No! It's not about "compared to the alternatives", it should be, "compared to what it could be, without hideous restrictions to the end user". And in this regard, I think it probably does count as abysmal.
1,083 karma · joined August 12, 2012
add1 = (+1)
> add1 23
24
> add1 2.01
3.01
> add1 "0"
No instance found...
Find arty people who are doing what they do because they believe in it and don't have a ton of resources. hang out for a couple days, help out, see what they do, be inspired.
Depression sucks. I was on medication myself for quite a while over the last few years. My counselor said the meds and everything is about breaking out of the cycle. Your behaviour changing will change your body will change your emotions...
If you do get thoughts about death or hurting yourself, go see a doctor. Call the Samaritans. During depression your mind is swapping to disk everything else as the depression process keeps demanding resources. If you get healthy processes going, which may need help from medics (it may be something as simple as some vitamin deficiency!) Or hanging out with inspiring people, Then the brain can deprioritise it and re assign the resources.
Don't give up.
Currently the EU only really has visible 'opposition' in the form of (IMHO) petty nationalists who want their respective countries to leave, rather than from people who are quite happy to be part of the EU, but want it radically reformed, or changed in specific ways.
I was saddened that the UK voted to leave (I'm British, live in the UK, but grew up in Cyprus). And horrified by how the 'Brexit meanx Brexit' group are now pushing it through with very little discussion about what that could mean, or how Euroskepticsm could be rechanneled into something positive.
The idea of Europe-wide cooperation, freedom of travel/work, etc. isn't going away any time soon, and currently the vehicle it's embodied in is the EU. I deeply wish the UK government had said, "Right. So the referendum proves that enough of the country is very very unhappy with the status quo. Would leaving the EU fix that? Or is there a way we can change the EU, or our status in the EU, in such a way that the situation is better?"
Post Brexit, the UK has no voice into the EU governance, and it's very unlikely that the people with influence in the EU will lean in helpful directions to what the UK government(s) would like it to be.
I hope you're right, that we will return to much more ad-hoc co-operation, deals and many individual treaties and so on. I really really hope you're right.
But while the EU remains like it currently is, I suspect it's simply going to be awful for the UK for a very long time.
I guess it slightly depends on how grown up and generous the EU negotiators and leaders are. If they genuinely will look out for the British public (technially their citizens...) and their interests in this, then it may not be so bad. But the UK government is certainly perceived as being remarkably selfish and self-centered in the whole affair, which doesn't really fill me with confidence about the future of the UK.
A side question (sorry):
So if you ever buy any mac device, will wiping it (reinstall from USB disk) remove it from the Find My Phone system, or does the previous owner (if they set it up) keep the option of locking the device remotely and holding it to ransom?
Does SElinux mitigate this? App armour? Dockerised WP and NGiNX?
Coding is quite fun. A lot of the related guff that is part of software engineering in 'the real world' is quite frustrating.
"Somewhat misguided" is a lot less harsh and confrontational, FWIW. HN civility guidelines and all.
> show me if security is improved! > (which for Wordpress can't be that hard)
that is, to say that the concept of 'WordPress Security' isn't a single simple thing to 'improve'. Unfortunately. If you wrote a set of 10 jillion tests and proved that wordpress core has no possible security vulnerabilities (humour me), that still would not fix 'WordPress Security'.
From a theoretical point of view, you're absolutely right, and I agree with you.
From a practical point of view, WordPress is often 'good enough', and 'works well enough', and has 'few enough security issues', for many people.
Improving security is great, but it's a complex, perhaps impossible problem.
The core code is OK, security wise. Comparible to similar projects, I guess.
The two major issues are that typically PHP runs with permission to modify the WordPress directory, which is useful for automatic upgrades, but means any exploit in any plugin, theme, etc. instantly becomes, "can replace WordPress".
The other is that all themes and plugins are completely unsandboxed, and the quality is extremely variable.
The permissions thing can be fixed, by running a very stripped down wp-php user with only read access to the code, and only write access to wp-contents/uploads (and a logging dir). Then you do automatic upgrades with wp-cli and (real) cron from a user with write access.
The quality of plugins and themes is not easily fixed.
The API for writing plugins and themes doesn't help. It's archaic, spaghetti, and doesn't have any kind of coherenc. Global functions like wp_is_home(), the_loop(), get_sitename(), etc.
I've come across themes which bundle joomla inside them as they're really joomla themes with a shim.
One question - does anyone else feel that having NGINX as the only link in the summary kind of suggests that it's an nginx problem? I could imagine my previous boss reading the article, and 3 months later saying, "Wait what, we're using nginx??? Isn't that that shit that made cloudbleed happen?"
Then for anything like this, give publically a bonus gift which makes it worth people reporting to them and not blackmarket selling it. Once it's gone through the legal dept. and so on.
Then they can be very quick with handing out tshirts and so on to any and every microissue report, without the people running triage having to care about amounts or tax or whatever.
Having any kind of publically offered payment for service (beyond a tshirt bounty or services in kind) is just begging for legal issues, right?
Speaking of speed, I hear 3.7 should finally be able to beat 2.7 for most benchmarks, which is pretty sweet.
The trouble was that they're pretty expensive, and zinc has a great resale value - so we had to do extra watches around the lower decks with rigged firehoses to try and stop local divers stealing them who knew we'd just come out of drydock. (This was in the Philippines). We lost several that way.
I feel like there should be a way to write a new set of simplified tooling on top of the kernel API.
I've been running fedora at home an on my laptop for about a year now, and don't need to turn SElinux off. I only needed to add one custom role myself too, when trying to mount certain host directories as volumes in docker. Which is fair enough.
The bit which drives me the most crazy is setting up email on it. All the sites need to be able to send occasional notification emails (WordPress, so password resets, etc). I hoped dragonfly mail daemon would be enough,. But we also need virtual host forwarding - if you email some addresses at one of the hosts, it should forward on to the right persons Gmail, or whatever. So we ended up with postfix. Which is reasonable easy - a hell of a lot easier to configure than sendmail or exim, but even still... I wish so much for a mail daemon with all the correct options for SRS, DKIM, SPF, SSL, TLS, greylisting, etc. Turned on by default, and yaml/toml configuration... I'm at the point of reading golang and python SMTP code and wanting to write one. Something like caddy for email.
Email is complex, there are so many edge cases and options. It's insane. Reading documentation is awful, as all daemon docs assume you know what all the acronyms mean, and that you understand all the various RFCs.
The wort is stuffed with maltose, dextrose before fermentation.
The yeast turns most of the fermentable sugars into alcohol, true, but some are left, and some are required.
The yeast cannot work above a certain level of alcohol (%ABV), so any sugars added above that will not be fermented.
Some styles have added non fermentables (lactose) to add sweetness.
Also in cold weather, a mulled ale is amazing. :-)
It's used for style & design, but also for functionality. In some ways, ideally, function related CSS would be stored with the module, but site-level design CSS would be separate.
Additionally, CSS by design has greedy selectors. If I put in a:
a { text-decoration: none; border-bottom: 1px solid pink;}
Are there good solutions to this?
I kind of feel in some ways, with SPAs and web apps being a thing rather than simple pages, we need a new way of defining styling, which then compiles to CSS, figuring out the correct over-rides along the way.
Its also not great on small screen resolutions.