Weekly Shaarli
Week 39 (September 23, 2024)
vous pouvez soutenir ma proposition d’un audit par la Cour des Comptes de l’usage fait du budget de la CNIL
Just do whatever interests you now. Don’t seek a story of purpose to guide or label your interests. [...] Focus on what fascinates you, even if it’s uncharacteristic. There is no purpose because there is no line connecting moments in time. There is no plot. You are not a story.
A (somewhat opinionated) list of SQL tips and tricks that I've picked up over the years in my job as a data analyst.
Google dépose plainte pour abus de position dominante par Azure de Microsoft.
Microsoft enfermerait ses clients dans des conditions d’utilisation très défavorables au déménagement vers d’autres solutions hébergées, surtout à cause des coûts de migration.
Est-ce qu'ils connaissent Firebase ?
Cela n'empêche en rien que Google a raison de porter plainte, car les arguments sont présents.
A lot of Rust lectures lately. See https://video.infosec.exchange/w/p/aUTyZA8bp5b8EDeT8VaV6M
Pour maintenir une « sécurité alimentaire », l’entreprise avait eu recours entre 2016 et décembre 2022 à des traitements de certaines de ses « eaux minérales naturelles » (ultraviolets et filtres au charbon actif). Un process qui n’aurait pas dû permettre l’utilisation de l’adjectif « naturelle ». Quant aux forages illégaux, ils concernent neuf des 130 captages utilisés par Nestlé sur Contrexéville et Vittel, entre 2013 et 2019. « Ceux-là n’avaient pas reçu les autorisations légales. Ils ont tous été régularisés par arrêté préfectoral en 2019 », a souligné lors de l’audience le procureur de la République.
The cluster is hosted by a small French hosting company. This indicates that European data protection regulations (GDPR) should apply. European law requires explicit user consent for collecting and storing personal data.
The open Elasticsearch server, accessible to anyone without authorization, stood out due to a massive index with a mysterious name, “vip-v3.” It contained 95,350,331 documents from at least 17 data breaches and had a total size of 30.1GB.
Company involved in the leak (from the txt files):
Lycamobile, darty, Pandabuy, discord, dvm, electro dépôt, Bins & Bières, Snapchat, FRS, Go Sport, Intersport, LDLC, Corse GSM, Pinterest, Minecraft FR (forum), SFR, Shadow (cloud computing service).
It also shares data from sport 2000, Wakanim and Rinaorc (minecraft server, or service using the AuthMe plugin).
L'association de lutte contre la corruption en politique en France
capture d'écran du jeu avec une ourse rectangle en tenue de plage dans un fauteuil roulant, l'air en colère, devant une scout et une petite maisonnette de plage: Mais mon fauteuil n'a jamais été un frein pour moi. Ce sont les autres qui m'ont empêchée d'avancer.
Never mind that you can also harvest code from any of your shelved projects. I mean why rewrite the Fisher–Yates shuffle algorithm if you have it already in a shelved game? Code for switching the monitor depth (on those early Macs) I moved from game to game… Polygon-point collision code, a sine lookup-table for quick trig functions, a dot-product routine, cross-product routines…
was the whole exercise of my guerilla programming technique a wash? Maybe. But it always served me well
There were times too when a coworker might have said, “You should have used a Bloom Filter” and I was able to come back with, “Yeah, already tried that but the typical data we are seeing is so small that the performance gains were negligible and added unnecessary complexity to the code base so I tossed it.” Boom!
A.B.I Always Be Iterating.
I discovered it from https://lobste.rs/s/d1n9k6/kind_websites_i_like#c_w9zus8
Similar to bearblog.dev
The form should be the following:
*links resources only from the same domain (same tld)
- no CDN / Captchas / geographical restrictions
- does not require JavaScript for main functions (including e.g. writing comments, registration or placing orders)
- works in text browsers like Lynx
- screenshots of whole page can be saved (no weird scrolling, fixed panels etc.)
