luckylion

figma has figma make to do these things, and it's much worse. It can only generate react code, even if you ask it not to. claude design worked great on the first attempt for me, miles ahead of what figma make does.

Bot comments and uploads count in KPIs. Blocking/Removing bots = KPIs look worse.

> But also, homicidal is doing some heavy lifting here, isn't it?

Yeah, wishing someone's family to be chopped to pieces isn't actually homicidal.

While saying no such thing and not acting in such a way that suggests as much is deeply suspicious because that's just being "polite and closeted about it". And thus the totally not homicidal brutal-murder-liking-people who are absolutely not wishing death and destruction on people not sharing their ideology are the ones to support. because the others are fascists, because they don't say they want the families of others murdered.

They would be if it wasn't easy to import them. It's not like modern mass production has made gun violence possible because up until then it was too hard to manufacture guns.

It's similar to services: you can your own email server, but it's much more efficient to use some vendor and let them do it for you. But if all vendors cut you off, it won't be impossible for you to host your down email, it'll just be less efficient.

A big part is also that wp.org is very tolerant of malicious-adjacent actors.

Actual malware? the plugins will get blocked.

Plugin randomly starts injecting javascript from a third party domain that displays some football related widget with affiliate links? they figured that's perfectly in the (new) owner's right and rejected any action even though it was a classic bait and switch with an entirely unrelated plugin.

At some point you have to assume it's by design.

You're arguing that being an open fascist is better than being someone you suspect to be a fascist, even though they haven't said anything that confirms it.

Weird take.

I think the point was: it might be a bit more expensive for them, but it wouldn't stop them from getting guns. Guns are important to their business, they would manufacture them themselves if they could not buy them.

Would it cost them more? yes. would it be the "number 1 priority" because it's so impactful? no, obviously not.

the "young ambitious" horrible human being. but his "parents are in the army", so it's all good.

Hanlon's razor suggests that browserstack has made the conscious decision to use a vendor and share data with them. Companies of that size don't YOLO those things, that relationship and the data-sharing has passed through legal, they have a contract in place.

Don't assume businesses operate the same way some job-hunting person on monday morning is.

> People don't pay that much for occasional usage and many/most people will organise themselves to use all or most of their weekly allowance when the expense is in that ballpark.

I don't think that's accurate for professional users. Personal users, especially those for whom $200/m is a significant cost, will definitely try to get the most out of it.

I know several $200/m user (I'm on the $100 personally), and they've all had the same experience I had when first upgrading to the max package: initially you try to use it as much as you can and feel like you need to keep it busy. But that goes away after a few days and you use it when you have need. The primary point of the max tiers for my peers is to not hit limits during their work if they occasionally use it intensively because it's disrupting to have to wait for X hours to continue.

If you get a benefit from using it, and you bill at $200 an hour, and you work 160+ hours a month, the $200 monthly cost doesn't register as a significant cost and you won't make it determine your usage patterns. I'm sure that'd be different if VC money goes away and it turns out the true price would need to be closer to $5k, but at this point it's similar to your ISP for fiber costing $80 a month. You enjoy the speed for a few days, but then it becomes the new normal.

What's the difference? The users think they talk to some specific person and form a connection with them, and they don't.

Whether they get strung along by a human, a chatbot, or a simple cronjob - does it matter?

We're very boring, our stack is PHP/postgres/mysql. A lot of Symfony, a lot of Symfony-style-code on top of Wordpress (mentioning that usually puts people off but it's all PHP in the end, and you can choose to write clean code on either).

Lots of people see PHP in general as a dead end career-wise and WP specifically as almost an insult, so there aren't many that advanced their skills and have continued to work with PHP (or Wordpress, but I believe that an experienced PHP developer has no trouble picking up WP).

We're generally very neutral on how someone arrived where they are, we don't require certificates or degrees, we focus on experience and skills. I wouldn't hire someone who isn't experienced with at least one side of our stack though (unless they're extremely good) because it takes time from other developers to upskill them and that's the one resource we don't have.

I won't disclose where I work though as that would dox myself and I much prefer anonymity.

That absolutely makes sense, but I'm not sure it is the reason. I mentioned we're remote first: we hire _everywhere_. I've been with this company for 7 years, and haven't traveled to HQ even once, and have worked from home or a spot of my choosing (but honestly, that spot is almost always home!) every day, that's how remote first we are - nobody has to uproot their life to work with us.

But it's still extremely hard to find senior+. I'm sure our tech stack plays a role, and naturally senior developers are much less common than juniors. But whenever I hear about the job market being super hard, I feel like I'm living in a parallel universe.

AI is not replacing anyone from my perspective, but AI might become our only hope at some point, because we're growing aggressively. I have to keep mediocre people because I can't even replace at that level easily - the only ones I'm pruning are the ones that are net-negative contributors.

not GP, but we're hybrid but remote-first and 80% is remote and we have the same experience. Getting juniors is easy, getting seniors+ is very difficult.

Could be, but this doesn't. It has the same name and is _about_ the same thing, but it doesn't look like the other site.

