Recent submissions

Comment · 6 months ago
Comment · 1 year ago
To access a private CodeArtifact repository, you have to first fetch a short-lived token, then supply that as the password when you access it via npm/yarn, poetry, etc. In most cases, this is an inconvenience that can mostly be paved over with the AWS CLI or a shell alias.

This quickly get messy though. We use AWS CDK and build our assets in a Docker container. Each time the token changes, Docker invalidates a bunch of layers and rebuilds the image. AWS CDK sees that and uploads a new .zip to S3 or an image to ECR. Then Security Hub sees a new Lambda function or image, scans it, and carpet bombs my email whenever a CVE is found.

It's ... not ideal.

Comment · 1 year ago
At my job, we use AWS CodeArtifact to host a couple dozen internal libraries we use for Python and TypeScript projects. I suspect that this is a common use case for these kinds of artifact repositories.
Comment · 1 year ago
Comment · 2 years ago
Comment · 2 years ago
Another option would be to detect and/or normalize Unicode input using the recommendations from the Unicode consortium.

https://www.unicode.org/reports/tr39/

Here's the relevant bit from the doc:

> For an input string X, define skeleton(X) to be the following transformation on the string:

    Convert X to NFD format, as described in [UAX15].
    Remove any characters in X that have the property Default_Ignorable_Code_Point.
    Concatenate the prototypes for each character in X according to the specified data, producing a string of exemplar characters.
    Reapply NFD.
The strings X and Y are defined to be confusable if and only if skeleton(X) = skeleton(Y). This is abbreviated as X ≅ Y.

This is obviously talking about comparing two string to see if they are "confusable" but if you just run the skeleton function on a string, you get a "normalize" version of it.

Comment · 3 years ago
If you are asking why the study isn't covering a period of time including winter, it's because the study goes for a full year and this is only a report at the half way point.

> On Tuesday, the group released data on the halfway mark of the pilot program, showing that rates of homelessness and food insecurity decreased, while shelter and employment rates increased over the past six months.

Comment · 3 years ago
Have I lost my marbles? It doesn't work?

    (temp5)   ~/temp5 pip install .            
    ERROR: Directory '.' is not installable. Neither 'setup.py' nor 'pyproject.toml' found.
Comment · 3 years ago
While at a conference last year, I got COVID. My hotel refused to extend my stay, and wanted me to take an ambulance ride to another "COVID quarantine" hotel. I had a bad fever, was far away from my home and family, and didn't know what to do.

I had deleted all my social media accounts years ago, but on a whim, I created a new Twitter account and posted @ the hotel and the conference organizers, asking for help. Within 30 minutes, my hotel stay was extended and I was able to fly home five days later.

I wanted to share this story because I wanted to bring some positive perspective to the discussion about these platforms. I don't know if a government-built social media platform is a good idea, but I think there's merit to a discussion of a "public utility".

Comment · 3 years ago
Migration was a complete nightmare for me. I had a couple of accounts for myself and kids. I used Gmail "plus addressing" for all the accounts. MS actively prevents creating accounts using email "plus addressing" so I had to go through the nightmare of creating several MS accounts and migrate each Mojang account. Every step of the process was painful and slow. And that was just the account setup part. Then I had to create user accounts on their Windows 11 machine and fight with the account linking there. Several hours, and an absurd amount of cursing, later, it was done. Never again. I'll just make my kids play on their Switch if anything goes wrong on the future.
Comment · 4 years ago
> he's the only recent president who didn't start a new war

Not for a lack of trying. The assassination of Qasem Soleimani was authorized by Trump and led to several direct attacks on each other and only stopped after Iran accidentally shot down a commercial passenger plane originating from their own country.

Comment · 4 years ago
Reminds me of the Venmo scam I encountered a month ago. Some person I don't know sent me $50, then tried to send me a request for $50, but accidentally sent me another $50. I'm confident this was a scam, so I sent a support request to Venmo and let them deal with it. It was pretty frustrating that I was never prompted to accept the funds. Is this standard practice with many of these "send money" applications?
Comment · 4 years ago
I was incorrect in that assertion. Abortion was not codified until Roe v. Wade.
Comment · 4 years ago
The question was not about the most recent finding of the SCOTUS. The question was, why wasn't abortion codified into law since Roe v. Wade.
Comment · 4 years ago

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton