HNHacker News
TopNewBestAskShowJobs

rubyist5eva

1,522 karma · joined August 31, 2020

submissionscomments
rubyist5eva··on JetBrains invites developers to join the Fleet Public Preview Program
IntelliJ Ultimate lets you install all of the different language toolkits into one IDE via plugins.
rubyist5eva··on Take a break
10 months without work? I mean this as a sincere question but…how do you afford to live?
rubyist5eva··on Mortal Kombat+
I have met a few of my heroes and I have always been let down. I hear Ed is a nice guy, but I don't think I could take being disappointed again.
rubyist5eva··on Mortal Kombat+
Aww, I was kinda hoping this was something official because of the 30th Anniversary.
rubyist5eva··on Take Advantage of Git Rebase
We require linear history on our shared mainline branches so the squash workflow works great for us using Github as well. Another benefit is the "show changes since last review" option when reviewing a PR - it's been a while but I'm not sure if this is possible with a rebase-based workflow.
rubyist5eva··on All Twitter users in the US will start to see crowdsourced fact checks on tweets
I don't consider Wikipedia an authoritative source for anything at all. Looking at sourcing for many articles easily reveals the inherent biases of the editors.
rubyist5eva··on Take Advantage of Git Rebase
Personally, I actually stopped using rebase or advocating it's use (because noobies mess up their history all the time with it). I just commit whatever, then when the code is merged to trunk/dev/master/whatever I use `merge --squash`.

Reviews are very rarely happening on the commit level, so having lots of small "meaningless" commits (lint fixes, fix spec, add thing) hasn't been an issue but having squashed merge commits (effectively a rebase that squashes everything) has made release management so much easier for our team.

It also has the benefit of just less cognitive overhead of micro-managing my feature branch commits that are WIP or currently in-review.

rubyist5eva··on Take Advantage of Git Rebase
In your view if a PR is not rebased but trunk is merged into it, does that warrant a full re-review? The end result is functionally the same as a rebase.
rubyist5eva··on All Twitter users in the US will start to see crowdsourced fact checks on tweets
This is not how facts work, JFC.
rubyist5eva··on Raft Is So Fetch: The Raft Consensus Algorithm Explained Through Mean Girls
I'm a 40 year old man and Mean Girls is one of my favourite movies of all time, not even in a guilty-pleasure kind of way. I love it.
rubyist5eva··on Highlights from Git 2.38
--update-refs sounds fantastic, can't wait to try it out - I run into this problem all the time and rebasing multiple branches is such a PITA.
rubyist5eva··on Overwatch 2 will require a phone number to play
Wonderful
rubyist5eva··on Overwatch 2 will require a phone number to play
> In that sense, there's really very little difference between Overwatch 2 and an update you don't like in any other live service game.

Yeah, I totally get it. I'm still miffed that they updated the game in a way that leaves me unable to play the version I actually like. I do not find this new update appealing at all.

When Overwatch came out (when I bought it) "live service" games hadn't really reached a critical mass in the market yet so the idea that they would do something like this was kinda unheard of.

rubyist5eva··on Overwatch 2 will require a phone number to play
This is way less egregious than Blizzard shutting down Overwatch 1 (which I paid for) and just replacing it with Overwatch 2. It's not even out yet and previews are not great, especially the new player grind - it seems designed to explicitly fish for the whales from the original game only. As someone that plays OW casually, I'm not happy that Blizzard is taking away something that I paid money for and giving me something that I do not want in the slightest.

I can still play CS:Source to this day, yet they need to shut down Overwatch because the sequel is out? Modern gaming is absolute garbage. This whole "you only purchase a license to play the game" nonsense is getting out of control.

rubyist5eva··on Reducing logging cost by two orders of magnitude using CLP
Thanks for the clarification. I appreciate the info, and all-in-all I think MongoDB seems really good these days. Though I did have a lot of problems with earlier versions (which, I acknowledge have mostly been resolved in current versions) that have kinda soured me on the product and I hesitate to reach for it on new projects when Postgres has been rock-solid for me for over a decade. I wish you guys all the best in building Mongo.

Getting back to my main point though, less the bit of sarcasm, is more of a general rule of thumb that has served me well is that if you already have something like postgresql stood up, you can generally take it much further than you may initially think before having to complicate your infrastructure by setting up another database (not just mongodb, but pretty much anything else).

rubyist5eva··on Select * from cloud
I feel my abilities as a developer really took off when I took the time to really learn SQL and take advantage of the features that my database offers. For example, learning to use window functions felt like that galaxy brain meme where you become one with the universe.

Being able to take 50 lines of ruby code (manual (anti-)joins and aggregates, result partitioning, etc...) and replace it with a couple lines of sql that is much faster and less buggy is a life changing experience.

