HN user

rustyfe

248 karma
Posts6
Comments41
View on HN

Worth calling out that Serious Eats is a publication with many recipe developers. Not all of them are equal to Kenji (although Daniel Gritzer is unequal because he's even better!).

Serious Eats is overall great, but definitely trust the byline not the publication.

I didn't know about hoverfly when I wrote mock-proxy, but the proxyserver mode looks like very much the same strategy.

One feature mock-proxy has that hoverfly lacks is first class support for git repositories as an endpoint type. This can simplify the mocking process if what you're mocking is an HTTP git clone.

But overall hoverfly looks a lot more feature complete and super polished, thanks for telling me about it!

The (1) in make(1) corresponds to which section of the manual[1] make is in. This is useful in some cases to distinguish between things that might be in multiple sections like printf(1) the user command and printf(3) the C library function. When everyone knows what's being discussed, I think it's mostly people trying to give a shibboleth that they've read the fine manual.

[1] https://en.wikipedia.org/wiki/Man_page#Manual_sections

Yes. They showed in the demo that there will be a new scope for read/publish packages. So you can create a personal access token for Travis with only that scope.

We'll take 60 possible characters (alphanumeric with caps and a few special characters). The summation 1...N of 60^x is (60/59) (60^N - 1). Known length is 60^N. If we assume N is big enough that the minus one isn't important, you can see going from known to unknown only increases the guesses by a factor of 60/59!

In my opinion, this won't stop you from from enjoying Infinite Jest. There are a few arcs that might require some insight into American culture (Professional Football, the US drug rehabilitation system). But the big picture themes are either very universal or so particular you aren't really expected to be keyed into them (you don't need to be a competitive tennis player or a Quebecois separatist to enjoy it).

Pale King might be a bit of a different beast. The focus on the IRS is somewhat particular, and you may miss big beats because of ignorance about the IRS. But at the same time, some of the accounting minutiae are such that I don't think you're expected to understand them.

Anyway! I wouldn't let this steer you away. To me, the joy of DFWs writing is the individual sentences. The mannerisms and humanity of the characters. If you miss some details because they're US focused, I don't think it'll be anything important.

Security Checklist 8 years ago

Maybe you are not in the United States, but for those that are, the answer is pretty simple.

It is reasonable to trust a VPN provider more than an ISP because you have a choice of VPN provider, you can vet them and choose the one that you feel provides the best safeguards to your privacy and security. Most Americans have between zero and one choices for high speed internet. Even in major metropolitan areas it is common to live in a cable monopoly, with a phone company providing sub-par "competition". You cannot vet your choice and choose the one that provides the best experience because you have no options. Even those that do have a choice may still connect to coffee shop or hotel WiFi on occasion, losing choice again.

In short, VPN providers are a) competitive and b) portable.

You're not wrong that you're putting the same amount of trust in them, but these properties mean you would not be wrong to do so.

I would say the state of Go dependency management is somewhere between what GP implies: "everyone is using go get to run things directly from master and that's terrible" and what you imply: "everyone has standardized around dep and that's fine".

I picked 5 "important" Go projects without checking first, and here's the solutions they use:

Kubernetes: The deprecated tool Godep + a pile of Make and Bash (which is the Go-est thing I've ever heard in my life)

Docker (Moby): vndr

Hugo: dep

Etcd: A bit of a mish-mash of dep and vndr, but mostly dep.

Cobra: Doesn't vendor dependencies, isn't a reproducible build (which is somewhat okay, as Cobra is primarily a library, not a tool in and of itself, but it does also have a CLI that probably breaks a lot).

In short, things are not currently fine. Dep is an okay tool, but fails for some use cases, and the community has not really rallied around it. Lots of important projects are sticking with what they've got. Glide, gvt, vndr, and Godep all remain important.

We're deluding ourselves if we discard an outsider's view that Go's dependency management situation is a dumpster fire, because it is. However, to GP, it isn't quite as bad as you suggest, most projects using Go have found some way or another of getting reproducible builds, and don't just run everything from tip of everyone else's master.

