ajd555

Interesting post by Marc Levinson about the founder of FedEx who passed this June and his contributions to freight regulations.

I've heard of some cloudflare MCPs. I'm just waiting for someone to connect it to their production and blow up their DNS entries in a matter of minutes... or even better, start touching the WAF

What a great read! And so many good insights! It almost made me want to convert a project to PHP - perhaps I will for a smaller project.

I love the simplicity and some of the great tools that PHP offers out of the box. I do believe that it only works in some cases. I use go because I need the error handling, the goroutines and the continuously running server to listen for kafka events. But I always always try to keep it simple, sometimes preferring a longer function than writing a useless abstraction that will only add more constraints. This is a great reminder to double my efforts when it comes to KISS!

You're right, I certainly agree with your assessment that it can be an invaluable tool to search through codebases quickly! No team can process it that quickly, especially if, like you say, this was written by a team that no longer exists.

I couldn't agree more. Writing code was always the easiest part of the job (sure, it has its hard moments where you have to solve complex problems, but that's the fun part). The hardest parts for me have always, always been:

- dealing with non-technical project managers

- dealing with "rockstar" developers that only want to work on greenfield projects

- maintaining legacy

- trying to anticipate potential design flaws or observability blindspots

- dealing with nasty bugs in production (and reproducing the bug!) and trying to get the right people in a room to solve them

All in all, the human aspect was always the hardest part, and as this article clearly states, is now even harder. You can't replace decades of crisis situation that might not have been documented, late nights spinning prod back up or using our human friendships to get devops guys to help us out with admin tasks! (Costs a few beers, instead of millions of tokens!)

I have considered it! I've opted for a more specialized optimization library that deals specifically in the Traveling Salesman Problem (https://github.com/graphhopper/jsprit). I will revisit this though, might come in handy pretty soon - thank you!

Thank you! You've definitely identified the trickiest part, especially when you come in with a track record of, well...0 deliveries (I was in working in tech teams before this). Luckily, there are quite a few freight brokers in the NYC metro area, and they are willing to give you a trial period. Another way to approach is to work with smaller companies and offer discounts during the startup phase. (We're starting deliveries in August)

Thank you, appreciate it!

I've been working on a fully electric last-mile delivery company: https://hudsonshipping.co

Beyond the landing page (built with Astro), I've been building all of the route optimization, the delivery and warehouse management systems. A combination of go and java has allowed me to write a few microservices in the past 6 months to handle all of my logistical processes, and I'm just testing the mobile app in the field as we speak! I hope to make some of the code open-source one day!

I wonder if making a user endpoint actually look like a VM could help? Maybe adding some VM like flags to throw off some malware? I feel that bad actors would catch on, but it might offer some protection for some low hanging vulnerabilities?

This is just so amazing, you've definitely made me want to try this out some day! Brings me back to engineering school days where we'd try to tweak just about anything with an interface!

Was looking for this exact comment. I completely agree with this method, especially if you're testing an entire flow, and not just a UI tool. You want to test the service that interfaces between the API and the dabatase.

I've been writing custom simulation agents (just simple go programs) that simulate different users of my system. I can scale appropriately and see test data flow in. If metabase could generate these simulation agents based on a schema and some instructions, now that would be quite neat! Good job on this first version of the tool, though!

This is great! I wonder how well it works in case of Disaster Recovery though. Perhaps it is not intended for production environments with strict SLAs and uptime requirements, but if you have 20 servers in a cluster that you're migrating to another region or even cloud provider, the pull approach from a registry seems like the safest and most scalable approach

I couldn't agree more. I was surprised to see the default go error handling when I switched to the language a few years ago. Any meaningful REST API implementation, as you say, needs to know what to return to the user. Perhaps there is an error for the user, and then an error for the logs. With the default go mechanism, it's too easy to return system information to the user, potentially revealing database schemas.

I could not agree more with this comment. OP entirely misses the point of 2FA. I sleep so much better at night knowing that I have different passwords for every account, and 2FA where possible. One should not write about 2FA when one uses the same "uncrackable" password everywhere...

That's a good point - I see what you mean

> I still don't understand how a private american company was allowed to obtain such geopolitical power

Interesting way to see this, as you immediately went to a zero-sum approach of winner takes all, and the other countries must be brain dead. What I meant in this case was, how did the EU not foresee this and dramatically ramp up their internet satellite capabilities. Arguably, the answer is simple, as this was a rhetorical question: the EU approached this topic as they did a lot of things recently - no action, lots of regulation and facing the consequences or said inaction right now

very good itemization of what's happening, thank you for doing this. Unfortunately, one very important bullet point was missing: the world's richest man and arguably most influential in the white house controls a large internet satellite constellation and has acquired tremendous geopolitical power, even before having the president's ear. This is the single biggest threat out there I believe, as he has already had an impact on the Ukrainian front, and world leaders continue to placate him in fear of Starlink service being cut off in their country. I still don't understand how a private american company was allowed to obtain such geopolitical power, but this is by the far the most worrying point that needs to be brought up a lot more