jongjong

14 ms·

181.
by jongjong 4mo ago
That's a lot of ways to think about logarithms. Logarithms are laughably simple once you've fully internalized the meaning of the log function; it simply answers the question: "To what power must I raise the base to get the a
182.
by jongjong 4mo ago
Also, I prefer having all the code inside a single 5000-lines file than split up into many small files representing incorrect abstractions. The urge to split the code up since they beginning is generally a bad idea; it forces early abstract
183.
by jongjong 4mo ago
This seems more like a reflection of existing tech power structures and social dynamics rather than innovation. The bottleneck to being a unicorn isn't so much innovation as it is access to capital. The chasm between the two seems to k
184.
by jongjong 4mo ago
Sure that can happen. Could be a long-running feature branch whose functionality is relatively isolated from other parts of the code. Could represent a lot of actual functionality. But in most situations when I see a PR over a few thousand
185.
by jongjong 4mo ago
There were some good insights in there. I like the idea of changing the hiring interview process to focus on testing code review ability. I feel like this would have been useful even before AI. A candidate who can identify tradeoffs present
186.
by jongjong 4mo ago
True. I'm French native but my English is better (educated in Australia) so this created a weird situation for me where I got 14/20 for advanced words and 19/20 for expert words. To be fair, I think I messed up a few advanced
187.
by jongjong 4mo ago
I'm in Australia and I have view on a mountain so I see too many trees to count. Proximity to a forest was top priority for me and my wife. Having lived in Europe for many years before, this is something that's most striking about
188.
by jongjong 4mo ago
This is how I used to see it. It made my work feel special just knowing that other people would use it and appreciate it. I think because I felt a stronger sense that other people were my kin. Now I feel like I don't belong, I feel tha
189.
by jongjong 4mo ago
I don't believe in that definition of altruism. To me, true altruism is selfish. If helping people makes you feel good, then you're an altruist. If helping others doesn't make you feel good innately but you do it all for oth
190.
by jongjong 4mo ago
You're right. I have certain values and I'm OK if others expect certain values from me. To me this is ideal. Friendships should not be based on superficial things like money or social status to the point that you have to constantl
191.
by jongjong 4mo ago
Leaving a trace is something I've been grappling with which seemed incredibly straight forward initially as an open source developer. These days, I find myself questioning for whom am I leaving a trace for? What kinds of humans or enti
192.
by jongjong 4mo ago
If they had kept their distance, they probably wouldn't exist today. The dependency on government has been critical for any tech company. They'd have been replaced by a different company that is willing to cater to the government&
193.
by jongjong 4mo ago
Haha seems you have found your arch-nemesis ;p I wasn't familiar with the RoR implementation. We may have been talking past each other. I'm thinking about it from an access control PoV. There are alternatives to JWT which work on
194.
by jongjong 4mo ago
If you don't have any connections to vouch for you/your product, you need a perfect landing page to get those first few users who will then recommend.
195.
by jongjong 4mo ago
Well I guess it's slightly more honest than US social media. In this case the government doesn't keep their involvement a secret.
196.
by jongjong 4mo ago
In any case, the landing page needs to be perfect. Anything less and you have 0 chance. The most important innovation is in sales and marketing. If you don't have brand recognition, your landing page has to make up for that. Making up
197.
by jongjong 4mo ago
My point and previous commenter's point was more about managing the session data, not the session ID itself. You're right that now it seems a lot of these session stores like Redis have improved. It seems they now enforce TTL and
198.
by jongjong 4mo ago
This shows the limits of intelligence. Claude trying to organize and collaborate, expecting reciprocity only works if other agents are as intelligent as you and share your values... And almost certainly neither is ever true in the real worl
199.
by jongjong 4mo ago
Another point is that managing session data on the server-side is a pain... If your app server goes down, stale session data would be left behind in your session store; it can easily become orphaned... So you need to set an expiry on it to
200.
by jongjong 4mo ago
Exactly, it's like saying that Postgres is insecure because it allows SQL injection attacks when untrusted user input is injected into the query directly.
201.
by jongjong 4mo ago
Yeah well it's definitely a footgun built into the spec but ultimately an library implementation mistake.
202.
by jongjong 4mo ago
Yes but it only impacts your stateless app servers which are easier to scale. Your backend services/stores are protected and not affected by the attack.
203.
by jongjong 4mo ago
Not really. Being able to verify a user's signed identity immediately without having to do any database or memory store lookup first is valuable in itself. With session IDs, anyone can spam/DDoS your system much more easily; they
204.
by jongjong 4mo ago
The people who are upset about JWTs probably got burned by trying to use them in a weird way. Some people try to store sensitive data inside JWTs... WTF, the idea would never have entered my mind! Sensitive data should stay on your server.
205.
by jongjong 4mo ago
I've never had any issues with JWT. There's a group of incompetent developers who like to point to a tool as a scapegoat to distract away from their own failure to use the tool correctly. I think the irony is that the people who m
206.
by jongjong 4mo ago
JWTs are extremely useful for storing basic non-secret authentication info. Session IDs are not as good for most situations and force unnecessary database or memory store lookups. JWT is a more versatile authentication construct because it
207.
by jongjong 4mo ago
Yeah. They've had their time.
208.
by jongjong 4mo ago
I agree with this for complex problems which cannot be vibe coded with AI. So definitely it's an essential skill for any human engineer.
209.
by jongjong 4mo ago
> Hell, no. Masses work, because they have to. 100%. Most people can be very happy with very low consumption. What people want is not to work. The happiest time in my life was when I was earning a measily $40K per year in passive income
210.
by jongjong 4mo ago
Not only is it not impossible, it's precisely where it's heading. I think even mass-market companies are going to thrive without customers. They don't need customers. The government will start handing out billion dollar contr

More ›