- if I save the page as HTML, it can be viewed offline later (including all important assets)
- no tracking or affilate links
- no ad system, no aggressive adverts (moderate ones are acceptable, content:advert ratio should be somehow 90:10 or better)
- meaningful titles and links (not misleading and if I bookmark the page, I can find it by keyword later)
- images have alternative text and / or description
- cited or borrowed content from other authors has proper references
- links to downloadable files say also format and size, e.g. „technical documentation (PDF, 560 KiB, 84 pages)“
- all pages have a timestamp / date of creation and last change
- says who is the author (may be a pseudonyme) and what is the purpose of the website; something like impressum
- catalog of all pages or at least news are available as RSS/Atom/RDF machine-readable format
- no annoying cookie consents, newsletters, pop-ups, paywalls etc.
- generated content (AI and other) is clearly marked (if any) and differentiated from human-created content
- no automatically playing videos or sounds; no autoplay (unless explicitly turned on by the user)
Maybe I could share mine someday. #futureBilletDeBlog
Someone points out the dark nets and the need for optimized websites. Other list different arguments or ideas.
A future vision of the work.
- Leaders who determine Policy
- AI that gathers State from everywhere
- Everything is done according to SOPs
- SOPs are regularly updated
- GOTO
L'instance Mastodon du CCC à un éléphant qui lance la fusée du CCC au lieu du simple avion en papier.
(via https://social.atypique.net/@quota_atypique/113210687627716459)
Calcul du coût des contributions en €
The idea is to set sensible typographic defaults for use on prose (a column of text), making particular use of the font features provided by OpenType.
Il s'agit simplement d'optimisation des cultures.
Fin mars à mi-novembre.
MAIS ces tomates ont moins de minéraux (Calcium, Magnésium, Vitamine C, Polyphénols, Lycophène).
Selon le directeur général délégué Centre technique interprofessionnel des fruits et légumes, cela dépend aussi de la variété.
Le gêne responsable du ralentissement du dépérissement de la tomate bloque aussi son goût.
They started a blog because they wanted a bunch of fast game prototype.
Why they continued?
- I enjoy writing
- Writing helps think more clearly and flesh out ideas.
- Publishing something forces me to do better.
- The blog is a place to document my personal projects.
- Looking at a log of things I’ve done makes me feel better.
- The blog project solves problems
- Become a better writer and as consequence a better developer
During the years, the posts have grown larger and more ambitious. The interests also changed, so are the posts.
It is built with Rust from an Haskell rewrite as far as I understand.
Claim: "Run any JavaScript and Node.js app in any browser"
The snippets can be embedded on websites.
le taux de mortalité maternelle dans l’Etat a augmenté de 56 % entre 2019 et 2022, tandis qu’il n’a crû que de 11 % aux Etats-Unis.
Il y a donc corrélation entre l'interdiction de l'avortement et le taux de mortalité maternelle.
A great feedback from a main Nuxt contributor about Open Source contribution
Software is a way to get something done.
The followers of the Code It Yourself Manifesto believe in these things:
- We implement it according to our own goals.
- We make mistakes and learn from them.
- We learn how our tools we depend on need to work.
- We gain a deep understanding of our problem domain.
Normal :)
Que la gravité de la Terre réussisse à piéger un astéroïde pendant plusieurs semaines, voire plusieurs mois, n’est pas un phénomène inédit – cela se produit plusieurs fois par décennie – mais il reste fascinant.
An ode to spreadsheets
Peelopaalu is an unsorted link collection that consists of random websites that I find interesting in some way.
Strava utilise les données d'utilisateurs pour entraîner ses IA
Nous utilisons les informations que nous recueillons et recevons dans le cadre de la fourniture des Services, y compris pour vous offrir la capacité de réaliser les actions suivantes :
Fournir des fonctionnalités d’IA. Par exemple, nous utilisons l’apprentissage automatique ou l’intelligence artificielle, y compris les grands modèles de langue, pour détecter des anomalies dans les classements, générer des recommandations d’itinéraire ou fournir des conseils de formation personnalisés.
