sublimino

ControlPlane was able to hire (not acqui-) a few of the FluxCD maintainers and other WeaveWorks staff to continue supporting the project — we did what we could, agree this is better for Styra folk than the uncertainty of closing up shop.

> bpkg is a lightweight bash package manager. It takes care of fetching the shell scripts, installing them appropriately, setting the execution permission and more.

> You can install shell scripts globally (on /usr/local/bin) or use them on a per-project basis (on ./deps/), as a lazy-man "copy and paste".

https://github.com/bpkg/bpkg

---

Also bash-lib is using bats (Bash Automated Testing System) for verification, which is un-maintained and has been forked should anybody be interested https://github.com/bats-core/bats-core

Markov Chains can be quite amusing when applied to a corpus of similar texts, and often stunningly human-like. I maintain a list of humourous applications: https://github.com/sublimino/awesome-funny-markov

Some favourites:

- Erowid trip reports and tech recruiter emails - https://twitter.com/erowidrecruiter

- Calvin and Markov - Calvin and Hobbes strips reimagined http://joshmillard.com/markov/calvin/

- Generate your future tweets based on the DNA of your existing messages - http://yes.thatcan.be/my/next/tweet/

- Fake headlines created by smashing up real headlines - https://www.headlinesmasher.com/best/all

- The most confusing subreddit (often on the front page) - https://www.reddit.com/r/subredditsimulator

The original Markov-generated content prank: "I Spent an Interesting Evening Recently with a Grain of Salt" https://web.archive.org/web/20011101013348/http://www.sincit...

And of course (un-amusingly!) - Google's PageRank algorithm is built on Markov Chains https://en.wikipedia.org/wiki/PageRank#Damping_factor

n.b. there used to be parodies of Hacker News, but both are down: https://news.ycombniator.com/ and https://lou.wtf/phaker-news

Perhaps counterintuitively (in British English at least) the noun news is uncountable (e.g. referring to a mass rather than something that can be counted), and is singular in grammatical construction (so cannot be pluralised).

https://dictionary.cambridge.org/grammar/british-grammar/unc...

Apparently the restore is now complete:

https://github.com/npm/registry/issues/255#issuecomment-3557...

To combat the sedentary effects of sitting at a desk >8h/day and get the blood flowing. I find the physical effort mentally reinvigorating.

If you're enough floors up: descending in an elevator then immediately ascending by the stairs works wonders for the sedentary body, and the mind. I also do this sometimes when hacking through lunch to trick my mind's context, then reverse the journey to start the afternoon.

Exactly - continuous deployment is about moving some/most testing to production, not eliminating it altogether.

Acceptance testing the system once deployed is the cornerstone of organisational acceptance of the CD doctrine - errors will always happen, it's just that they can now be fixed much faster in production.

Using an acceptance test suite as a deployment safety harness should dramatically increase the quality of tests, and hopefully the application too.

Open source alternatives for Git repos (ideally run in the pipeline):

https://github.com/dxa4481/truffleHog - "Searches through git repositories for high entropy strings, digging deep into commit history"

https://github.com/ezekg/git-hound - "Hound is a Git plugin that helps prevent sensitive data from being committed into a repository by sniffing potential commits against PCRE regular expressions"

https://github.com/michenriksen/gitrob - "The tool will iterate over all public organization and member repositories and match filenames against a range of patterns for files that typically contain sensitive or dangerous information"

https://github.com/awslabs/git-secrets - "Prevents you from committing passwords and other sensitive information to a git repository"

Of note is that an immutable/noexec filesystem doesn't prevent code being downloaded to an environment var/typed out and run - tools like https://github.com/SafeBreach-Labs/pwndsh just pipe source to an interpreter (in that case BASH, which generally isn't installed in smaller base images).

Reducing the attack surface is important, but if a running container is compromised it's imperative a post-mortem is performed immediately - and the issue remediated - to prevent re-exploitation.

Paul Saffo is a potential source:

> Since the mid-1980s, my mantra for this process is “strong opinions, weakly held.” Allow your intuition to guide you to a conclusion, no matter how imperfect — this is the “strong opinion” part. Then –and this is the “weakly held” part– prove yourself wrong. Engage in creative doubt. Look for information that doesn’t fit, or indicators that pointing in an entirely different direction. Eventually your intuition will kick in and a new hypothesis will emerge out of the rubble, ready to be ruthlessly torn apart once again. You will be surprised by how quickly the sequence of faulty forecasts will deliver you to a useful result.

http://www.saffo.com/02008/07/26/strong-opinions-weakly-held...

I use coach.me - the automation is via their undocumented mobile APIs https://github.com/jmaddi/liftapp-client (Lift is coach.me's previous branding)

There is an analogous productivity method called "Don't Break the Chain" involving a prominently-placed real calendar, and big red crosses denoting daily successes. It triggers the same (rightly) proud sensation. Anecdotally I preferred it to GitHub streaks (as I rarely look at my profile).

