CapriciousCptl

Beej's guide still gets updated! I remember it from the early 2000s.

https://beej.us/guide/bgnet/html/

Don't blame yourself entirely, It's not about you being medicore, although after 2 years work on a project that's not meeting your goals something's amiss. Ideally you validate the market and your place in it early on, for instance by hitting the front page of HN/a subreddit or something like that with one of your articles every so often. If your hit rate is too low your market probably is too small or you're not giving them content they want (even though it may be high quality content that they need...). At some point you change what you're doing, change your goals or move on.

Problem is you're competing in a saturated market (Electron, React Native for Windows and macOS) and already tested your positioning once with the KickStarter campaign.

Finding a way to fund this is going to be an uphill battle, although I like the creative ideas amadeuspagel mentioned. Like anything else, find a niche somewhere (possibly related to performance/memory for clients not using React) and serve it with a modest upsell. But it's an enormous market, with entrenched competitors who don't need to make a profit on their offerings, so expect fierce competition all the way.

I don't know the history exactly but I think it's been kind of rocky. Amazon limits CCC to physical (that is, Amazon's lowest margin) goods, ostensibly because of licensing agreements.

Amazon benefits here by sanctioning a price history tool with restrictions when others could take its place and include its higher margin goods (if you look, there are CCC competitors that aren't sanctioned in this way, but you have to look). Less measurably, the price history tracker provides better consumer experience, in line with Amazon's customer obsession. And finally, Amazon's warehouse space isn't unlimited, so informed consumers who know a particular price is extraordinary may help it free up space more quickly.

How to get retweets: “Popular and productive tool X has a rough spot around Y and is therefore a failure.” Nothing’s perfect, get over it, help out or make something better.

Perhaps less as cars are becoming more reliable and with less new features year over year?

And yet they buy new ones anyway.

This all happens via a single web request. Most likely it’s gzipped meaning this amounts to 10s of extra bytes over the wire. Even at Google scale you’re not going to see much benefit from rewriting your front end to optimize bandwidth here.

For all the hate Google gets this seems pretty reasonable. In fact, I thought they already did this. AFAIK, most email services do the same.

The biggest story here for me is I look forward to grepping my name and seeing how many of my bank bonus chasing activities/etc have generated SARs. I guess everyone else will get to see that too. For more interesting/famous people than myself it’s a terrible breach of privacy. There could be lots of interesting stuff in this leak but like you, I very much doubt it will expose much corrupt activity.

I've personally not spent too much time fighting any migration tool. Configuring Alembic from scratch, for instance, takes about 5 minutes for separate dev and production databases (MySQL/SQLite). Code-generation comes as a bonus. There's 0 chance I'd trade a day of developer time to build an in-house tool re-creating 90% of what Alembic does, with its large audience use-testing it daily, stability and documentation.

WW2 was straightforward— Japan attacked Pearl Harbor and (afterwards) declared war on the US before the US declared war in response. WW1 it’s harder to point to one thing but the sinking of the Lusitania and the Zimmerman telegram were taught.

Also space invaders in sqlalchemy (actually a decent primer) https://github.com/sqlalchemy/sqlalchemy/blob/master/example...

In that thread the pg - cperciva exchange is exemplary. cperciva is concise and blunt, someone else suggests softening his delivery, and pg replies "actually, if someone is wrong about math you probably should tell him so."

Using my somewhat powerful but also flawed neuro net trained on over 20 years of intensive web usage gives your blog design a thumbs up. One suggestion is adding padding-top: 1em to the "Posts" heading to make it more clearly separated from the quick summary above it and more clearly related to the content below it.

Google probably could implement similar security. But the problem is as of today, 2020, they don’t.

On a technical level, you're absolutely right, JS as a language has an amazing amount of backwards compatibility. So much that IE running on Win XP can run things that Babel compiles from ECMAScript X in 2020.

But, the ecosystem is really something different entirely, and this isn't meant to be a slight to JS at all. It's just reality when running production code in 2020. Python's standard library is comprehensive, well-maintained and well-documented throughout. JS, by comparison, relies on packages from npm for the same features. Which means the issue my org has with the JS ecosystem is the stuff that's not built into the language spec or otherwise maintained by a central body, not that the things built into the language isn't standing the test of time or something like that.

I hope that explains things.

Right, the question being answered above was "what is a timing attack."

If the webapp compares hmac digests, for instance, with something like (a == b), the comparison is short-circuited the sooner it hits an unmatched byte (the more left-ward). So, an attacker can go byte by byte left to right. There's a lot of noise over HTTP/1.1, but these attacks are at least theoretically possible over the wire.

