I joined a startup with a product in production for a dozen or so major customers (US universities), public facing, with a slick new front and backend the team had been working hard on. I brought along a young engineer friend who had a pet interest in pentesting, so his first task before getting up speed as a dev was a security review.
He and I sat down on day one to poke around, mainly to get oriented, not expecting much l. Popped up Chrome's devtool network panel, refreshed the login page.
One of the first XHR rows was to an endpoint named “getKeys”
The return object was the root keys for the AWS prod account.
This crap is incredibly common. Maybe not that egregious, but close enough.
After months of suffering with this, with an out warranty 15" MBP 2016 that was relegated to desk duty with an external keyboard, I heard about this program. I made an Apple Store appointment for the next day (a Tuesday); they checked it, warned me it could be a week or more because of a holiday that week. Thursday morning I had a call that it was ready. Total cost: $0 (according to the invoice the parts were over $800, including a mainboard replacement to fix a loose USB-C port). It was a basically new machine when I got it back.
I'm still sore over this kbd design, but its otherwise been a good laptop and their no-questions-asked handling of it was great.
Loretta Lynch faced extensive questioning in the Senate and long, contentious hearings about her background and clientele during a nearly six month nomination process. She was heavily vetted by both parties and eventually gained enough votes to move forward, including by McConnell and Graham. Yes, she was vetted publicly. No, this acting AG has not been. Not for a moment, which is why the free press is so important in an appointment like this.
Unless I misunderstand you, that’s an absurd overstatement at best.
My wife is a somm as are many of our friends. I joined in on many of their study sessions as each of them went through various phases of their certifications.
Granted I’m lucky to tell a Pinot from a Chardonnay, but watching trained Simms do blinds is impressive. It’s a mix of a very specific process - they work from “the grid”, picking apart specific properties of a taste one bit st a time - as well as incredible amount of practical knowledge that comes from tasting an absurd amount.
It’s another thing to say that tastes don’t necessarily correlate with price - any honest somm will tell you that. But anyone with a reasonable amount of experience can tell a $5 bottle of Cupcake or a two buck Chuck and something less industrial.
I know there’s a lot of excitement for lab made - it’ll rightly be seen as just another technique eventually.
My current Macbook Pro is probably the first bit of Apple hardware in two decades that's made me actively consider alternatives. It's been the one laptop - premium at that - from Apple which I've had continual frustrations with compared to its predecessor, for all the reasons listed above.
I love USB-C, but not for power. Already, two of my ports are loose. I've never had that on any previous Apple power connector. MagSafe was a brilliant solution to real problems, and just dropping it without a superior alternative is not at all what I expect from Apple.
I also like the universality of USB-C, but it's not like Apple didn't opt to keep one legacy port for usability reasons - that little headphone port. SD and HDMI would have been enough.
And yes, the keyboard is terrible. For a machine I spend all day on, designed for pros, its a disappointment. Like most people here, it always takes me a little time to adapt to a new keyboard; unlike in the past, after more than a year I still loathe this one.
Perhaps the only thing that doesn't bring out my inner rage is the Touchbar. I'm largely ambivalent about it - the lack of esc/f-keys was annoying for a few days but I adapted. Obviously, others disagree, but on this list its the one choice I could have found a way to rationalize.
I'm surprised no one has noted the copyright is to Design Science - this is a small company in my hometown who are still around. I've spoken with their CEO a few times and I wouldn't be at all surprised if the source code was lost, or somehow at least wasn't being made available to Microsoft (I doubt it ever was). It's a really old school shop who seems to have largely been coasting on the licensing of this one component for the past couple decades and I wouldn't at all be shocked to find they no longer are capable of maintaining it themselves.
The main census is only every ten years, but there are other datasets updates more often, as well as extrapolated data. The issue for me wasn’t data being out of date, it’s just that the structure and content is fairly arcane if you’re not well versed in census - I assume much of the structure has been carried forward over the decades as there’s an obvious need to make sure data is comparable across different census.
I've worked with this API a fair bit since early 2016, and it's been around longer. I've got no real complaints about the API, just want to note that the data itself is.. arcane.. it'll take a bit of study and research to get up to speed on even a small subset of what's available.
Indeed, I was responding to your "pick Florida" by citing statewide statistics. But Melbourne is, itself, significantly worse than average nationwide, and in fact higher than the Florida state average.
Florida is hardly a state with almost no crime; on a per capita basis it ranks well within the top ten, usually close to #5. Miami, Jacksonville, St. Petersburg, and Tampa all have higher violent crime per capita than, for instance, New York, Seattle, Portland, and San Jose.
Don't combine the two; outsource your email hosting (Google, etc) to save a lot of pain, and select your Django hosting from a large range of options, from Digital Ocean to Heroku to AWS.
No technical reason these two need to be hosted together, and the market has definitely not favored putting all these eggs in one provider.
Seems to me like POSIX compatibility is actually a cheap pass that gives you access to a huge software environment. Right on the homepage they mention already having packages for Python, Ruby, Git, Lua, and Node... would that, and thousands of other packages, be feasible without a workable POSIX layer?
I've been using lambda lately and perhaps 5% of the code in my Lambdas is AWS-specific; the vast majority was rapidly extracted from existing projects, wrapped in a simple Lambda interface, and done.
While I don't advocate Lambda for everything, there's almost nothing there to lock you in - its a simple function that accepts two parameters. Even coupled with API Gateway, its just moving my routes definition to a slightly different layer. I could easily port any of this work back to any common Web framework with almost zero effort. I won't, because Lambda solves actual problems for me now.
Being a CTO and being a contractor seem like mutually exclusive conditions, at least where I'm from (California). It's not B&W entirely, but it's far more likely than not (at least here) that you should be an employee with that title.
He and I sat down on day one to poke around, mainly to get oriented, not expecting much l. Popped up Chrome's devtool network panel, refreshed the login page.
One of the first XHR rows was to an endpoint named “getKeys”
The return object was the root keys for the AWS prod account.
This crap is incredibly common. Maybe not that egregious, but close enough.