Context: http://www.businessinsider.com/gitlab-outage-due-to-human-error-2017-2

Official blog post: https://about.gitlab.com/2017/02/01/gitlab-dot-com-database-incident/

> ...a GitLab system administrator tried to fix a slowdown on the site by clearing out the backup database and restarting the copying process. Unfortunately, the admin accidentally typed the command to delete the primary database instead, according to a blog entry.

>And by the time he noticed and scrambled to stop the deletion "of around 300 GB only about 4.5 GB is left," the blog explains.

>Making matters worse, they couldn't just restore: "Out of 5 backup/replication techniques deployed none are working reliably or set up in the first place" the blog said. "We ended up restoring a 6 hours old backup." Which means that any data created in that six-hour window may be lost forever, Anglade says.

>The good news, says Anglade, is that the database that was affected didn't actually contain anyone's code, just stuff like comments and bug reports. Furthermore, Anglade says that the many customers who installed GitLab's software on their own servers weren't affected, since that doesn't connect up to GitLab.com. And paying customers weren't affected at all, the company said, which minimize the financial impact.

Emphasis is mine.

Sounds like it's a lot worse for their public image than for their customers, if no actual code was lost.

> Hey there! Another PM on Visual Studio Live Share here. Security is absolutely something we are designing for. Microsoft will not be collecting data on the code. The code is not stored or uploaded in the cloud in any way. Rather, it is just a connection that is established between you and the teammate you are sharing with.

> There's more details in the FAQ here: https://code.visualstudio.com/docs/supporting/live-share-faq

Source

I can confirm that this is thanks to reseph's open source patch. In addition, we're now using the HTML5 <time> element for these timestamps. You'll find that this works on your user profiles as well... ;)

github commit

I first thought this had to be some sort of mistake, then I read their official statement.

Apparently these guys have made it their goal to destroy the Open Source movement. Take a look at all the projects they have hijacked. Just imagine they replace all those (so far) legit installers with their own malware-bundled ones.

This is outright disgusting.

Edit: It looks like the modified installer has been removed. I really hope they'll release another statement addressing this major fuckup.

The licensing is actually rather confused. The LICENSE file says MIT, but the code is actually a binary blob (compiled Java class files), not open source. That's... not incorrect, but strange. MIT does not forbid decompilation/reverse engineering, so not providing source is rather pointless.

Then he's providing an API to make and get the actual triggers that the SDK uses... but triggers are really just lists of positive and negative FFT bins (I decompiled the code) to trigger on. So there's nothing stopping anyone from making their own trigger audio and using the principle behind the code without the API and without paying for usage, unless the technology is patented.

This is confusing. If the intent is to provide a demo of the technology and charge for usage, why is it released under a license that allows decompilation and allows anyone to use it for free, and furthermore, why bill it as open source software licensed under the MIT license? If the intent is actually to release the technology for free for anyone to use, why is it a binary blob which requires an API and has concepts like trial quota built into it?

Edit: incidentally, the FFT implementation is this public-domain one, and the code that uses it has at least two random variable names in Spanish (but Google has no hits for them), which makes me wonder if OP really wrote it all or had someone else help.

• Try using the project as intended (do they have a README?): is it a library? CLI tool? Web app? Good ol' app?
• Build the project and read the build code
• Run the test suite
• Run the tests with a debugger
• Break the tests
• Find the class/module/component where the magic happens and break that then run the tests again
• Find an ugly or smelly method/class and refactor it
• Look at last few Pull Requests(PRs) and see where and how the changes were made
• Look at currently open PRs

edit: PR = Pull Request

and here's even more on PRs

That should get you started

> Are there any actual advantages of using more advanced software

Syntax checking, context-sensitive auto-complete, call-tips, linting or static code analysis, Git integration, integrated debugger, integrated task runner...

https://code.visualstudio.com/docs/languages/python

>For experimental purposes, we inserted a vulnerability into this utility. To do so, we first copied fqzcomp from https://sourceforge.net/projects/fqzcomp/ and inserted a vulnerability into version 4.6 of its source code; a function that processes and compresses DNA reads individually, using a fixed-size buffer to store the compressed data

...

>We ran the target program in a simplified computing environment and disabled common security features. Specifically, we disabled stack canaries and ASLR, and we marked the stack as executable.

"Yeah we can totally take over a computer while sequencing dna, given that we modify the program and the computer specifically to allow us to do so."

I've done my part. I've written utf8rewind, which is a free and open source library, written in C, that handles common UTF-8 string operations like case conversion, converting to and from UTF-8 and normalization.

It requires no initialization and it allocates no memory on the heap. Adding support for UTF-8 can be as easy as compiling the library, linking it to your application, including its header and calling its functions.

As a developer, I would like to thank GamerGate for supporting a return of rationality to the tech industry. We were nowhere without this movement. Think about it, GitHub is backing down due to protests that were reinforced on the back of GamerGate.

I've been here for a while and I've been in the tech industry for a long while. It's no joke, we did this. Bravo people.

edit

I would still not support GitHub. I don't trust them one bit. This is a victory for us, but they're still run by the enemy. Self host your own GitLab or Gogs repos.

