jamesboehmer

Awesome job, this looks fantastic, and has all of the UX gaps I wish existed in Bear and Obsidian. However, my 2 biggest pain points with those could use addressing, and I would happily pay a high one-time price and upgrade fees over the years if they could be solved: 1. My corporate laptop is locked down, so no apple app store installations. Could this be made into a brew-installable app and licensed another way? 2. Related - every corporate laptop I've had for the last 10 years prohibits app store and icloud storage. So Bear notes (which I subscribed to) can't sync. Obsidian has a sync service, but I don't trust it (would prefer apple or dropbox), but unfortunately the plugin ecosystem is messy and difficult. There is no reliable community-supported plugin for syncing with dropbox on mobile. If you could make syncing with dropbox possible on desktop and mobile, that would be the ultimate gift to the community.

Why don't you go ahead and give birth then, tell us all about your experience.

This looks fantastic. I would sponsor for AWS IAM auth.

I wasted my time trying podman and switched to colima. It's the only usable free alternative that's a true drop-in replacement for docker.

I do the same as the person you're responding to. There is no '+' in my email, I just create random strings @mydomain. It's impossible for a scammer to know they all go to one inbox.

It may partially be because of vendor lock-in, but I think the real reason is security. For example with Apple's Secure Enclave hardware, you give secret-generation responsibility to this chip, and can never see the value. I use it for SSH private keys, which are meant to be disposable/changeable. As much as I want to own and control all my data, I personally think this is pretty good footgun protection, and I'm ok with being unable to export my passkeys from 1password (and for the record, 1password does not prohibit TOTP exports).

pip is so easy, but unfortunately i've found that if you add package signatures to requirements.txt, pip chokes on it when installing it later. And subdependencies aren't always named perfectly, e.g. they might specify ~=1.4, and a subdependency that what was once 1.4.0 is now 1.4.27, and incompatible or compromised.

conda is so heavyweight installing whole pre-approved builds. and the command line options I find extremely frustrating.

I need supply chain security and perfectly reproducible builds, so poetry was the only real option.

I'm seeing all sorts of negative takes on this. But I read one interesting take on reddit from a father of 2 kids with DMD that had a very specific and logical reason for supporting it (other than the treatment helped his kid).

Essentially the efficacy test is a 3 point scale that measures standing and walking. It's not granular enough to get real statistical significance on, and never will be unless another kind of test is defined. So the tests are basically always doomed to fail rigid scrutiny by the FDA.

In the meantime they're getting dramatically effective results, and Peter Marks is bucking the FDA's traditionally conservative stance to make the product available to the few who desperately need it. I'll eat my words if someone finds he was paid off for this. I think is a truly miraculous kind of therapy, and I hope to one day have regularly available gene therapy for my own afflictions.

https://www.reddit.com/r/technology/comments/1dlsset/comment...

I think the point is that building any kind of tool to enable this is surface area for an attack. The design choice is to remove any possibility of that happening at all.

In this day and age, why does Thunderbird still ask for my password to store locally instead of using a standard OAuth flow? Every time I consider using Thunderbird, I just can't bring myself to enter a password. It feels like such an antiquated violation and gaping security hole.

This has never happened in the United States, and every expert out there says there is no sign of any kind of effort or legislation to do so. Involuntarily losing access to old cars is an imagined problem.

There's a gigantic difference. You stare at a handheld device when typing. When you're driving you need to feel what you're touching, otherwise you have to take your eyes off the road.

Discussed last year - https://news.ycombinator.com/item?id=29814345

They migrated to Github Issues a year ago, so this is moot - https://discuss.python.org/t/github-issues-are-now-live/1496...

Yes it was a big, hairy investment for someone to submit a tiny change. But it was also the gigantic moat that kept bad actors away. I for one am thankful core python remains clean and safe because of this.

Are you against 2fa, or against being compelled to use it? Why?

Yet.

Use 1Password. They allow users to connect multiple accounts at once (personal + work + etc), which the Bitwarden devs have expressed confusion over for the last few years. 1Password also has package deals with various services that your org probably already uses, and a SCIM setup for provisioning users and permissions.

