jpollock

9 ms·

31.
by jpollock 6mo ago
You are communicating with future readers of the code. The presence of ConcurrentHashMap will lead future engineers into believing the code is threadsafe. This isn't true, and believing it is dangerous.
32.
by jpollock 6mo ago
A replaceable battery needs protection. One in the device gets protection from the device.
33.
by jpollock 6mo ago
The video title is searchable on YouTube: The Making of Anastasia (1997): https://www.youtube.com/watch?v=mWffn2clRGk To the discussion of live-action reference: https://youtu.be/mWffn2clRGk?t=941
34.
by jpollock 6mo ago
That's deterministic dispatch, as soon as it forks or communicates, it is non deterministic again? Don't you need something like a network clock to get deterministic replay? It can't use immediate return on replay, or else th
35.
by jpollock 6mo ago
Yes, it sets the reviewer's expectations around how much effort was spent reviewing the code before it was sent. I regularly have tool-generated commits. I send them out with a reference to the tool, what the process is, how much it&#x
36.
by jpollock 6mo ago
That can have some very extreme legal ramifications. Consider - it's a voip dialing client which has a requirement to provide location for E911 support. If the OS vendor starts providing invalid data, it's the OS vendor which ends
37.
by jpollock 7mo ago
Documentation rots a lot more quickly than the code - it doesn't need to be correct for the code to work. You are usually better off ignoring the comments (even more so the design document) and going straight to the code.
38.
by jpollock 7mo ago
The last time I tried AI, I tested it with a stopwatch. The group used feature flags... if (a) { // new code } else { // old code } void testOff() { disableFlag(a); /&#
39.
by jpollock 7mo ago
Won't that show up in roi numbers?
40.
by jpollock 7mo ago
There are definite discontinuities in there. What works for a team of 5 is different to 50 is different to 500. Even just taking fault incidence rates, assuming constant injection per dev hour...
41.
by jpollock 7mo ago
If the llm is able to code it, there is enough training data that youight be better off in a different language that removes the boilerplate.
42.
by jpollock 7mo ago
There are a couple of ways to figure out. open a terminal (OSX/Linux) and type: man dup open a browser window and search for: man dup Both will bring up the man page for the function call. To get recursive, you can tr
43.
by jpollock 8mo ago
There is _always_ fraud, and you can't stop it all. All you can do is try to minimize the cost of the fraud. There is an "acceptable" fraud rate from a payment processor. This explains why there are different rates for "
44.
by jpollock 8mo ago
Literal blackmailing, same as ransomware.
45.
by jpollock 8mo ago
If the majority of your customers are good, failing closed will cost more than the fraud during the anti-fraud system's downtime.
46.
by jpollock 8mo ago
The severity of the DoS depends on the system being attacked, and how it is configured to behave on failure. If the system is configured to "fail open", and it's something validating access (say anti-fraud), then the DoS beco
47.
by jpollock 8mo ago
Have these people done the math on how many engineers they can hire in other countries for USD$200k/yr? If you choose the timezone properly, they will even work overnight (your time) and have things ready in the morning for you. USD$20
48.
by jpollock 8mo ago
In my career, DevOps was never a separate organization. It was a role assumed by the code owners. SRE (is it up, is the hardware working, is the network working?) was separate, and had different metrics. Having separate teams makes it adver
49.
by jpollock 8mo ago
I think there are different definitions of DevOps. I see a difference between a more definite operations team (SRE) vs an engineering team having responsibility for how their service works in production (DevOps). DevOps is something that al
50.
by jpollock 8mo ago
I have a different opinion. :) DevOps is great feedback to the engineering team. Too many alarms or alarms at unsocial hours? The engineering team should feel that pain. Too hard to push? The engineering team should feel that pain. Strange
51.
by jpollock 8mo ago
Measurement and alerting is usually done in business metrics, not the causes. That way you catch classes of problems. Not sure about expected loss, that's a decay rate? But stuck jobs are via tasks being processed and average latency.
52.
by jpollock 8mo ago
Is the llm an expensive way to solve this? Would a more predictive model type be better? Then the llm summarizes the PR and the model predicts the likelihood of needing to update the doc? Does using a llm help avoid the cost of training a
53.
by jpollock 8mo ago
One way to use this data is to increase the success rate of random stops. 1) Take the medicaid data. 2) Join that with rental/income data. 3) Look for neighborhoods with cheap rents/low income and low medicaid rates. Dragnet those
54.
by jpollock 9mo ago
Anonymity keeps the government from locking you up if you vote the wrong way. Non-demonstrable keeps you from selling your vote to your boss. That is why you typically show id, get a ballot and there is no relationship between the two.
55.
by jpollock 9mo ago
Internet voting needs to be anonymous and non demonstrable. Internet money needs to be the opposite, and reversible through the courts.
56.
by jpollock 9mo ago
10 million earning 4% is 400k per year. That's a good bay area salary.
57.
by jpollock 9mo ago
Couldn't "The Wisdom of Crowds" help with this? Maybe if they started ranking the answers on a 1-10 range, allowing people to specify graduations of correctness/wrongness, then the crowd would work? https://en
58.
by jpollock 9mo ago
Speaking as someone who just sold a house in the Bay Area (Dec!), house prices here are very much "buying the payment". The valuation of the property goes up and down directly with the interest rate. The ROI of the house (we bough
59.
by jpollock 9mo ago
If improving a portion of the codebase makes it better, but inconsistent... migrate the rest of the codebase! Then everyone benefits from the discovery. If that's difficult, write or find tooling to make that possible. It's in the
60.
by jpollock 9mo ago
This isn't really about software quality, it's about the entire organization. Consistency enables velocity. If there is consistency, devs can start to make assumptions. "Auth is here, database is there, this is how we handle

More ›