jwl

Yes, I don't think I have ever seen a premature optimisation actually ending up being beneficial when the time came to add new features to the project.

At the end of the day, every team still needs at least one senior team lead who can decide "we do it like this" and move on. Or else you get stuck forever in which db technology is the right choice for the project.

Exposure doesn't pay many bills.

I have heard several guided meditations having an instruction like "let your mind do whatever it wants to do". Surprisingly it works very well to let the mind do nothing.

I often try to remind myself that it is better to start somewhere, than nowhere. Just getting started is often halfway done. Even though it might turn out that you could have started somewhere else which in hindsight would have been a better approach, it is still better than nothing.

If we make a crude risk assessment, it is way more likely that her account will be randomly hacked by a botnet if she has "kitten4" as a password than someone actively stealing her purse to get her passwords. And if the notebook with passwords was stolen/lost, she would at least know it and be able to take preventive measures.

For most people, writing (good and unique) passwords down in a notepad is a way more secure system than having the same bad password for every account.

While working from home can be nice and more productive if you have some well defined task that needs to be done, I still feel I need the daily social interaction with my coworkers. Slack and Skype is just not enough. I would get depressed if I worked alone from home every day.

You got to consider your most likely risk for attack. Targeted or at random by a botnet? For example, you are most likely more secure in practice by writing your own website than using Wordpress, simply because you are more likely to get hit by a botnet targeting every Wordpress site than someone going directly for you.

Yes, but are hackers going after common used libraries to get more vulnerable systems to attack or are they going to spend time on some unknown homebuilt crypto? In some cases, security through obscurity works well in practice.

But then again, we still got Heartbleed.

I can see some logic behind number 3 of having your password in the clipboard. It could lead to users pasting their password somewhere else where it was not intended. However, if you have malware on your machine that can read your clipboard, it can also simply read your keystrokes anyway.

> However lately Netflix' content simply seems to lack substance to me. It feels as if it's just the superficial result of throwing a promising combination of those very specific tags/categories the services is famous for onto the assembly line and ending up with a show or film that, while ticking all the boxes and not being bad at all, is still pretty far off the masterpieces of the medium.

That is very much the feeling I got from Stranger Things. It is solid in almost every way, but it also felt like it was written to maximize variables and checkboxes from a user survey. Add characters, references and stylistic choices to get the most 80's nostalgic feeling in the viewer as possible.

Gaming Googles image search is a popular activity on some subreddits. Basically telling people to upvote a picture of something with a misleading title. Like if you search for images of "gaming console", a picture of a potato will appear. It is very clear that their "AI" is not that clever yet.

> In practice though, even the smallest toy project will pull out hundred tiny dependencies.

I had a problem with running out of inodes on my server because of the massive number of files that end up in node_modules for even a smallish project.