sergioisidoro

8 ms·

61.
by sergioisidoro 3y ago
I went to Masimo's page, and it took me about 1 minute to realise that their logo actually looks like that - it's not a resizing proportions issue. https://www.masimo.com/
62.
by sergioisidoro 3y ago
Well, if there would be one accepted dependency management tool / environment, it would make things easier at least. For example, despite all the problems of JS, new devs don't need to create a virtual environment and activate it
63.
by sergioisidoro 3y ago
Well, they are trying... For tooling they tried to get this done well with pipenv, but (imho) failed for how slow and clunky it is. I really tried to like pipenv, but now I just go for poetry. But one thing that needs to be acknowledged is
64.
by sergioisidoro 3y ago
The problem stems from how fragmented dependency management in python is. Most tutorials use `pip install something` without much care for pinning versions. Yes, it makes it easier for new programmers: They can skip learning a dependency ma
65.
by sergioisidoro 3y ago
>"For example, the bacterial community in amaranth sourdough produces an aroma that smells almost exactly like ham," I've made a sourdough starter last summer that smelled EXACTLY like pear. It led to discover that there&#
66.
by sergioisidoro 3y ago
When I heard about this, I also associated the two. The report talks about link preview generation, so it sounded like someone could put a webp on the social metadata of a page for link previews, and then send it as a malicious payload. But
67.
by sergioisidoro 3y ago
But is it the responsibility of the operating system to do that, by default? What if the operating system started to bleep out swear words from the microphone? Or blurring out obscene gestures? Sure, make the software available on install,
68.
by sergioisidoro 3y ago
I would like to live in a world where an operating system is about enabling technology, performance, reliability and security. An OS should not be about animated emojis , or about running a CV program detecting what's going on in the v
69.
by sergioisidoro 3y ago
My comment is specific to docker, although environment as a broader sense can be discussed. I remember reading that it is possible to end up in situations where your environments can end up in the layers of the docker image. Also, you can r
70.
by sergioisidoro 3y ago
Twelve factor app: use environment for config Docker: Don't use environment for config, it's insecure I like and use many of the patterns of 12 factor, but indeed some of these were written in the context of VPS, where environment
71.
by sergioisidoro 3y ago
> is there a compelling reason not to switch? Your terminal emulator is one of the most security sensitive things you use. Sudo password? SSH keys? logs? A lot goes through your terminal, so I think about 5 times before trying out new te
72.
by sergioisidoro 3y ago
Same happened to me with a phone. (nexus 5x). It stopped working all the sudden during a vacation. Putting in the freezer would allow me to boot it and backup the data. Fridge was not enough as it was not cold enough to dissipate the heat o
73.
by sergioisidoro 3y ago
Saving a few lines in a Hello World example is not the super great argument many of these web frameworks think it is...
74.
by sergioisidoro 3y ago
Are you saying you have to issue a "god" level API access token to access a single docker (private) image in the Digital Ocean container registry?
75.
by sergioisidoro 3y ago
The point is that there are no bucket keys. Only Access keys for all buckets. There is no way to issue bucket specific keys. I'm not sure I follow how the title could be misleading.
76.
by sergioisidoro 3y ago
S3 (and similar storages) have caused plenty of security issues in several occasions (usually because of misconfigured buckets, making all contents available to the public). Given this, it would be expected that companies would pay a bit mo
77.
In Digital Ocean, S3-like space keys can access all your buckets(ideas.digitalocean.com)
127 points by sergioisidoro 3y ago|98 comments
78.
by sergioisidoro 3y ago
I think most people with some degeree of aphantasia used to think like you - that no one can really visualise things. But then I started asking around and people REALLY described visualisation as a vivid clear picture of things in their hea
79.
by sergioisidoro 3y ago
I would add 4. A critical mass of community packages and open source ecosystem so you don't re-invent the wheel for non core things (eg. Javascript, Python, Rails)
80.
by sergioisidoro 3y ago
A few years I made a decision to ship a SQLite database in an (internal) ruby on rails package. Why? Because there was a large set of (static) data that was required for the package to work, and it made no sense to make an API to query it f
81.
by sergioisidoro 3y ago
Depends. Were they already using gunicorn? What about cPython? Was the code written by a junior developer without much consideration for memorization and dictionary access? And sure, you can get some performance improvements by rewriting th
82.
by sergioisidoro 3y ago
I am very skeptical about this. The title makes it look like it's all about Elixir, but there seems to have been a fair amount of re-architecturing. "One of the systems that ran on 200 Python servers now runs on four Elixir server
83.
by sergioisidoro 3y ago
I guess this is what happens when the medical profession was (is?) dominated my men, without significant input from women...
84.
by sergioisidoro 3y ago
Sure, you won't "need" them. But it's very likely that you'll have resources that behave very well for rest like operations - user comes to mind, for things like user profile page, user settings, user detail, etc A
85.
by sergioisidoro 3y ago
I wonder if this shift of processing areas is behind the the "detachment" or "depersonalisation" (feeling like you're in autopilot, or not being you) that seems to be a common response to high anxiety.
86.
by sergioisidoro 3y ago
My personal take: Don't put it all in the same box. Just have a api/v1/rest/ base path for modular well defined resources that can be used across your application, without breaking changes, or even shared to third partie
87.
by sergioisidoro 3y ago
It's called query by humming, and there used to be academic competitions for it a decade ago. And for this SoundHound has always been ahead of Shazam, which focuses more on music, remixes and covers
88.
by sergioisidoro 3y ago
I was hoping for something more like: * Check you're storing secrets safely and not in the code * Run a automated security scanner to check for the OWASP top 10 * Confirm your endpoints have correct auth/permission checks, and tha
89.
by sergioisidoro 3y ago
I really like rive, but they don't support react native with expo, which is becoming super common in the space.
90.
by sergioisidoro 3y ago
> I refuse to work with people who has this thought So you refuse to work with people who do not want to re-invent the wheel for a shiny new framework because it is "better"?

More ›