HN user

patmcc

4,606 karma

Email: pat@mcculloch.io Twitter: https://twitter.com/mcculloch_io Site: patm.dev [ my public key: https://keybase.io/patmcc; my proof: https://keybase.io/patmcc/sigs/-tGlHxJTbvn_7hqfghPQ-wmZq-S_8lHka2fvbfkeD0U ]

Posts2
Comments899
View on HN

This is exactly what I mention in a sibling comment - an incredibly misleading survey is quoted here to make it look like there was overwhelming support.

>>More than 93% of the record 223,273 British Columbians who completed the Province’s survey on time observance have indicated they would prefer a move to permanent daylight saving time (DST).

Sticking with Standard Time was not an option listed in that survey.

No the OP, but I'm also in BC and dislike this change.

The change was made (partly) based on a bullshit poll of residents, that asked basically "Hey which would you rather do, use year-round Daylight Savings Time or keep switching every six months?" - notably not including the option a lot of people wanted (and which is well-supported by a lot of research as the best option), which was "use year-round Standard Time".

And then in a bunch of press conferences and answers to the public, they would say "oh, this is what people chose" from the poll.

I was being a little flippant there - but I think we've gone way too far in the "nuclear is risky" direction, largely because of Chernobyl, which was a) a very specific disaster caused by a perfect storm of bad decisions and bad luck and b) not that deadly. In the US about as many people die every year due to coal pollution as have yet (or will ever) die because of Chernobyl. About the same number die in Europe every year because of a lack of AC. Those are just invisible risks that we accept already and we need to start seeing them.

SAT isn't a perfect IQ test but it's not bad for a first-pass filter. Nearly all who scored 1600 will be bright and nearly all who score 800 won't be.

It's a bit like BMI. Yes, if you're Peter Dinklage or Arnold Schwarzenegger it will be pretty meaningless. But most people aren't and BMI works pretty well for them.

Yeah. I don't think they're gouging, I totally understand how expensive RAM and storage and GPUs are, but...oof. I just can't justify it as a 'fun' purchase.

You sort of do; stop doing work above a certain volume, stop meeting deadlines. This will have consequences, which may include a) firing or b) better volume and deadlines, depending on a number of factors.

Because as a huge enterprise you want stability and ability to check the boxes you need to check far more than anything else.

I'm at a medium enterprise and this is true. If I go with e.g. Atlassian I can get everything checked off, even if it's expensive and kinda dogshit. But I know they have a support system, I know they read CVEs and issue patch notes, I know I can find the info for audits and SOC2 cert and everything else.

Oh, some startup offers better software for a tenth the cost? Great. It'll be 30% more work for me to track down all that bullshit? Ok then, complete non-starter, I'll stick with Atlassian.

Yep! We sometimes have a choice between the gold-standard and commonly updated open source solution to X and a two-bit hacked together proprietary solution that has 24/7 support at high cost...and we choose the one with support, because that's what our audits basically require. Because then we can say "yes, it's still within the support contract, we have an escalation point".

Proof of Corn 6 months ago

That still doesn't seem autonomous in any real way though.

There are people that I could hire in the real world, give $10k (I dunno if that's enough, but you understand what I mean) and say "Do everything necessary to grow 500 bushels of corn by October", and I would have corn in October. There are no AI agents where that's even close to true. When will that be possible?

Stunnel 6 months ago

I mean...fair. All I can say is it's still very critical and in production. I guess it's just worth pointing out that horribly outdated things still need support :)

Stunnel 6 months ago

No joke, it just came up at work as a possible solution to something. We have some legacy systems that talk over TCP in plaintext. It's all within well-secured networks on locked down machines, so fine. But now we want to move things to Megaport, and their agreement says "btw don't put anything in plaintext ever, we guarantee nothing". So stunnel will probably be the fix.

I worked at a big-box retailer before figuring out a career. They had an old-school TUI that was incredibly fast and well designed. Function keys to do all kinds of lookups and adjustments, advanced menus when you needed them, overall just a well designed system. People took a week or so to get the hang of it but then the skill ceiling was insane, people could get fast.

A few months before I left they switched to a "modern" GUI. It was shockingly bad. The speed of every transaction lowered. Even with optimal use it just took longer. So much time wasted.

I think this is a strange and very modern conception of weddings. Weddings are not just about the bride and groom; they're about the bride and groom and the community of their friends and family. That third part is a key component! It's why we invite people to weddings, so they can witness and help the couple in making and keeping the commitment of marriage.

I think everyone agrees that some rules for guests are fine, and some are silly. "No flash photography or leaning into aisles during the wedding procession" is a reasonable rule, "No taking photos when we're dancing and having fun" seems silly to me.

Just like a dress code for a wedding is fine, but if they said "also you need to wear blue cotton underwear" I'd think that was a bit inappropriate to require.

Historically at least, it's not that weddings are in public places, but that they're inherently a performance for the community. Like the reason for having a wedding is to make a commitment publicly in front of your friends and family. That doesn't mean it needs to be open to all who want to wander in, but it's strange to think of it as a secret event.

I feel like it's pretty strange (and mildly rude) to insist no one take/post photos of a wedding, and also very rude to take/post photos when asked not to.

It's not the cost, it's the headache. Do I need to worry about setting up SSO, do I need to work with procurement, do I need to do something in our SOC2 audit, do I need to get it approved as an allowed tool, etc.

Whether it's $100/year or $10k/year it's all the same headache. Yes, this is dumb, but it's how the process works at a lot of companies.

Whereas if it's a free tool that just magically goes away. Yes, this is also dumb.

SMS 2FA is good enough for most people most of the time. It's very bad at preventing high-skill targeted attacks against individuals, but it's perfectly good at preventing mass brute-force attacks.

It's popular because it solves the problem (not ALL problems, but the one they're trying to solve) and it's easy and low-barrier to implement and use.

The problem with this is no one can agree about what "at scale" means.

Like yes, everyone knows that if you want to index the whole internet and have tens of thousands of searches a second there are unique challenges and you need some crazy complexity. But if you have a system that has 10 transactions a second...you probably don't. The simple thing will probably work just fine. And the vast majority of systems will never get that busy.

Computers are fast now! One powerful server (with a second powerful server, just in case) can do a lot.

I think it's perfectly fair for them to say "we're not doing this any more". The sketchy part is deleting the public registry at docker.io/bitnami rather than just no longer updating it. Why can't docker.io/bitnami become the 'legacy' registry, receive no future updates, so at least folks who don't hear this news won't have pulls suddenly fail?

edit: like if I have a package on NPM and I want to stop offering it, I think it's shitty to just delete it. That breaks builds.