I'm not ashamed to admit that sometimes I miss PHP.
Over 20 years later, and still nobody's even come _close_ to PHP's ease of deployment.
This tweet brought to you by the 3 programming languages and 5 Docker images I need just to run one app.
Turns out having what I thought was a mild opinion about web app deployment was an invitation for people to yell at me, assume I'm stupid, or sell me thier Next Great Thing.
Ugh.
The thing that boggles my mind is how people just assume no nuance whatsoever. Most replies seem to think that I don't get that there are good reasons things got more complex, or that I don't know there are downsides to yolo editing in production, or etc.
Like, I can miss a thing and also understand why we've moved on. And the new thing can be worse in ways and still worth using.
Are so many people really incapable of understanding nuanced thought? Or is there something about Twitter that affords such binary thinking?
This is what I'm taking about. Who does this, and why?
After this nudge from Simon, I've been giving writing with Copilot on a try for a bit over a week. I agree with his conclusion: I do feel like I'm mildly more productive. 10% seems reasonable. [1/4]
I rarely if ever use exactly what Copilot suggests. Most of the time, I don't even insert the suggestion most of the time. But often when I'm not quite sure how to word my next thought, there's enough of a nuggut of what I'm aiming for to unstick my thoughts. [2/4]
One place I'm finding it works especially well is when writing lists of things. Usually if I write one or two examples, the next bullet point Copilot suggests is pretty good. Sometimes it suggests examples I hadn't even thought of! Not often, but when it does, that's neat. [3/4]
For a long time I thought 3d printers were silly - like, fun hobby, no shade, but I was skeptical of the claims they could make functional parts.
I was wrong! I use mine ALL THE TIME. Just this week, I did 3 things that I don’t know how I would have done without my printer.
Here are some things I wish I’d known about using a 3d printer for functional parts. Context: I live on a hobby farm, my projects are big and chunky. Gates, barn, tractor stuff, irrigation, and the odd diy house remodel task. (2/n)
3d modeling is a lot more approachable than it used to be - I learned autocad like 20 years ago and was scared. Modern CAD is way easier. (I use OnShape, F360 is similarly easy I think). There’s still a learning curve, but it’s not bad.
This appears to be the worst-case scenario: compromise of Heroku’s own core database. I’m afraid this is going to continue to get worse. I won’t be surprised if env vars got popped too.
What I’m going to be doing/have done:
- change my account passwords
- reset my totp second factors
- rotate all my database credentials
- rotate all ssl private keys
- invalidate and re-set-up log drains
- audit all my env vars and rotate any secrets
Overkill? Perhaps.
Unfortunately, Heroku/Salesforce’s comms here really suck, so I can’t be sure this isn’t overkill. At this point onus is on them to prove that env vars and db creds WEREN’T popped.
A lot of people in my TL are angry about open source orgs not getting invited to the WH OSS Security summit. I normally don't write about OSS any more because I get flamed, but fuck it here goes.
This anger is misdirected and based on serious misunderstandings. 🧵
First, what is this event anyway?
It's not an event where decisions get made. They're mostly about optics and politics, The people who attend — CEOs and other executives, and their Gov't counter-parties — don't do the work. Most barely understand open source or security.
These types of events _can_ be important, but really only as the very beginning of any real work. In the best case these events merely create the political top-cover for people in the trenches to do the work.
PSA: if you're in tech, know that comp is up A LOT (10% - 50%) over last year. This is most pronounced at FAANG and for Senior-plus level engineering roles, but is true to a lesser extent nearly everywhere I've looked. If you're looking, or thinking about a raise: ask for more.
If you'd like a gut check on your salary, or an offer you're looking at, or on what you might ask for: please reach out. I'm happy to share what I'm seeing, and any thoughts specific to you and your role.
To give one specific example: I know of a few people — staff-plus engineers; director-plus managers — making over $1M in total comp. These are outliers, but before 2021 I'd only heard of those much at those levels once or twice; now I know of at least a half-dozen.