I am cautiously optimistic that modules will finally solve this mess, but we'll see to what extent they win in the marketplace of dependency management solutions.

I wonder how much this varies by programming language. In Go, gofmt ensures that most stylistic choices are similar for everyone (Go code tends to look alike) and patterns and rules are fairly well codified (Go variable and function names tend to follow certain rules). The more codified the code is, the less fingerprints each developer can leave.

It'd be interesting to see the most and least identifiable languages!

This argument really doesn't hold water to me. It seems dramatically more likely to me that the human agent overriding the model is going to be prejudiced than the mathematical model itself.

Of course it's possible (in fact, almost certain) that a math model trained on a large set of data is going to pick up on some problematic features. However, is it really more likely that these statistical inferences are more biased than a human being?

I'm sorry, but in my experience the number of racist human beings outweighs the number of racist computers.

Your examples seem so fraught. The Johnsons are unreliable, from a human, seems as likely to mean that John Johnson and Mr. Overriding Agent's sister had a nasty breakup as it does to mean they're likely to bounce checks. The Kennedys are good for it just sounds like code for, The Kennedys are of the racial group Agent prefers.

I agree with you that we can't blindly follow computer models, but I don't think I follow you to your conclusion that the loan officer was a valuable safety net.

This seems like a smart move to me. Cheap to produce and with a potential for big payout, throwing a bunch of reality TV spaghetti at the wall and seeing what sticks is probably a good idea for Netflix.

Plus, if any of them are as good as Terrace House, this seems destined to succeed. If you share my guilty pleasure of trash reality television, Netflix's Terrace House is best in class right now.

My only concern is how reality TV mixes with the binge watching phenomenon. Programs like Bachelor and Survivor succeed in part because they're a weekly event, and not a big block of drama.

One question that interests/concerns me is making judgement calls about what is/is not a political story.

Some links will be cut and dry, some will not. Some comments will be immediately identified as political, some will just be politics adjacent.

For instance, on a story about self driving cars, will it be appropriate to talk about UBI? On a story about cryptography, will it be acceptable to talk about how it applies to political dissidents?

Still, I have always found HN moderation to be reasonable, and I expect this to be the same. This is also something I think is desperately needed, we could all use a cooling off period, and it'll be nice not to be bombarded with US politics from yet another angle.

Hoping for the best, thanks dang + crew!

Counteradvice: I do not think Co-Ops are a good idea. Tying yourself to a 3-4 year commitment is directly counter to what I consider the big advantage of work/study. I had friends who badly wanted to leave their Co-ops, but were bullied by advisers into not doing so.

You aren't just padding your resume, you're also getting a feel for the different paths in your career you could pursue.

I had 3 different Internships for 3 different companies, and although that added a decent amount of stress (an annual job hunt) to my college career, I 100% recommend it.

I worked for a medium sized team at Georgia Tech's Research Institute, was the first hire at a startup, and worked DoD contracts for BAE, a defense contractor.

Those are all extremely different, and I not only built a resume that served me well in a variety of interviews, but also learned things I absolutely did not want to do.

However, your principal point, that work/study is a good idea, I wholeheartedly agree with.

Where your customers are, insofar as there is capital and labor (even robotic factories break down) there to support it. That might mean onshoring for Americans, but I don't think that's true everywhere.

Look at how China is investing in Africa. In this hypothetical future, I can still see a country with large amounts of robotic equipment, lots of people educated to operate and program them, and good shipping infrastructure dominating global trade.

It will just be a highly developed China shipping to developing nations, instead of a developing China shipping to developed nations.

You can plug in your choice of robotic manufacturing country for China if you'd like, the point stands, but I see China as well positioned to maintain their lead in manufacturing if they are very smart.

Also amusing to me was that Reuters, Politico, and CNBC all scored better than the NYT for the clickbait rating, despite NYT being used as the training data. They wrote headlines more like them than they did.

Could anyone recommend a starting point on Neural Networks for the uninitiated? The parts of this I understood were fascinating, but I quickly realized I was looking up every third word, and not really absorbing much.

