@evana@hachyderm.io avatar

evana

@evana@hachyderm.io

Dad, runner, software engineer. Maintainer on Knative project, principal engineer at Stacklok. Ex-Google, ex-VMware.

Author of Building Serverless Applications on Knative(https://learning.oreilly.com/library/view/building-serverless-applications/9781098142063/) by O'Reilly.

This profile is from a federated server and may be incomplete. Browse more on the original instance.

danderson, to random
@danderson@hachyderm.io avatar

How to tell your OSS is ridiculously popular: people aren't 100% sure they didn't embed it, and tack on the software equivalent of "packaged in a facility where peanuts were also present" to the license list.

This watch contains software, so statistically probably contains at least traces of curl.

evana,
@evana@hachyderm.io avatar

@danderson y'know, that worries me more than "may contain curl". You made the thing... you should know if there's curl in there or not!

evana,
@evana@hachyderm.io avatar

@IzzyOnDroid @danderson I guess I need to be more clear:

I think it's unfortunate that our tools don't automatically record what they put inside. I'm hopeful that the addition of SBOM requirements for federal contracting will help drive improvements in the tooling so that we can get the contents of our software automatically.

Right now, I'm hearing that we know everything that goes into the factory, so we assume that all of that goes into the Twinkies that come out. Including the bolts...

evana,
@evana@hachyderm.io avatar

@IzzyOnDroid no problem! The post went a little further than I expected, and I wanted to follow up with how I thought we could genuinely make software better.

danderson, to random
@danderson@hachyderm.io avatar

I find myself missing the OG docker, before all of this fractal splitting and duplication.

There was a time where if you wanted to try this containers thing, you installed docker, typed docker run whatever, and you had a container. One thing, built by one set of people, with all the pieces working together in unison, doing the thing it said on the tin.

I miss that, as I stare into the maw of podman and cri-o and containerd and runc and crun and pasta and slirp4netns and fuse-overlay and...

evana,
@evana@hachyderm.io avatar

@danderson Docker Desktop is still there.

And, given my experience the last time I tried using podman (or Lima) on a Mac, it's still a pretty good choice.

danderson, to random
@danderson@hachyderm.io avatar

Okay so installing bluefin in a VM to test drive it as a post-nixos desktop. First observation, is installation meant to be very slow? Or have I configured this VM hilariously wrong somehow? With 16 cores and 16G RAM it's been crunching through the installer very slowly indeed, when I was hoping for one of those systemd cinematic universe things where you can dd a disk image onto the disk, reboot and then systemd expands and makes filesystems and stuff and you're done?...

evana,
@evana@hachyderm.io avatar

@danderson @jorge some feedback on bluefin marketing...

evana,
@evana@hachyderm.io avatar

@danderson @jorge I meant that the feedback on getting rid of the tagline also removing the rest of the intro.

And I think "makes AI and LLM easy" is just one use-case, so maybe there's a way to include that without excluding other use cases. But I know Jorge was looking for feedback at KubeCon, so I figured I'd connect him.

jwildeboer, to random
@jwildeboer@social.wildeboer.net avatar

: Many small but important Open Source projects work without a lot of maintenance since many years. The amount of work needed simply doesn't justify a paid job for one or more maintainers. A lot of maintenance actually is unrelated to code. Answering the same questions on mailing lists/forums over and over again, dealing with spammy pull requests, handling false claims of people that want to add work (they never performed) on this project to their CV etc. I've been there. I know

evana,
@evana@hachyderm.io avatar

@Di4na @jwildeboer if it's not building and running on the target platform, I'm not sure I'd consider that "maintained". At the same time, I'll also acknowledge that C/C++ tooling makes adding a new platform much harder than a library upgrade, and a lot of software ends up with those types of dependencies.

matthew_d_green, to random
@matthew_d_green@ioc.exchange avatar

This thing Facebook did — running an MITM on Snapchat and other competitors’ TLS connections via their Onavo VPN — is so deeply messed up and evil that it completely changes my perspective on what that company is willing to do to its users.

evana,
@evana@hachyderm.io avatar

@matthew_d_green you mean as opposed to when they did experiments to see if making people angrier boosted their time spent? I'm not shocked at all.

mekkaokereke, to random
@mekkaokereke@hachyderm.io avatar

The people that vote for the Oscars, don't look like the people that watch the films. The Academy is much older, whiter, and dude-ier*. Oscar winners, are the inevitable outcome of Oscar voters.

The question isn't "Has the Academy changed enough to where filmmakers from marginalized backgrounds have the same chance to win an Oscar yet?"

The question is "Will the Oscars have the same relevance to society 10 years from now, that they do today?"

(*In 2022, 81% white, 67% men.)

evana, (edited )
@evana@hachyderm.io avatar

@mekkaokereke @vonneudeck @dascandy42 you might have missed one last "France" string while editing. This comment helped me figure it out.

