549 karma · joined May 1, 2014
Might it be more accurate to state that CDK is a higher level version of CloudFormation, that abstracts away unimportant details?
[0] https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGui...
The proposal rests on the assumption that people in “sensitive categories” will visit specific “sensitive” websites, and that people who aren’t in those groups will not visit said sites. But behavior correlates with demographics in unintuitive ways. It's highly likely that certain demographics are going to visit a different subset of the web than other demographics are, and that such behavior will not be captured by Google’s “sensitive sites” framing. For example, people with depression may exhibit similar browsing behaviors, but not necessarily via something as explicit and direct as, for example, visiting “depression.org.” Meanwhile, tracking companies are well-equipped to gather traffic from millions of users, link it to data about demographics or behavior, and decode which cohorts are linked to which sensitive traits. Google’s website-based system, as proposed, has no way of stopping that.
The way I interpret this is that, based on your browsing history in Chrome (or any browser that implements this kind of functionality) you are placed into a number of categories (or, if one reverses the metaphor, a number of descriptive tags are attached to you). Google is aiming to ensure that certain categories/tags that might be considered sensitive (mental state, physical illnesses, etc.) will be blocked.(To be clear, this is my interpretation of what they are stating, not an assertion of fact)
The EFF is arguing that this isn't really that straightforward, as sensitive details can still be inferred from non-sensitive details.
What I'm curious about is, who is doing all the ID generation, categorization, and data centralization? Or is Chrome just going to calculate everything itself, then send the data to sites that ask for it?
Granted, PyCharm is likely capable of most of the same things, but there's something about Sublime Text that is just so... frictionless. I don't feel like it expects anything from me.
The rise of VSCode has saddened me in certain respects. VSCode is great, and if I didn't have PyCharm, I would probably end up using it instead, but there are still certain things that it can't quite (and likely never will) surpass Sublime Text in (record/replay macros, power usage efficiency).
(I do hope macros will be improved to run all commands, rather than just text commands, but that's likely low on the list)
On a different note, I still consider the development of a continuation-like mechanism[0] for Sublime Text's API as one of the things I'm most proud of creating (if I recall correctly, Python's Asyncio library was still in the early stages back then, and `await` hadn't even been proposed).
Anyway, I just want to say, thanks Jon and Will, Sublime Text has had such a positive impact on my life as a programmer.
[0] https://forum.sublimetext.com/t/using-generators-for-fun-and...
And non-technically speaking, how does a major flaw like this not get spotted and patched when the architecture for SMS was being initially designed? Or is this just one of those cases where no-one was willing/able to consider security (it where it wasn't even a usual consideration)?
Out of all the technologies I use on a day-to-day basis, I feel like telephony networks and transmission is the area I know the least about.
Paul Hunter, an infectious disease expert at the University of East Anglia, noted in a statement that even if the risk of CVT is raised by the vaccine to five or more cases per million people vaccinated, the COVID-19 infection fatality rate for men in their mid-40s is 0.1%, or 1000 deaths per million infected.
So it's a tricky problem. I do believe you are correct though - even just evidence of missed side effects would be like meat and drink to anti-vaccination sentiments.For example, someone who has never owned pets might think that someone who owns 2 cats and a dog has "many" pets, while someone who does own pets might only consider that to be a "normal" number of pets.
The actual solid-wood furniture I have seen is either quite expensive, or (somewhat ironically) unfinished.
All this being said, if you do have the money to spare, spending a bit on quality or better labor practices is good. For example, I bought my bed frame from a company in the UK[1], and was quite happy with the finished product (despite some unfortunate luck with a part of the frame, which I put down to the fact that I ordered during the holidays).
[0] https://en.m.wikipedia.org/wiki/Engineered_wood [1] https://www.getlaidbeds.com/
https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGui...
- Headers describing a section, including the length of a section.
- Prefixing each section with a size.
- Using a marker pattern (such as a null byte) to mark the end of a section of data.
(there are more than these three, but these are the most common)
That last one isn't used very often, and when it is, it's mostly for textual data.The consequence of using the first two techniques is that it's entirely possible to add data to the end of the format, since a parser would just read the last section and stop (assuming the format supports knowing what the last section is).
What they are not stating is that Go is a conservative language with a standard library hampered by that conservatism, nor are they making a judgment on the current state of the language.
If you are going to criticize someone's post, give them the respect of actually reading their argument, and not just writing a knee-jerk reaction.
Creating an API where the entire set of data is returned from a data source, without an option to limit the result, is bad. It means that, if I have to read a directory with 2000 files (and this is quite possible! - think /bin, etc.) the function will have to allocate a slice with 2000 entries, and then call stat on all of them.
Stat is not free, especially on certain filesystems (NFS!), nor is reading directory entries.
Regarding GraphQL, one of its big selling points is that you can query not only for specific fields, but fields in nested data as well.
Lets take two possibly equivalent queries, modeled on the data discussed in the GraphQL tutorial[0]:
# REST Call
GET /hero?primary=true
# GraphQL Query
{
hero {
name
friends {
name
}
}
}
Ideally, these queries would result in the following SQL query when one wants to also get the primary hero's friends: SELECT
heroes.name,
(
SELECT heroes_inner.name
FROM heroes AS heroes_inner, friendships
WHERE friendships.left = heroes.name AND
friendships.right = heros_inner.name
)
FROM heroes
WHERE name = ? AND primary = true;
(This query might not be exact, but it should get the meaning across.)Of course, this presumes that the REST query selects friends names as part of the request, and that the client doesn't have to manually perform a join/secondary lookup to retrieve additional data. If it doesn't, then you might have to perform additional REST calls to get all the friends of the primary hero.
That being said, one of the things that irks me about most* GraphQL implementations is that they seem to do joining entirely server-side. This makes sense if you have to join data across multiple services, but if you're only dealing with a single data back end (like a database) then you can't take advantage of JOINs.
If anyone knows otherwise, feel free to correct me. As I said, I don't have any practical experiences with GraphQL.
*I'm aware there are one or two GraphQL libraries that support JOINs, but most do not.
Plus, I have to wonder how much extra profit the "call us" route actually takes in, after you've subtracted costs for the marketing staff it requires (especially if you try to renegotiate the cost after the subscription/license expires).
What are your opinions of the `crypt` and `gen_salt` functions from the pgcrypto module[0]?
https://www.postgresql.org/docs/current/pgcrypto.html#id-1.1...
Perhaps my ignorance is showing but do hashed passwords count as secrets? Because those are usually stored in databases.