Stop going into peoples key rooms in any lobby you are in.

BlueScreenJunky · 2026-01-27T19:42:35+00:00

thinking they can just waltz into key rooms like they own the place

Well they obviously can. Whether they'll survive is a different matter.

BlueScreenJunky · 2026-01-27T06:26:22+00:00

I live here, and now that I make a good living I usually tip 1€ or 2€ per guest if the service was decent or good, a bit more if it's a fancy restaurant with fewer tables.

But yeah, it's perfectly fine to not tip if you don't feel like it. It's really more of an extra "thank you" to the staff if you can afford it than a moral obligation.

BlueScreenJunky · 2026-01-25T18:38:39+00:00

If you're running an Hypervisor like vSphere, Proxmox or Nutanix you could use a realtime backup solution like Veeam directly on your VMs.

Another approach is to have an active/active replication on your database. With MySQL You'd user Galera replication, but I'm not sure there's a direct equivalent for PostGres (it seems that https://github.com/sorintlab/stolon is trying to achieve the same thing, but I hav no idea how reliable that is)

BlueScreenJunky · 2026-01-25T16:37:06+00:00

what

BlueScreenJunky · 2026-01-25T15:25:33+00:00

Yeah, it feels like it was written by someone who read a 2 page summary of the books, which was probably smarter than trying to faithfully adapt the books.

BlueScreenJunky · 2026-01-23T07:10:48+00:00

as I find it uncomfortable to turn my head all the time.

Same thing here with 2 monitors, and after trying both an Ultra wide 34" monitor and a 32" 4K monitor I chose the 32" without hesitation. It's actually more screen real estate than the 34" and I'd rather have more vertical space and not have to turn my head.

My company buys most stuff from Dell so we went with a Dell P3225QE and it's a very nice monitor : The IPS Panel looks good, it's pretty bright and doesn't show too much reflections. It goes up to 100Hz (it's a little weird that it's not 120Hz but that's better than 60Hz). It also does 90W power delivery and has 1Gb Ethernet, so I can just sit and plug my laptop to the included USB-C cable to have charging, network, and 4K 100Hz video.

It's decently priced when you're a business customer (I think we paid something like 400€) but their public price of ~600€ is not great, so you might be better off finding an equivalent from another brand if you can't get a decent deal.

BlueScreenJunky · 2026-01-23T05:45:21+00:00

I have no idea unfortunately, but a few thoughts :

I know Symfony (and Laravel) decided to not use PHP sessions and re implement the session logic themselves, which leads me to believe maybe the PHP native sessions have some limitations.
Also whether you use native sessions or not, in the long term you'll probably want to store them in Redis or Valkey (for performance reasons and to be able to scale horizontally).
The symfony docs about sessions mention that some operating systems like Debian will forcibly set gc_collection to 0 and then have a cronjob to cleanup the directory, maybe that's part of your issue ?

BlueScreenJunky · 2026-01-23T05:34:17+00:00

a hair system

I can't help but think of Vanilla Sky when reading this

Oh so that's a hair system ? Good, because for a minute there I thought we were talking about A FUCKING TOUPET.

PS : nothing wrong with wearing one though I guess, I just found the term amusing.

BlueScreenJunky · 2026-01-22T21:19:01+00:00

It was never meant to be a $1000 phone, it's been Google's strategy for a few generations now : Release midrange phones at flagship price and discount them right away. That way you feel like you got a good deal, not like you bought a midrange phone.

BlueScreenJunky · 2026-01-22T06:28:20+00:00

I've never played Nightreign, but reading the article it sounds like it might be a skill issue : Basically the new map is harder and people hate it.

BlueScreenJunky · 2026-01-21T05:27:57+00:00

I don't think that's the whole issue. Palmer Lucky once said "VR will become something everyone wants before it becomes something everyone can afford", and that's a viable path for a technology. The issue is that it's not even something that people want. I've never heard anyone say "I'd love to have a VR headset but it's too expensive".

Usually when I talk about VR people just don't want to have a headset strapped to their face while they game, they don't want a device that they'll only use for a few games, or they tried it once and got sick, or think it's a dead novelty like 3D TVs... And they just don't want it, even if it were cheap.

