Well that is a first. I get access blocked on what is semantically a NOP command.
(Can't skip doing something to an s3 bucket because no access to s3 bucket...Terraform's if/else logic leaves something to be desired)
Home
Public posts preserved on my own site.
Bash should award you a badge everytime you run a command that concats three or more commands together with &&. And a badge for using more than six switches.
If everyone that spends $ on lotto tickets redirected it to making "beauty contest" bets on the stockmarket, retail "investors" could make volatility explode. But markets are efficient, right? So eventually prices return to normal
The volatility will impose costs on everyone, so this would be an example where the free market isn't efficient, i.e. if we could exclude pure gamblers, (big & small), the market would be more efficient.
♡ 0 ↻ 0
"They asked Benjamin Franklin, 'What do we have, a tidy or a cluttered office?' Franklin replied, 'A tidy one, if you can keep it.'" He wasn't about to find out how many TODOs were at the bottom of that stack.
Y'all should sign up for git guardian, it will tell you when you've accidentally published a secret to your public git repos. It has a free offering too: https://www.gitguardian.com/
So if you hit a website & can trick the app to running a command as sudo! oh no! Wait everyone is running their docker containers with root as the app user, so if they could pop a console, they didn't need sudo.
If there isn't a USER command in your Dockerfile this doesn't matter. Why bother to lock the back doors if your front door is open.
♡ 3 ↻ 0
`sudo make me a sandwich` and now my kitchen is covered in folders named AAA, AAAAA, AAAAAA.
status: buying an external trackpad because this mouse scroll wheel gave me a repetitive strain injury.
This track pad makes a huge difference. Never occurred to me that mouse scroll wheels were wrecking the mushy bits inside my hand.
♡ 0 ↻ 0
IDEA: write a whole app just using StackOverflow bountied questions.
I hear you need an IP, so here you go: 96.56.255.178. If your DHCP is broken, and you need another one, just ask.
I once worked on an app that was essentially trying to help folk read 100000s of newspaper articles. Before you even read the text, it'd be handy to see a report of distinct words, list of people, sentiment scores, etc.
A workflow sort of like reading books on amazon...read reviews before reading. Except for short articles, no one writes reviews, that'd be more text than the article! But a report on article stats could be a good first pass filter.
♡ 1 ↻ 0
Snowing in Takoma Park, MD! & No one told me?!
Once the internet arrived, no one knew if Edgar Allan Poe was making a joke about sealing people into cellars in the basement or if he was joking.
SO talk about the time they were hacked. Matches what I say a lot. I'd never attack a prod website first, I'd attack the dev/test environments first. Big orgs act like only prod is worth of protection & or setup crazy policies that bring dev work to a halt
https://stackoverflow.blog/2021/01/25/a-deeper-dive-into-our-may-2019-security-incident/
Build servers are the keys to (some) kingdoms. If you can hack a build server, then who cares about active directory.
♡ 0 ↻ 0If you only get 1 thing out of this, the ability to make a build & deploy a build should be different servers, different people. If the deployer is a rubber stamp approval, tho, then no gain.
♡ 0 ↻ 0
Is there a way or tool to find which #python dependencies one has that have native code?
In me are two wolves, control-c and control-v. I feed them both all the time. Fat chonksters, too heavy to fight much.
Ah, we got an incentive to ask people to like & subscribe to our python packages, it affects the SourceRank score:
https://libraries.io/pypi/whats-that-code/sourcerank
Don't forget to like and subscribe to this tweet.
♡ 0 ↻ 0
I think this a brand new from snyk, it is another way to search pypi & has a different sort of report.
https://snyk.io/advisor/python/so-pip
Similar but different from the info on https://libraries.io/pypi/so-pip
♡ 1 ↻ 0
Windows users, which shell do you use to mount docker volumes when doing '`docker run -v "$PWD/v:/v"`?
This trick usually works for mounting volumes on git-bash but it just creates nonstop friction:
https://github.com/docker/toolbox/issues/673♡ 0 ↻ 0
So I published another library: https://pypi.org/project/random-names/
It turns numbers into words that are easier to remember, type, etc. Turns out this is a very old idea, the "major mnemonic system" maps consonants in words to 10 digits to make each word a number, reversibly.
Speaking of names, this was the hardest library to name. The name I went with overlaps with random data generators which create non-reversible data (no way to convert your random data back into pseudorandom seed numbers)
♡ 0 ↻ 0
IDEA: Harvard license for when you need a bit more prestige than MIT.
