zer0x4d

The author spends the first paragraph of the article talking about how n number of users bet x on a specific outcome and they won. They fail to account for the many others who bet on a different outcome and lost.

I watched polymarket like a hawk for weeks before the attack and am incredibly familiar with the numbers. Fact is, there were no indications on Polymarket that an attack was happening that morning. The chances of an attack was like 10 percent if I remember correctly.

UniFi website and marketing is just really really bad. They have amazing products but for some reason they don't really care about consumers and don't really know how to market to consumers. Just look at their website, it's impossible to find anything other than some super super specific networking stuff that you probably need a CCNP to even begin to understand

Absolutely agree. Mistakes should be corrected immediately, protocol revised, and those responsible punished, if malicious acts are found. Otherwise, enforcement should be full stream ahead. Illegal immigration has hurt the US enormously and it's time that we enforce our laws.

People love nothing more than selective application of law. In fact, to most people laws don't apple if:

1. they can get away with it, or 2. they don't agree with it.

For me, personally, any new language needs to have a "why." If a new language can't convince me in 1-2 sentences why I need to learn it and how it's going to improve software development, as a whole, it's 99% bs and not worth my time.

DHH does a great job of clarifying this during his podcast with Lex Friedman. The "why" is immediately clear and one can decide for themselves if it's what they're looking for. I have not yet seen a "why" for Zig.

Techrot is real and it's there in almost every major big tech product. Google does definitely take the gold medal in this category though as I have never seen so many bugs in production software by a trillion dollar company as I have seen in Google's.

1. Maps crashes almost every ride on Car Play (this used to happen a lot back in 2023 and was fixed for majority of 2024. Seems like it regressed again)

2. Trying to expand reviews on Google Maps expands the wrong review (100% reproducible, not an edge case)

3. Firebase Auth has terrible reliability when it comes to SMS delivery and fail rate of like 5-10%.

4. Gmail keeps opening links with the wrong account (Click on Google meet link from an email in account number 2, as in .../u/2/... . Link opens with account 0 and now you gotta switch accounts again).

5. Gemini is famously unreliable and produces wrong results for seemingly simple queries.

And many more I can't recall on top of my head but surely exist.

An ode to Dreamweaver

Dreamweaver was how I learned MySQL back when I was 12-13 and got into web development. I don't remember how I came across it but somehow things, the way they were laid out at the time, made sense to me. This would ripple into a career that's making my living 16 years later.

I remember downloading XAMPP and installing it to get a local MySQL and PhpMyAdmin server. A few clicks in Dreamweaver later, I somehow had a connection file that would connect to my local MySQL server. I started playing around with it and creating different forms. The MySQL query generators on Dreamweaver were so simple that you could, with a few clicks, have a full on CRM.

I ended up coding a test score reporting system for my middle school class and the school somehow trusted me and started using it. This made me possibly the most hated person in the school because parents could now see their kids scores every day and there was no more "Oh the teacher hasn't given out the scores yet." But it was good times, and I was so excited about it.

Many years later, I now run a startup and have transitioned into using Node.js but MySQL is still my bread and butter. I still remember that day when I discovered the SELECT query.

I can't believe someone posted that without knowing they actually used Gnosis Safe

I'm not too sure but few things come to mind:

1. Upgrade protocol to include protections for well known cold wallets held by exchanges (ex: API call has to be made to the exchange's security endpoint to validate each transaction out of the wallet. Exchange staff would need to manually allowlist large transactions before they are transmitted).

2. Decentralized voting on reversal of transactions (90-95%+ vote needed to reverse to avoid 51% attacks)

I'm a huge crypto believer but I can admit that we don't have a serious system if a person can just transfer over $1.5B from a well known crypto cold wallet to different accounts with nothing flagging it and no way to reverse it.

I can guarantee you every Pixel, Samsung, or Huawei phone had similar functionality built in but was never scrutinized.

Lol this was the most blown out of proportion "gate" ever and a nothing burger really. The issue wasn't what Apple did, as it is a very common practice in the industry and I bet almost every other manufacturer did it too. The issue was that they didn't notify the user.

Has there been a single Pixel with no boot loop, battery, reception, or otherwise some other major issue?

What is going on at the Pixel team??? They have probably single handedly cost Google millions of dollars

250M Requests

1.66M Unique visitors

24TB served

However, I do understand in their world, 24TB is chump change

1. Your 5 year old kid with her pink bike should not be on the street alone. This is just a matter of judgement, independent from other motorists. You should be behind her watching for cars. 2. If you want to ignore point 1, my argument still stands. The chances of a Dodge Ram 3500 ramming into her is far higher if she is on the sidewalk as opposed to on the street. A 5 year old doesn't understand traffic rules good enough to be riding on the side walk and watching for cars. Her best chances are to make herself as visible as possible (ie. by being on the road in a bright bike and protective gear).

