I think you could make a 50/50 decision at the CEO level for most decisions, and merely by making a decision faster the org would have better profit outcomes.
It is a table stakes missing feature.. for a long time. Clown seems appropriate, every project I've worked on in github we end up copying a github yml action to allow us to do this with one comment '/fast-forward', just is silly at this point that github doesn't natively support it.
It's everything you mention in the second paragraph, and additionally just the ability to turn them off.
Imagine everyone had their routers disabled simultaneously. I don't know if the cell networks could function with the surge in standard traffic that would happen, and then you've effectively plunged all or part of the country into a communication blackout.
I think "turn it off permanently by bricking it" is almost as bad as "leverage for DDoS".
I worked on Bot Mitigation at Amazon, and we once saw a ton of traffic that was heavily distributed amongst consumer devices world-wide, but surprisingly in the US too. We suspected compromised routers that were using the home page as a health check. There was a lot of investigation I did, and the short realization after talking with the network engineers is that the amount of traffic, and distribution of sources, would be impossible to stop. There merely isn't enough bandwidth in the world to stop so many residential device if it hits a specific target. To be clear, this was coming from less than half of active Amazon customers, not everyone in the US.
Anyway, it wasn't routers, but it was a consumer device, and it wasn't nefarious, it was incompetence (in code), as usual.
>Imagine everyone had their routers disabled simultaneously. I don't know if the cell networks could function with the surge in standard traffic that would happen, and then you've effectively plunged all or part of the country into a communication blackout.
IME cell networks definitely can't cope with a loss of all routers in an area, given how mobile data becomes basically unusable when there's a power outage. That said, "everyone had their routers disabled" is probably not realistic, given that there are plenty of non-chinese router vendors.
Isn't the issue that a lot of these devices have vulnerabilities and aren't updated often enough, rather than the device being of Chinese origin? You look at hardware for the home market, and most haven't received an update in years, if not a decade. Widely deployed hardware with out of date software seems like it's just a script to crawl home IP address spaces, like a Metasploit module, no?
Maybe I'm misunderstanding the link to Chinese vs. non-Chinese router vendors?
If you went to 100k/year and still a solo dev, that's just 0.12% of your ARR. The percentages here are meaningless; $10/month should be doable for anyone that wants to run a business, even someone solo.
This probably refers to the fact that Windows XP still has support contracts. Microsoft commonly calls their software EOL and then supports it for 5+ years. I don't think that's a bad thing, but they tend to use it more as a marketing term than a true hard line where security fixes stop going out.
Also, If I remember correctly, the originally announced end of life for Windows XP was extended because too many people were still running it when the date came. (I think they even extended it more than once)
Hmmm I've recently been evaluating https://www.kysely.dev after finding that Prisma can't support foreign data warehousing (FDW) with Postgres.
I don't really know enough about Kysely yet to make an informed opinion between those two. If you know more than me, can you give me your take??
Edit: Hmmm perhaps based on the primary author's other repos (https://github.com/mythz) it looks like they're a fan of C#. Perhaps it's the LINQ-like syntax that separates them the most.
Right, it's effectively a spiritual port of our C# LINQ OrmLite library [1].
I've been using a lot of bun:sqlite [2] lately which has an amazing DX and lets you create lots of stand-alone .ts scripts (i.e. without deps) to access SQLite DB's. The only issue is that I didn't want all my SQL queries to be coupled to a single driver, so I created litdb to provide a RDBMS-agnostic API + Query Builders so all my queries could easily be run on different DBs.
TypeScript has an amazingly powerful type system which let me build the ideal abstraction I wanted where I could use expressive SQL Expressions but still have typed references to our App's classes (tables) / properties (columns) to benefit from static analysis/intelli-sense during development whilst making it safe to refactor / find references / etc.
Things that are hard/impossible in C# is easy in TypeScript, e.g. the QueryBuilders lets you have a variable number of generic args which isn't possible in C# also it was much easier to support composable queries [3] than trying to combine multiple LINQ queries with shared references.
Have you looked at FolioHD? It's geared towards photographers and artistic types that want a really nice portfolio website.
Paying an amount that is just-above-market-rate for a domain and not needing to understand how to configure DNS for someone non-technical seems like an absolutely worth-while reseller case.
If you want to be an artist then control of your intellectual property is probably a topic you care a great deal about.
Your domain and how people reach you is probably the first lever. If you are giving that up happily, I assume renting without the option to own or leasing a car is a sensible business model to you and you are just experimenting without any real intention of starting.