> https://about.gitlab.com/

Switched to GitLab about 9 months ago, it's great. It has it's moments where it can be a little slow, but so far nothing major. It's in my opinion the best alternative to GitHub and excels in other areas.

There was already a project that did this. I was a moderator/tester for the project for quite a while, but unfortunately it's now dead.

The source code is on github if anyone is curious: https://github.com/svenstaro/pseudoform

Being able to add collaborators to your repo without confirmation has been abused twice in the history of the site. The first time it happened, the abuser was banned. I wish Zed had contacted our support to bring this issue to our attention prior to taking matters into his own hands.

I'm happy to address the specifics, but there's no conspiracy here. The bottom line is we're already working on a blocking feature because a troll decided to ruin it for everyone.

Update: This comment didn't climb nearly high enough, but hopefully people will see this: https://github.com/blog/862-block-the-bullies

I'm just starting out, trying to learn, and I'm learning quite a lot from Metasploitable. It's an intentionally vulnerable Linux server, which hosts two intentionally vulnerable web apps.

You can target the server itself, I experimented a bit with metasploit, but now I'm mainly focusing on the web app vulnerabilities.

Comparing apples to apples, Microsoft also got it right with their IDE. They have made great strides with their Visual Studio products in recent years. They have created Visual Studio Code, which is free available across platforms. They have Visual Studio Community Edition, which is the full version of Visual Studio (sans some professional-level features like a testing suite, I believe), and that's free for up to 5 users under an organization that makes less than a million dollars a year.

Want to buy a license for Visual Studio as a business? Great, you can get that for some real money, because you are a business with an income and you are using Microsoft as a main tool to make that income. I'd be more than happy to shell out $1,199 a year for Visual Studio and a bunch of auxiliary tools if my team is making more than a million bucks.

Their target for an IPO is 2020, at 100M revenue (https://about.gitlab.com/company/strategy/). I'd guess the next couple of years, they're going to continue to grow and spend like mad.

This is where things get interesting. They're now at a point where it becomes a massive task for any one person to remember who is working where. If they grow to 2-3x the size, there will now be a constant stream of people leaving and joining different teams. Not to mention groups that include "everyone" can be a firehose of information.

Once they IPO, they'll have to pay very close attention to open communication. You can run afoul of SEC rules very rapidly if you're just shooting strategy publicly, off the hip.

I hope they succeed, because I've preferred working remotely myself.

You shouldn't removeAllObjects before releasing a dictionary/array. If the release is actually dealloc'ing the object, it will remove all items. If not, somebody else is retaining the object and you are probably messing with them.

I would use member directly instead of properties when reading. E.g.:

// [self.allEntries objectForKey:key]; [allEntries objectForKey:key];

That way you avoid calling a method when possible.

I don't see the point of having a @protocol that's only implemented by one class... just use SudokubotViewController* instead of id <RootViewDelegate>.

For - (UITableViewCell*) tableView:(UITableView *)tableView cellForRowAtIndexPath:(NSIndexPath *)indexPath I'd recommend you to use a xib file and load it this way instead of creating views by code which is pretty hard to maintain.

dynamic range compression? Windows has it as an option built in I think.

It was a while ago and can't check right now but I think I had some success using MPC-BE which has a similar function, so at least when watching movies it would compress the range (I had a PC hooked up to TV/Surround Sound)

https://sourceforge.net/projects/mpcbe/

A really good question, I'm going to throw out one answer. One of the most helpful things for the artist is being able to get their art in game without much hassle. If they're emailing you their spritesheets, and you're importing them into the engine, you've become a hoop to jump through. A much less painful process is to get regular developer builds to the artist, and as much as possible, allow them to be the first to run their art in game and iterate themselves. Being able to replace a spritesheet image with another spritesheet image, load the game, and see the changes immediately is how it ought to be.

Depending on the engine, this may be very straightforward, or rather complex. If it's complex, spend some dev time to create a pipeline that converts their assets into game ready formats, and write super-clear docs on how it can all integrate. And sometimes, there may absolutely require some much closer programmer/pixel artist collaboration, for example, with particle effects. Still, tools can help here too.

Ideally, and this sometimes isn't possible with the less technical members of the team, but teaching them the basics of code versioning software like git can automate the process of getting builds to the artists, and integrating art assets into the master build, smoothly.

In conclusion, what you really want to do is:

• Increase autonomy for the artists to do what they need to do.
• Allow the artists to iterate on the art themselves, before it gets to you.
• Automate close-to everything that can be automated, to make it less painful for everyone.
• Remove gatekeepers and hoops to jump through.

And often, a good set of well doc'd tools, and pipeline processes will tick those off. Have some conversations with your artist(s) and work out what needs to be built for everyone to be happy.