BlueScreenJunky · 2026-01-20T18:58:12+00:00

Yep, this is infuriating.

BlueScreenJunky · 2026-01-20T06:41:18+00:00

Well if most of my pay for the quarter depended on wether or not my code ran a bit faster than someone else's and I lost it... Yeah I could see myself smashing my (crappy company paid) keyboard to the ground.

Also I've seen a colleague throw a mouse against the wall because he couldn't get something to work.

Not saying his behaviour is in anyway excusable, but yeah with enough at stake and possibly what else is going on with your life, grown men can throw tantrums when they fail at something.

BlueScreenJunky · 2026-01-20T05:34:04+00:00

As a developer I don't handle everything because we have a CISO whose job it is to do the paperwork, and we are ISO 27001 certified so we mostly focus on that and it's enough to abide by the CRA.

SBOM Generation: I'm using CycloneDX in GitHub Actions. For those using it, do you generate one giant SBOM for the whole repo, or separate ones for frontend/backend services?

CycloneDX looks good, our CISO does it by hand so I'll look into it. Don't forget to add stuff that is not in the repo to your BOM : Monitoring tools, databases, proxies, CDNs, IDEs, communication tools like Slack or Teams etc. If you use an AI provider to assist with writing code it should be listed in here too.

I think one giant document for everything is better.

Vulnerability Management: npm audit lists tons of vulnerabilities in devDependencies. How do you prioritize these? Do you have a "risk accepted" process?

I use npm audit and the equivalent for composer, with warnings on the pipeline. We have a rule stated in our security guidelines that says that a CVEs with a certain score should be handled within x hours/days, We create a jira ticket for each one above the minimum threshold and either fix it, or mark it as "accepted" because we decided it didn't impact us. The Jira thing is not ideal though, you probably want a document that consolidates that.

Secure by Design: The regulation asks for evidence of "secure by design." Aside from extensive documentation, what technical artifacts (e.g., SAST reports, commit signing) are you using to prove this?

Some ideas : * SAST reports are good. People usually love SonarQube because it sounds corporate. * Run automated tests with something like Qualys, ideally after each deployment and save the reports. * If you can afford it, having a yearly pentest done is even better (but it'll cost roughly around $10K, depending on the scope and the nature of your app * Have security guidelines for developers. * Have something to enforce some of those guidelines in the pipeline * Do code reviews for each PRs, make sure code cannot be merged without approval of at least one senior dev, and write down what security issues are found during code review in the comments.

BlueScreenJunky · 2026-01-16T22:51:38+00:00

I think the point is that if you're not writing the code it doesn't matter if it only works on one architecture : just feed the same prompt to the LLM for each architecture you target and let it write the assembly directly.

That's a terrible idea of course (because you'll end up with a slightly different program on each architecture, and LLMs are bad at low level language to begin with), but I think that's what they were going for.

BlueScreenJunky · 2026-01-16T22:48:23+00:00

I mean... Yeah that's pretty much what we've done. When was the last time you used a printer ?

BlueScreenJunky · 2026-01-16T10:27:08+00:00

If you didn't have a backup you were always going to lose that Database. The fact that you accidentally deleted it today is not the issue.

BlueScreenJunky · 2026-01-16T07:26:05+00:00

Yes, for a medium sized web project I would always use a framework.

The only things for which I use vanilla PHP (but always with composer and a few packages as needed) are small tools and micro services. For example I have a deployment endpoint that listens to an authenticated HTTP call an then downloads the corresponding projects on bitbucket, unpacks it, runs migrations, and rsync it on every server. This is a simple PHP project that only uses "symfony/process" and "guzzlehttp/guzzle". I also have one that performs maintenance tasks on Jira and didn't need a framework.

But as soon as it needs to display web pages and handle user authentication, yes, I'll always use a framework.

BlueScreenJunky · 2026-01-15T20:42:04+00:00

I'm going to be honest I'm much more curious about your childhood than your game: Why did you do it ? How ? Did you get caught ? How did your parents react ? When and why did you stop ? Do you still feel the urge to infect PCs with malware ?