I would think the "half-truths" refer to the difference between the content in the twitter files vs taibbi's and weiss's reporting of it. The FBI emailed twitter safety to report violations of twitter's own terms of service. It's not clear twitter actually did anything with those reports. But to read taibbi and weiss, it was as if the FBI threatened twitter to ban nypost because of the hunter biden laptop article, which never happened.

Which news organizations were suspended?

I know, I've read it, and I didn't see anything you're describing. Which part of it are you referring to?

I did, and I read no such thing.

I keep reading statements like this saying that the government pressured twitter to censor speech, but never really describing exactly what happened. Can you point me to the place in the twitter files where this happened?

He admitted he secretly donated an equal amount to republicans: https://gizmodo.com/ftx-sam-bankman-fried-sbf-secret-donatio.... They have his money and don't need him anymore.

You know which modules I'm not using for my critical projects? Ones whose maintainers refuse to enable 2fa. We already know how supply chain security problems have plagued npm and pypi. Dependabot should alert you when your dependency comes from a package maintainer that doesn't use 2fa.

I found that I also had terrible problems when using any bluetooth headset in voice mode on zoom calls along with MX keys. The entire computer would stutter, keys would lag, the mouse would lag, and I'd sound like a robot on calls. The headset would also get stuck in voice mode after calls, and I'd have to forcibly restart bluetoothaudiod.

The unifying receiver is unusable through a hub or connected monitor, and I don't have enough USB-A ports on the dongle to keep the unifying receiver connected all the time.

Switched to an apple keyboard, and never experienced the problem with the MX mouse connected.

You can also base62-encode the UUID's underlying integer and you get a short, URL-friendly identifier, while maintaining the power and uniformity of UUID. The claim with nanoID is that it's twice as fast as UUID, but I'm not sure how impactful that is given my services all spent orders of magnitude more time in I/O wait for a database after any UUID functionality.

This is enlightening, I didn’t know the bar was so high to contribute to python. But imagine a scenario where any unverified bot could spam the python devs with small or malicious PRs. I get that the hoops to jump through here are frustrating, but the process makes sure my production code isn’t built on wild west languages and frameworks.

I used this hack to export from Authy Desktop on Mac https://gist.github.com/gboudreau/94bb0c11a6209c82418d01a59d...

Thank you. If there's any other feedback you could take from this, please know that I've submitted a similar feature request for point #6, so that I could know the ID of the image from the direct creator upload. Without that, a malicious user of mine could possibly create many millions of images, and I would have no way of knowing who it was that created the image, and no way of knowing which images to delete or track.

Altana AI | Mid & Senior Backend Engineers, Machine Learning Engineers, and Data Scientists | Brooklyn, NY | Fulltime | ONSITE or REMOTE (must work on New York time) | https://altana.ai

At Altana we've built the first AI Knowledge Graph of the global supply chain -- the world's most comprehensive representation of global commerce activity. This data asset, composed of billions of records, covers more than 40% of cross-border transactions, corporate ownership registries in over 100 countries, the global movements of goods, illicit web activity, and more.

The Engineering team is looking for talented Engineers and Data Scientists to help build this vision. You'll work closely together and with our Solutions team on projects to analyze and observe world-scale datasets, write entity resolution pipelines, code that can scale to produce never before seen insights, and construct APIs to deliver our product vision.

We are currently raising our Series A, and staffing up to build out new Knowledge Graph features, risk insights, and advanced datasets.

Technologies we use: Python, SpaCy, Dedupe, Spark, Elasticsearch, Neo4j, AWS, Azure, Terraform, Kubernetes, Helm

All jobs: https://altana.ai/careers/

Backend Engineer: https://boards.greenhouse.io/altanaai/jobs/4287358003

ML Engineer: https://boards.greenhouse.io/altanaai/jobs/4268023003

Data Scientist: https://boards.greenhouse.io/altanaai/jobs/4269523003

What's bad about it? Been doing this for more than a year now and I've not encountered any problems. I've had catchall emails for every domain I own for 20 years or so and the worst I get is cold sales emails to info@ and sales@.

If I want to block an incoming address it's a few clicks away, I've just never needed to because spam filtering works pretty well. Perhaps that might change some day and I'll switch to a whitelist approach.