mienski

Think I've posted this before but my employer paid Elastic for the official training - and even that course included everything on how to set up, run and tune ES but applying any security was only covered in the advanced course that you had to pay another $x thousand dollars to attend.

So even doing official Elastic training still leaves you with a nice footgun.

Kind of more limited to a 200OK-level health check, but Structurizr does support basic checks like this (https://structurizr.com/help/health-checks) - though I do love the idea of being able to add links to an object so you could jump the log page of that service in your logging platform.

You're really going for the straw-man argument here I see, there is a huge difference between launching a space ship and creating a new way to mine the earth and destroy the environment.

I understand that they have this little catch-all:

> GSR has said it will only apply for a mining contract if the science shows deep seabed minerals have advantages, from an environmental and social perspective, over relying solely on land mining.

But I'm not going to hold my breath thinking that if they find a rich-enough deposit of minerals - that they wont suddenly discover enough "advantages" for the ocean to now be open to the same decimation as land mining has seen for many years.

You're right, anecdotal knowledge does apply to everyone's job market... HN worldviews are wild sometimes

TIL price gouging of medical supplies during pandemics is a good feature of markets..

I'm sure this gets mentioned every time, but this is great supplementary reading to 13 Minutes to the Moon podcast https://www.bbc.co.uk/programmes/p083t547

The stated motivation is to reduce misinformation from China in lead up to election. Pretty wild that Facebook which was 100% proven to have been used for Russian misinformation in the last, and this election, somehow dodged a bullet on this...

My (totally personal opinion guess) is that this is just another way to poke the bear as part of the tit-for-tat with China and maybe a minor contributing factor that someone has got in his ear and blamed TikTok for his low campaign event turnout after there was a TikTok meme to RSVP to his events to make them sound like they were going to be huge, then embarrass him with low numbers.

Cynical perspective is that one of his friends with a stake in Facebook got in his ear about China using TikTok to make fun of him or something, and now Instagram Reels is right there to pick up the slack. Nothing would surprise me with this govt anymore. I mean the news is all talking about TikTok now instead of COVID-19... troop bounties... so on...

Even doing the official Elastic training - Elasticsearch Engineer 1 gives you everything you need to hurt yourself to set up, use and admin a cluster, but no security is covered unless you sign up for the next course and pay another couple of thousand dollars. Security really should be covered as a default in EE1.

I'm a huge fan of beginner tutorials that include security as a default, rather than having it as the thing you do last - and then commonly in actual project work all the development gets done against an insecure cluster in dev, then someone turns security on at the end, it all breaks and you now have a group of stressed-out people only incentivized to remove the thing that is now delaying the project at the very last moment. Makes for some easy mental gymnastics.

But it's not a scandal - it's an issue with a product, not some government conspiracy

Agreed, unfortunately try getting anyone with that goal elected though, they immediately get eaten alive by the other side with "but they want to spend all your money!". I may just be speaking for Australian politics though.

Ah yes the engineering nirvana where no-one is a manager and targets don't exist..

Totally agree on environmental factors but the philosophy of a take a train instead of fly domestic, and not fly at all international - is great for countries where you can travel by alternative means to another country, and great for countries where domestic travel doesn't mean a 16hr drive because there is no train infrastructure. For example, this won't work in Australia.

Never seen a piece of "commentary" offer so little other than open conjecture that will probably be interpreted by plenty to justify some ridiculous conspiracy theory.

While I’m totally onboard with the privacy concerns, this is ridiculous FUD to just assume that every company just took on the security and storage risk of holding that data. Find me an enterprise department/exec that would willingly take that on to support a trial.

The corporate bogeyman is a great story but I think you’re being a little unrealistic here. These systems typically allow the picture to be sent in with a name, and the system returns a success or fail response.

As someone that spends most of their days at the design/scoping phase, then watching the product go into development where it encounters constant misunderstandings and gotchas that the customer never told us about or never realised themselves, I completely agree that there is a huge disconnect between the scoping and requirements phase and the build phase.

I almost have guilt over feeling like my work of design and scoping is effectively useless to a developer, all my mockup layouts have to be built ground-up, my requirements aren't actionable in any way unless they feel like reading them (I try to keep them as succinct as possible, but the nature of working for clients also means I have to be somewhat specific so that people know when they should actually pay us). I've looked into things like Cucumber (https://cucumber.io/) so that my requirements can actually be compiled as tests, but adoption is slow and arduous, and all I'm really doing is adding more work to a dev.

My latest line of thinking is that I need a way to show the user interface, and then the data flow and logic all the way back through the system (usually a back-end DB or a customer legacy system). It's vital that these are presented together, hence my current process is interactive mock-ups built in Sketch (https://sketchapp.com/) and hosted on Invision (https://www.invisionapp.com/) which allows the customer and developer to click around and see it on a mobile screen so they really get a feel for it. Finally I couple that with a BPMN diagram which has swim lanes not just for the traditional system swim lanes, but also for a user (i.e. User taps Submit) and for a user interface (i.e. shows the mockup screen that is displayed), and then the logic flows down through the diagram. (e.g. User, User Interface, Mobile App Logic, Server Logic, Server DB, etc.)