him surrendering the money.

14 years is pretty crazy, but all-time records are usually extreme.

> > Have fun debugging code that worked perfectly well for years and now produces unpredictable results.

> This describes my everyday experience with any language or codebase.

That is horrifying. That should absolutely not be normal. I don't know what you work with normally, but it's clear that we are working in completely different worlds.

You're talking about hypothetical code, but I am talking about actual code that worked fine but no longer works after an upgrade. Perhaps it was poorly written, but it was not buggy.

I can't think of a single time that I've seen a bug exposed by language changes. I have seen dozens of bugs created by language changes, however. (Mostly crashes).

I've had the exact opposite experience. It's unusual for an upgrade to not break something.

There are dozens of breaking changes in this release alone: https://github.com/php/php-src/blob/96c7d42a3ca9d822a08b3dd4...

Some of the changes are sadistic. "The precedence of the concatenation operator has changed relative to bitshifts and addition as well as subtraction." Have fun debugging code that worked perfectly well for years and now produces unpredictable results.

Such a proxy would be a completely different beast than affirmative action. Affirmative action means that uber-rich minorities are helped more than dirt poor Asians/whites. I don't think that any race-neutral proxy could ever approximate a race-based policy.

That's unlikely to happen simply because it might actually work. Many political figures want people to feel oppressed. If people's circumstances were improved enough (or their perception changed enough) that they no longer felt oppressed, then those politicians would have trouble getting votes.

I don't think he's talking about Amazon's donations, but BLM itself. There is a big DONATE button on blacklivesmatter.com, and they take in millions in donations. No one knows how it is spent.

> At Viaweb, as at many software companies, most code had one definite owner. But when you owned something you really owned it: no one except the owner of a piece of software had to approve (or even know about) a release. There was no protection against breakage except the fear of looking like an idiot to one's peers, and that was more than enough. I may have given the impression that we just blithely plowed forward writing code. We did go fast, but we thought very carefully before we released software onto those servers. And paying attention is more important to reliability than moving slowly. Because he pays close attention, a Navy pilot can land a 40,000 lb. aircraft at 140 miles per hour on a pitching carrier deck, at night, more safely than the average teenager can cut a bagel.

> This way of writing software is a double-edged sword of course. It works a lot better for a small team of good, trusted programmers than it would for a big company of mediocre ones, where bad ideas are caught by committees instead of the people that had them.

http://www.paulgraham.com/road.html

It's strange to see an Atom feed given as a sample "RSS" feed.

It's a nice demo though.

As one example, Django's auth framework gives you a users table which it manages. You would set a foreign key column from customers to users.

I believe the point of GP was to say "use an auth framework". If you're rolling your own auth, then your approach is fine.

Most document databases have JSON editors, which are very useful at times but don't have any schema checks.

By "typed language" I suppose you mean "statically typed language". This isn't relevant because A) JSON types exist and B) I've never had a problem with unexpected types from user data in a dynamic language, not even in PHP.

> Otherwise, how is this not caught when it enters your system?

It should be caught, and it's very important that it be caught all of the time and not have any issues due to bugs or version mismatches. That's why the schema should live in the DB.