GitLab already has a migrator in place if you're wanting to move.

https://about.gitlab.com/

>At its current state, GitHub importer can import:
>
>the repository description (GitLab 7.7+)
>
>the Git repository data (GitLab 7.7+)
>
>the issues (GitLab 7.7+)
>
>the pull requests (GitLab 8.4+)
>
>the wiki pages (GitLab 8.4+)
>
>the milestones (GitLab 8.7+)
>
>the labels (GitLab 8.7+)
>
>the release note descriptions (GitLab 8.12+)
>
>the pull request review comments (GitLab 10.2+)
>
>the regular issue and pull request comments
>
>References to pull requests and issues are preserved (GitLab 8.7+)
>
>Repository public access is retained. If a repository is private in GitHub it will be created as private in GitLab as well

I'm curious what would happen because I'd imagine GitLab would have at least as difficult a time managing the project as GitHub. In fact I don't think they even have 5 servers they can spare for a project like this. A post from last year mentions they have only two.

From https://about.gitlab.com/developer-survey/2018/#section-demographics. I can sort of understand (eh not really) the UK, Iceland, and Ireland being missing being islands, but where the heck did Norway and Uruguay go?

They have a salary calculator if anyone is curious https://about.gitlab.com/2018/03/23/gitlabs-global-compensation-calculator-the-next-iteration/ It's low if you live in a major city but reasonable everywhere else

I have pinpointed an exact moment this bug was introduced.

https://github.com/MrMEEE/bumblebee/commit/6cd6b2485668e8a87485cb34ca8a0a937e73f16d

It looks like this space was deliberately inserted in there. I mean... HOW?

Nah, they ~~moved~~ are in the process of moving to gcloud now https://about.gitlab.com/2018/04/05/gke-gitlab-integration/

> We’re already in the process of migrating GitLab.com to Google Cloud Platform. For us, the primary reason to migrate was because it has the most mature Kubernetes platform.

Had they stayed with Azure, the irony would had been so good though

Questions:

> and is non-commercial

What do they consider "non-commercial"? Can you still get donations (so long as they are NOT required for any features whatsoever)? If you get donations, must they be accounted as non-profit like Krita+Godot do via the Software Freedom Conservatory?

TL;DR: would an open-source+fully gratis project be ineligible if it was a 1-man patreon setup?

> should not have... paid contributors

Does this mean that no project members can be paid, or is 'contributor' used specifically to disallow things like bug/feature bounties?

Or it this a funky way of saying people who pay to contribute, rather than being paid to contribute?

EDIT: And why not standard/premium for gratis (but-not-open-source) projects?

Core seems to have some really basic restrictions (see this. Core has no: Related issues, Issue Weights, Multiple assignees for issues, Squash and merge, etc)

It wasn't in the key highlights, but compare dirty file with version on disk is a long awaited feature for me. No idea how they consistently add so many features every month.

If you really want to use your Nvidia and only your Nvidia, then you can use the acpi_call kernel module to send your card an ACPI message that basically amounts to, "Next time you boot up, use the Nvidia instead of the Intel."

And next time you boot up, it will run just fine in Nvidia, and the Intel won't even be recognized.

The bumblebee package you're talking about is useful if you want to run both at the same time, but if you really just want to use the Nvidia all the time, then you don't strictly need this.

It's not WELL supported, but I assure you that your graphics card is not unusable.

The downside of the acpi_call method is that you have to send the message every time you boot up or it will wake up in dual-card mode.

EDIT:

> The worse part of all this is that Nvidia have no plans on ever supporting their optimus cards on linux which means all new laptops with Nvidia cards will no longer work on linux.

As these technologies mature, the Optimus cards will be supported natively on many distros. There is already support for this in the kernel. NVidia doesn't really need to support the system because the community is already on top of it.

Coming from Atom, I was looking for an extension for highlighting changed and new git files in the explorer to no avail, and then today they included it in the update. Very cool.

YES! Finally we have multi-root workspaces!

This means you can open multiple projects in the same editor now. For now this feature is only available in the Insiders build.

> Has Intellisense

Not for most languages. I'm not only talking about function parameter help, it won't even complete variable names defined one line above where you are typing.

Edit: Intellisense is only for JavaScript, JSON, HTML, CSS, LESS, SASS. So unless you are only doing front-end work, it's useless. https://code.visualstudio.com/Docs/languages

Edit2: C# has Intellisense too.

Edit3: It works, at least for C++, but you have to hit ctrl+space each time you want suggestions. It doesn't show automatically like it does in Visual Studio, and it doesn't show function parameters.

>Gitlab doesn't have very sensitive data ( I am assuming it would be mostly code)

Umm, if you're a company that sells software products (i.e. the sort of company that needs a source code repository, not a manufacturing company or something), then the code is probably the most sensitive thing you own because the code becomes your product, i.e. the thing that makes you the money.

So from a security point of view, you (as a company) might want to retain complete control over the repositories to make sure your code is never exposed for someone to get a competitive advantage over you. It means bad actors can't pick it apart for vulnerabilities. And also from a reliability point of view due to incidents like https://about.gitlab.com/blog/2017/02/10/postmortem-of-database-outage-of-january-31/. To my knowledge it has only happened one time, but that's still very bad.

My question would be "if they're the same price, why would any company NOT self-host" - my experience is usually that self-hosted products cost more and therefore the argument is more balanced. In this case the price is a win, and self-hosting is a win (yes it's effort, but my experience running Gitlab CE suggests that it's not that difficult)

Visual Studio Code is pretty straight-forward: https://code.visualstudio.com/docs/setup/linux

Also, it's cross platform, so what minimal learning/configurations/plugins you need will work on mac and windows, too.

