tahdig · HackerTrans

il y a 7 ansdiscuss

Genuinely curious why this post was flagged.

il y a 7 ansdiscuss

My OnePlus 6T is fine as far as I can tell.

It is Android 10 but was fine in 9 also.

il y a 7 ansdiscuss

> Sure, VLC is probably not always the best for your usecase

VLC is both consistent and almost always the best media player for the platform. I especially love your Android UI/UX.

It has been my go-to player for ~14 years now, installed it on my high school desktop windows, my university linux and now work MBP and personal Android never disappointed me. Thanks for keeping up the quality work, I give you as example of good quality open-source project when the topic comes up.

Do you have any "need" for a fullstack/infra kind of person? Or any place we can see what know-how needs you have at the moment?

Would love to get involved with my limited capacity.

Also thanks for staying open source and privacy conscious.

tahdig

il y a 7 ansdiscuss

I think namecheap does not have a bad reputation, godaddy is known to be bad though(both security and customer support).

The thing is, of course people can hack your gmail or yahoo mail somehow, but when you host your own domain, you have the same attack vectors + dns hijacking and this last addition is easier to exploit with social engineering. Google atleast is virtually immune to DNS hijacking.

tahdig

il y a 7 ansdiscuss

There are too many people here advocating to host your own email in your own domain. Please be warned that it has its own risks:

By hosting your main email on a custom domain(not a provider) you open a new attack vector for identity theft. There was an article on HN just a couple weeks ago about someone getting hacked by exactly this attack form. IIRC it was godaddy having stupid verification process.

Someone can hijack your godaddy/namecheap/gandi account and point the MX DNS records of the domain to their own server and receive all your "Forgot your password? here is the link to reset!" emails

This a very bad advice unless you actually know what are the risks.

Maybe suggesting a paid email provider would be better, does anyone know of any reliable email providers that you pay for what you are getting and they are not selling your account data or block you for some reason?

tahdig

il y a 7 ansdiscuss

Be careful:

By hosting your main email on a custom domain(not a provider) you open a new attack vector for identity theft.

Someone can hijack your godaddy/namecheap/gandi account and point the MX DNS records of the domain to their own server and receive all your "Forgot your password? here is the link to reset!" emails

This a very bad advice unless you actually know what are the risks.

tahdig

il y a 7 ansdiscuss

Just for the sake of redundancy:

Python 2.7 is not getting any kind of updates including security and bugfixes.

tahdig

il y a 7 ansdiscuss

Python and Ruby although in the same category have still different mindset. It is understandable the way you think fits Ruby more.

I tried to learn ruby and was put off by all the magic, last value calculated is magically returned, the useful but cryptic method calls.

It is shorter and more implicit, I like the explicit approach more.

to give you my perspective on the points you made:

- self: more explicit, I would prefer to write it, because there is classmethod(with cls) and staticmethod(without any) params.

- spaces vs. braces: I don't hate braces, but spaces makes it more readable, less things I see(whitespace vs. {}) the less distracted my eyes are from the the characters that do the actual work, you get used to it, I like it more to be honest.

- len(string) vs. string.length: again, no preference, I am used to both.

- py 2 vs py 3: it is not never ending, I helped move a 170K Django project from Django 1.6 to Django 2.1 and python 2.7.4 to 3.6 in a span of a year, we were mainly 3 people working on it on the side, our work was not even in the sprints, 2 senior engineers + 1 really good QA & deployment engineer, it took 1 year because the platform was business critical and we incrementally fixed stuff. At this moment whoever still runs py2 either has been lazy, does not care about technical debt or their business does not value solving technical debt, so they can not allocate time to do it. This is my opinion, might be wrong, maybe there are other reasons also. But the change had to be done for the health and longterm viability of the language.

tahdig

il y a 7 ansdiscuss

I think it is about the thinking process of the person, I assume you are >35, you grew up at a time that people were think about the performance more than the readability, that was the bottleneck back then.

Now that you have bigger systems and more complex requirements and cheap high performance computing, the balance is tipped.

And because python is (almost) on the opposite side of the spectrum for your thinking process, you might have a harder time wrapping your head around why it does something in a particular way.

I think this is also true for Haskell evangelists over here also, I think they started acquiring the programming mindset through advanced math(in my experience most have PhDs) etc., so haskell fits the way they solve a problem in their head the best.

