HN user

sublimino

110 karma

http://www.binarysludge.com/

[ my public key: https://keybase.io/sublimino; my proof: https://keybase.io/sublimino/sigs/FiHyaV0QNbpsfaj4I9AvAHGvXrcTXW5gJ_49BgP_MKw ]

Posts22
Comments30
View on HN
www.ft.com 8y ago

Telegram tells Russian regulators it can't hand over user data

sublimino
2pts0
www.theguardian.com 9y ago

BlackRock demands cuts to executive pay and bonuses in UK

sublimino
2pts0
www.jpl.nasa.gov 10y ago

Seven Key Facts About Cassini's Oct. 28 'Plume Dive'

sublimino
2pts0
www.symphonious.net 11y ago

Making End-To-End Tests Work

sublimino
2pts0
coreos.com 11y ago

What makes a cluster a cluster?

sublimino
8pts0
jaxenter.com 11y ago

The anti-Docker blog that provoked a response from Docker’s founder

sublimino
2pts0
www.telegraph.co.uk 11y ago

Repetitive pop songs 'more likely to be hits'

sublimino
2pts1
minet.org 11y ago

Transcendental Meditation Dissenter's FAQ

sublimino
1pts0
www.sciencenews.org 12y ago

The addiction paradox | Science News

sublimino
1pts0
github.com 12y ago

Node-webkit compatible apps

sublimino
1pts0
www.catb.org 12y ago

The Jargon File - a comprehensive compendium of hacker slang

sublimino
2pts1
www.binarysludge.com 12y ago

Karma Story Reporter: a plugin for readable test reports

sublimino
1pts0
www.binarysludge.com 12y ago

Migrate (JS Test Runner) Karma's Config File to 0.10 Format

sublimino
1pts0
www.planetgeek.ch 13y ago

Clean Code and Clean TDD Cheat Sheets

sublimino
3pts0
www.binarysludge.com 13y ago

The Analogy of Print and Code Reviews

sublimino
1pts0
www.binarysludge.com 13y ago

Javascript Object/Array Addition Oddities

sublimino
2pts0
www.binarysludge.com 13y ago

Easy CLI JSON Formatting

sublimino
33pts10
www.binarysludge.com 14y ago

Parallel.sh – simple BASH parallelism

sublimino
1pts0
www.binarysludge.com 14y ago

Open Rights Group Conference 2012 - Some Interesting Links

sublimino
1pts0
www.binarysludge.com 14y ago

Running ntpd on a development Virtual Machine

sublimino
1pts0
www.binarysludge.com 15y ago

Mass Virtual Hosting with Apache and mod_vhost_alias

sublimino
2pts0
www.binarysludge.com 15y ago

How to Change Kindle Fonts, Disfluency and Memory Retention

sublimino
1pts0

ControlPlane was able to hire (not acqui-) a few of the FluxCD maintainers and other WeaveWorks staff to continue supporting the project — we did what we could, agree this is better for Styra folk than the uncertainty of closing up shop.

bpkg is a lightweight bash package manager. It takes care of fetching the shell scripts, installing them appropriately, setting the execution permission and more.

You can install shell scripts globally (on /usr/local/bin) or use them on a per-project basis (on ./deps/), as a lazy-man "copy and paste".

https://github.com/bpkg/bpkg

---

Also bash-lib is using bats (Bash Automated Testing System) for verification, which is un-maintained and has been forked should anybody be interested https://github.com/bats-core/bats-core

Markov Chains can be quite amusing when applied to a corpus of similar texts, and often stunningly human-like. I maintain a list of humourous applications: https://github.com/sublimino/awesome-funny-markov

Some favourites:

- Erowid trip reports and tech recruiter emails - https://twitter.com/erowidrecruiter

- Calvin and Markov - Calvin and Hobbes strips reimagined http://joshmillard.com/markov/calvin/

- Generate your future tweets based on the DNA of your existing messages - http://yes.thatcan.be/my/next/tweet/

- Fake headlines created by smashing up real headlines - https://www.headlinesmasher.com/best/all

- The most confusing subreddit (often on the front page) - https://www.reddit.com/r/subredditsimulator

The original Markov-generated content prank: "I Spent an Interesting Evening Recently with a Grain of Salt" https://web.archive.org/web/20011101013348/http://www.sincit...

