Dystopian

I’m actually very surprised this happened at Walmart.

I worked on an adjacent project with one of their teams many years ago. I was very surprised by how zero tolerance their policies were about receiving anything.

It may have been the team I was working with, but I remember none of them allowed us to buy them coffee from the shop in our lobby when they visited.

Or 2x 3090s to make it even more cost effective.

If you're using these for purely inference (which is what the 5000 seems like it's tuned for) the vram's the real bottleneck so you get a similar bang for your buck using last gen's cards vs. the bleeding edge.

I've also found the crypto crash has dumped a bunch of these well-worn cards on the market you can pick up a bit cheaper.

As a Canadian, I find the whole saga of how our government works with the technology sector bat-shit crazy.

All of the media's coverage up here is disingenuously about tech overreach and not about how their lobbyists tried to double-dip on revenue (both demanding an estimated $329M/year[1] from tech companies, while also receiving the ad revenue from ++1.9B pageviews[2]).

The problem is there'll probably be some kind of settlement between the government, news companies, and tech. But while this drags on, the larger oligopoly of news outlets will come out alive, while smaller news outlets are really going to suffer financially.

If you want to read more about our government's recent brain-dead policies on technology you can look up:

C-11: A streaming services bill that mandates Canadian content on foreign streamers. Not horrible, but also a great way to have "This service is not available in your region." notices in your country.

DST: A "just because" global digital services tax of 3%, which will definitely be passed onto consumers, if not lead to service blockages in Canada.

C-18: ↑ This bill. Pretty much a shakedown by the government and media companies.

This is coming from a registered liberal party member, who's socially liberal and is consistently confronted with the thought that I may actually be conservative.

[1] https://www.pbo-dpb.ca/en/publications/RP-2223-017-M--cost-e... [2] https://about.fb.com/news/2022/05/how-meta-supports-news-pro...

Disclaimer - I work on Hasura, so I won't comment too much on which is better.

They're all similar flavors of producing realtime results - which take similar, but different, methods to their approach.

My understanding (please feel free to correct me if I'm wrong):

- Supabase Realtime uses WAL.

- Hasura Streaming Subscriptions uses a query which will be append-only (could be a sort-by or also WAL).

- Hasura Live Queries uses interval polling, refetching, and multiplexing.

- Supabase uses Postgres RLS for authorization, while Hasura uses an internal RLS system which composes queries (which allows for features like the multiplexing above).

- All 3 use websockets for their client communication.

Supabase Realtime

https://github.com/supabase/realtime#introduction

https://supabase.com/docs/guides/realtime

Hasura Streaming Subscriptions / Live Queries

https://github.com/hasura/graphql-engine/blob/master/archite...

https://github.com/hasura/graphql-engine/blob/master/archite...

Hasura also has controls for allow listing opertaions for that composed on the FE problem (https://hasura.io/docs/latest/security/allow-list/).

There's also a few NPM packages for auto-generating that allow list from your project (https://www.npmjs.com/search?q=hasura%20allow%20list -- the one I've used before was from `tallerdevs`).

Really like the idea - think there's a super decent market for this kind of solution.

Only thing I'd be aware about though is making sure you're on the right side of licensing for all the vendors you're using (/ possibly who you've talked with to make sure the usage is ok).

Off the top I saw N8N on the homepage who are a little more strict about their licensing for cloud vendors. There's also Airbyte and Redpanda who use Elastic and BSL licenses to try and deter cloud vendors from packaging some parts of their services.

Hasura (https://hasura.io) | Haskell / React | Global / Remote First | Multiple Roles | Full-time

Hasura is creating tools which help developers quickly and efficiently stand-up GraphQL APIs. We provide instant-on GraphQL APIs, while providing easy-to-use resources for setting up authentication, authorization, and data-access permissions.

We're actively hiring for open positions:

1) Front-End Developer

2) Haskell Developer

3) Engineering Manager

4) DevOps / SRE

5) Product Designer / Developer Experience

Apply Now: https://hasura.io/careers/

I agree with this ↑

If you want to play with something fun though, Richard Hipp (of SQLite) has althttpd which sparked my interest when I first heard about it - https://sqlite.org/althttpd/doc/trunk/althttpd.md

While general best practice is that you version your changes in git and deploy migrations with something like FlyWay I've also run into the problem of needing some form of 'audit log' to make sure no DDL changes are being made in prod (and if they are, moving them over into version control).

