1,287 karma · joined March 5, 2011
https://catwell.info
He focuses on depth whereas I tend to focus on breadth. Of course I have areas and technologies I know better because I have worked in / with them (computer vision, filesystem / DB replication algorithms, Lua, etc) but I try to expand my areas of knowledge so I can understand whole systems rather than become an expert at a specific thing. For instance, right now, I'm doing mostly Web front-end stuff, which is the part of the Web stack I know the least.
[1] https://twitter.com/mattklein123/status/1130206792175169536
We are a very early stage startup (founded in 2019, 5 people so far) part of startup studio eFounders (https://www.efounders.com). We help SMBs / SMEs figure out how they can leverage SaaS to improve their business. More details in English at: https://www.efounders.com/companies/chilli
We are looking for our first full stack (mostly front-end) developer besides me. This is a mid-level position.
Stack:
- Front-end: Typescript, Angular 8, Clarity 2 (considering Stencil)
- Back-end: Python 3 (typed), Flask, SQLAlchemy, Postgres, Redis, AWS
No prior Python experience is required, you can learn it on the job.
Contact: cto at hellochilli.com
I guess the combination of looking at the (very broad) contents of the list, past issues with crypto export and knowing Trump is in the White House made me overreact...
Most of the research and advances in the technologies listed has not been made in the US, and even when it has it often hasn't been mostly by US nationals.
You were the country that defined globalization, and now you refuse to see the state of the world and actively harm yourselves with protectionist decisions like this. You have already lost business with regulations like Cloud Act, and now China is quickly eating your share of the pie.
You still have a major influence in the West because of two things: capital, and the historical fact that the large market leaders in tech which control distribution (Google, Apple, Microsoft) are American. Would you bet this will still be the case 20 years from now? I wouldn't if I were you.
I know a lot of the Americans here on HN probably do not agree with a lot of what their current government does, but still. Export controls don't work except to cut yourselves out of entire markets abroad and foster the adoption of competitors to your domestic companies. I don't understand how this is a viable long-term strategy.
- I read Brave New World (Huxley) when I was young, and it didn't have such a strong impression on me at the time, but it has strongly influenced some of my political takes over my whole life.
- The four steps to the Epiphany (Steve Blank) showed me that there can be method to the apparent madness that is entrepreneurship.
(This is a pretty simplified version of the situation, see https://github.com/sailorproject/sailor/issues/173 for more.)
Lapis was born from https://itch.io (kind of like Rails was born from Basecamp). It is still the "largest" website I know using it.
OpenResty itself has a similar story with Taobao, one of the largest wesites in the world, even though now they use a fork (tengine). I think several other large Chinese and Russian websites use it.
In the US, Kong is also based on OpenResty, and CloudFlare uses OpenResty a lot (and is now its main sponsor).
The difference is there might still be an attack where:
- User is at version N
- Version N + x is vulnerable
- Version N + x + y is latest
- User terminal asks for N + x + y and the attacker serves N + x
However this attack is much less critical than anything letting an attacker downgrade (only applies against versions updated infrequently).
Regarding VLC on Mac, which uses Sparkle, this issue could be avoided by using HTTPS just for the updates feed (AppCast), which is not mirrored.
1) The reaction is due to the fact that VLC developers know very well it updates over HTTP on Mac. It has been reported at least 10 times in the past.
2) The comment mentioned by eps about the ability to MITM the key exchange is probably wrong. The update code the poster was looking at is not the one used by VLC on Mac, as JB Kempf (president of VideoLAN) commented. VLC uses Sparkle which is a popular updater for Mac applications, not custom update code.
3) There may still be a vulnerability. Typically apps that update over HTTP and verify using GPG are vulnerable to an attack where the attacker serves an older version vulnerable to another attack, signed with the same key. There are mitigations for that but I don't know if VLC uses them. The Sparkle project itself advises the use of HTTPS for both the updates and the appcast (https://sparkle-project.org/documentation/).