And of course (un-amusingly!) - Google's PageRank algorithm is built on Markov Chains https://en.wikipedia.org/wiki/PageRank#Damping_factor

n.b. there used to be parodies of Hacker News, but both are down: https://news.ycombniator.com/ and https://lou.wtf/phaker-news

If you're enough floors up: descending in an elevator then immediately ascending by the stairs works wonders for the sedentary body, and the mind. I also do this sometimes when hacking through lunch to trick my mind's context, then reverse the journey to start the afternoon.

Exactly - continuous deployment is about moving some/most testing to production, not eliminating it altogether.

Acceptance testing the system once deployed is the cornerstone of organisational acceptance of the CD doctrine - errors will always happen, it's just that they can now be fixed much faster in production.

Using an acceptance test suite as a deployment safety harness should dramatically increase the quality of tests, and hopefully the application too.

Open source alternatives for Git repos (ideally run in the pipeline):

https://github.com/dxa4481/truffleHog - "Searches through git repositories for high entropy strings, digging deep into commit history"

https://github.com/ezekg/git-hound - "Hound is a Git plugin that helps prevent sensitive data from being committed into a repository by sniffing potential commits against PCRE regular expressions"

https://github.com/michenriksen/gitrob - "The tool will iterate over all public organization and member repositories and match filenames against a range of patterns for files that typically contain sensitive or dangerous information"

https://github.com/awslabs/git-secrets - "Prevents you from committing passwords and other sensitive information to a git repository"

Of note is that an immutable/noexec filesystem doesn't prevent code being downloaded to an environment var/typed out and run - tools like https://github.com/SafeBreach-Labs/pwndsh just pipe source to an interpreter (in that case BASH, which generally isn't installed in smaller base images).

Reducing the attack surface is important, but if a running container is compromised it's imperative a post-mortem is performed immediately - and the issue remediated - to prevent re-exploitation.

Paul Saffo is a potential source:

Since the mid-1980s, my mantra for this process is “strong opinions, weakly held.” Allow your intuition to guide you to a conclusion, no matter how imperfect — this is the “strong opinion” part. Then –and this is the “weakly held” part– prove yourself wrong. Engage in creative doubt. Look for information that doesn’t fit, or indicators that pointing in an entirely different direction. Eventually your intuition will kick in and a new hypothesis will emerge out of the rubble, ready to be ruthlessly torn apart once again. You will be surprised by how quickly the sequence of faulty forecasts will deliver you to a useful result.

http://www.saffo.com/02008/07/26/strong-opinions-weakly-held...

There is an analogous productivity method called "Don't Break the Chain" involving a prominently-placed real calendar, and big red crosses denoting daily successes. It triggers the same (rightly) proud sensation. Anecdotally I preferred it to GitHub streaks (as I rarely look at my profile).

Any habit tracker site/app will also do this for you - I automate mine with GitHub API data, and get a similar effect (the app notifies of streaks daily).

This is intentional - it's a feature, not a breaking change, although the docs do identify a greater possibility of regressions until LTS. From https://nodejs.org/en/blog/release/v6.0.0/

The general rule for deciding which version of Node.js to use is:

...

- Upgrade to Node.js v6 if you have the ability to upgrade versions quickly and want to play with the latest features as they arrive.

Note that while v6 will eventually transition into LTS, until it does, we will still be actively landing new features (semver-minor). This means that there is an increased chance for regressions to be introduced..

It's quite reasonable not to care, but it's still good to know.

I agree entirely.

They claim to be outside of UK jurisdiction for a number of bills, although I'm not qualified to judge the veracity of these claims - again from https://www.ivpn.net/blog/should-gibraltar-be-classified-as-...

Gibraltarian VPN service providers are not obliged to comply with the comprehensive UK laws regulating the information society

RIPA does not apply to Gibraltar.

The GRA [Gibraltar Regulatory Authority] supervises the enforcement of the Data Protection Act 2004, a Gibraltarian law implementing the European data protection laws.