Just because you have pocksuppet.org and I hack pocksuppet.net doesn't mean that one of us is phishing.

"Phishing" has a _very_ different meaning from "offer the option to sign up for a newsletter", let's not conflate the two.

Sorry, got distracted.

Anything you can do with query builders, you can do with SQL of course, it's just more difficult / verbose (to me).

Let's say I have a lot of entities that are tied to domains, and I have users that have roles on those domains. I do a lot of reports, and for the vast majority, I don't have to worry about whether a user has the necessary access on the domain, I just call a central service, pass my query builder, the user, and the required access level, and it figures out whether the query builder already contains the necessary parts or not, which joins are required (e.g. if I'm selecting from subdomain, I need to join with domain and then join domain to user_domain) and add all of that transparently. I can treat service accounts differently, and I can just ignore all of that noise if a super admin is running the report.

I could absolutely do all of that in SQL, the SQL doesn't really change (if anything, query builders tend to produce worse SQL in my experience since you're not writing DB-specific code), just how I interact with it. The abstraction allows me to compose the query instead of writing it, giving me more flexibility.

No, I'm saying if you want to alter SQL queries programmatically, you'll either do some quick hacks with regexps that you'll regret, or you need to build something to do that, and that will look suspiciously like a query builder.

But there's also value gained in it, isn't there? I very much like doctrine's query builders and being able to analyze and manipulate queries programmatically, e.g. dynamically add a filter to a query and a join if needed. That's pretty simple with a query builder once you've gotten comfortable with the concept and the ORM itself, but it's pretty hard to do with plain sql unless you write plenty of specific code to handle all the known things you might care about.

The day where they'll be hard to tell apart from humans is close. My alarms didn't ring on this on already, I'll be taken out by the first wave of impostors :(

I agree after a closer look though. the pattern is so strong, you can identify it visually. comments 2, 3, and 4 are all three paragraphs, the next three are all one longer paragraph, and all are of very similar length.

It always depends on who you consider the user. The one who initiated the agent, or the one who interacts with it? Is the latter a user or a victim?

Somebody who a) directs DDOS attacks and b) abuses random visitors' browser for those DDOS attacks is never the victim.

You don't know their motives for running their site, but you do get a clear message about their character by observing their actions, and you'd do well to listen to that message.

this is grey text from tailwindcss.com, I wouldn't call it easy and readable.

<div class="relative before:absolute before:top-0 before:h-px before:w-[200vw] before:bg-gray-950/5 dark:before:bg-white/10 before:-left-[100vw] after:absolute after:bottom-0 after:h-px after:w-[200vw] after:bg-gray-950/5 dark:after:bg-white/10 after:-left-[100vw]"><p class="max-w-(--breakpoint-md) px-2 text-base/7 text-gray-600 max-sm:px-4 dark:text-gray-400">Because Tailwind is so low-level, it never encourages you to design the same site twice. Some of your favorite sites are built with Tailwind, and you probably had no idea.</p></div>

If there was a strong relationship, shouldn't Brazil be much richer, given that a lot of slaves were forced to live & work in Brazil?

You don't need to access (or even have access to) the DB server itself (e.g. to read the query-log), you can do everything by just setting a different host to connect to.

He might have, and my experience is that you cannot teach inconsiderate people, they lack social object permanence: as soon as you don't stand in front of them, they become unaware of your existence and thus are also unaware that their music at two in the morning might be annoying to you.

Better windows don't help either - but they're great for noise outside. The only thing that helps against horrible neighbors is moving. If you've never learned that lesson, you've never had horrible neighbors.

Probably, but that isn't a management role, they're not a manager, even if the job title includes the word manager.

It's not always a protest against government, sometimes it a campaign of lobbying, sometimes it's international attention.

The US government wasn't a friend of Kony in 2012. Before Trump 2, the US were not that friendly with Russia, yet people protested in many places around the world to show support for Ukraine and to voice their opposition to Russia's imperialistic wars, being aligned with their governments' position.

It's different with Iran. Some of that is likely to be Iran's lower profile, but not all -- it's not like media outlets are not reporting on it at all and you have to get your information from niche sources to hear about events in Iran.

It's true that the recipient of the protest might be different, but that's no reason to be quiet.

China in Tibet, China's treatment of the Uyghurs, Russia's war against Ukraine, Kony 2012 etc, there are lots of causes where the local government in whichever country you look at isn't actively involved, yet there was a lot more public noise and campaigns.

I don't know what the answer is, but "my government doesn't deliver weapons to them" hasn't been a reason before, so I don't see why it would be now.

I disagree. Build for your target audience and your targeted application. We don't need for every vehicle to be off-road-capable when you're expecting to deliver cargo on paved roads. We can do that, but it will make things more complex and more expensive.

I'm not saying that nobody should ever consider "the state cuts off the internet" as a criteria when deciding what to do, but making that a foundational requirement is like starting out with "handle google-scale" as a requirement when you have zero reason to believe you will.

There are plenty of good reasons for local first apps, but "build for darkness" is pretty far down the list for me.