ak217

76 ms·

811.
by ak217 10y ago
We need this so much. YAML is by far the best choice for human-readable and editable serialization, but the bells and whistles are really unnecessary and hold back innovation among the parser packages.
812.
by ak217 10y ago
Right, because Lockheed won the bid, and Boeing had to shop their design around to Pan Am and civilian freighters.
813.
by ak217 10y ago
The requirements for the 747 were largely driven by the USAF and then Pan Am. If I understand right, both customers were so influential that Boeing felt it had to accommodate them.
814.
by ak217 10y ago
I find the arguments from "it's wrong to recognize borders on the Internet" a bit naive, or impractical. The borders recognize us, and state-sponsored attacks will continue, and have very far-reaching implications. We need be
815.
by ak217 10y ago
Sounds like the right way to go. Thanks for the pointer. As these things develop and become increasingly security-critical parts of the protocol, it would be nice if programs like libcurl and other HTTP client libraries gained support for t
816.
by ak217 10y ago
Imagine a new flag for certificates issued by CAs that support CT, indicating that the domain owner (e.g. github.com) intends to continue to only use CT-capable authorities. Any certificate issued for e.g. github.com by any other CA immedia
817.
by ak217 10y ago
You may not be able to immediately spot a bad CA, but the more major CAs buy in to CT, the easier it is to spot fraudulent certs through fingerprint reporting. SSL clients can then choose to have a side-channel trust revocation mechanism. O
818.
by ak217 10y ago
I see two solutions to big CAs. One is to reengineer the CA trust system to delegate limited authority to CAs (e.g. there is no good reason for a CA in the US to be able to sign certificates with Chinese TLD CNs, and vice versa). The second
819.
by ak217 10y ago
The cost is not entirely relevant, even putting aside the need to take out the carbon that we have already emitted. There is a power law distribution of wealth, and people on top have just about all of the financial and technological means
820.
by ak217 10y ago
Absolutely, that should be part of it. Fleets of drones planting forests. But artificial photosynthesis modules in the desert and engineered algae could also play a huge role.
821.
by ak217 10y ago
Brin has the right idea. The only thing that will realistically help - aside from massive reforestation efforts or maybe bioengineered algae - is a mass-produced, maintenance-free solid-state artificial photosynthesis module. The problem is
822.
by ak217 10y ago
We need a Mahnattan Project for carbon sequestration.
823.
by ak217 10y ago
> I don't find IAM policies to be tricky, to be honest. It may just be familiarity; I have been doing this for a little bit of time now. Then you are an elite AWS operator, but you also have to think about how to teach and review wo
824.
by ak217 10y ago
In many cases, I think the secret manager should be part of your provisioning infrastructure. There are certainly other reasonable ways to structure this though - as long as you're clear on your threat model. Would you agree that the s
825.
by ak217 10y ago
They both import all three under the hood.
826.
by ak217 10y ago
It seems to me that cost is negligible for any of the use cases. The KMS CMK cost will dominate access cost in my estimation. I see that Credstash cites latency as a factor in favor of S3, which is not a major factor if you retrieve a secre
827.
by ak217 10y ago
Credstash looks great, but having written something very similar for internal use (a secrets management system using KMS and S3 for use by EC2 instances) I was expecting it to have built in functionality to manage IAM policies the way you d
828.
Everything You Know About the Vulnerability Equities Process Is Wrong(lawfareblog.com)
1 points by ak217 10y ago|0 comments
829.
by ak217 10y ago
Thanks, this is good detail. Would you recommend any reading on the up-to-date understanding of brain architecture?
830.
by ak217 10y ago
I was talking about delorean and pendulum (I think josefdlange edited his comment). I agree that arrow's multi-locale natural language renderer does add a lot of value. (Although I'd argue it should be unbundled into its own modul
831.
by ak217 10y ago
So far I haven't seen either of these libraries do substantially better than datetime+dateutil+pytz at anything they claim to be good at.
832.
by ak217 10y ago
Atlanta built the olympic village on the Georgia Tech campus, and the dorms became student dorms. Perfect use case.
833.
by ak217 10y ago
Pascal is supposed to have unified memory. I haven't used it yet, but their marketing says one address space.
834.
by ak217 10y ago
Most of the things you said in your writeup were no longer true in February 2015, and I think there are no concrete things that you wrote that are true anymore, thanks to the hard work of Python packaging infrastructure maintainers ( https:
835.
by ak217 10y ago
Fair to say, but then there isn't any technology out there to build "a single cross-platform, cross-Python wheel that just works" and links against C code. That's true of any packaging framework that links against native
836.
by ak217 10y ago
> Six is a third-party library and interferes with migration to Python 3. It requires you to tiptoe around the differences between 2 and 3. That's a strange thing to say. Six and future were written to ease the migration to Python 3
837.
by ak217 10y ago
You can easily build a single cross-platform, cross-Python wheel that just works. You just need to add "[bdist_wheel] universal=1" to your setup.cfg and write your code in a cross-Python style enabled by six and future ( https:&#x
838.
by ak217 10y ago
curl | jq .
839.
by ak217 10y ago
Maybe that sort of stuff is best left to jq, and httpie could focus on interoperability with jq.
840.
by ak217 10y ago
We need a better accountability system for judges. Even for those judges who are elected, the public is usually not meaningfully informed about the judge's performance.

More ›