gwittel

14 ms·

91.
by gwittel 6y ago
ML and security is tricky. Its a good tool, but shouldn't be the only one. With threats constantly changing, ML alone will fall short. Its great for so called 'easy' stuff or locating 'odd' stuff to prioritize. O
92.
by gwittel 6y ago
> Honestly, I envy the young Mavericks who code shit and get work done. They at least sleep at night. Ignoring the burden shifting of on call rotations, I often find the young mavericks don't sleep at night -- they're fire figh
93.
by gwittel 6y ago
FWIW for most of these sorts of things you can scrub it via passing the text through an NFKC or NFKD transform. I'd hope that a screen reader can be updated to handle this case.
94.
by gwittel 6y ago
This is a nice summary. It would be nice if it included deployment model like daemonset vs replicaset. With the plethora of options, what missing for me is what ones perform well under heavy loads. Its painful to find out after the fact s
95.
by gwittel 6y ago
Another thing to consider - as Amazon has further shifted inventory burden to 3rd party sellers, there is less Amazon owned inventory to discount. How much do 3rd party/FBA sellers participate in prime days’ official deals? I could see
96.
by gwittel 6y ago
The main goal is similar to other holiday sales -- a handful of loss leaders and a lot of crap they hope you buy along the way. The first few prime days had a lot of real deals on name brand stuff. More and more, deals on name brand items
97.
by gwittel 6y ago
Sort of like mailing lists with a dedicated client so you can see everything in nice threaded fashion. You could explore new groups through the client as well. I never found the web based Usenet mirrors comparable to a dedicated client. T
98.
by gwittel 6y ago
tl;dr: PEBKAC The less glib answer is that while best practices have gotten better, companies aren't necessarily better at following them (your company or your vendors). Additionally, on average people have not gotten all that smarter
99.
by gwittel 6y ago
drill is relatively new but shows promise: https://github.com/fcsonline/drill
100.
by gwittel 6y ago
We always had a computer at home growing up. My dad used it for tracking finances, us kids used it for games. My first program was probably a bunch of print statements on our C64. Things changed when my dad bought a modem in 93 or so. We
101.
by gwittel 6y ago
A better link might be the original BBC story: https://www.bbc.com/news/uk-england-lincolnshire-54340425 > "I'm hoping they learn different words within colonies - but if they teach the others bad language
102.
by gwittel 6y ago
Not the OP, but I generally prefer JDBI for persistence in Java. Much less random glue/boilerplate vs Hibernate. It doesn't seem to have an official Quarkus integration, but you can just pull it in like any other dependency.
103.
by gwittel 6y ago
Pretty much this at my high school as well. They had a shop class and auto repair class. I really wish I had taken those (I did take shop in middle school though). Largely we had to choose -- take the college prep classes (AP whatever, la
104.
by gwittel 6y ago
Distance is important too: > ... placing the Far-UVC lamp 24 centimeters above the surface of the plates.
105.
by gwittel 6y ago
As others said, typically the required exposure is too long. On top of that, many household items may not be UV safe and will degrade (some plastics), or discolor (plastics, fabrics, etc.). To top it off, you can end up just killing the l
106.
by gwittel 6y ago
Even with an SLR it didn't work right on full auto. I had to manually override the white balance to get it to look right.
107.
by gwittel 6y ago
Slides are indeed a poor way to submit work. That feels more like a lazy way out vs a thought through curriculum. Writing is an important part of the learning process. In our case most of the work is done on paper and they hold it up to th
108.
by gwittel 6y ago
Absolutely, but there’s no alternative short of no school. Our first grader is still adapting. Historically he got maybe 20m of screen time a day max. Now it’s about 4.5 hours. There’s a lot of movement breaks and some non screen activity
109.
by gwittel 6y ago
I have a 1st grader and pre-schooler. While the district mandated google classroom for all kids, teachers of younger ages have been given the option of using Seesaw. For young kids its miles better. Even as an adult I find Google classroo
110.
by gwittel 6y ago
I agree. It makes his code very approachable, as well as providing an excellent model for complex projects. I try to follow this as well to provide good examples within our corporate codebase. The main challenge I have is not all engineer
111.
by gwittel 6y ago
Lightroom’s is. Not sure about capture pro. In Apertures case, the photos and meta data are in one giant blob. I’d want to avoid that. Manage the files my way, then have a separate metadata store. The downside of the SQLite dB is no netw
112.
by gwittel 6y ago
How’s its catalog? One thing I like about Lightroom is the catalog is just files on disk vs a giant database in say Aperture. I like having my own file layout and would hate to give that up.
113.
by gwittel 6y ago
How did you find the migration? I’ve been resisting Lightroom upgrades as I don’t want the cloud stuff. But as raw support for new cameras falls off it’s getting harder since the two step DNG import is such a pain. Moving to Capture One o
114.
by gwittel 6y ago
I’d agree. The main risk might be wider access within the customers VPC (so lateral move risk). But it’s hard to know without understanding the wider environment.
115.
by gwittel 6y ago
Nice work and writeup. All stemming from very basic mistakes -- SQL and command injection. Worrying that the CloudSQL internals (like the private IP range) aren't strongly walled off. It will be interesting to see how this changes in
116.
by gwittel 6y ago
Could be. Different honey also has differing flavor, consistency, etc. As an example, our local honey supplier suggested one type for sore throats - tarweed honey. It was thicker and had a much stronger flavor. Theory was it would stick l
117.
by gwittel 6y ago
I’ve used this with the CLI wrapped version that’s linked to in the readme and it works well enough. There are shins bugs/gaps in the template where some OpenApi fields are not rendered though. In the end I containerized the whole thin
118.
by gwittel 6y ago
It’s a lovely guide. Saves a lot of time vs reading the RFCs when you just want to debug a session state flow/log/packet capture. The one thing I wish it had was better tracing of branch points like session resumption. It would m
119.
by gwittel 6y ago
No. In California capital gains (at least from stock) count same as regular income.
120.
by gwittel 6y ago
Absolutely this. Many engineers simply lack security mindedness or secure development training. Similarly, many managers/PMs/etc have gaps here as well. Its important for them to understand how to ask effective questions and pr

More ›