Ditto with Ant Design (#14 on most popular projects) where most of their community is Chinese: https://github.com/ant-design/ant-design/issues. Their UI framework is the most comprehensive I have seen.
I am sure english will remain the dominant language for a while but I wonder if it makes sense to start learning new (human) languages just to open up the number of communities you can learn from?
The author is obsessed with fitting things with a logistic function and drawing wild conclusions even when it directly contradicts itself.
You can't have the rate of publication be a logistic function and the cumulative publication be a logistic function. The derivative(i.e., rate) of the logistic function should be 0 at both tails which isn't S-shaped anymore.
Yes, instead of slowing down, the curve could just continue growing straight, there is no inflection point in the graph. Also, area under logistic function is also more like a straight line: https://www.google.co.in/search?q=graph+log(1%2Be%5Ex)
All your bits will rot if your house burns down. You will need something cross region (maybe your whole city gets nuked) but then you'll be exposed to the internet again. Snail mail your drives I guess?
I want to make sure that I understand the security aspect of this.
You can argue that the user can upload anything using the original api anyway. But in the original case you can do server-side validation before the upload is proxied. I am thinking stuff that are domain specific like only allowing videos that are 6 seconds long or something.
You can move the validation to the client but the client can be easily modified. An actual user might not do this but someone trying steal your storage space (for serving malware or something) might?
These signed urls also seem to expire based on time so you can potentially save the url and upload again later if you allow generous expiration. (again, not really something I see being a huge problem)
But I guess these aren't really serious issues compared to the cost savings. Am I missing other ways this can be exploited?
You would use two buckets in this case. Input bucket gets consumed by worker processes to do the transcoding (and validation) and then they upload into the output bucket. The output bucket is what you serve to clients (hopefully with a CDN in front).
This is more complicated than I imagined so I am not sure the cost saving will still work out (factoring in development time and extra code maintenance cost).
No, I don’t, sorry. What I can promise you is that you’ll thank yourself for implementing it! There is hardly any additional complexity here because you’d probably be uploading the derived content somewhere anyway. Now you’re just putting in a different place than the source.
You can use whatever queue you’re comfortable with so long as you can pipe the upload events from the bucket into it. The pattern I’m outlining is just a physical separation of buckets to make access control much harder to screw up.
I can comment on using pub/sub - it's an immensely useful abstraction for these kinds of tasks and something that is quite difficult to implement yourself with the same level of guarantees that using the cloud service will provide. Any time you need to pass information or trigger events asynchronously messaging is the first choice IMO.
Making the company money is the not the only factor is it? Any engineer at google/facebook/etc are probabilistically making the company multiple millions per year too (terrible estimate from revenue divided by headcount). But probably only a handful of them would ever be able to demand the rate you charge because they are replaceable.
How do you make sure the company won't just take your advice and hire a guy to do this for 90k/yr instead of letting you work on it for three weeks?
If they thought they could take a proposal and productionize it with someone available for hire at a total cost of $140k in their first year and that they’re capable of finding, closing, and managing that person then a) my blog is free and you’re welcome to it and b) they would have more than one email written. But for whatever reason they have not made that hire, as evidenced by having no emails actually traversing the interwebs.
People occasionally took my proposals and productionized them with existing or (much more annoyingly) new staff. Oh well. That’s one reason I charged what I charged; the sales process assumes 1 to 3 “actually nope we decided we don’t need you” per engagement which happens.
By far, the majority of consulting engagements I’ve seen or participated in (Big 4 and freelance) are things that could easily be done if the company hired a few folks, for much less pay than this. Simple number crunching, tedious paperwork review, trivial integrations/dev work.. I would hazard a guess that at least 50% of all enterprise consulting spend goes to these tasks.
However the indisputable fact is that these companies are willing to shell out for this stuff, whether because they think it’s temporary work (cheaper to hire Patrick than an FTE who you then have to keep paying or dispose of) or they’re paying for the top-of-Hill expertise (eg. paying a Big 4 where you get 10 hours of a partner’s time/expertise at 1k/hour and then 300 hours of 23yo grunt labor).
Because they don't need a full time person to achieve the results and it would be silly to shell out more money and try to train somebody to do something that they've clearly failed to do in the past. If my car needs $1000 of repairs, I'm not going to shop around for a class to teach me how to repair cars - especially if, like your example, it costs more than just getting it fixed.
You don't. You just pick the ones that are in a hiring freeze or actually see the value of what you can demonstrably deliver in a quick turnaround time
I forgot where I heard this from but I thought the reason reddit didn't monetize well was because the users were either using adblock or were too tech savvy to click on ads?
I have been using reddit for probably a decade now but don't remember ever clicking an ad. OTOH I typically misclick on a few links before I get my download when visiting pirate sites even with adblock on.
> We’ve been big fans of the Postgres HyperLogLog extension for many years and are excited to be taking on responsibility to maintain HyperLogLog going forward.
Conceptually hyperloglog should be really simple (count leading zeroes) so I wasn't sure what there was to "maintain".