Lead SRE at LINE Taiwan. Crafting observability stack. Prev: Infra Eng @tencentcloud. I play tennis. 🎾
Taipei, Taiwan
Joined October 2011
- Tweets1K
- Following1.2K
- Followers266
- Likes3.6K
John Lin retweeted
皆様に、今夜に対応して頂きたい大至急のお願いです。
多くのウェブサイトで使用されているPHPに関し、PHPのセキュリティチームが、重大な２件の脆弱性に関する注意喚起を行っています。
公開しているウェブサイトでPHPを使用しているか確認し、今夜、10月21日午後11時（日本時間）に公開される修正パッチについて、可及的速やかに適用できるよう準備をお願いします。
修正パッチを速やかに適用することが困難な場合は、例えばウェブサイト等を一時的に停止させることも、リスクを低減させるための有効策の一つと考えられます。
国家サイバー統括室のXアカウントでも関係する情報を発信していますので、そちらも参考にして下さい。
国家サイバー統括室(注意・警戒情報)（@cyber_forecast） / X
最近發現中華電信 HiNet 光世代下載 GitHub Releases 的 artifacts 或 GHCR 特別慢，速度甚至只有 54 KB/s。
看起來可能是路由或 peering 路徑的問題。如果也遇到類似狀況，可以試著在本機開 Cloudflare WARP，讓流量改走 Cloudflare 的網路；我這邊下載速度就恢復正常了。
John Lin retweeted
People of Pi: We've shipped Pi 1.0 with Pi Durable. Go make them yours.
earendil.com/posts/pi-1-0/
John Lin retweeted
1. Delete the docs you create to explain your code
2. Take the tokens you save on updating those docs
3. Spend them on making your code self-explanatory
John Lin retweeted
Split layout framework update. Since the last video: focus views animate, corner drags can move both axes, cross-window drag and drop with animation, all animations backed by CoreAnimation, and full accessibility framework integration (e.g. compat with VoiceOver).
The focus view work was the hardest and most complicated. We allow caller-provided SwiftUI views for the focus style, but have to drop that back to a native AppKit/UIKit hosted view for smooth CoreAnimation integration with our other animations so they move in lock-step with our other stuff.
Lot of work to get that to work, but I think it turned out great. The caller lives in easy SwiftUI land we handle that complexity.
The animation timings and curves need to be tweaked. I think some animations are too long or don't feel right. But thats just parameterization at this point...
John Lin retweeted
The US government, citing national security authorities, has issued an export control directive to suspend all access to Fable 5 and Mythos 5 by any foreign national, whether inside or outside the United States, including foreign national Anthropic employees.
The net effect of this order is that we must abruptly disable Fable 5 and Mythos 5 for all our customers to ensure compliance.
Access to all other Claude models is not affected.
We apologize for this disruption to our customers. We believe this is a misunderstanding and are working to restore access as soon as possible.
Read our full statement: anthropic.com/news/fable-myt…
John Lin retweeted
This is accurate, and you can make it more extreme in most cases today as: *build* your narrow-scope-dependencies, unless it is really a complicated stuff. In the second case, internalize it and specialize it.
Fork your dependencies, trim them to only your use case, never update unless it breaks for your users. I’ve been vocal about this for 10+ years. I’ve always said that updating is way riskier than latent bugs (which can be tracked and CVEs monitored).
If you are updating a dependency, it’s on you to analyze every single commit in the full transitive set of dependencies. If you dont see anything compelling, dont update!
I remember at HashiCorp once in awhile an engineer would try to update a dep or replace a DIY lib with an external one and id always ask “show me the commit we need.” Dont update for the sake of it.
Feeling pretty swell about this mentality with all the supply chain attacks happening.
John Lin retweeted
大多数程序员会慢慢出现两类症状。
一是不想写代码。因为写的没有 AI 快，也写的没有 AI 好，编程将沦为普通人的玩具（架构和工程目前还不是），程序员容易找不到成就感。
二是不想指挥 AI 写代码。由于一的存在，加上指挥一个没有感情的机器，去做自己不认可的事情，会比自己亲自去做更难受。因为躬身事中，疲于处理一个又一个的问题，会忘记自己的存在；而看着 AI 在自己不认可的方向，持续接近目标，会无数次巩固自己的存在。“我是谁？我在干啥？”
程序员应该做的，就是摆脱自己会写代码的标签，慢慢朝着用户价值层做迁移，去做自己认可的、喜欢的事情，或者用自己认可的、喜欢的方式做事情。😃
John Lin retweeted
Everybody is adding a feature where you can manage your agents from your phone. Don't use it. You'll just get even more addicted, and will burn out even quicker.
It seems that many large OSS projects have AI contribution policies, and you can see that their overall direction is consistent.
CMake
- Contributors are welcome to use AI...
- AI tools and services are not considered authors. They should not be listed as co-authors
Kubernetes Community
- Using AI tools to help write your PR is acceptable
- Listing AI tooling as a co-author, co-signing commits using an AI tool, or using the assisted-by, co-developed or similar commit trailer is not allowed.
github.com/kubernetes/commun…
gitlab.kitware.com/cmake/cma…
