The Easter Great Ape went all around the neighborhood leaving the wrappers and containers of product he was ashamed to consumed and hid them, well in plain sight, for me to find this morning.
Truly an Easter miracle.
Home
Public posts preserved on my own site.
Python developer problems: I love pathlib.Path and I think my wife will be jealous.
It is so bad that even rumors of performance problems won't change my mind. Representing a path as an integer (wasm-style) is probably faster, too. Why performance minded developers leave all that performance on the table using str, I don't know.
Blog post: "We hired these really great people, with human capital in more dimensions than you can think of: experience, education, emotional maturity. We got them by luck, a selection process that rejects 99% of our 1000s of applicants and paying them $$$$.
Your office (with none of that) is failing because you aren't following our process/lack of process. You just have a toxic work environment and it is all managements fault. It is capitalism's/government's fault. Be like us, it is easy."
If I'd just take off the scare quotes, I could be a thought leader.
♡ 1 ↻ 0
If if you use #microsoft365 #office365 for your work & can only log in via browser because using any desktop Outlook client is blocked
You should block #bing
"Your search administrator may be able to see your searches...."
So this billionaire is asking other billionaires for money to buy Tiktok's brand name and wrap it around an app to be written in about 6 months. How hard can it be?
Hypothesis hates the hidden datastructure in a string, e.g. paths, urls, strings that can only meaningfully be one of n values. So I convert things to pathlib.Path and now I get trash Path values because they are trash relative to the real filesystem.
Sadly, there isn't a library named monkeys-paw, (for monkey patching, I guess)
https://pypi.org/project/monkeys-paw/
An observation about bot driven development:
The bot writes a lot of small, zero dependency, single purpose single use functions and I compose them.
At times, that is exactly what coding design coaches have advocated for. And what do we get? People upset that this creates duplicate code (i.e. the bot doesn't know that a similar function exists in the 1TB monorepo somewhere)
If #xz is a nation state project, then you don't just try to infect one opensource project, you attempt to infect dozens. You want to be the bureaucrat that spent 5 man years on a infecting a single open source project and that one failed?
I mean, if you want your project cancelled, that is how you get your funding cancelled.
♡ 2 ↻ 0
The UX on the windows 10/11 lock screen is so good that today (9 years after release) is the first day I figured out how to find out what the picture is of. They didn't user test that, did they?
What dependency injection tool exists for #python that
- isn't a nightmare to use (I'm glaring at you Unity of C# world)
- And is common enough that ChatGPT has seen it, knows how to use it
I'm getting bullied by my unit tests into adding every dependency to my app's entry point function and it getting cumbersome.
Idea... repurpose my failed-to-start tool to skip-trace missing pypi maintainers to skip-trace the entire contributor graph of a project. A SBOM, but for attempting to link the contributor name to the real world people.
I see SBOMs track a string with a author/supplier name, but if that string doesn't link to a real world entity, you don't have a supplier you have a string.
Here, have another "hello world! I'm a supplier."
The OS should make it easier to disable the network for an app that is not expected to use the network. (e.g. a file compression app)
I wish I knew why that is a hard problem.
Look at that, my house has a backdoor. Who put that there?
You see, it isn't a low effort joke if you have to take a picture.
♡ 1 ↻ 0
If I log onto my work email and use google, (and I'm not on VPN or corporate network) then my googling is private.
If I log onto my work email and use #bing, my searches are shared with my employer. Seems like an incentive to not use bing.
I wonder if this is the same for enterprise google docs.
What do you got to hide Matt? Well, anything is weaponizable if there is potential for enemies or other bad behavior with your employer. Maybe just don't give them any weapons, regardless if you think they'd use them or not.
♡ 1 ↻ 0
I imagine Babbage represented time as seconds before 1970.
The bus factor keeps evolving. Now that software developers work at home all the time, busses have to drive through the front door, up two flights of stairs to the home office to hit key personnel.
#AWS #Redis #Elasticache For all your elastic-ache needs, AWS is participating in #Valkey the SAAS-safe fork of Redis
https://www.linuxfoundation.org/press/linux-foundation-launches-open-source-valkey-community
@blainsmith There roughly was the idea of microformats, i.e. that you could use html + spans + class names to create lightweight specs for movie reviews etc. It didn't catch on.
The general idea is so useful that when I'm coding up side projects, I ask the bot to invent a DSL & write the code to parse it, e.g. https://github.com/matthewdeanmartin/fermi_problems/blob/main/files/piano.txt which is my incomplete effort to make a machine readable fermi problem format.
IDEA: a #pypi tool that lists who supports all your packages, both direct and indirect.
Security, after you follow the chain of causes, keeps coming back to a problem of authentication and trust. Do you know who did that and do you trust them?
A package name just means someone gave a package a name. Doesn't help all the identity info is self asserted.
I used to joke that ticket backlogs are infinite & the last tickets would be implement email and artificial intelligence (because that's never gonna happen).
I have to update that joke.
@bflipp@vmst.io The two word phrase "bridge collapse" removes agency. "Bridge knock over" gets closer to what happened.