En ce qui concerne nos produits ou fonctionnalités utilisant l’apprentissage automatique ou l’intelligence artificielle, y compris les grands modèles de langage (« Fonctionnalités d’IA »), nous utilisons les informations que nous recueillons pour améliorer la qualité, la fiabilité et/ou la précision de nos Fonctionnalités d’IA en créant, développant, formant, testant, améliorant et maintenant les modèles d’IA et de ML gérés par Strava ou nos prestataires de services.
One approach for achieving compile-time checks, might be having two different structs for alive and dead player, and have the necessary methods implemented for them respectively.
why it’s bad:
- the API is not clean. We are storing the same fields in both Dead and Alive player, while they are both just Players.
- the end-user has to know when to create an instance of Alive player and Dead player. It might be simple to guess in this example, but imagine much more complex/abstract types. If possible, our API should be responsible for when to use which type, not the end user.
Solution 3 is better with an struct that uses a state! The state determines how is the player and different functions are implemented for a player state.
Note it is similar to typescript with an interface or type such as Player<'alive'> of type Player<T> = { state: T, ...}
Using monospace fonts to design based on the ch unit.
Background: https://wickstrom.tech/2024-09-26-how-i-built-the-monospace-web.html
Dans son développement, le NIST reconnaît que les règles de composition ont pour ambition d’accroître la difficulté de deviner les mots de passe choisis par l’usager. Cependant, « les recherches ont montré que les utilisateurs réagissent de manière très prévisible aux exigences imposées par les règles de composition », note l’institut.
Wealth, feeling like you have plenty, is an equation.
A web browser with emphasis on local-first data storage.
Repository: https://github.com/OkuBrowser/oku.
Discussions: https://discu.eu/q/https://okubrowser.github.io/
Social Media: connect people
Me: ok let's do it.
Meta now: let's use AI to generate content based on your face or other of your data 🤦♂️
Voilà... comme tous les autres services en ligne, Telegram va devoir se conformer à la loi.
Le mieux pour ne pas avoir à donner des informations aux autorités, c'est d'en collecter le moins possible. Telegram peut lire toutes vos conversations, sait avec qui vous avez discuté, quand et de quoi. Donc les réquisitions judiciaires vont probablement suivre.
It aims to eliminate the complexity and redundant boilerplate code when building a federated server app, so that you can focus on your business logic and user experience.m
The announcement for 1.0 is there: https://github.com/dahlia/fedify/discussions/141
on a lot of platform indeed
Minimalistic web application designed for sending end-to-end encrypted notes and files.
Github project: https://github.com/CorentinTh/enclosed/tree/main
The Centers for Medicare & Medicaid Services (CMS) federal agency announced earlier this month that health and personal information of more than three million health plan beneficiaries was exposed in the MOVEit attacks Cl0p ransomware conducted last year.
Personally identifiable information are leaked.
how to compile and run JS code in rust through V8
I think open source is a chance to step outside the normal producer-consumer dichotomy and enter the world of relationships. [...] is a chance to give and receive.
How to start contributing?
- If you are new to a project (as to a company), you have a priceless gift. You can see more clearly than people who are already there. You might be in a perfect position to challenge 'received wisdom.' 💡
- If you care about a project, then you are in the best position to make it better.
- Contributing to open source is a phenomenal way to grow.
About writing their own RSS script:
I learned new things and got satisfaction out of seeing them run correctly. I get nothing like that out of comparing apps and services.
the biggest advantage echoes what Dr. Drang says: Programming is often more fun than the alternative uses of my time.
Three reasons why time spent programming is well spent and joyful:
- Learning: for example the EmojiHomepage to learn VueJS; Altercamp Live to learn "Phoenix LiveView" and practice OTP knowledge.
- Control: the software does exactly what you want + from the self-built programs come the IKEA Effect
- Creativity: creating anything is a desire and practicing it always leads to joyful experiences. That includes anything - complex systems, simple scripts, an article posted online, a wooden box.
The Hacker news discussion about this post has many testimony: side effects of programming without clear goal first. https://news.ycombinator.com/item?id=24564835
Est-ce que c'est le Uber des tâches liées au logement?
Un sujet fort pertinent pour la conception de technologies en général.