souperk

joined 2 years ago
[–] [email protected] 2 points 2 years ago* (last edited 2 years ago) (1 children)

It's a wild guess, but try to disable Bluetooth or WiFi before suspending.

It's doesn't happen with all hardware, but it is a knowing issue.

[–] [email protected] 11 points 2 years ago* (last edited 2 years ago)

Which is a trait of whaaaat diagnosis?

This one got me rolling 🀣🀣🀣

Yesterday, I talked with my psychiatrist about a possible autism diagnosis. We reached a conclusion that even though they don't think I qualify for an autism diagnosis, it's possible that once I get ADHD in check, which is much more prevalent, autism symptoms are going to be more visible and we can re-evaluate then. Also, we agreed that diagnosis or not, trying to find accommodations for my needs is a net positive.

It's not the best possible outcome, nor do I think the doctor is properly equipped to recognise autistic people. But, I appreciate them being open minded. I am not going to doubt my self diagnosis, it provides me with (1) motivation to keep on researching and (2) a framework to think things through. Ultimately, I may be wrong, but I don't think it matters right now.

[–] [email protected] 2 points 2 years ago

A good place to start is the owasp cheat sheet. They provide up-to-date, high value information about software security, I wish there was a resource like this when I started learning about security.

Even though, I have a decent background in software security, it's hard to decide on an encryption schema that's both safe and easy to use. My goal is to increase the number of components an attacker has to compromise in order to get access to the data.

[–] [email protected] 2 points 2 years ago (1 children)

twelve factor app

Great resource!

Write database migrations in both directions so people can downgrade on failures.

Good point. Personally, I take backups before upgrades and restore if anything goes wrong. But, I understand how downgrading sometimes is just easier.

I have trouble coming up with a migration procedure that makes sense to me. I have the following in mind:

  1. Provide init scripts that produce a schema that matches beginning state of the current major.
  2. Provide major to major migration scripts.
  3. For every major, provide minor to minor migration scripts.
  4. Schema changes require at least a minor release.

Make it possible to configure your system via ENV variables, ENV files and config files.

I am bit worried about this one, environment variables can be a security concern. Specifically, I am not sure if I should allow providing secrets (like db connection strings) through environment variables. I am inclined to let people do what they want to, but issue a warning.

Make it possible to disable authentication to add Authelia or LDAP through the webserver. Make clear that this is only to be used for external authentication.

I am considering adding support for oauth through keycloak. My assumption is that if you are going to host your own LDAP, you can probably configure keycloak too. Do you think that makes sense?

Make it possible to run multiple parallel instances of your software without affecting the database consistency, e.g. for high availability or horizontal scaling.

Ideally, an instance shouldn't be big enough to need it. I know, famous last words, but in my case I think it's a bad problem to have. I am going out of scope, but I am wondering where is the line between discouraging large scale deployments and designing something pre-destined to obscurity.

Telemetry

Not even on my radar, thanks for bringing it into my attention πŸ™

[–] [email protected] 2 points 2 years ago (1 children)

Great point, I always consider dependencies from a security perspective, but for management/setup sometimes I am like "the devops are going to figure it out"...

To clarify, would an example be supporting sqlite, so people won't have to deploy postgres unless they need to?

My plan is to offer a docker-compose configuration people can tinker with. I had the mindset that whatever happens in the container stays in the container, but your comment made me realize I should be mindful of other installation methods. Thanks πŸ™

[–] [email protected] 1 points 2 years ago* (last edited 2 years ago)

Religions can be fun, interesting, and educating. Why limit yourself to only one?

Many atheists have a strong understanding of many religions. IMO eastern religions like Buddhism and Hinduism provide a much healthier outlook of life. Their stories can be interesting as fuck, and their events are simply beautiful.

The main problem is with Christianity and the Catholic church, looking things through the spectrum of good or evil, is manipulative at best, if not downright evil (pun intended)...

Also, and I cannot stress this enough, aren't these the same guys (specifically men) that banned abortion? The people hurting millions of women in America as we speak right now. Not to touch on how they are planning to ban gay marriage...

If you had fun at church, go to a Satanic Temple party, I guarantee it's going to be much more fun!!

Last but not least, you minimize other people's experiences, it's not healthy... Try asking more open ended questions without being critical of other people or making assumptions. Be open minded like an atheist, not judgy and condescending like a priest.

[–] [email protected] 2 points 2 years ago* (last edited 2 years ago)

Reminds of a recent Philosophy Tube video: https://youtu.be/2lHNkUjR9nM?si=a9WbUKAV5u1A94kt

[–] [email protected] 2 points 2 years ago (1 children)
[–] [email protected] 12 points 2 years ago* (last edited 2 years ago)

WOW! https://github.com/modularml/mojo

Been looking for something like this, thanks a lot!!!!

Edit: Had a quick look at the docs. Mojo's initial build was published Sep2022, it's fairly young, but seems to be getting a lot of attention (on GitHub they have the same number of stars as mypy 🀯).

For anyone interested, their roadmap is an interested read. They seem to be taking a step-by-step approach, trying first to nail down core features first before moving to stuff like python inter-op and syntactic sugar.

Mojo still doesn’t support classes, the primary thing Python programmers use pervasively! This isn’t because we hate dynamism - quite the opposite. It is because we need to get the core language semantics nailed down before adding them. We expect to provide full support for all the dynamic features in Python classes, and want the right framework to hang that off of.

The "why mojo" section give a lot of background too. They are implementing an ML-IR compiler, which is really promising for optimization (think all the goodies we could use from LLVM).

[–] [email protected] 11 points 2 years ago (3 children)

My name is kostas, I was 6 years old, and I didn't know how super was spelled.

20 years I wear that spelling mistake as a badge of honour!

[–] [email protected] 1 points 2 years ago* (last edited 2 years ago) (3 children)

proud user of jerboa and eternity, they have their issues of course, but nothing beats the dopamine rush of getting a bugfix for something you reported!!!

Edit: In an attempt to make a joke, I exaggerated the impact of issues with jerboa/eternity, I decided to rephrase. I love the apps and the people creating them, their efforts is highly appreciated and I dream one day that such effort would economically viable.

[–] [email protected] 3 points 2 years ago (1 children)

TIL https://en.m.wikipedia.org/wiki/Hari_Seldon

Seldon develops psychohistory, an algorithmic science that allows him to predict the future in probabilistic terms. On the basis of his psychohistory he is able to predict the eventual fall of the Galactic Empire and to develop a means to shorten the millennia of chaos to follow. The significance of his discoveries lies behind his nickname "Raven" Seldon.

view more: β€Ή prev next β€Ί