IVPN rebuts that argument at some length:

What is the relationship between Gibraltar and UK?

The main relationship between Gibraltar and UK stems from the fact that the British monarch is the head of state of both Gibraltar and UK. However, such a relationship is not enough to make Gibraltar a part of UK. For example, no one argues that Andorra is a part of France although the President of France is the head of Andorra (together with the Spanish/Roman Catholic Bishop of Urgell).

https://www.ivpn.net/blog/should-gibraltar-be-classified-as-...

Perhaps you're referring to Linuxbrew - "a fork of Homebrew, the Mac OS package manager, for Linux."

It exposes the same repository as its OSX counterpart, with linux-flavoured customisations where necessary.

From feature list at http://linuxbrew.sh/

- Can install software to a home directory and so does not require sudo

- Install software not packaged by the native distribution

- Install up-to-date versions of software when the native distribution is old

- Use the same package manager to manage both your Mac and Linux machines

CloudFlare offer free, "flexible" Universal SSL https://www.cloudflare.com/ssl - although it is terminated at their servers and still communicates with the target server via HTTP. This is what I'm using for a simple blog.

Flexible SSL: There is an encrypted connection between your site visitors and CloudFlare, but not from CloudFlare to your server.

You do not need an SSL certificate on your server.

Visitors will see the SSL lock icon in their browser.

It can be upgraded to full "strict" SSL all the way to the host with paid plans.

This security model obviously comes with some compromises, especially on login forms, as the user has been taught to expect the browser's padlock sign to signal an encrypted connection to the host.

Shared SSL certificates from CloudFlare are also loaded with porn sites. For https://www.binarysludge.com

SANs: sni29282.cloudflaressl.com, .askporno.com, .binarysludge.com, .dzej.eu, .grem.eu, .hmtransportation.com, .joowaal.com, .kuwaitinfo.info, .le-foie-gras.eu, .mnmjewellery.com, .mobxnxx.com, .philippines2050.com, .pornfax.com, .pornhideaway.com, .pornmovies101.com, .shokweb.com, .tennistemptation.lt, .tennistt.lt, .the-porn-videos.com, .timenewroman.com, .tutoringunlimited.com, askporno.com, binarysludge.com, dzej.eu, grem.eu, hmtransportation.com, joowaal.com, kuwaitinfo.info, le-foie-gras.eu, mnmjewellery.com, mobxnxx.com, philippines2050.com, pornfax.com, pornhideaway.com, pornmovies101.com, shokweb.com, tennistemptation.lt, tennistt.lt, the-porn-videos.com, timenewroman.com, tutoringunlimited.com

https://www.sslshopper.com/ssl-checker.html#hostname=https:/...

Time to finally get that StartSSL cert I've been talking about...

Does well on the UK Government Postcode Regex from http://stackoverflow.com/a/164994/114770:

  http://jex.im/regulex/#!embed=false&re=(GIR%200AA)%7C(((%5BA-Z-%5BQVX%5D%5D%5B0-9%5D%5B0-9%5D%3F)%7C((%5BA-Z-%5BQVX%5D%5D%5BA-Z-%5BIJZ%5D%5D%5B0-9%5D%5B0-9%5D%3F)%7C((%5BA-Z-%5BQVX%5D%5D%5B0-9%5D%5BA-HJKSTUW%5D)%7C(%5BA-Z-%5BQVX%5D%5D%5BA-Z-%5BIJZ%5D%5D%5B0-9%5D%5BABEHMNPRVWXY%5D))))%20%5B0-9%5D%5BA-Z-%5BCIKMOV%5D%5D%7B2%7D)
edit: the link won't embed here nicely

For those that were wondering:

Radioisotope Thermoelectric Generators, or RTGs, provide electrical power for spacecraft by converting the heat generated by the decay of plutonium-238 (Pu-238) fuel into electricity using devices called thermocouples. Since they have no moving parts that can fail or wear out, RTGs have historically been viewed as a highly reliable power option. Thermocouples have been used in RTGs for a total combined time of over 300 years, and a not a single thermocouple has ever ceased producing power.

Source: https://solarsystem.nasa.gov/rps/rtg.cfm