The only other time I had such a dramatic shift in the way that I look at building applications is when I learned Scala (functional programming).

rubyist5eva··on Reducing logging cost by two orders of magnitude using CLP
Postgres has excellent JSON support, it's one of my favorite features, it's a nice middle ground between having a schema for absolutely everything or standing up mongodb beside it because it's web scale. Us in particular, we leverage json-schema in our application for a big portion json data and it works great.
rubyist5eva··on Ask HN: How does your company handle late running projects?
Looks neat but we're all in on Tracker so not sure switching is on the cards. I'll keep it in mind for other projects/teams in the future though, thanks.
rubyist5eva··on JWT vs. Opaque Tokens
Don't roll your own JWT implementations for client side applications, for the love of dog don't.

Story time.

Our company recently switched to JWTs for our SPAs from regular OAuth2. I told them up front - we need a way to invalidate a token if an account is compromised. The lead on this initiative said we can blacklist any token. I told him that's not practical because you would need to know the exact token to be able to blacklist and because we don't store them in the database and don't log them have any real way to figure out which token is being used by an attacker and which are not that it's basically useless.

I suggested a simple fix: cypher the private key we sign the JWT with the hashed password of the user account we're generating the token for. If an account is compromised, we can reset the password and invalidate all tokens for that one user.

I was ignored and lo-and-behold within a month CTO and tech lead are trying to track down JWTs for a hacked account. I told them we can update the app to cypher the key, it'll invalidate all tokens and people will have to log in again but at least they'll be secured. Nothing has been changed to this day, despite banging this drum for literally over a year. We've recently extracted our authentication into a micro-service (for no reason really, i'm still mad about this too) and still nothing has been done about this issue when it would have been the perfect time to fix this.

I love my job but "priorities" and "business cases" as an excuse for this kind of incompetence is rage inducing.

The point I'm trying to make is. You are most likely using some kind of web framework that can just plug in an authentication implementation, just use that. NIH is very real and it is more than a waste of time, it can be dangerous.

rubyist5eva··on Ask HN: How does your company handle late running projects?
I want to vouch for this 100%.

Personally, on my team we use Pivotal Tracker - it tracks our velocity for us and automatically "guesses" our release date based on our velocity. If we aren't happy with the projected date, we reduce scope aggressively. Clients see our backlog and can see when things change. Most of our project planning is completely automated by Tracker - we just create tasks and point them. It's the only thing that has been even remotely successful for us. If I had to give up Tracker for Jira I would quit my job.

rubyist5eva··on You don’t want to be on Cloudflare’s naughty list
Cloudflare is on my naughty list. I actively advocate against people using them.
rubyist5eva··on Factorio is coming to Nintendo Switch
One game that I didn't think would work well on a controller was Rimworld but it's actually really great, and I love playing Rimworld from the couch. Hopefully the same amount of care for controller controls goes into Factorio.
rubyist5eva··on Factorio is coming to Nintendo Switch
dammit, my life is over - goodbye family
rubyist5eva··on A development process to ship features fast
In my experience, tests speed you up in the short-run too. I've run this experiment myself at my own company within different teams. Code that lacks tests has the most bugs, the most QA returns, the most churn, etc....we end up spending (read: WASTING) much more time and money fixing broken code that has no tests than any other code in our entire codebase.
rubyist5eva··on Blocking Kiwifarms
Oh no, jokes, how horrifying…
rubyist5eva··on Blocking Kiwifarms
Yeah this a pretty bold claim with absolutely zero evidence, pretty disgusting.
rubyist5eva··on Blocking Kiwifarms
Appropriate to you.

Politics is a pendulum, and it won’t be pretty when it swings back.

rubyist5eva··on Blocking Kiwifarms
So let me get this straight. 1. People were trying to cancel kiwi farms 2. Kiwifarms users got mad, I’d argue rightfully, because they were being attacked. 3. Cloudflare doesn’t like Kiwifarms politically so they gave into the mob. 4. Blame the victims because we don’t like them.

Ignoring the fact that cloudflare provides we security services and they decided to just give up on it, this leaves a very sour taste in my month. I won’t be giving cloudflare my business anymore. If Kiwifarms users were engaging in illegal activity then just let enforcement do their job.

rubyist5eva··on “Science must respect the dignity and rights of all humans”
“Science is more than a body of knowledge. It is a way of thinking; a way of skeptically interrogating the universe with a fine understanding of human fallibility.

If we are not able to ask skeptical questions, to interrogate those who tell us that something is true, to be skeptical of those in authority, then, we are up for grabs for the next charlatan (political or religious) who comes rambling along.”

-- Carl Sagan

First thing that comes to mind. The Demon Haunted World changed my life but it seems like the one thing that got wrong isn't that external forces are a threat to "making progress via the scientific method to determine what is true" but science has instead been weaponized from within to push an agenda. This is much more terrifying to me.

rubyist5eva··on Removal of Heroku free product plans
This is the end of an era - no reason to really use Heroku anymore. One of the best things about it was being able to "grow into" the pricing. Looks like I'm looking at fly.io now.
← PreviousPage 6 of 34Next →