Curious, how long have you been running your service with them? A few months?.. years?
HN user
TheSpiciestDev
https://the.spiciest.dev/
What was that bot that MSFT stood up on Twitter that trolls and memers fed to turn alt-right? I know they eventually took it down and that it stirred up a lot of controversy.
I would not be surprised if someone found some Copilot output stemming from "gender" and reported to MSFT/GitHub for them to simply short circuit or "break" after finding certain keywords.
Thanks and I'm not surprised, it's a pretty intuitive feature! So really the only thing Heroku gets from these all-inclusive tokens is something to drive their type-a-head input on their integration page, right? Totally not worth it, I'd rather use Github's prompt.
I do remember hooking up Heroku to Github for auto-deployments and thinking to myself something along the lines of, "why does Heroku need ALL of this access?"
It'd be great if Github could allow read/write permission grants on a per-repo basis. Maybe they do already!.. in which case I'd much rather have and setup that granular detail than have a token that goes across all my public/private repos...
Edit: I do see in my Github's integration page that the Heroku connection was used within the past week... but it doesn't show how exactly it was used. Until Github can provide specific details, is it safe to assume that all repos, public and private, could have been cloned?
I feel like a graph database is a solution to an issue I've faced (and, continue to face) and it may just be because that I haven't spun one up and tried or that the documentation/examples don't stick out. But could someone confirm my feeling? If my feeling is correct, I'd enjoy verifying it with EdgeDB or the like.
My example/requirement: I have a user wanting to find best-matching blog posts. Every post is tagged with a given category. There could be 100+ categories in the blog system and a blog post could be tagged with any number of these system categories. A user wants to see all posts tagged with "angular", "nestjs", "cypress" and "nx". The resulting list should return and be sorted by the best matches, to those of least relevance. So, posts that include all four tags should be up top and as the user browses down the results, there are posts with less matching tags.
What I've seen with SQL looks expensive, especially if you search with more and more tags. I may just not know what to search for though, re. SQL. Is there a query against a graph database that could accomplish this?
But then what would happen if the GitHub token leaks? Would someone then be able to retrieve their own credentials as if they were your CI/CD pipeline? I feel like it be hard to audit that because a baddie would then be able to blend in with your CI/CD pipeline's traffic.
But you say you find "management of AWS Credentials a pain", so I guess this isn't for security purposes, right? More of just a convenience?
Don't get me wrong, I'm all about lessening the amount of environment variables in a pipeline!.. especially with ones that you want to rotate!
Working from home for the past 2 years has allowed me to help a lot with my own growing family. I do clock in my normal work (if anything I do more now because of my home setup, being able to jump in and out of work, whatever the hour.) My kids have certainly grown up accustomed to the setup, too. We've got good boundaries and I'm able to see and take part in a lot of their "firsts", all while continuing to do good work.
Note: my income has never been dependent on local/small clients (small being <10 employees) such work has always been "extra income" for me or to build relationships with others.
I've fixed bugs for free (if I failed to interpret requirements or made a mistake) but otherwise I would offer change orders for anything outside the agreed scope. Depending on the changes or how they fit into the existing work, these would possibly be discounted or free, especially if they are made early enough.
That said, I've been solid and explicit in the agreed scope. This goes for every project or org/client, don't get me wrong, but I've found this is much more important with smaller orgs/clients.
Otherwise there are a lot of great suggestions already made elsewhere in these threads. I haven't really ever had issues getting paid. I believe having a clear scope and asking clarifying questions also builds a better relationship (which I think contributes to better engagements, reduces other headaches, and leads to referrals!)
I'm reminded of the scene in The Matrix where the controllers to the gates of Zion are in a simulation managing the processes. [0] Instead of managing things outside the matrix via a terminal/monitor, they're given a virtual environment with their controls. Your comment makes sense to me!
Over the past few years I've searched for something like this, here and there, thinking I wasn't using the right search terms and then giving up. I'll certainly give this a try!
Out of curiosity, are there any other comparable projects you know of? I wondering what I had to have searched for in the past hah
https://gandi.net has always offered free WHOIS protection, at least for those domains that support it, if you look up any of my domains with them it's all pretty much hidden. I think some domains require the owners to have actual info, and not their registrars?
I remember myself back in elementary school making games with this. I'd paint up a scene, stamp some art and then cover the stamp. I'd then have my friend guess as to where the stamp was in the scene and we'd undo or "oh no" the cover away... great memories!
Over the more recent years, whenever I'd get sick and experience fever dreams, JavaScript paradigms would be what I'd get lost in i.e. asynchronous calls, callbacks, single-threaded nature, etc.
This comes from someone who enjoys the language, too. Weird stuff...
One of my only two attempts of an Ask HN was this specifically [0] and I've wondered this still. With subdomains, top level domains being at the top and being able to drill down into subdomains and then folders feels a lot more intuitive. Could a browser add-on be made to experiment this?
Yes, in quite a fascinating way, too: https://www.unrealengine.com/en-US/blog/forging-new-paths-fo...
This part resonated with me and took me back to when I was picking up PHP on my own and breaking apart a Wordpress installation, file by file, line by line, method by method. Has some good "first principle" vibes to it.
"The best code is no code at all."
As soon as I read the title, I felt joy! I had followed this guide when I had began programming early on and had a great experience. I recognize it by its name alone!
I really like the idea of wave energy, on-coast or off. While I have not looked too much into it (downsides, maintenance, scalability, ROI, etc.) it does feel intuitive.
A day-dream, for example: could platforms or vessels mesh together with such technology[0] to be self-sufficient? Each vessel could link together with it's neighbor and, with the rising and falling of natural waves, they could all generate electricity for the entire network or individual nodes.
How long until their registrar or nameserver provider bounces them, too?.. how upstream will this go?
I've worked with Split.io at a client, they had libraries for our frontend and our backends. Their interface was also neat and would allow you to separate out your feature flags per environment, per user or user group, or through any other custom condition. They'd also provide statistics for A/B testing, but I never got that far with them to try it out.
Theirs was dynamic in that you could change the rules and at a given interval the connected user's app would refresh and react accordingly. It was pretty complex, I suppose, but I'd roll out my own and go to something like them if I had a lot more conditions or targets.
This reminds me of the steam.com domain - for the longest time I've wondered what the relationship is like between the owner and Valve Corporation...
It used to have an actual page, it looks like it's just a registered domain now with a page that times out.
I'm there with ya - one of the images in the article had me immediately think of that part of the level.
And I'm over here imagining a Max Max Lego set :)
Is this helicopter exclusively for war, though?.. are these not used for rescue missions or other humanitarian things? If not then should anything that is used for battle or violence be retracted?.. I had a lot of Legos with guns (westerns), blasters (star wars) and other tools.
Script tags (added programmatically) should support such errors via "onerror" functions. Though, I don't know if integrity errors could truly be determined. If they can then you can do whatever you want with such an error.
For sure, and I believe Twilio did not intend to "have their door open" and that whoever modified their code knew that they were "trespassing" similarly.
"In local news, stranger off the street walks through residence's open door and moves around furniture."
Ha, that README grammar fix years ago finally pays off!
It looks like a Wordpress site, but caching or a CDN should resolve a lot of what feels slow, right?