arccy

38 ms·

601.
by arccy 2y ago
massively increase the open source github actions bill for runners running longer (compute is generally more expensive) to publish for a small decrease in network traffic (bandwidth is cheap at scale)?
602.
by arccy 2y ago
sunk cost fallacy / tunnel vision of their existing approaches.
603.
by arccy 2y ago
i mostly use this to go from inside a repo up to the root: alias rr='cd $(git rev-parse --show-toplevel)'
604.
by arccy 2y ago
mastodon is text, pixelfed is images/videos
605.
by arccy 2y ago
if what you care about is "federated platforms", you might not care much (or maybe you might realize ActivityPub scaling is problematic). many other people care more about "usable (right now) platforms".
606.
by arccy 2y ago
an alternative currency because humans have a long history of treating it as a valuable item, mostly for jewelry / decorative purposes. crypto only copied the speculative currency part, but it's not useful even for showing off...
607.
by arccy 2y ago
if you compress it properly for a fast web experience, you'll probably be better 10KB-100KB
608.
by arccy 2y ago
I believe the plan is to not have a plan (right now): https://mastodon.social/@dansup/113887622931474663
609.
by arccy 2y ago
I think it's more that WebSockets are held open for a long time, so if you're not careful, you can get "hot" backends with a lot of connections that you can't shift to a different instance. It can also be harder to
610.
by arccy 2y ago
The difference between compiled code vs the code you wrote makes behaviours non-obvious. https://github.com/golang/go/issues/69887
611.
by arccy 2y ago
if you convince them to use signal that's close enough...
612.
by arccy 2y ago
unless thinks they own important.g.co, they've just walked past some glaring red flags, it doesn't even mention their domain in the email.
613.
by arccy 2y ago
also known as magic that go itself won't support.
614.
by arccy 2y ago
google trends can disambiguate the context https://trends.google.com/trends/explore?date=all&q=%2Fm%2F0... both decline, but emacs is steeper
615.
by arccy 2y ago
and who hosts that Debian image you're starting from....
616.
by arccy 2y ago
These days there's gprc reflection for discovery https://grpc.io/docs/guides/reflection/
617.
by arccy 2y ago
The perfect web comic for this: https://www.webtoons.com/en/canvas/meme-girls/bansky/viewer?...
618.
by arccy 2y ago
if you're from outside, it's more or less the same. if you're from europe, it's harder (but not that much harder if you're in tech).
619.
by arccy 2y ago
For most jobs that pay well, the requirements are more like a formality, it's quite easy to satisfy the conditions compared to some other countries.
620.
by arccy 2y ago
if you can't act on them, don't you have to pick up your phone anyway? if it was a bit smarter you can quickly act on it, but using a smartwatch is so uncomfortable you wouldn't want to use it for anything unnecessary.
621.
by arccy 2y ago
Shame they didn't include the UK, it's Europe's biggest competitor in terms of where workers can easily move to.
622.
by arccy 2y ago
i used OPA in one org, and kyverno in another for verifying (reused whichever was already in place for other purposes). our teams always chose to go with cloud kms services for the signing keys, we thought they offered stronger access contr
623.
by arccy 2y ago
TUF is much more comprehensive than what sigstore/cosign offers. at the core for sigtore/cosign are just the primitives for sign a blob / container and maybe some extra metadata, and for verifying the blob / container &#
624.
by arccy 2y ago
it's not just a random token "signed by github", a token containing the runtime context it was requested in (repo, branch / commit, build, etc) see the fields in https://docs.github.com/en/actions&#x
625.
by arccy 2y ago
it's not much more difficult (maybe even easier) than the gpg signing / checking that distros generally like to do. with gpg, you get a root set of public keys that you want to trust. with sigstore, depending on the signing method
626.
by arccy 2y ago
yes, i've implemented it in multiple companies. cosign supports using generated keys and kms services, that's been pretty stable and usable for a long time. keyless signing is different and you need to think a bit more carefully a
627.
by arccy 2y ago
depends on what experience you want... a lot of communities exist on just a chat app like whatsapp (europe mostly), line (east asia), etc
628.
by arccy 2y ago
is anything you don't like now ai generated text? "deep dive" has been around for quite some time https://trends.google.com/trends/explore?cat=5&date=all&q=%2...
629.
by arccy 2y ago
If you're that old, you probably already have a house when it was much cheaper relative to income levels. Now, a tiny shift in interests rates affects not only the general economy, but people paying back mortgages which can take a sign
630.
by arccy 2y ago
it's not just managed service where you can move to your self hosted version when they stop managing it, it's a fully proprietary stack that's just no longer available to use.

More ›