>"To the GitLab.com users whose data we lost and to the people affected by the outage: we're sorry. I apologize personally, as GitLab's CEO, and on behalf of everyone at GitLab."

Sorry, I just can't get past GitLab losing production data.

I'm testing it (the download link is live: https://code.visualstudio.com)

So far:

• Syntax-highlighting works.
• Auto-completes with the words in the current file if intellisense isn't available.
• It's waaaaaay faster than Atom.
• Integrates with git.
• Doesn't support bitmap fonts. :(
• It uses a lot of memory, I can see multiple code.exe processes running, kinda like Chromium.
• There isn't a way to set the default line ending (CRLF is set by default on Windows).

I’m sorry, but is our job as developers to do the needful and spread the gospel of eradicating light themes, not spending time being productive and just writing code, but going overboard with editor configuration until you’ve completely forgotten about why you even installed a text editor.

It’s worrisome that this thread is over an hour old and nobody has come to spread the good word of the one true editor, our lord and savior VSCode, the free and open source messiah that doesn’t try blinding you when you first greet it like other false prophets, but instead greets you with solid contrast and power saving dark colors. How can anyone deny that VSCode isn’t the true path to righteousness when out of the box it is able to autocomplete better than any other without consuming one’s entire available RAM and CPU time like other heathen IDEs (like the antichrist eclipse with it’s light theme blinding you so it can wreak havok upon your machine). And once equipped with the VIM extension, there’s no doubt that it is the true successor to the original divine editor as it possesses all the power of the original while still allowing you to exit it without having to sacrifice your first born child (but that option is still available as it understands the old magic of :wq and :x and :wofjspleaseexit.

^(But seriously, give them the link to VSCode, ignoring the dark theme circlejerk, out of the box it’s seriously one of the best — if not the best — HTML editors available)

Part 4: About GitHub

GitHub, BitBucket, etc are all just sites/communities centered around using the program. They have some nice stuff but don't replace git or git knowhow. You can use git just as easily and effectively by copying the folder onto a flash drive or uploading a zip to Google Drive or something.

Part 5: Documentation and More Resources

Official documentation: http://git-scm.com/docs About git branching: http://pcottle.github.io/learnGitBranching/?demo

Interesting given Gitlab's recent "Masterplan" post - https://about.gitlab.com/direction/#scope

I love the competition between these two. Gitlab is wonderful for my personal projects but Github obviously has the community aspect to it.

Excited for the Github projects, no longer need 3rd party plugins for it thankfully.

>Crypto miners are not really a problem, as you can trivially fight them off if you still got technical staff.

Gitlab doesn't seem to think it's trivial, as they're now requiring users to provide credit cards in order to use shared runners for this exact reason.

I guess it's time to transition to specific hosted instances of gitlab.

Anyone else find it ironic that Linus just made someone a couple of billion dollars via Microsoft?

I used a variation of the technique emscripten uses. He describes it in detail in his paper: https://github.com/kripken/emscripten/blob/8a6e2d67c156d9eaedf88b752be4d1cf4242e088/docs/paper.pdf?raw=true

Essentially, any block containing gotos becomes a switch statement inside a while loop. The gotos then become an update of the switch statement's 'label' variable, and you use 'continue' on the outer while loop to 'skip' to the target label. This handles the vast majority of uses of goto, at least in C#. (MSIL actually allows a wider variety of goto constructs, including ones that cross control flow structures and jump in/out of catch blocks. But in practice, those don't show up much.)

At present there are actually some rare forms of goto I don't implement, but I've only seen them in compiler-generated code.

It's a pretty good example of the fact that a lot of software development doesn't happen in a vacuum where only performance and efficiency matter.

VSCode's greatest strength is it's own ease of development. There's tons of developers who can contribute to the project rapidly and create extensions. Their update log speaks for itself.

Of course Electron has a lot of overhead, but at the end of the day providing value for your end-users is key and a tool like Electron may easily be cost-efficient in that regard. The project switching to C++ for incredibly efficient code would be a disservice to it's users.

Shoutout to Keepass, free and open source password manager. None of this "first three months for free" bullshit.

You don't need to convince anyone to spend money. If you don't do JavaScript (or web frameworks), you can use Intellij community edition that is free to use (even for your company, it's open source and apache 2). Just look at the comparison matrix if you really need ultimate.

I took 5 minutes from my extremely busy reddit schedule to make a fork that can be installed on the SD card. You can download it from here. You'll need to uninstall RIF if you already have it installed because mine isn't signed with the same key.

Thanks, sigh, yeah, I know about that one (though the Forefront one another user posted makes me scratch my head).

Chrome has this irritating habit of flagging all exe's that Google hasn't web-crawled yet as malicious, and I just switched the download URLs from Sourceforge to self-hosted about a day ago and even though I submitted the links Google hasn't stopped flagging it yet.