> The prime minister of the DRC asked the US government for help not being bullied by France.

Is the one that got missed, I think. (Or there is caching going on in the fediverse...)

And thank you! I did not know this, but it explains a lot.

Quinnypig, to random
@Quinnypig@awscommunity.social avatar

Perhaps Google Cloud handily beat earnings estimates because unlike AWS, they don’t interrupt you with a chatbot that either lies to you or gives you answers that are irrelevant to the question when you’re browsing their website.

evana,
@evana@hachyderm.io avatar

@Quinnypig I had it happily make up that you can use RDS IAM authentication to connect using the RDS Data API. I logged a support ticket when it didn't work, and a week later the poor support person came back from the team with "no, that doesn't work, you can only use static credentials in secretsmanager to connect".

I wonder how much it's costing them in extra support...

foone, to random
@foone@digipres.club avatar

Here's a question I can't seem to find by googling:

I've got a script that runs some functions on a device while recording what happens with a webcam. I've got ffmpeg streaming off v4l2 to a MKV file.

But I want to be able to know when in the video file certain events happened: Like, I know that at real-time 3:09:26 I generated an error, but I don't know when in the video that is

evana,
@evana@hachyderm.io avatar

@foone I'm assuming that your problem is that you want to accurately set the creation_time metadata on e.g. an mp4 file, not that you're trying to read it back out: https://superuser.com/a/1497131

I'm also assuming that your recording device's time is reasonably accurate / synced to NTP.

Interestingly, it seems like phones probably get this right, so if you could control a phone, it might just work...

danderson, to random
@danderson@hachyderm.io avatar

Okay I've now written enough Elixir+Phoenix to ship something modestly spiffy, and I'm reaching the point of framework fatigue, I think. In particular, the breaking point in Phoenix is the second you have to make a form that doesn't match the shape of your data model, things suddenly get pretty unpleasant.

Not unmanageable, just... enough to make me pine for Go again, and less frame/more work.

evana,
@evana@hachyderm.io avatar

@danderson have you considered doing the transformation between form shape and database shape behind the API, rather than in the rendering/client layer?

There was at least one YouTube app transition while I was at Google where the big win was basically making the homepage load be a single denormalized API call for all the different content.

kstewart, to random
@kstewart@hachyderm.io avatar

Wasted a ton of time trying unsuccessfully to get a theme to work in Hugo.

At this point, I am debating between finding a hosted solution (and f’ing around with DNS) with a basic theme OR relearning HTML and CSS and handcrafting a site.

aint nobody got time for that GIF

evana,
@evana@hachyderm.io avatar

@kstewart Despite being written mostly in , Knative switched to the material mkdocs site generator about a year ago and found it much easier to extend when needed than Hugo.

danderson, (edited ) to random
@danderson@hachyderm.io avatar

Reading about in-cab signaling for trains, there's the usual stuff like having important signals repeated by a tone in the cabin.

Then there's a section titled "signal repetition by detonator." Hah, that's funny phrasing, I wonder what it actually means.

... no, it does actually mean signaling by detonator. For the most important signals, if you violate all the other safeties, a roadside box fires a blank cartridge to (presumably) wake the driver the fuck up. Amazing.

evana,
@evana@hachyderm.io avatar

@danderson so if you trigger the detonator signal, you'll probably get fired?

More seriously, it's interesting to see what safety commitments look like in actually industries (and how hugely they vary).

mekkaokereke, to random
@mekkaokereke@hachyderm.io avatar

🤔 See, that's why I'd never make it as a scammer. I think too small. I'd never even think to invite my sock puppet account to speak at my in-person conference. I didn't even realize that you could do that.

evana,
@evana@hachyderm.io avatar

@mekkaokereke I missed this, but it sounds hilarious. Link?

foone, to random
@foone@digipres.club avatar

I crashed my desktop so hard the reset button didn't work. That's probably not a good sign

evana,
@evana@hachyderm.io avatar

@foone Hope it does better than my Thinkpad... Opened it a week ago to a BSOD, and now it won't boot into hardware diagnostics, though I sometimes get BIOS.

mekkaokereke, to random
@mekkaokereke@hachyderm.io avatar

The people that Bernie Madoff stole from, got most of their money back. ~90% at this point. 👍🏿

https://www.justice.gov/opa/pr/justice-department-announces-total-distribution-over-4-billion-victims-madoff-ponzi-scheme#

Because Madoff stole from mostly rich, mostly white people, ultra high net worth individuals, financial institutions. US society makes sure that rich folk are made whole, have loans forgiven (Eg PPP), etc.

But the people that SBF stole from are unlikely to ever get their money back. Because they were disproportionately Black, low net worth individuals. AKA, normal people.

evana,
@evana@hachyderm.io avatar

@PaulDavisTheFirst @mekkaokereke @maggiemaybe yeah, I'd be very nervous letting SBF anywhere near the big pile of money needed to repair harms done. On the other hand, I'd love to understand what restitution looks like in this case -- it's so much easier to destroy (and then counter-destroy as "punishment") than to build.