If you can do it without noise and with 10s of microseconds of resolution, your attack just got much more efficient. And it probably opens the door to timing things more crazy then simple equality.

Python2 aside, judging by the rest of these posts, maybe it's just me but I haven't seen any problems with forwards compatibility in Python 3. That is, stuff written 5 years ago runs fine on 3.8. The only issues I've had is with virtual environments and pip freeze because some older Python versions relied on packages for features now in the Python standard library, but since we know how to spot those now that's not too bad of a fix.

On the other hand, Python gives a growing and continuously maintained standard library and none of the headaches that, say the JS ecosystem gives.

That said, not all of the features are great all the time. Async/await comes to mind, which adds a lot of complexity without the performance gains even senior programmers might expect. But overall, we're already using features in Python3.8 for projects, and have upgraded our instances to Python3.8 without issue. I guess it's possible we leave some pip dependencies in the dust because they may have some incompatible code with a future 3.x release, but we haven't had a problem before. Tests permitting, we'll do the same for 3.9 if we find something we like or might wait a few years.

Cloudcraft is used by a tons of AWS consultants. I think that's the disconnect seeing a lot of comments here, people spending less than $ thousands/year on AWS just aren't their target customers. Meanwhile, Cloudcraft is minting money.

Can/will LTSE restrict options trading?

I'm CTO at one of your target firms. Integration is a major pain point for us. We don't have a need for you now, but I've noted a few things based on what I could find on Alstonia.io. My needs are different than others, but hopefully this helps. If any consultant or agency wants someone like me to hire you, I want to see that they have used the tech we use, that I can estimate your cost reliably, that they're reliable people in general and that I can understand the code they write. The stuff about security and high availability/fault tolerance kind of comes as a matter of course.

You can check a lot of those boxes by 1) some content on your website describing previous projects (like whitepaper PDFs or long-form blog posts), 2) GitHub projects, 3) references/testimonials. Then give a giant call to action form including asking for a phone number (I hate giving out my phone number, but it seems like everyone requires it, so I imagine it would help you more than not).

Note that these needs are very different then what I'd need from an employee. For instance, I can invest in employees and give them time to learn our tech. For consultants, I can't.

I don’t get it either. Just fresh installed 20.04 last week on a new drive and have had no trouble completely avoiding snap or even really understanding what it is. I’ve used Ubuntu for years and may have used the App Store one time.

I think ec2 gives 99.99% availability in their SLA, no need to scale across regions or even AZs. Multi AZ RDS is 99.95%. We have a simple ELB/EC2/RDS/S3 stack on us-east-1 and need high availability for a very small amount of users and run very cheap.

Python -m venv in your project directory. Then source ./bin/activate. Pip install from the project directory as your regular user (no sudo). You can also set up venv (virtual environments) in home or somewhere else instead of for each project. This is called python virtual environments and very easy to adopt.

Wow. It's a complete tragic comedy.

> And, yes, it turns out that Telia's client does not attempt to verify the remote server's [customer's router] public key ...and then... Using malicious SSH server to trigger server side RCE !!

> First, Telia did not have a PGP key and did not know how to use it, so instead they asked us to ZIP the report with password and send the password over a separate email (private GMail). I hope Telia's engineers will be reading this article, so I would like to explain why the report should be encrypted. !!

> Thank you for the information. We will continue to check whether you made your report legally without violating any law. And we will ensure that no fake information will be published that could do any harm to the company's reputation and to the critical part of Lithuanian network infrastructure. !!

> And finally, we found that the hash was cracked and was available in the old "weakpass" database !!

I don't even think he said "model's don't cause bias," he just said "ML systems are biased when data is biased."

So much doom and gloom in that article. The town in question is McKinney TX, and I grabbed their annual budget[1]. Property taxes make up 50% of their ex-services (water, sewer, trash, parks/rec, airport, etc) revenues.

And, the bonds in question will yield ~1.5% at today's rates. In other words, less than inflation. Meanwhile, McKinney has lowered property tax rates in response to higher appraisals (inflation is a major driver of increased appraisals on balance).

So, I take 2 issues with the article. First is the payback period, since property tax revenue only makes up 1/2 of the ex-services income and will increase with inflation. And second, with the idea that every area must cover its own expenses. In general commercial, high-dense and/or rich areas subsidize projects in other neighborhoods. You're going to be able to cherry-pick a project that can't be paid by its beneficiaries in every single city.

[1] https://www.mckinneytexas.org/ArchiveCenter/ViewFile/Item/22...

That’s an impressive savings for a 23yo. Imagine all the work and discipline going into it. I wonder how much work and discipline he put into betting on Hertz.