We are already reading the arguments of one side here, I wonder what the actual justification for the rejection was.
That's what this "empty div" is for if that's the one I think it is. It is the container for things like branding and annotations.
Does anyone have a different experience?
I know because one of the founders of the company I work for used to jump, and he had to give up his hobby for that reason.
I would set the money aside (invest it like others said in this thread) and join another company which looks like the one that just exited, but at the time you joined it. You should be valuable to them, especially since you have experience with hyper growth now.
If it works, you hit the jackpot twice, and you have learned that maybe you have a knack for this. If it doesn't, you didn't lose much, and you have $8M so does it really matter?
The only caveat is: avoid telling people at the new company how rich you are, and under no circumstance let them have you invest unreasonable amounts of money in them.
To be honest the only real corruption issues I had with LMDB in practice were dues to me using MDB_NOSYNC, and broken mmap behavior on some Android devices (on external storage).
Regarding NFS: I have recently started testing LMDB on NFS v4 and had no issues so far, but with a single process using the database. AFAIK the warning at http://www.lmdb.tech/doc/ is only for multiple processes using the DB concurrently. I am still not entirely sure there won't be any mmap-related issues, but so far so good.
Regarding "being careful": this is a very important point. The LMDB API does not hold your hand, it lets you do dangerous things which will result in corruption of your database, which you will discover too late. I suggest writing a wrapper around the API to ensure you are using it correctly. (I wish there was a compile flag like LUA_USE_APICHECK [1] for LMDB, which could help detect problems like this, but there isn't.)
Amusingly, despite having done a ton of Computer Vision (I worked for an image recognition company for 4 years) I never used it for that purpose. The main practical use case I had was related to the use of Trellis modulation [2] for band-limited communication channels.
[1] https://blog.separateconcerns.com/2013-03-03-viterbi-algorit...
Another one would be "Let It Crash! The Erlang Approach to Building Reliable Services" by Brian Troutwine. [2]
I don't know if you would call it "technical" but Brett Slatkin's talk on Cohort Analysis is something anyone interested in tools to analyze how our users behave should watch. [3]
[1] https://www.youtube.com/watch?v=WpkDN78P884
[2] https://www.infoq.com/presentations/erlang-reliable-services
[3] https://www.onebigfluke.com/2013/05/video-cohort-analysis-ta...
I think there are a few challenges not found in most other online games, one being that strategies that win on different strata of the ladder are not the same (e.g. hyper offense is the most efficient on the lower ladder, but at some point around 1500 / 1600 you will start losing using it...). Also, I wonder how well an A.I. trained on the ladder would do in a tournament (e.g. SPL), where the metagame is a bit different.
Your code looks like a good entry point for that, all that's needed is to write a new bot using ML libraries...
I thought the same for a while, until I noticed tapping the body of an email changed the top bar options...
Not true, they have a lot of servers in Europe (Amsterdam).
That doesn't make the issue less valid though, since I think they have a full copy of all the data on both sides of the ocean.
Personally, I use Lua for a lot of other things including Web development.
In addition to that, people working on Titan say it could become an alternative to C for people who write applications in PUC Lua + C:
- It has an FFI so it can be used to implement bindings.
- It can also be used to extract performance-sensitive code from Lua into a compiled language.
- It should support newer Lua versions, being developed by people from PUC / close to PUC. Yay, 64 bit integers and bitwise operators!
- Pallene is a friendly fork of Titan [1]. The reason for the fork is that the authors of Titan are iterating fast and adding many experimental features to it. The research group at PUC Rio needed a more stable code base and language definition. Improvements from Pallene will be merged back into Titan, which is probably what actual programmers should use in the long run (as of now neither is ready for production).
- There was a presentation of Pallene at Lua Workshop earlier this month. Slides and video should be available at [2] at some point.
So basically, instead of being a GitHub competitor, it is now an Atlassian competitor.