I have a migration which is something like this one: https://www.alibabacloud.com/help/doc-detail/169290.html which uses a trigger on `ddl_command_end` in PG to copy over the query which made the DDL change from `pg_stat_activity` to a new audit schema to stash. Can definitely help with maintenance and finding out what happened when.

(From Hasura)

The self-hosted community version has full access to JWT and webhook validation.

The SSO listed is a feature to integrate with the Hasura Cloud Dashboard for logging in and managing projects. Think Okta => Hasura Cloud => Hasura Project (Instance). We'll definitely take a look at wording it to make it more clear.

Yep they also publish an OpenAPI spec (what tools like Swagger use for auto-docs) - you should be able to use something like: https://www.npmjs.com/package/openapi-typescript-codegen to create your codegen

(From Hasura)

Loved that you mentioned PL/pgSQL - consistently impressed by the amount of logic that can be implemented in database using that or plv8 or its cousins. I personally have feels about why that may be a good solution for a lot of small-to-mid-to-large size build outs.

But yeah, in terms of logic we definitely expect you're going to need at least one other service for auth in the stack (for simplicity that service could also be used for any logic-based work as well).

One of the things we pride ourselves on is being non-opinionated about the logic side of the stack and trying to create as many 'escape-hatches' as possible.

Want to use db eventing? - We can event out to an external service.

Setup a custom action? - We can toss those arguments out to an external service and return a response.

Want to do some magic™ using other GraphQL tooling like Prima or Graphene? You can mesh those in with remote schemas.

We really want to build a tool that helps onboard you into the GraphQL ecosystem, but then scales with you as your stack becomes more complicated.

+1 that's probably my favorite way of doing it - https://github.com/martin-hasura/blog-django-graphql-hasura Even Django REST Framework and Hasura works pretty well cause you get auth + then if you want to do functions you get that for 'free' as well

Caching isn't discouraged or disabled in any way in the community edition of Hasura.

In terms of query-plan caching - which provides a lot of benefits for speeding up pre-query execution - that's already enabled by default as part of the Hasura engine.

Response caching is a little more complicated and requires a separate service outside of the main GraphQL server to keep the solution generalized (ex. redis, memcached, lots of other options).

We're definitely looking at ways to have some more examples as to how someone could go about rolling their own caching solution for self-hosted instances.

In the case of hosted solutions to caching, there's Hasura Cloud which pairs the cache with monitoring and some other usability and security niceties - but you could also use a service like GraphCDN (there are a couple other as well) in front of your Hasura instance which helps setup response caching.

The free market means that Laura Loomer is free to pick a new payment processor (there are many) or start a new competitor at any time. Don't even know why this is news.

1. Your interviewer is only open to solving the problem ONE way

This may have also been the interviewer wanting to guage how the candidate would react to being asked to do a task in another method which was dictated vs. their preferred method.

A lot of development is a team sport, and quite a bit of it is subjective and opinionated - you're not always going to get to do it your way all the time.

I don't actually see this one as a red-flag right awya.

If amazon did this to a company critical of one of their private contract companies, this would be anti-trust behaviour.

No it wouldn't be. That is not how anti-trust works. Amazon doesn't need to rent servers to Walmart. Walmart doesn't need to rent storage space or placement to Amazon. There's nothing in anti-trust which compells companies to have to provide services to one another.

If people want to talk about these issues they need to frame it in terms of strengthening anti-discrimination laws for speech. If that's something we want to talk about it's valid - it's just not the route most people getting angry about this want to take since it would run against many other opinions they've made previously (Masterpiece Cakeshop, et al.)

This is currently my go-to, has a pretty good update cadence and the team is pretty responsive to bugs. It's got the linking and tab search, but some of the UX stuff could be smoothed out a bit better (mostly the expandable right-bar).

Also like that it's just CSS for the theming - I'm kind of particular about my typography so I like that I can set it up the way I want it.

I sync to a private repo and use an (albeit hacky) combination of GitJournal (for creating new .md files in a /mobile folder) and SpeckEditor (for editing files in the repo) on mobile.

Not to defend the op, since I think they're taking a particularly hard line, but qualifying candidates based on their previous work is just something that happens.

I've personally been disqualified because I've worked at a legal, but "vice" based company - I've seen others not hired because their previous company was too "legacy", even though they did very similar work.

It's not necessarily right, but companies use the signals available for them - even if they're not 100% agreeable to everyone.