Reference (not me, but describes the problem and solution):

http://stackoverflow.com/questions/9512919/getting-around-chromes-malicious-file-warning

For anyone worried, you can download from the Sourceforge page. You can confirm MD5 sums are identical:

https://sourceforge.net/projects/mixologist/files/

From 2011-01-28-tera.markdown: > I request that you immediately issue a cancellation message as specified in RFC 1036 for the infringing postings and prevent the infringer, who is identified by its Web address, from posting the infringing contents to your servers in the future.

(For reference: RFC 1036)

Anyone else highly entertained by the suggested removal method?

IntelliJ IDEA Community Edition is free for everyone and will more than meet your needs when getting started. Also note that if you quality, students can use the Ultimate Edition for free as well. But for starting out as a beginner, there likely isn't anything in the Ultimate edition that you will need anyway.

IntelliJ IDEA is often considered the best Java IDE by professional developers. Others that get talked about are Eclipse and Netbeans. One consideration for not using IntelliJ would be if you get any labs or tutorials based on another IDE, you may want to just use the same tools that are being taught and your classmates are using.

Here's my personal experience:

I'm a computer programmer. In my country technology trends aren't being followed closely and the most popular web programming languages are PHP, ASP and... Java. I'm a fan of more dynamic languages (Ruby, Python) and especially App Engine.

So, instead of working at a low paying job for some generic local software shop , I said "Fuck this shit" and started working on this project. Then released this simple library. During this time my family kept on objecting and pressure me to get "a real job", but I refused and kept working on my stuff.

Then I got a visa, came to London, interviewed a company that heavily works on App Engine and got the job. My current working conditions are pretty awesome as developers have autonomy and there's free beer and snacks at the office. Also, we're a subcontractor for Google, so we have our lunches in Google's cafeteria.

TL,DR: Worked on the projects I loved, got a great job in the end.

A feature I'll be using most is the new find-in-path dialogue (Ctrl-Shift-F). Now I don't have to switch panes just to get the preview \o/

SQL resolution scopes seem great as well.

Every company will fuck up. How they respond to the fuckup tells you more about a company than the fact that a fuckup happened.

And GitLab responded with exceeding transparency and grace.

At least one person is trying to stand up for their rights under the DMCA and filed a counter-notice: https://github.com/github/dmca/blob/master/2011-02-03-sony-counternotice.markdown

His repository is back up as of now.

You were lucky to recover it! Did you hear about the poor sap at Gitlab who accidentally nuked the Production database, and every single layer of backup and recovery failed?

https://about.gitlab.com/2017/02/10/postmortem-of-database-outage-of-january-31/

This response of GitLab being on Azure has been debunked numerous times during these conversations.

Here is the link saying they are currently hosted on Google from Venturebeat and from GitLab themselves here.

Hope this helps. They are still in the process of migrating.

Mines-perfect is what I was playing when I was going through my Minesweeper phase.

If I remember right, I think the best options from a masochistic sense are "lucky" and "Murphy's law" together. Both of these, as one of my friends would say, move the battleships. "Lucky" moves the battleships so that if you are required to guess then it makes sure you guess safely. "Murphy's law" moves the battleships so that if you are not required to guess but you do anyway, you land on a bomb.

I think it's good habit to get into using git. Even as a beginner. Github is a server running git. You can use git on your local machine. You don't need github. Just know that your git/code/work is vulnerable to loss if its only on your computer. Github is one remote git repo option of many available.

To answer your question about multiple folders. Those are just file system folders. Its an organization of logical groupings of related files. Includes, images, etc..

Check out http://git-scm.com/ and especially the documentation. They break it down quite well from basics to working with multiple remotes and multiple coders in one codebase.

I wouldn't be so sure that they're not. In their "block the bullies" post they've been deleting comments critical of "the Ruby community", but allowing the Zed-mocking circlejerk to remain.

I think they're just projecting a professional public face. I wouldn't be surprised to learn that, elsewhere, in other circles, they love ASCII dicks

They deleted a comment by JedSmith decrying the Rubyists, and one by me joking that "Ruby is a ghetto, dongs are a catalyst"

Meanwhile, these remain:

>Can't wait to see what @zedshaw complains about next.

>Is this just for @zedshaw or does everyone get it?

>even though @zedshaw is a bit of a troll,

> Attribute the actions of individuals to the whole community @jedsmith, that's a brilliant idea. Nice feature add, even if it was in response to another childish explosion by the developer world's loudest diva of late. He has great points, but he expresses them like a whining twit.

So I don't buy that the deletions had anything to do with deceny, just because I referred to the dongy elephant in the room

For those of you having auto-complete issues with Visual Studio Code, I wanted to make you aware that we are working on a new auto-complete engine, the Python Language Server, and you can try it out by changing your settings.

It gets better every week, we are currently working through a set of performance improvements before we make this the default. If you run into issues, check out our troubleshooting guide for common setup problems and how to file issues.

Google Drive has some form of version control. Haven't tried it before but could help in this case. https://support.google.com/a/users/answer/9308971?hl=en

And next time, use git (or tbh any version control system like mercurial). GitHub even has a desktop version, I used it when I was in college. https://desktop.github.com/

Believe it or not, there's real academic research that has gone into this and has been discussed (not certain if it's been presented) at the International Conference on Software Engineering. Also check out Git Achievements

I dunno if zoom is necessary, since by live streaming they can see what you see already.

