HN user

tech2

504 karma
Posts1
Comments205
View on HN

Two major issues in my experience seem to occur.

The first is that you had a system with a given set of ownership and now lines need to be drawn between groups to grant each sub-team their own piece of the larger pie. This is where Conway's law comes to bite you because your code is likely structured around your existing team and practices. Deciding how to draw that boundary is a challenge (API-based? Separate services?). Do not skip this part, otherwise you'll have an awful mix of old and new and everyone suffers.

The second is how work is structured. With a small team, anyone can edit anything (ownership again). With multiple teams you need to accept that changes will require multiple stages of development and the rate of change can take a hit due to scheduling and prioritisation for each team. In the small team a single sprint (assuming this is your working practice) may have been sufficient, but with multiple teams those changes will need scheduling.

It's not entirely fair.

Prior to 2.3 Python didn't have booleans, just "truthiness". In 2.3 they added the Boolean class as a subclass of int (because of patterns of development it was a pragmatic choice). True and False were introduced, but they were able to be reassigned which could cause all manner of fun. 3.x made them keywords which put a stop to that but the int aspect remained.

Turn Dependabot off 5 months ago

For python maybe pip-audit, and perhaps bandit for a little extra?

It doesn't have the code tracing ability that my sibling is referring to, but it's better than nothing.

I tried to do that, really did, but my TV was circa 2006 and I needed a replacement. None of the options in my region are good, there's no Scepter equivalent unless you pay 3x as much for something akin to a commercial display. So, air-gapping it is!

I had wrap from my exhaust system start to unravel at one point during a long journey far from home. I had to unwrap it by hand on the roadside sans-gloves to prevent it from ending up under a wheel and tearing components apart. The end result was that I had to find a local retailer selling duct-tape; Not for the car, but so I could apply segments of it to my skin to pull those tiny irritating fragments free from my inner forearm. Yeah, that itch is evil!

Right, but that's a follow on to regulations about increased rear and side still heights for occupant protection, and that's a follow on from increased vehicle sizes, and that's a follow on from commercial vehicles being sold to the general public instead of regular passenger vehicles due to tax breaks, etc.

One of my favourites that starts out difficult but you become fluent in by the end is Banks' "Feersum Endjinn". I love seeing people's facial expressions on first attempting to understand Bascule, or read it "normally".

The earlier model that the 25 replaced was all mechanically interlocked. The belief was that software provided that same level of assurance. They performed manual testing but what they weren't able to do was reach a level of speed and fluency with the system to result in the failure modes which caused the issues. Lower hardware costs equals higher profit...

They may not be against content restriction, instead they may be against removal of user privacy or anonymity. If the proof of age thing was some kind of zero knowledge proof such that the age verifying group has no knowledge of what you're accessing, and the site you're accessing has no knowledge of you as an individual (beyond tells like IP address etc.) then perhaps they'd be more open to it?

The issue with the lack of intermediates in the cert isn't browsers (they'll just deal with it). Sure, if they aren't already in the cache then there's a small hit first time. The problem is that if your SSL endpoint is accessed by any programming language (for example, you offer image URL to a B2B system to download so they can perform image resizing for you, or somesuch) then there's a chance the underlying platform doesn't automatically do AIA chasing. Python is one-such system I'm aware of, but there are others that will be forced to work around this for no net benefit.

Maybe we're missing one another here but it appears you're arguing for me. Khomeini is in place _because_ of western influence/involvement, if it weren't for operation Ajax/Boot (depending on whether we're talking CIA or MI-6 naming) and the various aspects of the associated propaganda then Mosaddegh may have remained in power (I say maybe because it was quite unstable times in the early 50s Iran) and Khomeini may never have gained power.

Are we forgetting the pushback against nationalisation of their oil industry, operations involving both CIA and MI6, the propaganda campaign to get rid of their elected president, and other such fun? It's not like the west didn't have some rather significant involvement and incentive here. They have what they have because the west (as is common) messed with another nation.

Historically a number of people started as single small developers with tools like FoxPro, Delphi, and (even earlier) Clipper/dBase. These allowed easy creation of some kind of UI. All of these have a database under the hood. The combination of the two allowed a lot of small groups to make quite complicated systems for a single platform.

Now there's an expectation for things to be web-based and the entry point feels less obvious than it used to be.

You could probably achieve the same outcome by combining two approaches though. Use traditional timing and phase management that existing noise cancelling headphones do. Then, using the data from that same set of microphones use AI to extract the conversation of interest (maybe using timing differences from left/right to determine who's "in front" of you) and inject that as the thing to overlay on top of the inversion. This way there's no risk of AI error on the noise cancellation and you can rely on existing solutions.

Sorry, I appreciate the joke (really :) ) but I also worry that people keep trying to add the concept of "users" or an existing role or permissions model into capability-based systems when they're unnecessary.

You could maybe model or emulate a user in a capability system by providing the login's session manager an object with read/write access to the configured "user" directory, read and execute access to an applications collection, and full access to the root window. From there, when the user starts a new application it's given an object with access to a window created for it (by calling "createWindow" on the root window object, so it can't even do something like enumerate other windows or whatever), and whichever other requirements were configured as part of its install.

It's capabilities all the way down with no "user" involved.

Maybe? I guess the difference is that with a capability object model (or similar arrangement) the _only_ way the application has to interact with the outside world is via those objects/handles it's been granted. There's no risk of escape because they only have access to the handles the process has been provided.

It's almost the opposite of a permission model in some ways, permission models restrict access to a global array of functionality where capability models allow access only to what's been provided.

I think that whole situation is what eventually meant MD being purchased by Boeing, Lockheed leaving civilian aircraft manufacture, and Rolls Royce being bailed out and semi-nationalised. The DC-10/L-1011 competition was an amazing period of time with some massive impacts in civil aviation, all because two companies fought (and both lost, kinda/sorta) over a segment only large enough for one of them.