Mitch
4.8K posts

Mitch
@Mr_mitchellh
steaks, biscuits and gravy and chicken wings are life. If you hang with me we're getting tacos. Confluent community catalyst.
A compound in Missouri Katılım Ağustos 2012
1.5K Takip Edilen746 Takipçiler

@tlberglund Memcpy, especially with user input is a buffer overflow vulnerability.
English

When it just hits you in the face that this could only be C:
while(buf->len != buf->tot_len) {
size_t len = buf->len;
if(len + http_client->rx_bytes_received > http_client->max_rx_buffer_size) {
size_t remaining = http_client->max_rx_buffer_size - http_client->rx_bytes_received;
len = remaining;
}
memcpy(http_client->rx_buffer + http_client->rx_bytes_received, buf->payload, len);
http_client->rx_bytes_received += len;
buf = buf->next;
}
English

These were not the results I expected at all.
Gwen (Chen) Shapira@gwenshap
What's your preferred way of isolating databases?
English

@tlberglund @swimflythrive yall are in for the best and worst of times! I built, with help, our house. The decision fatigue is real. But dang was it a good time and the outcome is exactly what we wanted.
English

This marks the beginning of the physical component of the dream house @swimflythrive and I are building just outside of Denver. Here our GC is pictured doing something entirely safe. (The hole is for the septic soil test. This will be the first permit we pull.)

English

@Mr_mitchellh Is this really new and specific to LLM and AI though?
Security was an afterthought to the entire internet project. Patching it has been going on for 60 years now and the end is nowhere near.
English

MCP with access to production data can be useful for customer success.
Great use-case for read-only replica.
But! Even read-only replica risks leaking critical customer data to bad actors!
If only there was a tenant-aware database to prevent this.
Ram@sriramsubram
You should not use MCP against your production database! MCP is useful during development l/testing and it ends there
English

Pro-tip:
These days, ICMP is often blocked.
Which means ping and traceroute are pretty much useless when you need to debug some network mishap.
Use tcptraceroute instead. It traces with TCP packets to any port.
Package tcptraceroute exists for any Linux distro.
Example:
sudo tcptraceroute your.db.host 5432
Repeat to catch flakiness:
for i in {1..5}; do sudo tcptraceroute your.db.host 5432; sleep 2; done
English

@Mr_mitchellh Mitch, we need to do a technical therapist video series.
"Remember what we do when things just don't work?"
"Thats right, we enable logs"
"Yes, you also need to read them"
"I understand that Java stack traces are scary but I'm here with you. You are safe".
English

Years ago, when I was mid-level engineer, I traveled with our sales team to meet with a large potential customer. Closing a deal with them was crucial for us.
On the drive, the VP of Sales, asked me to do him a favor and use "Happy Ears" during the meeting.
"Do what?" I asked.
"You engineers, when you hear someone talk about their problems, you start telling them where they're wrong and how to fix it. That’s not what the customer wants from us. He wants us to listen, to show empathy, and only then to think together with him about what can be done to make things easier. ‘Happy ears’ is an approach where you listen actively, nod empathetically, but don’t suggest any changes until the customer is ready to discuss it—got it?"
For me, it was one of the most frustrating meetings I’ve ever had. Almost every sentence that came out of the client’s mouth sparked thoughts and ideas in my mind about how to improve and optimize their situation. But I practiced “Happy Ears.”
In the end, the customer signed a 7-figure annual contract with us, and I learned a huge lesson about sales and empathy. All we really want as human beings is for someone to truly listen to us. Only after genuine listening can we begin a process where the other side is open to hearing our ideas.
(And if you were ever on a sales call with me, you know that many years later, my “happy ears” skills are still work in progress)
GIF
English

@gwenshap Not to leave Java out, @coltmcnealy and i(and others) were looking at a docker container and found “animal-sniffer.jar”. mvnrepository.com/artifact/org.c…
English

When I saw:
"... requires ... via a transitive dependency on meow@3.7.0"
I honestly thought my team is trolling me. No way that "Meow" is a real JS library, right?

English

@vanlightly Make it up as you go along. Do what’s best and needed at the time. #icforlife
English

Congratulations to the community on a huge release. My favorite changes: new consumer group protocol (KIP-848), queues (KIP-932) and quality of life improvements for contributors (older Java versions dropped, ancient protocol versions removed, upgrade matrix simplified, etc.)
Apache Kafka@apachekafka
What a milestone! We are happy and proud to announce the Apache Kafka 4.0.0 release! It’s the first release without Zookeeper, and so many other core improvements like the new consumer group rebalance protocol (GA) and Queues for Kafka (EA) to just mention a few… \1
English

@Mr_mitchellh @gwenshap wait what? classic midwestern? certainly Hungarian
English

You could even argue that (with GraalVM), Java is now an API.
Colt McNealy@coltmcnealy
Much like Kafka and S3, Kubernetes is now an API
English

@MatthiasJSax This one actually makes sense to me. Microservices made up of ai agents, that are tied together in a workflow. Tech people ain’t good at names, and every new twist has to have a new name.
English
Mitch retweetledi





