phillmv

Hello,

1. Package managers are very hard! The same problems wrt dependency resolution pop up again and again. Whatever you do, I recommend uhm, copying whatever Yehuda et al did for Ruby, Rust, Yarn, i.e. bundler/cargo/yarn

There's lots of prior art out there, and a few days of reading can save you months of terrible effort! Here's one example but there's loads more out there https://yehudakatz.com/2016/10/11/im-excited-to-work-on-yarn...

2. Namely, I don't see any lock files! I didn't look very hard. But get yourself some lockfiles. I also can't stress this enough.

3. Packaging signing really needs to be baked in from the get go, re: https://news.ycombinator.com/item?id=19733085).

Good luck!

different from _desktops_, but pointedly not browsers. from a HCI standpoint it's actually quite similar to browsers: sandboxed point and click

my dudes: charge yearly $$ to get a cert that allows you to request permissions higher than "access {camera, location while in use, microphone}" and most of the truly harsh PII issues go away afaict

the harm isn't consumer oriented, since it's somewhat diffuse, it's about concentration of market power in the industry.

we could live in a world where you target one distribution platform, and phone vendors compete to police malware, but instead we have walled gardens that police content & economically lock you to their environments and don't even do a good job about malware

I don't understand why people should not be permitted to go to netflix.com to install the netflix app, or to twitter.com etc etc

E como era a região, antigamente, antes do Estado Novo? Que interessante.

Só aí à dois anos é que aprendi que o eucalipto que tanto cobria o mato ao redor da aldeia, quando eu era pequeno, não é natural na europa.

i'm old enough to remember "whoa look at linus flaming someone" at the top of slashdot.

I would hate to take credit for work I didn't do, so I would just like to quickly set the record straight:

We had nothing to do with that feature! We legit joined just now. But it certainly demonstrated a certain synergy between our skillset and GitHub's feature roadmap ;).

Shameless plug but… we left Ruby and then came back ;) - https://blog.appcanary.com/2017/hard-isnt-simple-ruby-clojur...

It's tricky, it's definitely not the bleeding edge like it used to be but – if you already know the toolset well, it does a good job at what it's meant to.

yeah, especially because "[they] built the API in a few hours".

having hosers abuse your free geoip service listed off the first hit from google is nice but the data being provided can't just be "hacked together" :P.

>Rubysec is awesome but outdated, lacks many of the vulnerabilities in https://Snyk.io/

I'm one of the Rubysec maintainers.

If you're reading this and you know about vulns not present in the advisory-db, please submit a PR to the github repo, or use the crappy form we put together: https://rubysec.com/advisories/new

I too run a vulnerability notification service, and it's frustrating when other people use public data but don't contribute back.

Maybe by the time you climb the corporate ranks you're reduced to an efficient profit maximizer but I would presume they suffer similar incentives - there comes a time you'd rather kick back on a beach somewhere rather than Q2 reports.

To be charitable to you, maybe I'm just really underestimating how many people are chomping at the bit to gtfo;

having been self employed for "forever", it's hard for me to empathize: mid career A player at the goog probably could've made the switch much earlier, if leading a startup was what was in their heart of hearts.

I left this unvoiced but let's fisk it:

> new startups would be a status step down for them.

No, but highly paid executives can always go to a higher status company; similarly, if you were status-motivated but also a well placed mid career goog eng…

it's not clear to me you _needed_ a sweet bonus in order to switch to your startup, ya know?

>executives do switch companies somewhat routinely.

I think the theory of what I'm trying to advance is, what is good for the goose is good for the gander.

I personally feel I would be rather loyal to someone paying me fuck you money, but then again I'm well into my own incredible journey, so it's possible I'm now blind to status incentives relative to working at google.

I would buy this more if we routinely heard "problems with retention" as an issue with runaway executive compensation.

It's possible I've not seen them, but seems curiously absent in the discourse to me.

A related question: how often are the people here scaling their applications up and down?

Do you have large workload spikes, or traffic spikes?

You don't even have to go that far; half the people on these boards step over a homeless person to get to work every morning.