The effort and time in becoming an artist outweighs by at least two or three orders of magnitude the time it would take to read an article and setup a domain. Namecheap, GoDaddy, all these registrar's do it for you.
Imagine having 900 houses and renting them out to a community of like minded folks.
Whether it is at cost or slightly above, it is "rent seeking" in the sense they own, you borrow.
From my *personal* experience, the target audience, to a large degree, doesn't care at all about owning domains, websites or servers. They want something that just works and the less they have to deal with technology, the better. In that sense, a reasonable and ethical service where you own nothing is much better than one that preys on you and you still own nothing.
People want the thing whose functioning they are largely ignorant of to just be solved by someone else already, news at eleven.
It is, I feel, the responsibility of those who do know how these things work (e.g. us) to point out which things are important and which are safely dumped onto someone else. In this case, one’s identity on the ’net is very important, and something one should absolutely not put into position to be held for ransom later by being bundled with other services.
Do rent a hosting service, absolutely. (Do not trust it to hold the only copy of your data or metadata or social graph, but that’s usually something photographers understand implicitly, unlike e.g. writers.) Website hosting, DNS hosting, autoupload, social crossposts, whatever, buy all of that stuff as a bundle if you want—your risk threshold for redoing all of that after a hostile acquisition of your hoster is your own. But do not, under any circumstances, let them hold your identity at the same time. On the ’net, that’s your domain registration.
You own the domain. You can take it and they can't withhold it.
The registrar is already doing what this site is doing. I don't have a problem with a site making it easy to setup. It's the site holding a thousand website domains.
What you are asking for is different.
If FolioHD said:
Have a domain in mind that you'd like to use? Type it here and we'll do all the work setting that up.
What they are actually doing is:
We've bought these 900~ domains and we are holding them. Pick one you'd like and we'll set it up.
Hear hear. Everyone arguing against this seems to want the permanent, forever solution. There isn't one. This isn't software - it's reducing harm over time as best we can, and it's a fight that will take approximately the rest of human time.
The argument that we created a bioweapon is like... and? We also have nerve agents and gas and nukes. It's like everyone posting here exists in some other reality where they never talked to another human in a grocery store. We all get along as best we can.
i would pay so much money to never hear another one of the trite reddit retorts around russian bots as soon as someone hears something they disagree with
It's odd when certain topics - vaccines being one of them - come in with a flurry of comments when it isn't even highly upvoted. Especially when you have some drivel as the top comment saying Gates flew on the "lolita express" and some link to Prince Phillip. Ooookay? What about the article?
i don't disagree that bots/bad actors are a problem. but it's futile to call everyone a bot since it shuts down literally all discussion. at this point just accept that the internet is the wild west and act with discretion. it helps when you dissect an idea based only on the idea and not the operator behind it. that's how i've changed my internet usage and it's helped immensely. most of the time it's obvious since bots are dumb or generally made by dumb people. but the smarter more intricate bad actors that argue in bad faith in lieu of being paid or what have you, you'll simply never tell apart since they're just humans. at that point all you have left is your wits and i prefer to train my wits on all kinds of ideas thrown my way and accept the fact that there are a lot of types of opinions in the US (where i live) and that it doesn't mean the person making a point of contention is a bot.
Strong agree. I'll tell you the other reason not cited: it slows down organizations. Doing things right to avoid the (seemingly) small chance at being massively wrong is the inverse of the bet that doing many different things quickly has a small chance at a massive payout.
Let's say I'm an executive and I think there's a 1% chance of a breach that costs me 100x and a 1% chance of a 100x payout on every project.
I have 2 projects that each make $X. Let's say $X is $1000.
1 project will go from $X to $X/100 based on breach, so it's now worth $10.
1 project will go from $X to $X*100. It's now worth $100,000.
I went from making $2000 to $99,990.
This goes back to the argument about fines. They aren't NEARLY severe enough. If I'm an executive at a big company, I may enforce greater security on the "cash cow" projects (e.g. ad revenue and GSuite at Google [but not the Pixel or GCloud], AWS and Retail at Amazon [but not Alexa, Kindle, etc]) but the rest? I need to get ANOTHER cash cow. If my service that's only netting me $1M/year goes to $0, and I needed a service that would make $1B, I literally do not care.
If adding in-depth security to the $1M/year project makes delivery 2x slower, I've now spent 2x on something that probably wasn't even worth it. This is a game of stats; businesses and features as cattle not pets. I'd rather have 2 projects and another dice roll than 1 project that's just "meh".
That's not how I operate, but if you're playing this game as an executive, that's the most logical outcome.
reply