zbentley

6 ms·

31.
by zbentley 1mo ago
You don’t have to have all of that material published and polished before you turn your website live. It literally is stuff that belongs on your marketing Wordpress static site or whatever. If the founder had done a big b2b ad blitz without
32.
by zbentley 1mo ago
It’s rife with “and that’s the important thing. $thing”-type constructions. Human writing uses those much more sparingly and doesn’t separate them into two sentences as often. It has a lot of “subject change: teaser” constructions, too. And
33.
by zbentley 1mo ago
Common? Yes. Canonical/ideal? No. Optional dependency specifiers in your package metadata is a much better way to go. You can use those even if you don't publish your package as an artifact; `pip install -e .[optional-thing]` shou
34.
by zbentley 1mo ago
https://packaging.python.org/en/latest/guides/writing-pyproj...
35.
by zbentley 1mo ago
“It’s worth being honest about…” yeah, no.
36.
by zbentley 1mo ago
...crash? Seriously: crash if your dependencies aren't available. There are better ways to do optional dependencies. ImportError ain't it.
37.
by zbentley 1mo ago
I’m not sure either is “how names are established”. This is a pretty mushy area, philosophically. Is a name what you think something is called (I think our planet is called “Bloop”, but nobody cares) what a lot of people think something
38.
by zbentley 1mo ago
I interpreted GP as referring to the higher quantity of questionable software in the Play Store, not custom .apk installation.
39.
by zbentley 1mo ago
It always could.
40.
by zbentley 1mo ago
There’s a bit of a bootstrap problem there in that Tox (and its dependencies) have to be installed first, unless your makefile is calling “uv run tox” or similar. Uv’s standalone nature makes it ideal for bootstrapping projects in a way tha
41.
by zbentley 1mo ago
> This is a much more substantial critique Thanks! FWIW, I engaged because I think there's the basis for a good approach here and I want to see if we can expose what works through discussion. > why is cgit scanning 340 MB to answ
42.
by zbentley 1mo ago
I don't think the show-commit or file-at-revision routes are what's causing the bot load. Rather, the article describes the routes that compute views (e.g. show the change history across several commits) into history as being the
43.
by zbentley 1mo ago
> the C10k challenge is solved since a long time This has nothing to do with that. Any Node.JS application will happily accept 100K connections. They'll all wait for the under-resourced database behind it. That application "sol
44.
by zbentley 1mo ago
Per the article, the vast majority of traffic is scrapers that are generating effectively random, permuted URLs. Even if they're already caching their popular-with-real-humans most recent data, that efficiency gain is a tiny drop in a
45.
by zbentley 1mo ago
Those ecommerce stacks serve a large fixed number of pages. cgit does not. Imagine if WooCommerce had a route "/product/<sku1>/compare/<sku2>" which displayed an auto-generated comparison between an
46.
by zbentley 1mo ago
What makes you think that would accomplish anything? These scrapers aren't LLM agents. They're distributed classical programs that harvest data which is later used to train an LLM. The LLM doesn't write the scraper or respond
47.
by zbentley 1mo ago
> You are, in reality, only hurting the actual owners How many times do I have to hurt them before they decide to buy a different smart TV? Seriously, that's like saying "if you try to stop your neighborhood rodent problem by g
48.
by zbentley 1mo ago
> just > [four phases, each of which has historically been hard-to-impossible for highly organized international coalitions] Never going to happen.
49.
by zbentley 1mo ago
Possible, but I doubt it. The sheer number of other free-to-read content sites dealing with the exact same problem the last few years (many of whom there's no plausible reason to DDoS) tells us that this is content harvesting, not an a
50.
by zbentley 1mo ago
I'm sure there are ways of detecting residential proxy clients that are reasonably effective. I'm equally sure that the people in possession of those techniques (thinking CDN providers, big social networks with public links, newsr
51.
by zbentley 1mo ago
That'd fail for three reasons. First, scrapers would start running JS. Whether they're running chromium-in-a-box or something more clever doesn't matter. Compute is effectively free for them, and even shitty WebOS set-top box
52.
by zbentley 1mo ago
Neither I nor GP used that word. You're not wrong in that there are some programs that could be doing more work in CPU/memory while waiting for IO, but those, too, are dwarfed by the number of programs that can't really do an
53.
by zbentley 1mo ago
> If you're I/O bound, that either means the problem doesn't require much computation - which is possible but fairly rare This is backwards. I bet that by count, many more programs are written in domains where they're
54.
by zbentley 1mo ago
> Except AWS doesn't fall over, regions do 2020 Kinesis outage has entered the chat
55.
by zbentley 1mo ago
What’s the simple way? Self-pipe?
56.
by zbentley 1mo ago
Hence Jobs’ rationale for providing native SDKs for iOS development. It wasn’t about any third-party libraries per se , it was about wanting the native SDKs to be the principal way to deliver experiences on the platform. I’m not entirely s
57.
by zbentley 1mo ago
> isn't ms excel outdated , kinda, except the idea that it's always have easy fast solution “People shouldn’t use this tool, unless they want stuff quickly and easily”. Excel isn’t outdated, and has no competitor (there are man
58.
by zbentley 1mo ago
A UPS won’t save you from a kernel panic.
59.
by zbentley 1mo ago
You're not wrong. My gripes above aren't a tacit accusation everyone is slacking off on security. I just wish we had standardized on better tools than env variables to make secrets a little more secure by default without requiri
60.
Bash on Balls (2010)(github.com)
1 points by zbentley 1mo ago|0 comments

More ›