But Id recommend making use of the Live Share functionality on Visual Studio Code!

https://code.visualstudio.com/blogs/2017/11/15/live-share

Lets multiple people work together in real time on the same code, quite powerful.

>GitLab.

So that nobody reads this comment as more snarky than it actually is, everybody please note that Gitlab CI actually supports running as a CI for github.

​

https://about.gitlab.com/solutions/github/

It's not the road map announcement that makes people think that GitLab is putting pressure on GitHub to innovate, though.

AFAIK, things with GitHub really came to a head with "Dear GitHub," open letter to GitHub that got a lot of traction back in January and February.

GitLab fired back pretty quickly with a response (even before GitHub responded to the letter), pointing out that GitLab had solutions for (or was actively addressing) a lot of the complaints that were brought up in the letter. That response is what put GitLab on the radar for a lot of people. (Myself included: prior to that letter I thought it was a way to roll your own git server, not an alternative to GitHub.com)

So, yeah, 7 or 8 months later is probably a reasonable development time for a lot of these features; so it seems like a fair supposition that these features were developed in response to that open letter and GitLab's response.

Did I mention that it's open source too? Your move!

Edit: I'm also the author of Omen, SexyMap, and Chatter, so I've sorta been around this WoW software thing for a while.

As a creator of a build system let me offer some reasons why creating a DSL might make sense over raw Make.

• Make syntax is awful, hard to write, hard to read and really hard to debug when things go wrong
• Make is slow and, more importantly, impossible to optimize
• Make language is Turing-complete, which makes it really, really hard to reason about, and thus things like IDE refactoring support and the like tricky to write, which is why they don't exist
• The subset of Make that all Make implementations agree with (GNU Make, BSD Make, NMake, etc) is small and thus multiplatform support is hard
• Building is not just compiling code, it is also about configuring the source (e.g. Autoconf) and so on, and writing this functionality in plain Make would just be an exercise in masochism
• Makefiles written by different people can behave completely differently because no structure is enforced (Should you run tests with make test, make tests, make check, make distcheck or something else? Do you need to run make all before you do that? Et cetera.)

Here's from the horse's mouth:

https://sourceforge.net/p/keepass/discussion/329220/thread/e430cc12/#f398

> It is true that the KeePass website isn't available over HTTPS up to now. Moving the update information file to a HTTPS website is useless, if the KeePass website still uses HTTP. It only makes sense when HTTPS is used for both. Unfortunately, for various reasons using HTTPS currently is not possible, but I'm following this and will of course switch to HTTPS when it becomes possible. > > Much more important is verifying your download (which I'd recommend independent of where you download KeePass from). The binaries are digitally signed (Authenticode); you can check them using Windows Explorer by going 'Properties' -> tab 'Digital Signatures'.

> Best regards,
> Dominik

(My opinion: Minor importance. I always download it from scratch anyway)

this really needs to be emphasized. backups can give a false sense of security. need to have a process in place to restore the data. GitLab learned this the hard way recently.

I give a lot of credit to Gitlab for their transparency and this is another example. They also publish an open salary calculator. I hope they recover quickly and make the necessary resiliency improvements - we've all been there.

The shitty Sourceforge that was injecting malware was owned by "Slashdot Media" , which was owned by DHI/DICE.

BIZX bought Slashdot Media from DHI/DICE on January 28th 2016 - http://www.sdbj.com/news/2016/jan/28/slashdot-media-acquired-bizx-undisclosed-price/

And brought in new management which got rid of the malware on February 9th 2016 - https://sourceforge.net/blog/sourceforge-acquisition-and-future-plans/

Making such a change barely a week after taking over an organisation shows what their priorities are and should get them at least the benefit of doubt that they do wish to change things.

Visual Studio Code is completely free.

Visual Studio has a Community Edition that is also free for students and small teams.

The library that the developer used to make it (Valkyrie) is an open source project of his written in FreePascal.

IIRC, DoomRL was made to show off his library.

Don't forget about Atom, Github's electron-based editor that happens to compete directly against Visual Studio Code, Microsoft's electron-based editor. I can't imagine Microsoft is going to want to oversee the development of two competing editors, and that's not good for those of us who use Atom every day. :-(

Chapter 3, Article 17, Item 1a states that the data controller/holder must erase PII if "the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed."

Basically, the PII contained in open source commit logs is necessary indefinitely for the sake of logging contributions and changes to the code, and cannot be easily removed due to how git works. Therefore, that particular information is exempt from the "right to be forgotten" provision of the GDPR. Both GitHub and GitLab specifically mention this in their updated privacy policies.

To give them extra credit, GitLab when pushing politics is actually more explicitly sympathetic to software freedom versus GitHub: https://about.gitlab.com/2015/05/20/gitlab-gitorious-free-software/

Despite things I and others will still complain about (the whole dual-license thing mainly), GitLab folks have been actively working with those concerned about software freedom, privacy etc. — they even plan to move GitLab.com to self-hosted Piwik so they aren't reporting to Google Analytics and more…

Sure, some of us wish GitLab were entirely free/libre/open and AGPL, but they are listening, and they aren't doing the subtle political undermining of GPL that GitHub is doing.