I feel like this would be a lot easier and have a higher rate of usage/compliance if our tech companies actually worked with people to release or opt-into sharing this information for when it's necessary (information which is already secretly shared with governments for security).

For the majority of people if they go to https://www.google.com/maps/timeline they'll have a tracker of everywhere they've visited and the time they were in each location.

If you could take people's accounts who've been infected and give them the ability to opt-into sharing this information you could have a pretty good source of information about the locations where they dwelled for long periods of time and who should go into self-isolation.

I kind of get it.

I've definitely been on teams before which have investigated aggregating all of our metrics into Geckoboard to have posted up on TVs near our work areas.

These may be an interesting alternative since it gets rid of some of that integration portion and instead just shows the source and scrolls.

"In 2017, according to a report by the director of national intelligence, the government obtained 534 million phone records from telephone companies"[1]... I wouldn't quite say they were smacked down in terms of mass metadata surveillance. They literally shut it down cause they couldn't make the data useful.

[1] https://www.latimes.com/opinion/editorials/la-ed-nsa-phonere...

Microsoft's media creation tool is dead simple, you run it and tell it where to create the media.

As long as you have a computer. Best answer for this is households who only have 1 functioning computer. Usually low-income households.

One of my first jobs was working at a computer repair store. Customer would come in looking for a reformat and we'd give them a few options.

- We'll restore (pay an hour or so of our time).

- Buy a new licence (since we didn't stock restore disks and weren't going to spend time making them).

- Buy a new computer - with the advent of dirt cheap computers a lot of the time this was a viable solution.

These disks definitely fill a hole of having something you could give to clients and they could do the DIY route.

+1 - I use this for my personal site - it's great.

The only thing I found is you can't have any orphaned pages (like hidden ones) from the homepage. As it scrapes down if there aren't any links to it it won't find it. Small problem, definitely cuts down on the work I need to do for my personal tool site though.

From my experience (and what this looks like) is that there isn't a ton of novel IP to open source here. A lot of the times ML "platforms" are composed of a number of open source components glued together in an elegant way (which I'm not implying is easy, because it's very difficult).

From looking at this from the outside the only things in this platform that may be open-sourceable would be the job scheduling and visualizations - and there are already variants of open source tooling which could be repurposed for those tasks (or may even be powering those components).

The main purpose of this post seems to be Uber's way of standardizing their workflows + a little extra glue (which they're calling their platform). It still provides a lot of value. Also, Uber does have a few cool open source projects: https://uber.github.io/ (but could admittedly have more).

It looks like a bunch of their team was part of the Storj team previously - maybe a fork of Storj's core to be compatible with Onion vs Blockchain?

It looks like their website is also based on the same theme.

From a commented out paragraph: <!--<p> ORC is a non-profit free software project sponsored by <a href="https://counterpoint.info">Counterpoint Hackerspace</a>. It's team is composed of previous authors and contributors to <a href="https://bitcore.io">Bitcore</a>, <a href="https://storj.io">Storj</a>, <a href="https://ipfs.io">IPFS</a>, <a href="https://ethereum.org">Ethereum</a>, and <a href="https://z.cash">Zcash</a>. We are strong proponents of anonymity, decentralization, and community and we are building ORC to bring those qualities to the cloud. We are passionate about the work we've done but we <a href="https://www.generosity.com/fundraising/orc-distributed-anony... help</a> to continue hacking the planet! </p>-->

He's lucky they just didn't send it to collections as many institutions would do if a patient refused to pay.

This looks really interesting - going to give it a look.

I could almost see it being an internal Slack-style competitor of sorts for an intranet (if users are looking to "shout" more into the ether of the community)

"It's not a small sum, but if we had gone through the normal process of hiring an outside firm to do a security audit and vulnerability assessment, which is what we usually do, it would have cost us more than $1 million," ...

It seems like a a pretty small sum to me. They paid out amount between $100-15000 for the bounties with a total of $75000. Gauging that one of the bounties at $15K sucked up around 20% of the overall budget and there were 137 other reports - it's literally the equivalent of paying outsourced-ODesk rates for security testing in time/value.

What reason would anyone have for wanting to actively participate (not just poke-around like I'm sure quite a few employed professionals did) vs selling the exploits off on the dark web or just working in security for a company that pays a reasonable rate?

It seems fair, the project was based around "an HTML5 version of Starcraft", and it was using direct assets from the game.

If they changed the in-game assets and said "an HTML5 RTS, similar to Starcraft" I don't think Blizzard would have raised any alarms.