I run a $3m/yr startup on a free tier Cloudflare account. To this day I have no idea why Cloudflare is not charging us for anything. I would have happily paid them for their service

The way you make your kids safe bikers:

1. NEVER RIDE ON THE SIDEWALK. Cars on the street cannot see you due to other parked cars and WILL make right or left turn on you. Additionaly, cars coming out of parking lots won't see you on the sidewalk.

2. NEVER RIDE ON OPPOSITE SIDE. Ride on the same direction as cars, make yourself visible.

3. INDICATE ALL TURNS WITH HAND SIGNALS. Be predictable. Don't just turn or otherwise behave unpredictably. Indicate turns, make eye contact and then turn.

4. (Obvious) ACT LIKE A CAR AND DON'T RUN LIGHTS.

Agree with all your points on the real world consumer experience.

* I would never assume the AI answer to a consequential problem to be authoritative, unless it shows me the source and I can click on the link to verify the source and the data presented (search engine use case).

* Rewrites with AI are bug-prone and often produce hard to trace bugs to the seemingly correct nature of these bugs. Generating the scaffolding works super well.

* Images are often too smooth, videos too robotic and rhythmic, water too shiny, etc. Trained eyes can easily distinguish between AI and real.

* Hallucinations are commonplace.

Agreed. There is just too many limitations for it to be ever useful, unless you build out a large dictionary with a huge CPU cost... A true waste of effort, albeit a fun one if you wanna learn QMK programming

You learn to learn with time and imo it's different slightly from field to field. In tech field you just learn by doing, asking questions, making mistakes and gaining experience. Take a sample code in a new language, make it do something slightly different. Then add one more thing on top. Then something slightly more complex, then finally try to make it do what you want. Once ready, deploy, test, and iterate.

He says he is paid more than his peers (who are probably not in the tech field). It's entirely possible his 4x pay above his peers is still less than a senior or staff engineer's pay.

Nope, certificates are issued for CNs(Common Name), also known as FQDNs (Fully qualified domain names). Something such as *.google.com, not IP addresses.

If they were issued for IP addresses they would have to reissue the certificate every time they spun up a new server. Also it's why if you spin up another server and make DNS point google.com to that server, it would not pass verification since the certificate you will be using on that server is not issued to *.google.com, but rather some other domain you own. The IP address plays no role in certificates.

Call me a fanboy, but Swift is one of the best languages I've ever had the privilege of using. I'm truly hopeful with some more work, it's able to become the de-facto cross-platform language.

The complexity is very manageable, a decent Java, Objective-C or .NET developer can pick it up in less than a day, is feature-packed and stuff just make sense.

Never said that, but a competent engineer should be able to build like 75% of the main functionality of Zendesk over a weekend.

Now, I understand there's probably a lot more to it which is why I would expect it to be a company of around 50 engineers and 150 business/marketing/etc and that's being generous.

The hill I'd die on is that, with money not being a scarce resource and a technically feasible challenge present, a team of 200 should be able to build and sustain almost anything in the world. And that's being even generous. I think realistically a team of 50 should be able to build almost anything

Never said that, but a competent engineer should be able to build like 75% of the main functionality of Zendesk over a weekend.

Now, I understand there's probably a lot more to it which is why I would expect it to be a company of around 50 engineers and 150 business/marketing/etc and that's being generous.

The hill I'd die on is that, with money not being a scarce resource and a technically feasible challenge present, a team of 200 should be able to build and sustain almost anything in the world. And that's being even generous. I think realistically a team of 50 should be able to build almost anything

We don't know if it hasn't to be honest. State actors and exploit sellers could have known about this bug for years and exploited it before it was found by this white hat

This is worse than Docusign. What do 6000 people at Zendesk do? It's a simple ticket management software with maybe 10 features

Many people fail to see this. You can't compare a terrorist attack that intentionally targets civilians with no apparent military target to a legitimate attack on a defined military target that unfortunately results in some collateral damage.

This is definitely interesting in the face of the news that Ukraine has been using very small FPV drones successfully on the front lines as opposed to more sophisticated systems like the Bayraktar drones. There seems to be a huge gap in air defense systems when it comes to small UAS and this should effectively address that.

That's the case when there is a market where demand is dynamic and a person can simply refuse to buy (decreasing demand) if the prices are too high. Milk is like this.

But in rental market, the demand is not dynamic. You HAVE to get an apartment to live in once your lease is up. If 80% of the complexes around you are on this and on top of that the independents also set their pricing based on the market controlled by the majority, then they can charge you whatever they want. You HAVE to buy and you HAVE to get it with the price dictated by them. There is absolutely no supply and demand in this at play.