antoncohen

16 ms·

91.
by antoncohen 6y ago
Python tried to pull a Perl 6 and failed. Python 3 was done as a flag day, a big breaking change you need to switch over to. Originally Python 3 and Python 2 lacked features that would make it possible to write code that is compatible with
92.
by antoncohen 6y ago
Some feedback on the page. I think I'm squarely in the target audience. I'm familiar with Heroku Buildpacks. I wrote my own tool to generically build projects by detecting languages, build tools, etc. I based the detection of Hero
93.
by antoncohen 6y ago
This article and the Bloomberg article[1] that is currently on the front page. From this NPR article: > We funded more than twice as many loans for smaller businesses than the rest of the firm's clients combined," the bank said
94.
by antoncohen 6y ago
Lawsuits claim banks prioritized loans to large businesses. JPMorgan disputes those allegations, claiming it processed loans fairly. By fairly it means it put all the small business loans in one large FIFO queue, and all the large business
95.
by antoncohen 6y ago
California Labor Code section 2870[1] states: > (a) Any provision in an employment agreement which provides that an employee shall assign, or offer to assign, any of his or her rights in an invention to his or her employer shall not appl
96.
by antoncohen 6y ago
This essentially looks like a Makefile where the tasks (targets) are run inside Docker containers. That is useful, I've definitely written Makefiles where tasks run in containers, and I wish it was easier. But does this actually replac
97.
by antoncohen 7y ago
Trello sent me this email today: > Using a work email address with Trello > At least one of the email addresses linked to your account belongs to an organization: > <redacted>.com > This usually means it's a work em
98.
by antoncohen 7y ago
I think the idea is really great for private parties. Zoom and similar conferencing systems don't work well because either everyone is the same volume and it is just loud noise, or it mutes everyone but the loudest person, which kills
99.
by antoncohen 7y ago
I agree. Even after approving the camera and mic, the way it was presented makes it seem like the camera is only going to be used for controlling the emoji. But that isn't the case, the camera video is shown to other people. I feel lik
100.
by antoncohen 7y ago
The main way I've found this to be annoying is GitHub "Deploy Keys"[1]. They treat them similar to users, so you need a unique deploy key per repository. That is pretty annoying when trying to authenticate something like a CI
101.
by antoncohen 7y ago
Thank you. This is the core of it[1], IMO: > Back in the day, we’d spin up a microservice that did one, small thing just like that. We had a bunch of small services built and maintained by one person. This was great for autonomy, iterati
102.
by antoncohen 7y ago
I think this depends on how it is maintained over time. If there are a collection of Java microservices maintained by dedicated team. And over time they upgrade from JDK 11 to JDK 13. Add features, fix bugs. Rewrite some services in Go. The
103.
by antoncohen 7y ago
True. The form also asks for SSN, DOB, address, phone number, etc.
104.
by antoncohen 7y ago
I'm going to correct myself. My family member didn't get scammed! There is a government agency cold emailing people, telling them to fill out a form that that asks for Bank Name, Account Number, and Routing Number. https:/&#
105.
by antoncohen 7y ago
Yesterday a family member got scammed out of banking information in a COVID-19 related scam. These scams are rampant right now. I think it is worth warning family and friends that might be unaware. Banks sometimes make it hard to do the rig
106.
by antoncohen 7y ago
But when joining a Zoom call from your phone you dial a number, then enter the meeting ID. The meeting ID has the same number of digits as a US phone number, but it isn't the number you dial. The calendar invites generated by Zoom form
107.
by antoncohen 7y ago
> The two bugs, Wardle said, can be launched by a local attacker — that’s where someone has physical control of a vulnerable computer. TechCrunch got this wrong. "Local" means local privilege escalation, as opposed to "rem
108.
by antoncohen 7y ago
The mechanism of rsync + hardlinks is similar to BackupPC[1][2], which is an 18 year old open source backup tool, written in Perl, with a web UI. It supports backing up Mac, Windows, and Unix-like OSs, and is primarily for centrally backing
109.
Army Corps of Engineers to Build Temporary Hospitals in NY(governor.ny.gov)
416 points by antoncohen 7y ago|508 comments
110.
by antoncohen 7y ago
The mention of the shadow file is in the README: > S-Cache is an SUID-root executable that works by storing the secret in a file that is owned by root and only readable by root. Its security is thus comparable to the security of shadow p
111.
by antoncohen 7y ago
That still comes down to when they are considered "aware". If I emailed GitHub and told them the "microsoft" org was run by people in Iran, would they then be "aware" and need to shutdown the "microsoft&qu
112.
by antoncohen 7y ago
Does the law actually require a fully automated means of detection? For example to "nuke first" means you need to know that sanctions apply. If the law doesn't require it to be fully automated, "know that sanctions apply
113.
by antoncohen 7y ago
What frustrates me about these kind of things is how impersonal they are. How many orgs/users does GitHub sanction a day? Too many for it to be able to email the users and ask clarifying questions? Or even have a human dig in and doubl
114.
by antoncohen 7y ago
This is correct. "All rights reserved" was a way of claiming copyright, similar to the © symbol. Open source non-public domain code still has a copyright, it is just licensed for use under an open source license. https:/&#x2
115.
by antoncohen 7y ago
That's strange, because the closest company to Google scale is Facebook, and they actually use Chef in production[1][2][3] on hundreds of thousands of servers. [1] https://www.chef.io/customers/facebook/ [2]
116.
by antoncohen 7y ago
I won't talk much about FAANG scale, because that is hyper specialized. A small startup shouldn't use any configuration management (assuming configuration management means software like Puppet, Chef, Salt, and Ansible). That is be
117.
by antoncohen 7y ago
Thanks, that was a very clear explanation. I know AssumeRole is needed for SSO, and I understand the benefits of SSO. The way the article phrased it it sounded like AssumeRole has some very specific benefit by itself. And if the answer is &
118.
by antoncohen 7y ago
I'd like more detail on the advantages of AWS AssumeRole, and what attacks it is designed to protect against. It must be more than CloudTrail logs, because normal API usage gets logged to CloudTrail. One thing I'd like to highligh
119.
by antoncohen 7y ago
For 2020 Honda only has a single model in the US that starts below $20,000, the Honda Fit. And that is only for some trim levels of the Fit. In 2019 Honda sold 35,414 Fits, out of 1,450,785 total Honda vehicles sold[1] (384,168 CR-Vs, 325,6
120.
by antoncohen 7y ago
Site Reliability Engineer (SRE)[1]. Read the SRE book ( https://landing.google.com/sre/books/ ). Study any gaps you have. Tailor your resume and talking points to the job/direction you want, meaning de-emphasiz

More ›