Oh boy. Installing Rider & it wants to know if I want Visual Studio or Jetbrains keymaps. I got the short cuts for both stored in my brain somewhere.
dephell, one of the most promising alternatives/complements to pip, pipenv, poetry went into archive mode! Man, so much of our tools relies on people working for free for quirky reasons
https://github.com/dephell/dephell
"What's happening?" twitter asks me. Well, twitter, I think you already know, your status page says your fine: https://api.twitterstat.us/
Jetbrains ruined installation parties. Can barely eat a slice of pizza & PyCharm is already installed.
Yes, I'm subtweeting you Visual Studio.
So my voting classification algo has two stupid voters... I'm thinking I don't want their opinion unless no one else has an opinion. You'd think we'd have a system in democracy for dealing with stupid voters.
IDEA: to test the unit tests, a tool to automatically add a bug to the source code. If the unit test can find the bug (fails) then the tests are good.
I'm thinking implementing as with mechanical turk pattern.
Kind of newspapers putting every bad thing you ever did from childhood until now at the top of your resume. If you think about it, the implication is if you do anything bad ever, you should commit suicide because there is no recovery.
https://www.washingtonpost.com/lifestyle/media/old-arrest-boston-globe-fresh-start/2021/01/22/122cbd0c-5cd1-11eb-b8bd-ee36b1cd18bf_story.html
Sort of creates an "untouchables" class in the west.
♡ 1 ↻ 0
My hot take is that setuptools_scm has no opinions, but 69 contributors each had opinions that took the tool in 69 opposite directions. And it is tied to Pep440. So if you have opinions of your own (http://setup.py sucks and semver is good, then the lib fights you) https://x.com/mistersql/status/1352839809740496897
setuptools_scm is one weird library, e.g. https://gist.github.com/matthewdeanmartin/53f979c313ee63598c93a76528febd1b
Can find last version tag, but can't do a semver bump, if you follow the wyofc pattern & provide a function for it to call.
* even if
♡ 0 ↻ 0
well, would you look at the time, it's...
12
11 ^ 1
10 | 2
9 ⊙----> TIME FOR ANOTHER
8 4 COOKIE
7 5
6
IDEA: a pypi library called wyofc*, extremely re-usable, respects your autonomy.
__init__.py
-----------
def okay(your_code:Callable[[Any],Any], *args, **kwargs)->Any:
return your_code(*args, **kwargs)
* Write your own *'ing code
Registering* copyrights of websites require submitting the whole thing as a PDF. What a concept. I should keep looking and see what the deposit rules for copyright on software would be.
* registering a copyright is an optional thing
https://www.copyright.gov/circs/circ66.pdf
Wow! USPS really implemented my joke! Impressive for the time
-
"E-COM, was a hybrid mail process used from 82-85 by the USPS to print electronically originated mail, and deliver it in envelopes to customers within two days of transmission" https://twitter.com/corsoa/status/1352342015435022338
VPN is down, so I'm going to tunnel my tcp-ip packets through the USPS. I'll print it out on paper & mail it. When I get my tcp-ip packet back in the mail, I'll hand type it into the network socket. Or maybe I should bump it up a layer and print HTTP requests.
If all the targets in a Makefile are .PHONY and none of them have another target as a dependency, maybe a file with bash functions would have been a better choice
Subtweeting but referring to a Makefile on Github and they know who they are.
♡ 1 ↻ 0
---
How to break into tech at big orgs:
- learn enough about process to get by (Agile, etc)
- Learn unittesting, linting, & the like (build server quality gates)
- Learn enough security hardening to get by
# Small shops encourage skipping all three of those.
Anyone know which sort of criminal history locks someone out of a gov't job? The official guidance is some "have it both ways" language, exclude folk with criminal history but allow people with criminal histories under some circumstances- https://news.clearancejobs.com/2020/09/01/what-is-a-public-trust-position/ https://twitter.com/theworstdev/status/1352266978946330627
Now do an exec order on quote tweeting a quote tweet so you can't see the inner-most tweet without drilling down who-knows-how-many levels to get to the original tweet. https://x.com/JHagner/status/1352276906171797504
Something I just wrote: "Since we're breaking new ground here, I don't mind putting the bell on the cat for that part." <-- cliches feel like the old school way of doing memes.