What are we eating now
Home
Public posts preserved on my own site.
It is almost 2021 & that means 14 years since Næturvaktin, you've surely forgotten all the jokes & can watch it again (free on Youtube until höfundarréttarhafarnir notice)
https://www.youtube.com/playlist?list=PLQCGAjHRBTuhA5BnoA-sbTt9sf2qRm1R-
2022. Math is hard.
♡ 0 ↻ 0
META: Some of my accounts have 2 tabs now-- Home vs Latest tweets & the stars now mean "pin/unpin" I still only wanna see Latest.
Hotel report: small town Hilton chains are mask free (none on staff or customers). I suspect the reverse is true for big city Hiltons. Also, the more recently built "downscale" Home2 is more luxurious than the older upscale Hilton, (for Ocean City). Excluding views.
Beach report: almost no trash except all the shells and feathers the mollusks and birds drop. These wild animals just have no respect for their environment.
For eating in a restaurant, those crazy nose-masks would reduce risk more than wearing a mask just from door to table.
New service, AWS Hit https://twitter.com/vinay201j/status/1473683790757257217
Great time to have already booked a trip to the beach: Fairfax has gone red, MD needed to hire better computer security folk so who knows, https://covidactnow.org/us/virginia-va/county/fairfax_county/?s=27211608
And the trend line is vertical.
Chinese pop is the country music of Asia.
New personal productivity metric- tab bankruptcies per day. Probably a goldilocks curve & I'm way beyond the "just right" level.
Heck, I'm doing multiple chrome and console bankruptcies today. Don't loan me tab.
"robotic" is starting to mean code that is able to call other code with a really, really bad API. Otherwise, it would just be called API clients.
This doesn't make sense when compared to salary surveys for techies in general. By comparison, non-FAANG techies are working for 1/2 to 1/7 that. This has gotta be related to stock compensation, which in most cases is a lottery ticket that is worthless at the end of your tour. https://x.com/danluu/status/1472709170440785922
# uncomment in dire emergencies when you need to know what the hell is going on. Will start log flooding.
# root:
# handlers: [console]
# propagate: true
I'm doing it, I'm uncommenting it.
Shoot, api doc tools want to be installed in the same venv as your app, but they pull along so many dependencies and they conflict with each other. I think I need multiple Pipfiles, one per documentation generator. Sigh.
authVerify?operation=reset&isGina=false
Hardcoding staff names into an API doesn't make me think that there is some opportunity to hack this at all.
Scenario 1: docker image is actually a bitcoin miner
Scenario 2: docker image is fine, but has curl on it (which you won't use).
Right now, docker scanners treat both the same, the former means: Stop, don't run this. The 2nd means, eh, maybe get latest if this isn't already.
Log4j is ruining the climate too https://x.com/KGWNews/status/1471550961671938048
MoneyGram is how grandmas send money.
Until you run mypy, your python code is full of ):
e.g. def add(a,b):
return a+b
PSA: Gas fireplaces, they warm up the cold room in your house.
They also are a huge fire risk & you have get a qualified workman to inspect them before you turn them on, maybe each year, but at least the 1st time you attempt to turn them on.
At our place, 1 was fine, 1 was incorrectly turned off and was an accident waiting to happen.
They also all need to be replaced with electric & solar/wind/water/nuclear generation but those choices are not available to me. * (essay on electric choice elided to fit in this box)♡ 0 ↻ 0
My old condo's fire alarm ran on essentially an embedded pc and like like all motherboard & chips had thermal damage after ~5-10 years and began ringing false alarms every day. This is probably every building in the country now. (failures roughly correlated with weather temps) https://twitter.com/_brohrer_/status/1471112859400687627
@RedHat diversifies, hopefully this recipe is open source. https://x.com/TomasTomec/status/989373852500267009
Infinite chaos monkeys could take down all the AWS regions.
us-east-1 up for you?
I got the grey check. It means I'm double-ultra-trustworthy.
I'm thinking the key mindshift changes is not just deploying after code push, but on some scheduler, e.g. weekly, that proves the world around you hasn't broken your code (not a line of your code has changed, like your musical tastes, but the world around you has changed) https://x.com/mistersql/status/1470853661735665671
Goal redeploy whenever:
- Rebuild on a regular basis, to pickup bit rot, problematic pinned versions and problematic unpinned. Yes, they are both problematic depending!
- Automated tests, duh (unit tests, API tests, perf tests, etc, etc) Yes, they're all flaky except the unit
- Deploy to a staging or break-fix environment regularly (config drift doesn't only wreck other TF scripts, it wrecks what you thought was a repeatable build/deploy script)
♡ 0 ↻ 0
Okay everyone, let's build and redeploy again! (feds, ha, you're still in line for the CAB to meet in 3 weeks, so just file an updated CAB request) https://x.com/likethecoins/status/1470828794755829765
immutable sprints are stupid. What is supposed to be immutable is the client saying "add this feature, no add this feature". If $#!+ comes up, let devs do the work with tickets. Immutable sprints make the barrier to add a ticket so high that it never happens, ever.
At one gov't agency, their process has rigidities like, "well you can't do an emergency release unless someone is going to physically die" And I thought, what a poetic way to say "never". Immutable sprints create that same ludicrous barrier.
♡ 1 ↻ 0
TT;DS. Too tired, didn't sleep.
Big story for DC-area folk if they ever go outside again https://x.com/StevenCHowell/status/1470111666541113348
Supply chain TODO:
- switch from http://setup.py to lockfile for your app
- switch to `pip install --binary-only=:all:`
- scan your deps before you install them (only ochrona does this)
- vendorize abandonware, if I wanted to maliciously attack something, I'd start there
- switch from http://setup.py to pyproject.toml for libraries, always build a wheel
- don't use code w/o explicit license, it is a proxy for "is an irresponsible clown publishing this library"
- run a quality check on the lib before taking a dependency (eg snyk's site)♡ 0 ↻ 0
First trip to Starbucks since March 2019. So you say, "I wish I could use a personal mug" and then they give you 10cent off. You still can't use a personal mug.
Logging technology is stuck in 1995. Everyone thinks the $#!+ build-in logging library is awesome & keeps using them. Take this as an opportunity to review your logging strategy, maybe don't pick one with a Byzantine/Baroque type hierarchy. (I'm looking at you python AND .NET)
For being the stereotypical side project, you'd think we'd have more good logging libraries by now.
♡ 0 ↻ 0
That is a vicious thing to name your robotic kid, Mr. Here. https://x.com/SEC_Investor_Ed/status/1469336868345069576
Pymarc, your favorite key-value serialization format that economizes on bytes for key names.... now has wheels!!!
https://pypi.org/project/pymarc/#files
If you are an enterprise maintenance developer, all enterprise applications are tamagotchi.
I like how fast they think DHS can create an application to put images of all ballots in the country online. If it wasn't for the treason bit, I enjoy the absolute confidence they have in govtech to get the job done. https://x.com/AshaRangappa_/status/1469045710150582285
Forget the supreme court, this election will be decided by the IT Change Control Board.
♡ 5 ↻ 0
Nobody on Twitter calls themselves a "Build Master", what are they "Yaml stylists"?
The qwerty keyboard is based on a purely random ordering of the alphabet, so qwertyuiop is an excellent password, high entropy and more than 8 characters. As a best practice, set your password to qwertyuiop.