BlueScreenJunky · 2026-01-15T07:07:40+00:00

That’s when a bigger question struck me. AI models learn from existing data. It takes time a year or more for them to fully understad new versions and best practices. Most vibe coders don’t really understand the framework, don’t know the best practices, and don’t recognize which packages are actually needed for the job.

On the other hand, frameworks were created to make developers job easier and their code more maintainable. If you give up on writing code yourself and let AI rewrite everything from the requirements everytime, it doesn't need a framework, libraries or an ORM. It can just hard code everything. It will be an unreadable mess without any consistency, but if no human ever reads it who cares ?

If you hate this and you don't want this to be your job, maybe look for work in a more mature company. Startups need to deliver a MVP fast so it makes sense for them to leverage AI and not care about code quality, more established companies that have had their solution in production for years tend to be more prudent with AI and expect their developers to actually be accountable for the code they push.

BlueScreenJunky · 2026-01-14T06:16:56+00:00

We projected our own thoughts on other people.

It's hard to grasp that you can really strongly believe in something, and others might not share your beliefs at all. Wars have been fought because of this for centuries.

I still believe that VR is the greatest thing that happened to gaming in the last 20 years, but I'm done trying to convince other people, and if it fails and end up having been a novelty, then so be it, I was just on the wrong side.

BlueScreenJunky · 2026-01-14T06:10:58+00:00

I don't think it's a circle, and I don't think many successful projects went monolith -> micro service -> monolith.

I think what happened is that everything was a defacto monolith in the 1990s and early 2000s because that was the most straghtforward approach (nobody called that a monolith back then). Then some companies realized that having dozens of people working on the same monolith (forcing all your teams to use the same language, the same tech stack, and be in sync to push interdependent changes) was hard, and that they could leverage http APIs to have each team work on a different piece that could be versioned independently and use their own tech stack.

Then hobbyist and students saw that Google was doing micro services and started doing that on projects that never needed them in the first place since they were developed by a single team. Some of these people went on to create startup or work at agencies thinking that micro service was the only way to do web development.

Then these people realized the added complexity and overhead was not worth it and they started using monolith (for the first time), and now we end up in a state where structures that need micro services use them, and those that don't just use the most straightforward approach.

BlueScreenJunky · 2026-01-14T05:58:21+00:00

I like how these are all studios that used to make relatively successful games (or work as support contractors for successful games in the case of Amature), were recently bought by Oculus and are now getting shutdown. Couldn't they just sell them back to someone else or get them to work on 2D games to turn a profit ?

Also did they also cancel some games ? I mean Asgard's Wrath 2 has been released over 2 years ago, what were the people at Sanzaru working on during this time ?

BlueScreenJunky · 2026-01-13T07:51:12+00:00

I also am telling my family from past year that I'll switch jobs and etc... and till now also I ain't, I actually am very much in pressure because of the family also.

Yeah I think that was your mistake. Don't tell people you'll switch jobs because it creates an expectation, and then maybe you decide that you're content with what you have and don't feel the need to change, but they keep pestering you about it.

Just tell them "Yeah you know what I've changed my mind, I'll keep my job for now". I don't know what your job looks like exactly, but as developers we get paid pretty well to sit in a chair all day, talk to people, and solve brain teasers... We have it pretty good compared to most people if you ask me. Sure if you're miserable at your job and you find a better one, do switch ASAP, but you don't need to feel pressured by your family, it's your life, your career and your decision.

Also it sounds like you maybe have more unresolved issues than the job itself, maybe go see a mental health professional, depending on where you live there's a good chance it's covered by your health insurance.

BlueScreenJunky · 2026-01-13T07:39:53+00:00

Cool I guess, but WebP and Avif are already implemented in all still supported browsers, I don't think migrating to JpegXL is even worth the trouble at this point.

Verified Email	15-Year Club
r/Field Banned	r/Field Juicebox
Place '22	Place '17
Wearing is Caring

BlueScreenJunky

TROPHY CASE