For me personally it is Python, the delay between solving a problem and having it translated to python in my head is slim. You probably feel the same way about your own favourite programming language, because it is the tool that makes you most productive with the least effort.

tahdig

il y a 7 ansdiscuss

> Masa is bailing out the Saudis.

Can you elaborate? genuinely interested to understand, isn't he investing more Saudi money in potentially doomed unicorn?

tahdig

il y a 7 ansdiscuss

Probably to inflate the valuation, do a quick IPO of WeWork for 10x the actual value it should have, get their shares sold on high price, and wave to the fools that took the bait and bought an almost worthless stock.

This whole ordeal was the best that could happen for the normal people, basically fell into the hole they themselves dug, because the economists etc. called their bullshit out loud.

If you have not already, these are good reads from one of the critics of the whole scheme:

1. WeWTF - https://www.profgalloway.com/wewtf

2. WeWTF, Part Deux - https://www.profgalloway.com/wewtf-part-deux

tahdig

il y a 7 ansdiscuss

I feel hitting Google with monopoly lawsuits without going after the others would just make it worst.

Atleast Google somehow competes with the Facebook and Amazon which in my view are "more evil".

My other concern is, big co can resist stupid stuff government agencies want, they failed on PRISM but I feel they might have a better chance next time around as employees unionise and demand the company drop supporting unethical contract such as Googles' search engine for China (Project Dragonfly) case etc.

tahdig

il y a 7 ansdiscuss

Well, good luck finding alumni as good as the ones from ETH Zürich anywhere else.

Not counting the MIT, Stanford, Harvard, UOT etc. that they have to compete with other FAANG for graduates.

tahdig

il y a 7 ansdiscuss

Would love to read more on the topic of German/French-speaking Swiss, would you mind sharing some reads you would recommend?

tahdig

il y a 7 ansdiscuss

I remember reading this post* which is very useful for comparing US and Swiss(Or European in general) work culture.

* "Living in Switzerland ruined me for America and its lousy work culture" https://www.vox.com/2015/7/21/8974435/switzerland-work-life-...

I can attest to the European side of comparison, they do value work but they also value the resting and recovering part.

tahdig

il y a 7 ansdiscuss

https://outline.com/BbAsc8

tahdig

il y a 7 ansdiscuss

Agoda seems to be owned by Booking Holdings which I think implements these kind of dark patterns most aggressively.

tahdig

il y a 7 ansdiscuss

I imagine sometime in 2030 when a 60 yo uncle/aunty sees this "38 people are looking at it", calmly right clicks on the HTML elements and sees the use of math.random and says "Nope, bye bye stupid website".

I think these tricks are closing on their end of life as percentage of internet-native people are increasing.

tahdig

il y a 7 ansdiscuss

> ... many of whom are new to Python.

well, if you ask me to write language X, I would definitely make mistakes for the first couple of weeks/months/years, that is why you need code review, mentoring and education plans for your hires.

> Here’s another thing we often find developers doing at import time: fetching configuration from a network configuration source.

  MY_CONFIG = get_config_from_network_service()

I am pretty sure this an anti-pattern, if this code passed the code review, you should make your review process more strict.

  def myview(request):
    SomeClass.id = request.GET.get("id")

> Likely you’ve already spotted the problem

Well, yes, why would you do this? why would this pass code review? why do we we have linters and other checks for dynamic languages

> It works great for smaller teams on smaller codebases that can maintain good discipline around how to use it, and we should switch to a less dynamic language.

It seems we are here blaming python for shortcomings of a monolith also, instead of chunking out specific businesses modules to separate services/micro-services.

TO be honest the strict mode seems interesting, but I believe the problems they seem to be facing can be solved by a couple of changes to their pocess and code:

- everyone gets a mentor if they are not experienced in python or django

- code review atleast by two experienced python developers(does not count if you have coded for Java for 20 years)

- teams should try to move their logic outside the monolith(it sounds like they have a monolith)

- write CI tests to measure how much time it takes to import a file, if it takes more than T(line count * LINE_PROCESSING_THRESHOLD) you have to fix your code.

- prepare config and load it before running the actual server, no network call for getting config

All in all, python is suitable for big companies also, the thing is if don't care about the best practices, you would also have problems when you are a small startup, but in a big co it would make it impossible to move forward, trick is to independent of the company size follow best practices and have code review.

comments