Angelesen #77

Here we go again, didn’t get to sort a few links in the past few weeks so they come out of the link-wrangler a little bit delayed. Enjoy the weekend 🎉

A Ship Got Stuck. So He Built A Website. (warzel.substack.com)

It seems like, at one point, some journalists were using you as a resource, no?

Yes! It was hilarious but also a bit troubling — like, this is not how it’s supposed to work! I’m supposed to be looking at you! My favorite was when a journalist would tweet something and other people would like to the site to refute their reporting. I’m sitting here thinking ‘Wow you all have way too much faith in a random domain on the internet.’

Love the story – person registers domain world visits website and takes everything for granted.

🔒Leere Züge, leere Kassen: SBB unter Druck – wie weiter? (beobachter.ch)

Die GAs gingen 2020 um 60’000 zurück, ein Minus von 12 Prozent. Im Tarifverbund Nordwestschweiz, im Zürcher Verkehrsverbund und im Regionalverkehr Bern-Solothurn betrug das Minus bei den Abos sogar einen Viertel und mehr. Der Abwärtstrend hält ungebremst an. Der Branchenverband Alliance Swisspass erwartet für das laufende Jahr noch einmal 10 Prozent weniger GAs.

Tja, ich hab ebenfalls nach mehr als einem Jahrzehnt GA besitz dem ganzen den Rücken gekehrt, die letzten Jahre hatte ich es noch, weil es einfacher war – Fairtiq ist jetzt das neue und einfache und angenehme. Wenn die SBB und Konsorten in der Krise mit ihren Stammkunden ein bisschen besser umgegangen wären, ja dann wären es wohl nicht 10 % weniger Langzeitkunden.

Faktencheck zu Vogts Vorschlag – Kann das Gesundheitssystem 30’000 Neuinfektionen pro Tag verkraften? (tagesanzeiger.ch)

Sobald alle Risikopatienten geimpft sind, hält Arbeitgeber-Präsident Valentin Vogt 30’000 Neuinfektionen pro Tag für verkraftbar.

TL;DR : NEIN, NON, HELLNO!

Here’s to the crazy ones: lessons learned at Apple (faingezicht.com)

Code lives a lot longer than you’d expect. Something I started off as a little side project a year into my time in Maps became a fundamental dependency in other teams’ flows. Receiving questions and PRs from people across the company about it long after I was out of that group became a source of pride as time went on.

Got burned by this a few times – Expect code to live for a very long time even if the Upstream is long EOL – Looking at sites still running on PHP 5.6!

Silos can be good because they allow people to focus, but they’re only good as long as there are well-defined interfaces at the boundaries between teams.

Super important – This is the biggest danger if you switch to well defined teams – that in the beginning there might not be enough people till you get the team structure fully setup.

HTTPWTF (httptoolkit.tech)

Some of these skeletons are little-known but genuinely useful features, some of them are legacy oddities relied on by billions of connections daily, and some of them really shouldn’t exist at all.

e.g.

Cache-Control: private, no-cache It looks like this means "don’t store this response anywhere", right?

Hahaha no.

HTTP Goodread 🙂

Police warn students to avoid science website (bbc.com)

But Max Bruce, the City of London police’s cyber protection officer, has urged universities to block the website on their networks because of the "threat posed by Sci-Hub to both the university and its students".

University meet Internet, Internet meet University

Beeper – All Your Chats In One App (beeper.com)

Might give that one a try to see how it holds up against Rambox

Experience: I tracked down my impostor (theguardian.com)

I don’t understand why he chose me. I have an interesting niche subject, and love what I do, but I’m not the most prolific of academics. We never contacted the police, because we didn’t think he’d done anything illegal. It was really an issue of academic misconduct. The most upsetting thing – copying my hand tattoos – wasn’t something I could do anything about. He’s probably still walking around with those tattoos on his hands today.

Wow this is quite something

The French army is testing Boston Dynamics’ robot dog Spot in combat scenarios (theverge.com)

When they come for you – aim for the sensors – good luck

GitHub investigating crypto-mining campaign abusing its server infrastructure (therecord.media)

The attack involves forking a legitimate repository, adding malicious GitHub Actions to the original code, and then filing a Pull Request with the original repository in order to merge the code back into the original.

But the attack doesn’t rely on the original project owner approving the malicious Pull Request. Just filing the Pull Request is enough for the attack, Perdok said.

Neat, this attack vector is great!

Unter dem Rhein ist die größte Lithium-Quelle Europas (businessinsider.de)

Der Oberrheingraben ist Europas größte Lithium-Quelle. Es handelt sich hierbei um eine 300 Kilometer lange und bis zu 40 Kilometer breite Tiefebene zwischen Frankfurt und Basel. Unter der Wasseroberfläche des Grabens sind zehntausende Tonnen an Lithium verborgen, die Deutschland zu einem der größten Lithium-Produzenten der Welt machen könnten, wie das „Handelsblatt“ berichtet.

Wenigstens plündern wir in Zukunft unseren Vorgarten, nicht!

This blog is now hosted on a GPS/LTE modem (nns.ee)

For whatever reason, I thought it’d be fun to run my blog on this thing. Since we were working with limited resources (around 48M of space and the same amount of memory), and the fact that my blog is just a bunch of static files, I decided that something like nginx (as lightweight as it is) would be a bit overkill for my purposes.

darkhttpd seemed to fit the bill well. Single binary, no external dependencies, does GET and HEAD requests only. Perfect.

EPIC 😀