If I could only read one thing to gain the technical grounding for this history, what should it be?

I wonder if you could boost the solidity of the language data by tracing backwards from framework. For instance, I see one posting in your data where the framework is known (Ember) but the language is not. Of course we know Ember is a JS framework, so you could answer both questions.

A big mapping of Python => (Django, Flask, etc.) Ruby => (Rails, Sinatra, etc.) ...

Just a thought.

I think it's interesting (and somewhat saddening) how the engineering schools on the list tend to be outliers in their rank to legislator ratio.

I would assume it's due to the general breakdown of majors at those schools, but it's still unfortunate that STEM majors don't seem to have a good pathway into political activism.

That's a fair point. It's certainly wrong to blame the victim, although I feel like that diminishes when we're talking about _any_ company, not just Walmart.

Still, you're right to bring up the idea that I simply dislike Walmart and so would take whichever position is against them. I don't think that's what I'm doing, but it's an easy mental trap to fall into.

I think the "cost" argument here misses the point slightly. Law and order has value, in and of itself. There's a reason why the punishment for stealing $100 is not a $100 fine. We all benefit from a society where no one steals things.

Not to strawman, but for instance, I see no ethical argument that homicide is less serious if you murder a person with a net negative cost to society. Neither murder nor theft are wrong simply because they're expensive. They're wrong without the context of cost.

In both cases, cost effectiveness isn't what I would consider the most important thing. However, I 100% agree with you that Walmart is certainly benefitting from the public police force enforcing private security. It's a sticky issue without a clear solution.

Crimes are crimes, but there's also a reason we install locks and alarm systems in our homes. By maintaining secure systems, we reduce our vulnerability to crime and our cost to everyone else. I feel like Walmart should do the same.

The fact that Walmart generates much more burden than similar competitors, but the same amount of tax revenue, is kind of alarming.

This feels like a fairly successful attempt to push private costs onto the public. Of course Walmart doesn't deserve to be robbed, but when they create the kind of environment where theft is easy and common, it also doesn't feel right for the taxpayer to be on the hook. If they had more employees patrolling aisles or more security, there'd be less cause for police to get involved. But that would cost Walmart money instead of the city.

I was planning to just pay one. But, I need an easy way to do it. Sure I could just send myself an email with the details and do it manually, but, then again, I could have done this whole thing manually!

The problem here is that I'll have to fill up a wallet with Bitcoin now, and then pay them later. That takes away the sting of, "Wow, being lazy cost me money". Still, right now, this is the one of the best ideas I've found. Paypal has a Payments API, and I can pay charities through it, but it's not a very good API, and it really seems like it'll be painful.

You'd think it would be easier to give money away!

I honestly wonder if you are a bot or someone struggling with translation. Of course if you're a bot, I don't know what your purpose is, there aren't any links in the post, it's just conversation. If this came up and I was judging a Turing Test, I really don't know if I'd pick correctly. At some points you seem like you're just listing words that appear on HN frequently. Other times there are distinct opinions though. The mmm www tick doesn't seem to be related to anything I can find. You are interesting person.

And an army to back it up.

Might may not make right, but it certainly helps. Other states may have some moral obligation to step in to defend a human rights violation, but only the government of a state is expected to protect its legal rights.

That isn't what he said was arbitrary though. The argument was that the pairing is arbitrary. So there's a justifiable reason why this island would have the .io TLD, but no justifiable reason why that is also an acronym for Input/Output. There's no particular reason .tv is Tuvalu and also Television. It just worked out that way and some acronyms are more valuable than others.

Is it the fact that he's a fraternity member or that he used the frat shorthand that bothers you?

I would say, like basically all groups of people, fraternities contain both good and bad people. They are also organizations that vary wildly based on the school they are located at. Without a dozen more data points about this person, I doubt it's safe to come to any conclusions about them.

He mentions that he used to work in investment banking. I'd say that makes it no surprise he's in a fraternity. Besides, investment banker throws a bigger warning my way than fraternity. But I'm sure there are some really nice bankers out there who would prove me quite wrong.