> All BE is, is MPC with a skin.

Why even spread such lies like this when MPC-BE is open source and people can just check? MPC-BE has had more active development than MPC-HC for years.

/u/The-Choo-Choo-Shoe Please see here https://sourceforge.net/p/mpcbe/code/commit_browser instead of propaganda.

> https://about.gitlab.com/handbook/total-rewards/compensation/compensation-calculator/calculator/

Unlimited PTO is a joke unless you can actually take serious amounts of time. In my experience you never see places with unlimited PTO let anyone take 5 weeks off in a year.

VSCode also has autosave, you just need to turn it on. It's like you guys just give up on trying to solve a problem if the solution is not a simple checkbox on the first tab of the Settings dialog.

You can see an overview of the differences here: https://www.jetbrains.com/idea/features/editions_comparison_matrix.html

The main difference is extended support for WebFrameworks. Also having support for Hibernate is pretty nice, since it also completes the method names when you define them, e.g. findFilteredBy or something like that.

It you don’t or rarely use the technologies that ultimate edition provides additional support for you are fine with the community edition. The main feature if the ultimate edition I used during university was the duplicate detection :)

I'm a software engineer. I'm doing this. Email me at

I'm thinking.. a web app with heavy jQuery effects.

UPDATE: Site: https://github.com/DerNalia/SC2-Replay-Selector/wiki/General-Plan

If you want to help email me. The project will be open source, so everyone will be able to FORK it, and submit pull requests to get their changes made.

I know that people constantly complain about me using scribd, so the PDF is available separately: http://pocoo.org/~mitsuhiko/badideas.pdf

The code is on github: https://github.com/mitsuhiko/badideas

Hi Ryan, thanks for doing this.

1. npm recently hit 1.0 (congrats Isaacs), would you consider it likely that npm (or other 3rd party libraries) would eventually work their way into node core?

2. Have you any thoughts on SpiderNode (other than 'competition is good')? Is there anything that you particularly like (or dislike) about SpiderMonkey in comparison to V8?

Oh man. You weren't around for the VS Code Icon Civil War of 2017?

https://github.com/Microsoft/vscode/issues/35783

End result: https://code.visualstudio.com/blogs/2017/10/24/theicon

Funny read :)

This is the complete backend. This was released as part of Gitlab buying Gitter. Gitlab fortunately sees open source as a good thing :)

Still a bit more work to get this baby polished. I know that the iOS updates have been lagging, so I wanted to share what's taking so damn long. I've been working on improving the comment entry on both iOS versions - especially after the lessons learned in developing for the Mac.

One of the biggest short-comings of ABHD is its lackluster comment entry. So I've put some work in to make this a far better experience. In subreddits that use graphic tags (like 7f12u, AdviceAnimals etc.), you will be able to scroll and tap the image to insert it into your comment.

I'm also developing support for primitive markup (like Bold, Italic etc.), but will likely roll that out in a subsequent update. I'm looking to seed this for testing over the next couple of days, and I hope you find it far more pleasant than the old way. :)

Also, if any iOS devs like the look of those tab/toolbar views - I rolled up the source code here in an easy to use library so that you can drop them into your own projects.

Sorry to hear you've been having that problem. I've heard from a couple other people who've had similar problems with Steam Link / In-home streaming. I wasn't sure if people were still encountering that issue or not. I'll have another crack at fixing it. It's pretty tricky to figure it since it's not an issue causing the actual game to crash but instead the steam instance on the host PC to crash. I'll let you know if I make an progress on the issue.

You can submit bug reports to the issue tracker here: http://bitbucket.org/Torrunt/gibz

Or you can post in the game's steam forum and I'll see it.

In my opinion, this is unnecessary and a waste of everyone's time. People managers are the ones who should make sure their team is engaged and elevate any issues that come up to HR to address proactively as needed. If you're wanting to make sure people are connected, spend that time setting up opportunities for connection like classes, games, etc so whoever wants to attend can. IMHO the problem isn't that you don't have topics to discuss, it's that this isn't a necessary meeting for anyone to be in. I suggest you do some reading of Gitlab's guide to remote work: https://about.gitlab.com/company/culture/all-remote/guide/

Shit title. It's not a virus, because it's not self-replicating. And this is very old news. This is Sourceforge's DevShare program, to which the Filezilla developers voluntarily opted-in. The developers receive a share of the revenue.

You can click a 'decline' button if you don't want the extra stuff, and you can also download a version of the installer without the extra junk bundled if you go directly to the Filezilla site.

Git is a member project of the sfconservancy. So... Torvald's is at least involved insofar as he moved his project under their umbrella. You can verify that git is a member by looking at the bottom right corner of Git's official website

Why are you bashing them? I like the idea a lot (a single language that replaces Javascript,PHP,SQL,server-side JAVA,...).
Have you tried it, or you just dont like the website? They released the whole thing 1 week ago, and its opensource. I would be really interested to see someone review it in detail, so i can decide if its really as good as it sounds.