>Why weren't we funding the ACLU to help these people?

Well, I think that's easy to answer. People care more about causes when it affects them personally.

For better or for worse, few of us are strict utilitarian maximizers. I haven't quite settled how I think about it, myself.

>Which makes me curious what other art/media are important enough to stand in as a cultural literacy requirement?

The cultural cannon is rather large and you're likely steeped in it whether you realize or not! Pierre Bayard rather humourously explores this in "How to Talk About Books You Haven't Read" https://www.amazon.com/Talk-About-Books-Havent-Read/dp/15969..., to wit:

The important thing behind the cannon isn't that you necessarily have consumed every bit of the media but that you at least know what position it occupies in the culture and your position relative to it - what signals your peers send when they discuss a given piece of art.

The most accessible example of this is watching The Simpsons or Family Guy: most of the time you see them make pop cultural references they're, arguably, pointing to entries in the cannon.

>There has been no wave of LED-encrusted buildings.

Lol. Give them time. Here's two examples off the top of my head, in my city: http://urbantoronto.ca/news/2015/07/aura-illuminates-downtow...

http://canderelresidential.com/files/styles/building/public/...

It just dumps you into a revamped, less intimidating AWS console so I wouldn't be too concerned about this for now.

The thing that keeps me away from AWS services is the depth of the service - I need to be an expert in AWS on top of knowing how to configure my servers, which for now is maybe a non starter.

It does show you the power of packaging: with a simple domain and thrown together marketing page, you too can target another market segment.

… Apple may be replacing the top row of the MBP keyboards with a a context-aware touchscreen, and y'all assume somehow that this means they're getting rid of ALL of the fn keys?

No, you're still gonna be able to dim your screen and mute your speakers and yes cancel modal dialogs.

I am an advocate of ditching books you don't enjoy BUT

After the first ~300 pages, I began to understand how all the stories fit together and the book went from feeling like work to being a page turner I just had to devour.

>the mere mortals around him

I think I can empathize with your view, now.

Your mileage may vary, but as a mere mortal I personally find it much more reassuring when the role of luck is recognized.

Too many narratives are akin to:

"Well, I worked very hard every day without stop and tho I struggled at first - with how hard I was working - eventually the fruits of my labour yielded this unbroken string of successes thereby reaping my just deserts"

>Naturally talented

is fairly consistent with

>chock[s] it all up to chance

A little humility does great for ego burns.

a lot of the crucial work in engineering happens only after you learn when to say "no".

I do not follow.

The fourth amendment establishes that "[t]he right of the people to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures, shall not be violated"

Roe v Wade literally invented the legal right to privacy in the US: https://en.wikipedia.org/wiki/Roe_v._Wade#Right_to_privacy

>no precedent for political engagement actually helping!

Off the top of my head:

In the US: the fourth amendment, Miranda rights, the right to abortion, various efforts to decrim gay sex.

Here in Canada, Trudeau père famously said "there's no place for the state in the bedrooms of the nation", adding that "what's done in private between adults doesn't concern the Criminal Code"

https://en.wikipedia.org/wiki/Criminal_Law_Amendment_Act,_19...

Iunno, what's unique to ruby?

I can only think of module mixins. Everything else (blocks, anonymous functions, syntax sugar) can be roughly approximated (i.e. generics), since I strongly doubt the book would use any of the metaprogramming features.

That part was… unexpected.

You have to look at in context; Rails got started in ~2006, long before you could do everything in JS, and its purpose was to enable you to build a web app from top to bottom.

At a glance, I don't think you can really claim that the JS frontend world is mature or stable, so in the meantime muddling-along seems equally valid.

She's a freelancer, as are a lot of journalists. She said so herself: takes time away from paid projects.

Maciej livetweeted our demo day. I remember sitting there, refreshing, and being both a little relieved but also a little disappointed he didn't skewer us as well.

I also kicked in $5 to his Antarctica experiment. As far as I can tell, he's made a lot of good choices in his life, and would use the investment wisely.