Wait, what? I don’t think I’ve ever heard of these being called “punched cards” before!

(From this nice look back at the history of the OEIS from the creator: http://neilsloane.com/doc/HIS50.pdf_

These generated images for “Jodorowsy’s Tron” are gorgeous.

https://www.nytimes.com/interactive/2023/01/13/opinion/jodorowsky-dune-ai-tron.html

So You Want to Solve Python Packaging: A Practical Guide

First, the technical: Python is used by vastly different groups of people, some that don't identify as "developers". Those groups often have disparate expectations about how packaging should work. Some don't even know what a package is.

TWTR turning off APIs for power user apps breaks the NIGHT CLUB RULE:

Every night club in the world does the same thing: lets some beautiful young things skip the queue and get in the door to make it seem like THE PLACE. They don’t spend a lot, they aren’t walking ATMs. THEY ARE PRODUCING THE VALUE THOUGH.

TWTR is looking at ads as the value, but it's the CONTENT that's the value. Produced by power users.

TWTR is now going to be the equivalent of a disco filled with just gross old dudes.

The existence of an AI-generated TRON-Jodorowsky mashup implies the existence of an army of lawyers collecting data on how many Disney properties are included in these AI training data sets and explicitly classified as known Disney properties.

There’s a lot of talk right now about the transition from “pandemic” to “endemic” phase of covid-19. This makes it sound as if there’s some reduction in severity, because “pandemic” sounds scary and “endemic” is just a normal thing, something expected. But that’s literally the difference. There’s no threshold of reduction in virulence or disease burden that we’re crossing, we’re just literally getting used to it. Endemic just means “this is the level of constant carnage we expect”

Hong Kong.
The sidewalk is built of bricks.
Banyan tree. Its roots grow along bricks.

#thicktrunktuesday #tree #roots #hongkong

Honestly, I actually like YAML, as opposed to pretty much all my peers, but this ain’t wrong: https://ruudvanasseldonk.com/2023/01/11/the-yaml-document-from-hell

CircleCI published an incident report on their recent breach, and it's super interesting! https://circleci.com/blog/jan-4-2023-incident-report/

The attacker avoided 2FA by infecting a user's machine, waiting for them to auth, and then just copying their session cookie to another computer where they could use it with no local monitoring. Either of two things could have prevented this:

1) Access to sensitive resources could be restricted to trusted machines
2) The cookie could have been tied to a hardware key on the machine

I don't know who needs to hear this but

The postal service exists to deliver letters and parcels to people
Not to make money for shareholders

The transport system exists to move people to where they need to go
Not to make money for shareholders

The water, gas, and electricity supplies exist to provide people vital utilities
Not to make money for shareholders

The healthcare system exists to ensure (and that's ENsure, not INsure) the health of the population
Not to make money for shareholders

Shareholders in vital public services are a vampiric drain on those services

Capitalism is a disease

I think #poetry gives some bad advice on #python dependency pins: https://python-poetry.org/docs/faq/#why-are-unbound-version-constraints-a-bad-idea

Pessimistic pins like this plunge your consumers into dependency hell when packages update to consume fresh versions of their shared dependencies at different rates. If package Foo needs a new feature from click 8, and package Bar says "well, I work with click 7, better not try click 8" and never releases again, I'm hosed, even if Bar works fine with new click.

Your users should rely on CI, not #semver.

learning #rust from experienced devs

I wonder how mandating that employees be paid out (retirement funds, etc) before investors in cases of bankruptcy would change the risk profiles for investors. Likely for the better, I’d assume, as far as pressure to be well-run and prudently managed goes.

here’s your reminder that if a meeting ends early, you dont have to use that time to do other work. take that time for yourself.

you assessed what you would be able to accomplish that day based on your calendar and had come to terms with that already.

go take a walk. pet your animals. read. catch up with a friend. do something that brings you joy during those few minutes.

#WorkLifeBalance #Work #RemoteWork #SelfCare #TakeCareOfYourself #Meeting

Another example of how “readability” is too vague a term to really be useful: https://lwn.net/Articles/918058/

Kind of wild to see seemingly every JS library moving more towards “negative” opinion in State of JS 2022. https://2022.stateofjs.com/en-US/libraries/#tools_arrows

The problem with naming your company this, is that when you do a layoff, it sounds like the reporter is doing jokey Shakespeare voice at a really inappropriate time. Forsooth!

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

I just realized that my expanded character limit on Mastodon would allow me to PGP clearsign every one of my posts, thus becoming the Most Powerful GNU+Linux Guy ever
-----BEGIN PGP SIGNATURE-----
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=kNAk
-----END PGP SIGNATURE-----

Those who've worked with me will know I try and hire well - high empathy, low ego, humble folks who are dedicated to continuous learning.

Like many, we're in the tough position at #Delving of doing some layoffs this week to extend runway - which means some of the finest engineers and designers I've worked with are looking for their next thing.

They're based in Canada (Ottawa and Victoria), and a mix of staff-level and early-career-level full-stack talent. DM me for intros; boosts appreciated.

#software #startups #layoffs

thinking about the @ sign

historically the @ sign was used to separate the username from the name of the server, but when it was adopted by twitter, it moved to the front of the username, because twitter had a baked in (wrong) assumption that there would only ever be one server that mattered

mastodon took the @ notation from twitter and instead of moving the @ sign, introduced a separate @ sign which served the original purpose of separating the user from the server name, and gotosocial of course followed that, tho as far as I can tell activitypub itself does not use @ anywhere in the user identifiers

github took the @ sign from twitter and kept the "there's only one server which could ever matter because we're a monopoly and intend to keep things that way" idea, but then gitlab took it from them but didn't keep the "only one server ever matters" part which is ... awkward