Any habit tracker site/app will also do this for you - I automate mine with GitHub API data, and get a similar effect (the app notifies of streaks daily).

This is intentional - it's a feature, not a breaking change, although the docs do identify a greater possibility of regressions until LTS. From https://nodejs.org/en/blog/release/v6.0.0/

> The general rule for deciding which version of Node.js to use is:

> ...

> - Upgrade to Node.js v6 if you have the ability to upgrade versions quickly and want to play with the latest features as they arrive.

> Note that while v6 will eventually transition into LTS, until it does, we will still be actively landing new features (semver-minor). This means that there is an increased chance for regressions to be introduced..

Previous comments here https://news.ycombinator.com/item?id=11686029

> It's quite reasonable not to care, but it's still good to know.

I agree entirely.

They claim to be outside of UK jurisdiction for a number of bills, although I'm not qualified to judge the veracity of these claims - again from https://www.ivpn.net/blog/should-gibraltar-be-classified-as-...

> Gibraltarian VPN service providers are not obliged to comply with the comprehensive UK laws regulating the information society

> RIPA does not apply to Gibraltar.

> The GRA [Gibraltar Regulatory Authority] supervises the enforcement of the Data Protection Act 2004, a Gibraltarian law implementing the European data protection laws.

IVPN rebuts that argument at some length:

> What is the relationship between Gibraltar and UK?

> The main relationship between Gibraltar and UK stems from the fact that the British monarch is the head of state of both Gibraltar and UK. However, such a relationship is not enough to make Gibraltar a part of UK. For example, no one argues that Andorra is a part of France although the President of France is the head of Andorra (together with the Spanish/Roman Catholic Bishop of Urgell).

https://www.ivpn.net/blog/should-gibraltar-be-classified-as-...

Perhaps you're referring to Linuxbrew - "a fork of Homebrew, the Mac OS package manager, for Linux."

It exposes the same repository as its OSX counterpart, with linux-flavoured customisations where necessary.

From feature list at http://linuxbrew.sh/

- Can install software to a home directory and so does not require sudo

- Install software not packaged by the native distribution

- Install up-to-date versions of software when the native distribution is old

- Use the same package manager to manage both your Mac and Linux machines

From https://github.com/lukasz-madon/awesome-remote-job#job-board...

http://www.authenticjobs.com/

http://careers.stackoverflow.com/jobs/remote

http://www.flexjobs.com/

http://frontenddeveloperjob.com/

http://www.golangprojects.com/golang-remote-jobs.html

http://hnhiring.me/

http://jobmote.com/

http://jobspresso.co

http://nomadjobs.io/

http://remotecoder.io

http://remoteok.io/

http://www.remoteworkhunt.com/

http://jobs.remotive.io/

http://www.virtualvocations.com/

http://www.workingnomads.co/jobs

CloudFlare offer free, "flexible" Universal SSL https://www.cloudflare.com/ssl - although it is terminated at their servers and still communicates with the target server via HTTP. This is what I'm using for a simple blog.

> Flexible SSL: There is an encrypted connection between your site visitors and CloudFlare, but not from CloudFlare to your server.

> You do not need an SSL certificate on your server.

> Visitors will see the SSL lock icon in their browser.

It can be upgraded to full "strict" SSL all the way to the host with paid plans.

This security model obviously comes with some compromises, especially on login forms, as the user has been taught to expect the browser's padlock sign to signal an encrypted connection to the host.

Wasn't suggesting StartSSL as a solution for the OP, just as an aside on CF's SSLs. But https://letsencrypt.org/howitworks/technology/ looks great, thanks. Bring on Summer 2015.

Probably a good time to name-drop https://www.blocked.org.uk/ to verify blocked domains too.

Shared SSL certificates from CloudFlare are also loaded with porn sites. For https://www.binarysludge.com

SANs: sni29282.cloudflaressl.com, .askporno.com, .binarysludge.com, .dzej.eu, .grem.eu, .hmtransportation.com, .joowaal.com, .kuwaitinfo.info, .le-foie-gras.eu, .mnmjewellery.com, .mobxnxx.com, .philippines2050.com, .pornfax.com, .pornhideaway.com, .pornmovies101.com, .shokweb.com, .tennistemptation.lt, .tennistt.lt, .the-porn-videos.com, .timenewroman.com, .tutoringunlimited.com, askporno.com, binarysludge.com, dzej.eu, grem.eu, hmtransportation.com, joowaal.com, kuwaitinfo.info, le-foie-gras.eu, mnmjewellery.com, mobxnxx.com, philippines2050.com, pornfax.com, pornhideaway.com, pornmovies101.com, shokweb.com, tennistemptation.lt, tennistt.lt, the-porn-videos.com, timenewroman.com, tutoringunlimited.com

https://www.sslshopper.com/ssl-checker.html#hostname=https:/...

Time to finally get that StartSSL cert I've been talking about...

Shoreditch/Hackney (London startup land) postbox psychology results: most open to experience, high on extraversion and life satisfaction, low agreeableness, least emotionally stable and conscientious.