trog

This is elitist nonsense. Maybe this user didn't do everything right but people are hacked regularly through zero fault of their own.

you can replace the word "PHP" in this post with any other language and it would still be true.

You can set this up in a non-production environment and realise a lot of the benefits. It would also help you figure out better ways to manage your logs such that you can improve signal-to-noise ratio in monitoring solutions and alarming.

Not convinced "AI" is needed for this sort of around the clock pen testing - a well-defined set of rules that is being actively maintained as the threat landscape changes, and I am pretty sure there are a bunch of businesses that offer this already - but I think constant attacking is the only way to really improve security posture.

To quote one of my favourite lines in Neal Stephenson's Anathem: "The only way to preserve the integrity of the defenses is to subject them to unceasing assault".

What actually happens in most (small) businesses is one person gets lumped with all these jobs and the business is regularly surprised they're constantly over-worked and under-delivering

Very curious what sort of workloads are being talked about here that have the intensity that have C or Rust or Go extensions are necessary? I can certainly believe they exist but I'd be really interested to find out more and why it makes sense to add this complexity into the stack and not solve in other ways.

My last two Pixel phones - 6a and 7a - were both "recalled" with battery issues. I got almost a complete refund for both, and got keep the phone (my 7a died a few months after the recall, 6a is still going strong).

I got a 9a to replace them just because I didn't want to have to deal with learning iPhone, but I'm fully expecting the 9a to fail with a similar issue so looking at buying an iPhone soon as a backup so I can get up to speed.

Would love some more info about how redaction works. We currently use Acrobat Pro for redaction mostly because of 'trust' issues, but I'd love to replace it with a web tool. I just need to convince our CFO that it's safe.

Redaction doesn't seem to work in Firefox either. Otherwise looks great!

From what bits I've seen of the trial, at least a chunk of it was devoted to the meaning of the word "autopilot". Tesla even brought in a linguist to argue their case: https://bsky.app/profile/niedermeyer.online/post/3lunfw2s2is...

Maybe we should define our terms then? I favour this definition of "ur-fascism" by Umberto Eco: https://archive.is/VamLM

To steal a few examples from a convenient summary list someone[1] made:

1. The cult of tradition. “One has only to look at the syllabus of every fascist movement to find the major traditionalist thinkers. The Nazi gnosis was nourished by traditionalist, syncretistic, occult elements.”

2. The rejection of modernism. “The Enlightenment, the Age of Reason, is seen as the beginning of modern depravity. In this sense Ur-Fascism can be defined as irrationalism.”

3. The cult of action for action’s sake. “Action being beautiful in itself, it must be taken before, or without, any previous reflection. Thinking is a form of emasculation.”

4. Disagreement is treason. “The critical spirit makes distinctions, and to distinguish is a sign of modernism. In modern culture the scientific community praises disagreement as a way to improve knowledge.”

...

10. Contempt for the weak. “Elitism is a typical aspect of any reactionary ideology.”

Open to other definitions. But I look at that list, written in 1995, and it feels like you can check off a lot of these items in things that are rapidly being normalised.

1. https://www.openculture.com/2024/11/umberto-ecos-list-of-the...

> It's hard for me to take all of this seriously because I sat and listened to how Google Search was going to ruin everyone's mind and without the skill of manual research we'd all be turned into imbeciles.

Have you recently watched a civilian perform a basic task? Their first approach is to use Google and pick the top result - ad or otherwise. I think websearch /has/ ruined everyone's minds, and it is being exacerbated on a daily basis by AI.

I work for a freight forwarder. We have some customers that exported to the US and were hit with the boosted tariffs. Only a few smaller air freight shipments, so not container loads full - they decided to eat the extra cost to try to keep momentum, just on those shipments.

But it was only ever a short term strategy; if they had persisted they would have had to reconsider.

I've been writing shell scripts in PHP for more than 20 years for this reason. Don't work on a lot of PHP sites any more but I still do most of my shell scripting in it. I think this'll be a big win for C# users once they get used to the paradigm shift.

I notice another poster said it's a bit slow but for many common use cases even half a second startup time is probably a small price to pay to be able to write in the language you're familiar with, use your standard libraries, etc.

All true but tell the average programmer that you think their industry should be regulated and they should potentially be held liable for their code.

This is not a popular opinion on software development circles - unless you're already in one of those regulated fields, like where a software engineer (a literal accredited engineer) is required.

