Hacker Newsnew | past | comments | ask | show | jobs | submit | more slotrans's commentslogin

This is true, and in principle a good thing, but in the time since Parquet and ORC were created GDPR and CCPA are things that have come to exist. Any format we build in that space, today, needs to support in-place record-level deletion.


Yea so the thing you do for this is called "compaction", where you effectively merge the original + edits/deletes into a new immutable file. You then change your table metadata pointer to point at the new compacted file, and delete the old files from S3.

Due to the way S3 and the ilk are structured as globally replicated KV stores, you're not likely to get in-place edits anytime soon, and until the cost structure incentivizes otherwise you're going to continue to see data systems that preference immutable cloud storage.


You can avoid that if you save only per-user encrypted content (expensive, I know). That way you just should have to revoke that key to remove access to the data. Advantage is you cannot forget any old backup etc.


I mean, you can have it you’ve just got to be happy to bear the cost of rewriting the file every time you mutate a row.


My Zenfone 9 has a headphone jack. No SD card slot though, which I don't need.

So yeah, I voted for this position with my dollars, and will continue to do so.

Any phone with mandatory AI crap is Hard Pass.


1. customer enters their address in form fields

2. those form field values are templated into a GET request to the Meta tracking pixel (or POST request to the /events endpoint, or ...)

3. profit

they've made it very easy https://developers.facebook.com/docs/meta-pixel/implementati...


OK, based on your link the answer to my question seems to be: it's not a tracking pixel, but the "Meta Pixel", which the documentation describes as "a snippet of JavaScript code".


Welcome to the wonderful world of affiliate marketing, adtech, and tag management.

In that world, third party ‘tags’ that are included in a page are generally referred to as ‘pixels’. Sometimes they are single pixel img tags. Frequently they are scripts. But the industry calls them ‘pixels’ anyway.

It is, surprisingly, not a terribly honest industry.



I don't know why you're being downvoted, calling full access javascript embedded into a page a 'tracking pixel' is a total lie. Then again 'serverless' is where you use a server, so the track record isn't great.


I guess most people reading this already knew that the term 'tracking pixel' has evolved beyond its original meaning, and is now commonly understood to include all sorts of tracking code.

I did not, but now I know :)

(And although serverless doesn't mean 'no server', we know what the word means and it doesn't cause confusion.)


I also didn't know and I definitely don't like how it underplays the capabilities of the tracking.


>serverless

Doesn't the term confuse anyone hearing it for the first time? It sure did me.


it could have been much worse, I have seen passwords leaked this way

("seen" meaning "I worked at a company where this happened and read the code with my own eyes" not just "I read it in the newspaper")


Not sure about the goal of providing a hosted service cheaper than SQS. SQS is already one of the cheapest services on Earth. It's pretty hard to spend more than a few bucks a month, even if you really try!


That is fair. Two things to validate from a biz perspective:

1. Is there some threshold where this would make sense financially (n billions of messages.)

2. Are the extra developer features (ie, larger message sizes, observability, DAGs) worth it for people to switch?

Would love your thoughts - what, if anything, would make you even entertain moving to a different queue system?


Not the GP, but I also think you'll struggle to compete in the hosted service space.

Maybe you could add a web admin GUI as a paid add on?


What is your target market? Cloud-native is, like the commenter said, going to be difficult to differentiate based on cost. I can see this being useful for hybrid cloud (onprem instances), functional or local testing, “localfirst” workloads, enthusiasts etc.


Now you sound like an investor :)

My own vision is to take a queue that is relatively dumb and make it smarter. I want it to be able to, for example, allow you to rate limit workers without needing to implement this client side. And so on for all of the other bits that one needs to implement in the course of distributed processing.

I’m still figuring out the market. Very large firms spending thousands of queues? Or developers who want a one stop solution built on familiar tech? Or hosting companies who want to offer their own queue as a service?


I've heard this use case come up in hybrid new/legacy products where there is a chasm between legacy scalability (probably a monolith in the compute or storage layer, or both). The "new" side needs to be able to self-regulate and if you can put that into the service-side it would it would be a helpful transition enabler (and, let's face it, given these transitions often never finish your product would be effectively sticky).

I don't think the cost of queues is a problem anywhere (I'm sure it is somewhere, but not a market's worth). The problems created by queues, on the other hand, are myriad and expensive.


This depends on your definition of few.. but SQS costs us more than the servers handling the messages… It’s cheap until you do billions of messages…


"take a ticket and do the work" doesn't describe ANY software job I've ever had

it's all meetings, design docs, fighting in PR comments, agile ceremonies, etc etc

building things / fixing bugs is maybe 10% of the work


ORMs are such a toxic idea, we'd be better off if we could un-invent them. Look how thoroughly this poor author's mind has been poisoned by long-term exposure.

Please get out there and write some SQL. I promise it won't hurt you.


Little Bobby Tables would love that to pieces.


SQL injection is totally optional. If you use prepared statements, which are easier to use than formatting arguments yourself, it’s not a possibility.


Sure, if you do it right, you can avoid the problem, but why not use a tool that prevents the problem from happening in the first place?


So, parameters?

You absolutely 1000% do not need an ORM to prevent SQL injection. You just need to Not Be Flagrantly Incompetent. As the psycopg2 docs say: never use string concatenation, not even at gunpoint.


> Not Be Flagrantly Incompetent

You and I may not be, but, not to besmirch coding bootcamps, there are some great employees coming out of them, but not all of them are great. Some of them don't even know SQL, and training them up on it would take an inordinate amount of time, given their background. So it's a lot of trust to put in a team of building the hottest new CRUD app, when "use an ORM" is an easy enough answer.

For queries in the hot path, you can apply a senior dev to optimize, but their time is limited and wants to be used most effectively. From the pushback I've received, this isn't a universally held belief, but the right tool in the right place, there are places for it. You're absolutely right that you don't need one to prevent SQL injection, but just like using Rust simply avoids a class of memory access bugs compared to C++, ORMs just avoid the problem from happening in the first place.


Because you could do the data computations at the layer closest to the data ?


Those aren't the filters being used, not when there are hundreds of applications for a role.

You could be the platonic ideal candidate yet be screened out in the 0th round because you didn't go to a fancy school or you're missing one keyword from an irrelevant list.

Getting past the resume screening to a recruiter call is always worth it. Always.


Take .NET job positions.

Are they looking for the keyword “Csharp”, “.net”, “c#”, etc?


To further your point, what's actively developed now is called "dotnet" instead of the legacy ".net" (now ".net framework")


It always had name .NET Framework, and what we have now is called .NET.


You really think The New Guy can change an entire corporate culture through sheer force of will? You are literally the lowest person on the totem pole. You have ZERO social status, ZERO influence. If the rest of the org/company is culturally aligned around seriously bad practices, you are going to sound like an crazy person, even if you are the only sane one in the room. You are simultaneously Sisyphus and Cassandra.


Yeah. 7 jobs in a row. Maybe the next dice roll will work out, or maybe I'll finally leave the industry.


"The very people who comply with and execute the GDPR consider it to be positive for their company, positive for privacy and not a pointless, bureaucratic regulation."

I have been involved in multiple GDPR compliance pushes and I want to emphatically state the opposite position. It is not worth it. It is not worth ANYTHING. It should be destroyed.


Do you have more detail to share in support of such a strongly worded opinion?


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: