nchelluri

> It took less than a week to migrate our codebase (a 10 years old PHP monolith)...

> And it took 4 hours to migrate our custom extensions.

That seems like a very small amount of work; I'm impressed at how smooth a transition that must've been.

I'm also quite surprised that

> we can handle twice more traffic with same infrastructure.

Wow, I didn't think that PHP application code would be such a bottleneck. Maybe it's not that, but if the entire codebase is written in PHP, and you replace it all in one shot, you just get such an improvement. But I thought DBs, etc. would play a bigger role.

Oh, I completely agree. I've ranted about this before; I like to use old versions and be a late adopter after all the kinks get worked out. I'm just saying maybe it's more due to a (possibly negligent) misplacement of priorities than to outright malevolence for non- or slow-upgraders.

"We're Apple... everyone always uses the latest versions of our stuff..."

I love that comparison. Just came here to say that.

I'd guess not "ransom", but not enough resources allocated to backport fixes, along with a lack of incentive since they fixed them already in the gold standard New Version.

Thanks for the clarification. This makes a lot more sense to me now. So if Internet Service X is not ordered to take something down, but told that "[poster] was ordered to take something down", they should be allowed to ignore it. Seems like it'd solve the problem to me. (Especially since it wasn't [poster] but some name-a-like who may not exist.)

If "platforms [were not] legally bound by them" wouldn't that pose some serious difficulty for legitimate takedown injunctions?

I mean, sure it'd prevent fraudulent crap like the stuff that is going on in this article, but if someone had a real issue where they needed something taken down, it would never get taken down, right? So I think there needs to be a more involved solution than that. Otherwise we leave the door open for all sorts of nasty stuff to be posted and just left there for eternity to show up on the first page of search results.

Won't he get sponsored for a visa if he gets an offer?

I mean, it's not a must that a company would offer sponsorship, but if they didn't I think there'd be no use in an offer.

Good story about the Borland guy though.

I would never be brave enough to try something like this.

I wonder what will happen to products like SageMathCloud using RethinkDB now that the company is gone away.

Will support contracts end? Will people run into new problems and be stuck without help when this happens? Just curious to see what happens.

Location: Halifax, NS, Canada

Remote: Yes

Willing to relocate: No

Technologies: Ruby, JS/Node.js, PHP, Java, MySQL, MongoDB, git, and a wide variety more

Résumé/CV: https://linkedin.com/in/narsimham

Email: nchelluri.public+hn AT gmail.com

I build things and do it well. Primarily my focus has been on application development. I can take (and have taken) a project from end-to-end.

Suppose I ran a small company with a small dev and ops team of 3-4 people, running a Rails app with a MySQL database, typical setup say, Nginx front end proxy to servers running mod_passenger, a separate staging and QA environment. What services would you provide to me if I paid you what I would pay a well qualified security person?

Just asking out of curiosity, I've been dabbling in web/app security for the past couple years and know it's a very broad and deep field. I know about protecting against XSS, CSRF, SQL injection, and the basics of OWASP Top 10, but not sure what you'd be doing and how you would provide me service. Would it be an ongoing contract or a one time or as-needed service?

As a side note: http://lcamtuf.coredump.cx/tangled/ makes me feel like I've never considered the possibilities of anything thoroughly.

I think your point is valid, but even so the person you were replying to turned out to be correct.

There's an edit at the end of the article:

> Currently in the middle of a Chrome Version 52.0.2743.116 m test. We have been able to see a pace of over 24GB/ day of writes on this machine...

24GB is higher than the 10-12 he was complaining about from Firefox, even.

I agree, but maybe a transformer step could do it automatically. Write full HTML, generate less.

Yes, but some places tell you not to do scripts there when possible and load them instead at the bottom of the page because the page loading pauses while the script is downloaded (if not inline) and executed. See https://developers.google.com/speed/docs/insights/BlockingJS

Looks interesting, thank you for the link. I've already dived in to the first chapter.

I've gotta be honest, I've read about half of this so far and I'm not quite sure what I'm looking at.

Every object conforms to an interface, including some error handling functions. The interface is about composition and transformation and iteration/operation (map).

Is this about functional programming? It seems like it must, but I know very little about that and still have no real idea what the benefit of this is or even its purpose.

Edit: So I see that these are algebraic properties that are being defined, to relate it to my limited knowledge I see that Setoid define an equivalence relation interface, equals, which your objects must conform to.

My next question is what is the benefit of programming like this? Maybe I'd have to brush up on my algebra and learn how these relationships/"specifications" are useful.

I am actually kinda curious about this, but it's a little hard to penetrate.

Thanks for the answer straight from the horse's mouth! I'd often heard about companies storing their code on GH and didn't understand how they could get away with using a SaaS app available on a public cloud; now I know, they can just run a self-hosted version on their own private network.

I am not your target market, FWIW, but just a curious developer.

Thanks. I was unaware this existed. Looks like it was launched in 2011[1]. Somehow I thought that with their (presumably, from what little I've gathered over the years) complex infrastructure setup this would be hard or impossible. I wonder if they have an Enterprise team devoted to keeping up with a SaaS mainline and how much work they have to do, or if they made/make some decisions that make this (Enterprise) a fairly self-contained "it just works" sort of thing.

[1] https://github.com/blog/978-introducing-github-enterprise

I'm not sure "missed opportunity" is the right name for that :)

Where can I find a link about self hosted Github? Just curious to read about it.

I upvoted and am hopefully awaiting a response from someone who can chime in and explain why this is a problem.

Amend after push, I could see. You commit, push, amend, push, but after your first push someone else pushes... then you have two heads. I could see that, but I'm guessing you'd mention that if it were the case.

If one were to attempt avoiding amend you could always make all changes in a feature branch and rebase this branch onto your target afterwards, squashing commits.

Maybe you can open my eyes a bit, because right now that seems like splitting hairs to me.

One way or another, the audio is cut off. Just because it's another jack/plug customers won't be upset?

Man, I hope whoever thought of that got rewarded accordingly. What a surprising fix. Nice combination of low-tech/low-effort and creative.

I guess this sort of thing wouldn't happen today with the always-connected, always-phoning-home world we live in.

thanks, I've turned it on; I'll see how it goes.

Ah, so because I use addons I might not be seeing these benefits for some time? Good to know.

Chrome is right now way faster for me, but I prefer using FF so I am in the Mozilla camp right now. Eager to see this rolled out. Early versions of e10s were very fragile and not so usable for me, so I switched it off.

Would you employ a Canadian citizen? (i.e., would it be appropriate for me to apply?)

I believe it allows you to send outgoing mail using Mailgun which is trusted (doesn't end up in recipient's spam folder) but receive incoming mail to your server.

I made a little tool to download all of the Who's Hiring posts and put them on a webpage. Then I added some Client Side JS to allow you to do filtering based on keywords. It's not perfect, like the Remote button shows a job listing that says "onsite/remote coding project" as part of the interview process. But it's handy and I've used it while building it and firing off a couple cover emails. I'm looking for a job :)

Also, I tried doing this entirely client side using HN's Firebase API, but it was hard because there was no way to bulk fetch and it seemed like a very small DDOS attack if lots of people opened it. Plus HTML sanitization in JS might be hard for me.

Your URLs 1 and 2 seem broken. This a bug somewhere? Could you repost them please? Also on 3 and 4 the mean wage for Software Developer, Applications and Systems seem quite a bit higher than the other category you've highlighted (though Web dev is not so much).

On another note, I'm going to make myself sick reading about this stuff. I find that the reality is a bit of info is helpful for guidance, and too much is like tabloid journalism or sickly sweet candy.

http://user:password@example.com is valid syntax to supply u/p. Also, I suspect uri is first used up above in code we're not shown.