bilalq

I suspect we'll eventually hit a point where possession or usage of powerful open models will be criminalized.

What are the alternatives to Graphite these days? Github's stacked PR support is still immature, AFAIK. I would love to see Linear move into this space and start offering both git hosting and stacked PR management.

The right wing takeover of media continues unchecked.

I cannot wait for a cultural shift away from respecting "authenticity" and "tradition" in food. It's fine to remember and recognize how things were often done. But the ridiculousness of saying New York style pizza is not pizza or that you have to make things the "right way" needs to go.

I'm assuming by tikka chicken you mean "chicken tikka masala"? Because chicken tikka is something my family made all the time growing up. I still make it at home often. That's mostly been with a charcoal grill and not a traditional tandoor, but like you said, most people don't have tandoors at home. That's restaurant food.

This completely ignores the shareholder value to the military industrial complex and the truth machine value of prediction markets from the not-insider traders.

The problem is that it is a good idea at the individual level. Poor management reads it as a signal of productivity.

Building a startup on GCP (or even Google Workspace) is an existential risk.

I'm saying be skeptical of who you give your trust to. You're the one seemingly pushing to trust actors who have a proven track record of not being worthy of that trust.

What? This is something that's incredibly well documented at this point. Many VPN companies operate as arms of data broker and media companies or they resell data to them. Some of them didn't start out that way, but with the way acquisitions have played out, that's where we're at now. I replied in the parent comment if you're interested.

Using a VPN shifts your risk. Your local ISP can't see as much of your activity, but another company that probably has a business model of reselling your data to governments, intelligence agencies, and ad companies now can. If your concern is masking piracy, maybe that shift of risk is worthwhile, but you still want to avoid some of the more obvious bad actors[0]. You certainly should not have all your internet traffic going over a VPN all the time.

If you're at all worried about being targeted for political speech or you're part of a targeted group, then you need to be more careful. This map is a bit outdated, but it does give some insight on who to avoid [1].

Ironically, Mullvad is one of the more trustworthy VPNs out there and still the one I'd recommend.

[0] https://www.koi.ai/blog/urban-vpn-browser-extension-ai-conve...

[1] https://windscribe.com/blog/the-vpn-relationship-map/

Unfortunately, the largest and most well-marketed VPNs are, in fact, less trustworthy than your average ISP.

The Gemini features would be so cool if they ran locally, but as-is, this reads like a laptop running spyware to me.

The Android app casting does sound amazing though and that alone would make a full on Linux machine with MBP level build quality compelling.

When trying to upgrade from the Business Standard to Business Plus plan, Google will reduce your workspace storage from 2TB/user to 0 bytes for up to 24 hours while it upgrades you.

These are actual quotes from support:

Upon checking, I see that the storage is showing as 0 bytes, because of the upgrade that has been done from business standard to business plus. Not to worry as this is very normal.

I understand your concern and how important it is for the storage to be updated due to the business requirements. > To give you full transparency into what is happening: when a Workspace subscription is upgraded, our backend systems must first detach your previous Business Standard storage allocation before provisioning the new Business Plus limits. During this transition window, the quota temporarily defaults to zero.

Now please turn ON user storage limit nor shared drive storage limit. Once you turn ON, please wait for 5 minutes and then please turn it OFF.

^ That last attempt to try to force storage quotas to reset faster didn't work, btw. Still took hours.

Let me more clearly instead say that many successful startups knowingly and intentionally broke the law.

But I agree that Delve is a special case and should naturally be held to a higher standard here because their whole business is around being compliant with the law. When most other startups break the law, they do it to get an advantage over competition. Delve did it in a way that sacrificed their core value towards customers.

While I do think Delve and the leadership there should be held responsible, it's a bit weird to see YC and others take shots at them for breaking the law when so many of their prized unicorns achieved what they did by being willing to just ignore laws and deal with the consequences later.

I use a wallpaper with a horizontal black bar at the top to make the notch invisible, so this catches me off guard pretty often.

Look into git reflog. If the changes were committed, it was almost certainly possible to still restore them, even if the commit is no longer in your branch.

This has its own risk factors. If your domain renewal lapses due to credit card expiry or something and you fail to notice, it's catastrophic. This is just not realistic advice for the average person.

XCode and Pages are a delight in comparison to VSCode and Notion is certainly one of the takes of all time.

XCode is usually the first example that comes to mind of a terrible native app in comparison to the much nicer VSCode.

These were absolutely incredible when they first opened up right on until covid. The blue-apron style meal kits they had were actually really tasty and the gimmicky integration with Alexa to tell you the next step in the recipe was actually kind of useful when you were busy stirring a pot or cutting something and too busy to pull out the recipe card. It was like a 7-Eleven, but with the prices of a normal grocery store and higher quality prepared food. Not needing to deal with checkout felt freeing. I substituted many grocery store runs with a quick walk over to the original Amazon Go back in the day.

After covid, it was never the same. Open for shorter windows, closed on Sundays, reduced selection, no more meal kits etc.

I had many friends who worked on Amazon Go, so it's a bit sad to see that work come to an end.

This question is surprising to me, because I consider AI code review the single most valuable aspect of AI-assisted software development today. It's ahead of line/next-edit tab completion, agentic task completion, etc.

AI code review does not replace human review. But AI reviewers will often notice little things that a human may miss. Sometimes the things they flag are false positives, but it's still worth checking in on them. If even one logical error or edge case gets caught by an AI reviewer that would've otherwise made it to production with just human review, it's a win.

Some AI reviewers will also factor in context of related files not visible in the diff. Humans can do this, but it's time consuming, and many don't.

AI reviews are also a great place to put "lint" like rules that would be complicated to express in standard linting tools like Eslint.

We currently run 3-4 AI reviewers on our PRs. The biggest problem I run into is outdated knowledge. We've had AI reviewers leave comments based on limitations of DynamoDB or whatever that haven't been true for the last year or two. And of course it feels tedious when 3 bots all leave similar comments on the same line, but even that is useful as reinforcement of a signal.

I already use Graphite today on top of git. Others are using alternatives like Sapling, etc.

To go back to your question around why people still use these workarounds on top of git, it's because the CLI is just one piece of it. With Graphite, I also get a stack-aware merge queue and review dashboard.

I have one and a half decades of muscle memory burned in with inoremap jj <Esc>`^

It's not something I can just shift away from.

This is really exciting. Step functions were a big improvement over SWF and the Flow framework, but declarative workflow authoring sucks from a type-safety standpoint. Workflows-as-code is the way to go, and that was missing from AWS. Can't wait to build on top of this.

This is orthogonal to the issue at hand. The problem is a malicious actor cutting a release outside of the normal release process. It doesn't matter if the normal process is automated or manual.

You're probably already planning this, but please setup an alarm to fire off if a new package release is published that is not correlated with a CI/CD run.

I did a double-take when I read that as well. I went and checked the license under rubygems, and sure enough, it's standard MIT with no warranties.

https://github.com/rubygems/rubygems/blob/master/LICENSE.txt

This is an excellent write-up of the problem. New hires out of college/bootcamps often have no awareness of the risks here at all. Sometimes even engineers with years of experience but no operational mentorship in their career.

The kitchen sink example in particular is one that trips up people. Without knowing the specifics of how a library may deal with failure edge cases, it can catch you off guard (e.g., axios errors including API key headers).

A lot of these problems come from architectures where secrets go over the wire instead of just using signatures/ids. But in cases where you have to use some third party platform, there's often no choice.

My objections here are in terms of how this manifests in billing. Especially when you consider the highway robbery rates for internet egress.