HN user

TheSpiciestDev

104 karma

https://the.spiciest.dev/

Posts2
Comments62
View on HN

What was that bot that MSFT stood up on Twitter that trolls and memers fed to turn alt-right? I know they eventually took it down and that it stirred up a lot of controversy.

I would not be surprised if someone found some Copilot output stemming from "gender" and reported to MSFT/GitHub for them to simply short circuit or "break" after finding certain keywords.

Thanks and I'm not surprised, it's a pretty intuitive feature! So really the only thing Heroku gets from these all-inclusive tokens is something to drive their type-a-head input on their integration page, right? Totally not worth it, I'd rather use Github's prompt.

I do remember hooking up Heroku to Github for auto-deployments and thinking to myself something along the lines of, "why does Heroku need ALL of this access?"

It'd be great if Github could allow read/write permission grants on a per-repo basis. Maybe they do already!.. in which case I'd much rather have and setup that granular detail than have a token that goes across all my public/private repos...

Edit: I do see in my Github's integration page that the Heroku connection was used within the past week... but it doesn't show how exactly it was used. Until Github can provide specific details, is it safe to assume that all repos, public and private, could have been cloned?

I feel like a graph database is a solution to an issue I've faced (and, continue to face) and it may just be because that I haven't spun one up and tried or that the documentation/examples don't stick out. But could someone confirm my feeling? If my feeling is correct, I'd enjoy verifying it with EdgeDB or the like.

My example/requirement: I have a user wanting to find best-matching blog posts. Every post is tagged with a given category. There could be 100+ categories in the blog system and a blog post could be tagged with any number of these system categories. A user wants to see all posts tagged with "angular", "nestjs", "cypress" and "nx". The resulting list should return and be sorted by the best matches, to those of least relevance. So, posts that include all four tags should be up top and as the user browses down the results, there are posts with less matching tags.

What I've seen with SQL looks expensive, especially if you search with more and more tags. I may just not know what to search for though, re. SQL. Is there a query against a graph database that could accomplish this?

But then what would happen if the GitHub token leaks? Would someone then be able to retrieve their own credentials as if they were your CI/CD pipeline? I feel like it be hard to audit that because a baddie would then be able to blend in with your CI/CD pipeline's traffic.

But you say you find "management of AWS Credentials a pain", so I guess this isn't for security purposes, right? More of just a convenience?

Don't get me wrong, I'm all about lessening the amount of environment variables in a pipeline!.. especially with ones that you want to rotate!

Working from home for the past 2 years has allowed me to help a lot with my own growing family. I do clock in my normal work (if anything I do more now because of my home setup, being able to jump in and out of work, whatever the hour.) My kids have certainly grown up accustomed to the setup, too. We've got good boundaries and I'm able to see and take part in a lot of their "firsts", all while continuing to do good work.

Note: my income has never been dependent on local/small clients (small being <10 employees) such work has always been "extra income" for me or to build relationships with others.

I've fixed bugs for free (if I failed to interpret requirements or made a mistake) but otherwise I would offer change orders for anything outside the agreed scope. Depending on the changes or how they fit into the existing work, these would possibly be discounted or free, especially if they are made early enough.

That said, I've been solid and explicit in the agreed scope. This goes for every project or org/client, don't get me wrong, but I've found this is much more important with smaller orgs/clients.

Otherwise there are a lot of great suggestions already made elsewhere in these threads. I haven't really ever had issues getting paid. I believe having a clear scope and asking clarifying questions also builds a better relationship (which I think contributes to better engagements, reduces other headaches, and leads to referrals!)

I remember myself back in elementary school making games with this. I'd paint up a scene, stamp some art and then cover the stamp. I'd then have my friend guess as to where the stamp was in the scene and we'd undo or "oh no" the cover away... great memories!

This part resonated with me and took me back to when I was picking up PHP on my own and breaking apart a Wordpress installation, file by file, line by line, method by method. Has some good "first principle" vibes to it.

I really like the idea of wave energy, on-coast or off. While I have not looked too much into it (downsides, maintenance, scalability, ROI, etc.) it does feel intuitive.

A day-dream, for example: could platforms or vessels mesh together with such technology[0] to be self-sufficient? Each vessel could link together with it's neighbor and, with the rising and falling of natural waves, they could all generate electricity for the entire network or individual nodes.

[0] https://www.youtube.com/watch?v=kPNrwII5OhE

I've worked with Split.io at a client, they had libraries for our frontend and our backends. Their interface was also neat and would allow you to separate out your feature flags per environment, per user or user group, or through any other custom condition. They'd also provide statistics for A/B testing, but I never got that far with them to try it out.

Theirs was dynamic in that you could change the rules and at a given interval the connected user's app would refresh and react accordingly. It was pretty complex, I suppose, but I'd roll out my own and go to something like them if I had a lot more conditions or targets.

This reminds me of the steam.com domain - for the longest time I've wondered what the relationship is like between the owner and Valve Corporation...

It used to have an actual page, it looks like it's just a registered domain now with a page that times out.

Is this helicopter exclusively for war, though?.. are these not used for rescue missions or other humanitarian things? If not then should anything that is used for battle or violence be retracted?.. I had a lot of Legos with guns (westerns), blasters (star wars) and other tools.