Fortunately, there are a lot of people out here (a vast majority) who prefer to build. That doesn't prevent all harms, but it gives me hope.

lcamtuf, to random

deleted_by_author

    •
    evana,
    @evana@hachyderm.io avatar

    @lcamtuf it's amazing how hard it is to secure a system whose job it is to compile and run arbitrary code.

    BlackAzizAnansi, to random
    @BlackAzizAnansi@mas.to avatar

    Do any of y'all own a fully electric car? What has your experience been like?

    evana,
    @evana@hachyderm.io avatar

    @BlackAzizAnansi

    early Tesla Model X: what a pain! It's a huge vehicle that really just wants to be a computer. Interior space doesn't match up to the size, and repairs are expensive.

    e golf (used, 14k this year): only a city car, but it's remarkably nice and big on the inside while small on the outside. Only 70 miles range, though.

    When we have a choice, both my wife and I choose the eGolf (got it this year when it became clear that our kids activities would benefit from it).

    dpp, to random
    @dpp@mastodon.social avatar

    @interfluidity if we consider open source a commons and we see a government function in funding commons, what metrics would be appropriate for making funding allocations?

    evana,
    @evana@hachyderm.io avatar

    @interfluidity @dpp it's probably worth understanding what the goals are -- is it to produce flashy, popular software, or to sustain existing critical dependencies. I'd be concerned about awards for achieving popularity thresholds encouraging a "launch and flee" attitude. (Historically, Google's promo process heavily weighted launches, for example.)

    Personally, I'm more concerned with curating our existing investments and reducing "abandoned but ubiquitous" libraries and dependencies.

    evana,
    @evana@hachyderm.io avatar

    @dpp @interfluidity @alice_i_cecile I think @tidelift is doing some private related work in this space...

    There's also the problem with abandoned-but-popular packages that moving them under responsible ownership is somewhat isomorphic to a supply chain attack.

    evana,
    @evana@hachyderm.io avatar

    @dpp @interfluidity @alice_i_cecile @tidelift My point was not to replace pubic funding with private enterprise, only to learn from work already being done.

    evana, to random
    @evana@hachyderm.io avatar

    Magic authentication to enable publishing PyPI packages from GitHub Actions without needing any human management of auth tokens.

    Very cool talk from @yossarian

    https://openssfdayeu2023.sched.com/event/1P6Tl/trusted-publishing-lessons-from-pypi-william-woodruff-trail-of-bits

    mekkaokereke, to random
    @mekkaokereke@hachyderm.io avatar

    Happy !

    I hope to get to Black history soon, but I'm still working through white US history. There's so much of it!

    Q: Why are Black people in the US so much more likely to die in traffic accidents than white people? Are Black folk more likely to drive under the influence of alcohol or drugs (DUI)? Is it street racing? Are y'all just bad drivers?

    A: Hmm. I'm stumped! No one knows the answer to why this happens! Just kidding. It's racism. It's always racism.

    evana,
    @evana@hachyderm.io avatar

    @mekkaokereke @adam42smith I appreciate you handling it gracefully and helping correct the record, rather than quietly letting the correction languish in obscurity.

    Being willing to admit error also helps me trust the rest of it more, so you have that going for you, too!

    mekkaokereke, to random
    @mekkaokereke@hachyderm.io avatar

    Happy !

    Not ready to talk about Black History. Still talking about white US history.

    Q: Why are Black neighborhoods so often high crime neighborhoods? Must be a lawless people! Violent! Thieves! Predators!

    A: There is no such thing as a "high crime neighborhood." The whole concept is entirely made up based on our notion of what we consider a crime.

    You may be thinking:🤔 Wait... What?! Not true! A high crime neighborhood has more drug use and sales, theft, and even murder!

    evana,
    @evana@hachyderm.io avatar

    @mekkaokereke @courtcan I was shocked a few years ago to notice someone out for a trail run in Cougar Mountain Park near Seattle concealed-carrying a pistol. We were about 2-3 miles from a road, but probably 30 people / hour would go by that spot. Was glad to pass by and get going back down the slope with a ridge between us.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • anitta
  • thenastyranch
  • rosin
  • GTA5RPClips
  • osvaldo12
  • love
  • Youngstown
  • slotface
  • khanakhh
  • everett
  • kavyap
  • mdbf
  • DreamBathrooms
  • ngwrru68w68
  • megavids
  • magazineikmin
  • InstantRegret
  • normalnudes
  • tacticalgear
  • cubers
  • ethstaker
  • modclub
  • cisconetworking
  • Durango
  • provamag3
  • tester
  • Leos
  • JUstTest
  • All magazines
    •