staticassertion

524 ms·

1. 3211.▲
   by staticassertion 6y ago

   If it makes you feel better, it's honestly probably faster for a certain number of routes or fewer.
2. 3212.▲
   by staticassertion 6y ago

   I assume they mean minute relative to cars or something, not minute in an absolute sense. Just as a sort of thought about this, if the entire web moved to brotli over gzip, or if we introduced an even better compression algorithm that was w
3. 3213.▲
   by staticassertion 6y ago

   As I said in another post, > This is a very hard problem. It's a regulation on a quality that is a very fast moving target with weak consensus. Doing this in a regulatory way just isn't viable today. > the few effective ways
4. 3214.▲
   by staticassertion 6y ago

   Well I think I do understand SOC2 :) I am well aware of how controls are defined, it was only just an hour ago that I was reviewing our controls with the feedback from our auditor.
5. 3215.▲
   by staticassertion 6y ago

   I'm not saying that no human being has ever derived value from a SOC2. I'm saying that the process around SOC2 is a grift. The fact that it also causes harm to small companies, and detracts from resources for companies that actual
6. 3216.▲
   by staticassertion 6y ago

   I call it a grift because it really feels like it. It's this weird "you have to do this or else" thing that provides 0 additional value (SOC2 is not prescriptive, it is just a forcing function, you could have... just done it)
7. 3217.▲
   by staticassertion 6y ago

   SOC2 is exclusively a forcing function, you could have adopted a NIST framework for risk assessment and controls and gotten that same value, and then had an extra 6 figures of budget to implement high value security work.
8. 3218.▲
   by staticassertion 6y ago

   Let's oversimplify things and say there are two types of companies: 1. Those who care about security 2. Those who do not care about security For the (1), SOC2 provides no value, because any structure it lends (it lends none, but you&#x
9. 3219.▲
   by staticassertion 6y ago

   I wish we could just all reject SOC2, it's such a grift. Bankers come in to read some docs (that they don't understand), look at screenshots (that they don't understand), take up 100s of thousands in cash and time, and then w
10. 3220.▲
    by staticassertion 6y ago

    There should be an optimization pass for this, certainly, but the placement new syntax guarantees it.
11. 3221.▲
    by staticassertion 6y ago

    Placement new is just avoiding a copy. Without placement new allocating an object involves: a) Constructing the object on the stack b) Copying it to the heap With placement new you construct the object directly on the heap, thus avoiding a
12. 3222.▲
    by staticassertion 6y ago

    Very cool, TIL.
13. 3223.▲
    by staticassertion 6y ago

    AFAIK the current method for hacking in placement new is to use something like this: https://github.com/glandium/boxext Some more context. There used to be a `box` keyword too. https://github.com/rust-l
14. 3224.▲
    by staticassertion 6y ago

    Thanks, I hadn't seen this. I'm curious about how they compare - it looks like quick-protobuf uses Cow, but I think pb-jelly doesn't?
15. 3225.▲
    by staticassertion 6y ago

    > In Rust, for everything you need to do, there's at least 5 different libraries that implement that, all competing with eachother. That's interesting. This seems like a good thing to me. I've had no issues with microservi
16. 3226.▲
    by staticassertion 6y ago

    This is great. AFAIK this is the only protobuf library in Rust that supports zero copy. Maybe this'll help some of the other libraries implement similar features?
17. 3227.▲
    by staticassertion 6y ago

    FWIW 150k is plenty to live comfortably, without a roommate, in SF. SF is expensive but not that expensive. Even a 4k 1br (rounding way up, especially these days where you can get a 1br for < 3k) would be 48k/year, and assuming ha
18. 3228.▲
    by staticassertion 6y ago

    If you were already bought into and budgeting for 4 years of an employee at price X, it seems opportunistic and irrational to then try to cut them to price Y due to an unexpected factor. As some other CEOs have chimed in, I'll say that
19. 3229.▲
    by staticassertion 6y ago

    Do you think Facebook or Twitter are threats to national security?
20. 3230.▲
    by staticassertion 6y ago

    I suppose I wasn't clear. You did misinterpret what I said, I intended to convey the exact opposite.
21. 3231.▲
    by staticassertion 6y ago

    Yeah, not quite related to the linked slides, which are about scaling in terms of productivity, but still a great talk. I really found that "isolation" is just a key optimization and one of the most useful properties of a system,
22. 3232.▲
    by staticassertion 6y ago

    This doesn't consider that you can then monitor connections to port 22, and if you see any that's suspicious. Disagree that port knocking is obscurity. That's a secret. Security through obscurity would be using a nonstandard
23. 3233.▲
    by staticassertion 6y ago

    You aren't forced to handle it well, you are forced to handle it.
24. 3234.▲
    by staticassertion 6y ago

    Why would the people who refuse to wear masks take a vaccine? They think the virus is a hoax.
25. 3235.▲
    by staticassertion 6y ago

    I live in SF. Between the fires and the quarantine, I'm not out much the last few weeks.
26. 3236.▲
    by staticassertion 6y ago

    > My experience is that most cybersecurity firms are only slightly better than other enterprises. They're often worse. I can't recall the study, but one of them looked across industries at software quality, and security product
27. 3237.▲
    by staticassertion 6y ago

    It seems interesting that Vitamin D may be so much more prone to false correlations due to the fact that it's tied to going out in the sun, and going out in the sun is what healthy people do. Since so many illnesses and conditions, fro
28. 3238.▲
    by staticassertion 6y ago

    That's really interesting. I was trying to learn pretty early on, so I could believe that was part of it. But I tried to play around with it in some off time only just a few months ago and I hit a wall on reference types yet again :\ F
29. 3239.▲
    by staticassertion 6y ago

    Pony is an amazing language, but I feel like it burned its entire complexity budget. Reference capabilities are really great, but they have this weird special syntax around them, and they're all termed in a very unique way. I very much
30. 3240.▲
    by staticassertion 6y ago

    Yeah, our schools would hand out green/gold metrocards, which were very coveted items (if you found an extra one on a bus that was a huge get). They'd only cover 3-6 trips, plus transfers, so it wasn't quite free, but it wa