Move over semantic version. Make room for surreal versioning, a few samples:
version == "i+1"
version == "flarb"
version == "geronimo"
version == "^/1"
version == "👩🚀"
To check for compatibility, just follow javascript's ordering after first converting each surreal version to a data type that would make sense to javascripts founding fathers.
@ayo You didn't submit an application with the right meme.
@neurobashing The market can be stupid for longer than you can remain solvent. If the pump and dump takes years, or if a small number of Arab plutocrats hold onto all the shares who knows how long it could take before the dumping starts.
Also the betting market on Trump winning the general is 50/50, which seems 25 percent off, so that market strikes me as resiliently stupid too.
LLMs are not psychics trying to defraud you. That blog posts is a way over elaborate way to say people are gullible. The blogpost itself starts out by saying LLMs aren't people (duh...) and then suggest that LLMs are somehow able to act like a person who wants to defraud someone by exploiting their deep knowledge of human biases and typical patterns of defective reasoning. Anyhow, it is a bad metaphor, about as bad as "it is autocomplete" or "it is a markov chain"
I watch too much youtube about quantum physics, where several elements have no sensible explanation other than the model's predictions match the experiments & the Copenhagen Interpretation says shut up & calculate, you can't explain it (at the moment).
We don't know what's going on with the LLMs. Shut up & evaluate if the outputs are useful. Yes, evaluation is hard.
♡ 2 ↻ 0
that feeling when you realizing you might be one of about six people in the world attempting to use an enterprise technology and it isn't clear that any of the six have ever gotten it to work.
(In this case an #AWSGlue to #Opensearch java library)
@schwa Watch out for grinch syndrome.
There should be more friction involved in #pip installing from something other than pypi.org
Poetry is moving in the right direction away from letting the installer just pick any non-standard repo
https://checkmarx.com/blog/over-170k-users-affected-by-attack-using-fake-python-infrastructure/
LLM discourse, an analogy:
<people look at bitcoin & shitcoin disasters>: wow, maybe I shouldn't use any form of script, specie, currency...barter is the prudent thing to do.
The difference between the worst and models is astronomical. Even ChatGPT3.5 and 4, the gap is huge. If you used, say, AWS Bedrock Titan to form your opinions, you'd think the bots are as bad as the naysayers think.
GPT4 is like 10x smarter than GPT3.5 and GPT3.5 is like 100x smarter than Titan.
Some people already have 23 years of prompt engineering experience.
```bat
PROMPT $t $p $g
```
Hey touch typists, periodically look at your keyboard to check if it has turned into a nightmare cyber-insect.
Coding with expensive APIs
- I'm afraid to run an integration tests
- Cost logger essential
- pytest-network (disabled network in tests) now essential
- dry-run feature now essential
- API fake object is application code, not test support code
- Infinite loops are now infinitely expensive
- Halting problem is now a real problem with a dollar cost.
- Even a few cache hits pays off.
While it is probably hard to prove any program will stop, a simple python decorator that counts invocations and exits the program when the API call count goes over 9000 should guarantee that our particular program will stop. I mean ```print("hello world")``` is going to stop.
♡ 0 ↻ 0Thoughts brought to you by a $5 GPT4 bill. (One run of my program on a 35 file workload)
♡ 2 ↻ 0
Epiphany: Opensouce licenses w/o big $$$.
- Socially enforced. If you violate terms, people pack up their toys, leave and stop participating.
- No $ involved.
- Terms of license have folk-law, real law may be irrelevant.
Opensource with $$$$ involved
-Legally enforced by court/or lawyers negotiating what they think court would do
-Only people with $$ to hire a lawyer can actually enforce rights
-Real world law actually matters
-Unpredictable how folk law in text will be treated by legal system
META: People are cross posting to all the twitters, I got an idea for using LLMs to setup parallel accounts in my favorite foreign languages and use LLMs to cross post translations to those accounts (and use google translate/llms) to interaction, not just to create some lifeless mirrors.
I'd need a custom masto client to pull it off. Welp, back to launching projects, these repos aren't going to create themselves.
IDEA: I'll just switch to using `fakeredis` in production. How hard can key-value pair lookups be.
- ♡ 0 ↻ 0
And if I completely switch over to `moto` in production can save a ton on AWS bills.
♡ 2 ↻ 0
Bumping my Shutdown playlist to the top of my feed, but it is too late for a government #shutdown party. Have to wait to tomorrow.
Me: Bot write me some unit tests.
Bot: <writes unit test for the code as if it didn't have a bug> <writes unit test as if it has already been refactored to be unit testable>
Me: <looks back at log... bot didn't even verbalize this in the prologue> Freaky.
@neurobashing Ah yes, as Holmes said, "When you have eliminated nothing, then whatever possibilities remain, however innumerable, however improbable, must contain the truth."
Trivia Pursuit double black diamond difficulty question:
Explain the difference between **any**, Any and ANY
We got THREE, common, distinct things named Any that vary only by case.