But it's been an increasingly common talking point from a lot of experts. Bruce Schneier writes about it a lot - he convinced me long ago that our industry is pretty pathetic when it comes to holding corporations liable for massive security failures, for example.

> Windows 10/11 it's a shit show. The last good Windows was 8.1. And the last great Windows was 7.

Yeh I think there's this weird stigma that stuck after Windows 8 was a bit iffy but 8.1 was fine.

I preferred Windows 8.1 to Windows 10 (and MUCH preferred it to 11) because at least it still had all the old core Windows control panel stuff under the hood. Windows 10 feels like a way more awkward mismash of things because they seem to have simply just taken a bunch of stuff away.

The zillions of different UI paradigms smooshed together started in Win8 but Win10 is where they really seemed to pile it on.

Anyway, I'm not a Mac user. But I absolutely see why they want to keep touch interface separate from keyboard & mouse. It's hard.

Maybe they don't because they've seen what happens when Microsoft tried to build an OS that was both touch screen and mouse & keyboard.

I hope the 1/3 learn something from this

This is true as long as we don't end up with a mutation that can go from people to people.

I saw this morning that we now have the first cases of rats with H5N1, so... things are going great

> But the culls are smaller, and so the impact lessened. The problem becomes more distributed.

Presumably the risk of spread of bird flu to humans increases though, due to the increased amount of contact. And then the increased risk of mutation leading to human to human transmission.

Bit wild to me that we don't seem to be taking this very seriously other than "o no my eggs" given we just had a pandemic a few years ago.

This is wishful thinking of the highest order

Yeh but do you say you write your blog in markdown or 'raw HTML'?

There is also the question of whether the actions required to cut the waste are themselves expensive. If you spend a huge amount of time and effort to cut waste, there's a point at which it would have been cheaper to just accept that some waste is inevitable and to not worry about it.

Literally every organisation I've been in has had "waste", but most of them have been smart enough to realise that you don't want to spend thousands of person-hours measuring every tiny little thing and doing wildly complex RoI analyses (especially on stuff where it's almost impossible to figure out anyway because there are too many variables), and instead focus on having metrics around the outcomes that they do care about.

Heh I read Atlas Shrugged and had the exact same response as you reading Fountainhead. I recall quite enjoying the writing style, but just found the whole thing silly and the idea that anyone could come out of reading it thinking they'd just stumbled across a great life philosophy funny and depressing.

> it's impossible to bill at scale and exactly cut off service usage globally when a target is hit,

How much does the problem change if you remove the word 'exactly' from here, though?

Like, I don't mind if I end up paying a couple of extra bucks. Or even tens of bucks! Some people might not mind hundreds or thousands, or even more depending on their scale.

But blowing out several orders of magnitude past my usual monthly spend is the problem I'd like to avoid.

Isn't the room saying H1Bs are going to be protected from the very top regardless what a few malcontents have to say?

Not sure what you mean about either of those two things? Never had any issues with instance state in our primary production environments, which were several instances of load balanced web servers. No idea what you're referring to as "slow"?

That makes a lot of sense to me!

I avoid Docker for precisely that reason! I have one system running on Docker across our whole org - Stirling-PDF providing some basic PDF services for internal use. Each time I update it I have to watch it download 700mb of Docker stuff, instead of just doing an in-place upgrade of a few files.

I get that there are advantages in shipping stuff like this. But having seen PHP stuff work for decades with in-place deploys and no build process I am just continually disappointed with how much worse the experience has become.

An old monolithic PHP application I worked on for over a decade wasn't set up with independent modules and the average deploy probably took a couple seconds, because it was an svn up which only updated changed files.

I frequently think about this when I watch my current workplace's node application go through a huge build process, spitting out a 70mb artifact which is then copied multiple times around the entire universe as a whole chonk before finally ending up where it needs to be several tens of minutes later.

Do you mean wetness as in the juices in the steak gravitate to the bottom? Or do you mean literally the bottom of the steak is wet? Either way neither of those issues seem to be a problem for me.

When I first started cooking in the air fryer I did flip it at half way though. I just forgot once and found it didn't make any perceptible difference, so gave up on it and it's just that one less task to do. My partner and I both agree it comes out awesome pretty much every time, and I'd say we are reasonably fussy steak eaters.

I don't worry about crust I guess? I don't think I even try to do that when I'm cooking them in a pan. I'm more interested in trying to get the fat right - it tends to crust over pretty nicely in the air fryer. It works better on thicker bits so it has longer in the heat.