For everyone using Chrome on Windows that is seeing a malicious download warning, see this comment I made here:

http://www.reddit.com/r/technology/comments/s9mp5/im_a_former_corporate_lawyer_whos_decided_to_use/c4c8z46

Here are the same files, with same MD5 sums, hosted on Sourceforge which won't generate the warning:

https://sourceforge.net/projects/mixologist/files/

Import path quick suggestions in JavaScript and TypeScript

Used plugins for this before, but hell ya. This will probably work better than the plugins could.

Found why:

} else if (l > 2 && s[l - 2] == '/' && s[l - 1] == Star) { char t = s[l - 2];

s[l - 2] = 0; if (!checkrmall(s)) uremnode(args, node); s[l - 2] = t; }

strlen("/*") == 2, seems like a pretty big oversight. I should probably fix that and send them a PR.

I've got good news and ~~bad~~ better news. (see second edit)

The good news is, if you've already run git add on the files, git will have added their contents as blobs to the object store, so the contents of the files still exist on disk (until they eventually get collected as garbage).

The bad news is, the data could be tough to find. I don't know of a good way to search the blob store. If you have a (very) small repository you may be able to find it manually though.

Here's an example of creating a new repository, adding a file and then retrieving it from the blob store:

$ git init Initialized empty Git repository in /Users/tpettersen/tmp/resurrect/.git/

$ echo "Test file" > test.txt

$ git add test.txt

$ git rm -f test.txt rm 'test.txt'

$ ls .git/objects/ 52 info pack

$ ls .git/objects/52 4acfffa760fd0b8c1de7cf001f8dd348b399d8

$ git show 524acfffa760fd0b8c1de7cf001f8dd348b399d8 Test file

Blobs (and trees & commits) are stored in the .git/objects directory. The first 2 characters of the object's SHA are used as the directory name and the remaining characters are the object's filename. The blobs themselves are in a binary format though, and I don't know a good way to search through them wholesale. There's some other great info on the object store in the Git internals section of pro-git.

edit:

Actually, you could run git fsck to get just the dangling blobs (blobs that aren't referenced by a tree/commit) your repository. If there aren't too many, you could manually check each of them using git show (or grep through them using a script).

double edit:

Here's a command that should print all of your dangling blobs (warning, there may be quite a bit of output depending on your repo's recent activity):

git fsck | grep 'dangling blob' | awk '{ system("git --no-pager show " $3) }'

I guess you weren't around to see the news GitLab was pushing starting few days ago:

https://twitter.com/gitlab
https://about.gitlab.com/2018/06/05/gitlab-ultimate-and-gold-free-for-education-and-open-source/

Notice all the tweets and retweets about GitHub, Microsoft and GitLab's "massive spike" of migrations. They're also pushing the #movingtogitlab hash tag.

Now, whether this is "nasty" I'll reserve judgment. It's certainly disingenuous, but it's what companies hungry for business do. Atlassian's BitBucket did that same, and in general companies do that... when they sense weakness in their "enemy" they attack.

But bottom line: it did absolutely happen and they're still trying to keep it going.

I'm part of a "five people running two companies" team. Three of us do web design/development stuff. We use distributed version control on a local server that is mirrored to a backup on the Internets. It's not difficult to set up.

If you're getting money from people then odds are you're not stupid enough to not do something like this. Hence why I feel like this story is a fabrication.

Out of curiosity, which premium features are you interested in? I looked at the feature comparison table and couldn't see anything I would consider essential for non-enterprise use, especially for the scope of school projects. After all, GNOME and (part of) Debian use the basic version and they seem to find it good enough for their needs.

But I suppose it's true that if GitLab wants to get students hooked on the premium features they should try to make sure it's easily obtainable by students.

The rules are pretty simple: https://sourceforge.net/p/proguard/code/ci/default/tree/src/proguard/optimize/evaluation/SimpleEnumClassChecker.java

If you have a non-default constructor or have any non-private, non-static fields or methods then it doesn't apply.

If you use Linux or OSX, you can use sshuttle to tunnel virtually everything, including DNS and Flash. It's faster than using a plain SSH tunnel, and easier than setting up a VPN.

> Actually, it's not on the Mac, either -- it's vaporware.

The author has code in github: TermKit

EDIT: That said, the 70x15 terminal and the bit about the permission bits makes me suspicious, too.

In the industry, a single person wouldn't be doing a project. Many people come together to build it. There is where GitHub or Git comes in. It's a tool that allows you to control the versions of a project and collaborate with multiple people on a project.

So, if you have the skill of Git, you automatically have an industry-ready skill.

Now, about pushing projects to a github repository. You don't need to start with the CLI tool. You can download the GUI tool to push your projects to GitHub.

But, learning the CLI commands will be helpful in the future, since all git repositories(not GitHub) will have a GUI client.

The link to the GUI client : https://desktop.github.com

Uploading to GitHub will help people who are looking at your code to see how you implement the project in terms of structure, documentation, presentation and following the coding conventions.

Also, it will introduce you to open source software.

And, even if you don't plan on showing other people your code, you can use it to your own advantage. You can control the commits that you do to your project, and if something goes wrong, you can revert quite easily to a previous version.

GitHub allows you to place the source and the releases in the same place and in an organised manner, and since it's a widely used tool, people won't be stumbling around to understand or locate the required files.

Cheers! :)