michaelmcmillan

DNS is actually pretty nice for ACL [1]. Just make sure you use it with DNSSEC.

Want to check if Tom has access to /web/mike? Just do a lookup on the user in question with the reversed path you want to check.

"Can Tom read /web/mike?" => tom.mike.web.server.net

Advantages:

- Replication to multiple machines is trivial (piggybacking of DNS, after all).

- Lookups are fast. Can also be easily cached.

- All sane programming languages have built-in DNS resolution in their stdlib out-of-the-box.

- Manual override using /etc/hosts for debugging/emergency.

1. https://itk.samfundet.no/dok/ITKACL2

Terraform has released something very similar, but not stable yet: https://www.hashicorp.com/blog/cdk-for-terraform-enabling-py...

Yup! I'm currently running a b2c solution for a client that's grossing ~$3 million/year using Python + sqlite3 behind nginx.

I work for another shop that scolds me for even suggesting using something else than k8s. How can a persistent file system possibly scale? Lol. Ironically they're grossing -$3 million/year.

"As of now, October 4th, we have received four payments totaling $51,500"

What a joke. That's an hourly rate of $20 (assuming 5 researchers working for 3 months). Just enough to buy a MacBook to do the research in the first place.

yc was 0 to 1, not 1 to n. You can't be greedy when doing 0 to 1: you'll just fail. But those imitating yc are doing 1 to n, and it's easy to underestimate what made 0 to 1 work in the first place.

I'm a fanboy at this point

{ Start, Stop } - { Begin, End } = ∅

I thought we still used two connections with FTP?

Waking Up by Sam Harris and Uncommon Knowledge with Peter Robinson. Lex Fridman and Eric Weinstein's podcasts are also pretty good most of the time.

> I wonder which company successfully runs a monorepo in git.

Google. They're not using git, but their own scm: https://research.google/pubs/pub45424/

Which is consistent with what I wrote.

Stepping on the breaks perfectly align with what we know scientifically. People think of science as something very narrow – but it's also evidence and rationality. What China and South Korea have done works. What other alternatives do we have?

You're putting words in my mouth, congrats. Every exponential in the "real world" eventually turns into a logistic curve. Can you tell me when the inflection point will occur? No? Okay, good luck to you and your family.

Exponential growth.

That sucks! But the real lesson should be that you do not expose your database on the internet (0.0.0.0 vs 127.0.0.1). That way it doesn’t matter if you leak your .env via your webserver. Never expose sensitive services.

Dr. Ignaz Semmelweis on discovering the effects of washing your hands before operating on patients. Simple, yet highly effective.

Uhm, anyone else worried about the security here? What if someone were to draw a “parking lot” polygon that resulted in a path to water?

Sounds like premature optimization to me. An empty string will take constant time. Much more concerned with communicating intent, and .textContent is just confusing.

.innerHTML is great for wiping parts (or the entire) DOM. But yah, should definitely not be used with anything other than an empty string.

Example:

    document.innerHTML = '';

Author here. Actually, we were in California when all of this went down. Total coincidence.

So I guess we should "transpile" static objects into strings that we call with JSON.parse?

Not sure if I should end this comment with a /s or not.

Some friends and I hacked Blackboard last year. We exploited it by smuggling null bytes (0x00) via. their WebDAV protocol.

This made it possible to hijack other accounts, including our professors'. So we hacked our own grades and then reported it. Luckily we didn't suffer the same fate as Demirkapi.

Blog post here: https://bustbyte.no/blog/how-we-hacked-blackboard-and-change...

If you find yourself fighting with mocks, ask yourself: is there a deeper design problem with my code? I often find that things I can't test easily have crappy design.

I can't help you if you don't see the connection.

Let's try to avoid using a hammer on anything that resembles a nail: https://github.com/valvesoftware/steam-for-linux/issues/3671

No, not really.

I never said I couldn't see how... Just pointing out that we need more data to know cause and effect.

Not sure if I agree. This is how I parsed it:

humans have become less active → our intelligence has suffered as well

How do you know that the causality is flowing in that direction and not the other way? It could also be that we are getting physically worse because our IQ is declining.

And again we're back at my original question... This is just a never ending loop. My whole point is this: How do we separate our inherited traits from the privilege brought on by our "class"?