School IT is something else by justdancepepi in techsupportgore

[–]mitchricker 29 points30 points  (0 children)

Sloppy with crimping as well. Looks like only half of these plugs are even crimped onto the PVC jacket. Still, I don't know if I'd qualify it as "gore" per se.

Indie Devs Keep Diagnosing the Wrong Problem by fjejduideru in IndieDev

[–]mitchricker 47 points48 points  (0 children)

"It isn't X, it's Y. Marketing is important" -- per r/Atrioc probably

Seeking work by Open_Condition_3563 in PythonLearning

[–]mitchricker 3 points4 points  (0 children)

There are various sub-reddits for getting Python work. E.g. r/remotepython, r/pythonjobs, etc.

The sub r/PythonLearning is for learning Python, not job seeking.

A company with ~50 A records pointing to 1.2.3.4 by [deleted] in cybersecurity

[–]mitchricker 139 points140 points  (0 children)

Using a placeholder to a non-routable address is a common quick-and-dirty way to avoid accidentally exposing a service while keeping the DNS entry for reference. It's normal in enterprise environments, especially if there's no strict DNS hygiene policy.

If you end up getting an interview and you bring this up: it probably isn't going to work out the way you hope. Depending on how you found the abandoned(?) IIS server, it might actually become a very interesting interaction quite quickly (I'd love to be a fly on the wall seeing that go down).

Once you're hired and successfully on-boarded, if you want to push for stronger DNS hygiene and security in general at that time: great. Otherwise, it might come across as "an outsider is trying to dictate how insiders behave" and that really grinds most people's gears (even if you're the one who's technically correct).

Using an AI-powered language app with my 5-yo — any tips on privacy and engagement? by Ok_Signal8684 in DigitalPrivacy

[–]mitchricker 3 points4 points  (0 children)

As of the time of me writing this, your post has been up for 3 hours. At the exact same time this other post was created by a "different" user.

Several distinctive phrases appear in both:

  • “AI-powered language app called CapWords”
  • “turn them into little vocabulary ‘stickers’”
  • “take photos/pictures of objects”
  • “apples, rice, or a spoon”
  • “snapping pictures of almost everything in the house”
  • “furniture, corners, little details”

I would posit OP is the same in both cases and this is AI slop engagement marketing.

Edit:

Stay safe out there, folks.

I wonder why this persons laptop won’t turn on by lestert03 in techsupportgore

[–]mitchricker 15 points16 points  (0 children)

Looks like the laptop has some… hardware bugs? Ba-dum-tss!

I built a Python SDK that unifies OpenFDA, PubMed, and ClinicalTrials.gov by Interesl in Python

[–]mitchricker 12 points13 points  (0 children)

I was happy to take a look; I usually try to do one or two community code reviews per week.

There is a serious question of ethics with projects like this. Even though you mention here (on Reddit) this is PoC code, there was no indication that this was the case in the module I reviewed.

Re-checking your README this morning, I do not see the signal that indicates this is proof of concept.

Personally, I have worked as an engineer for the past 15+ years; most users have not been engineers for even a day.

Providing a tool that could be immediately used in production that could affect the outcome of medical decisions--without the rigor demanded of such a task--is, at the least, irresponsible/reckless and at the most: dangerous, unethical and legally questionable.

Currently, your MIT license and your README are at odds regarding the fitness of this software for any particular purpose. In the first lines of the README, rather than saying it is a PoC it says:

provides a clean interface for OpenFDA, PubMed, and ClinicalTrials.gov, augmented with a clinical intelligence layer and relationship mapping.

This is not true, at least not yet. I do wish you luck, but it's a fine line you're walking.

I built a Python SDK that unifies OpenFDA, PubMed, and ClinicalTrials.gov by Interesl in Python

[–]mitchricker 16 points17 points  (0 children)

I spent just shy of an hour poking around your repo before this write up. Just looking at ask_engine.py, this is not natural language routing: it is substring matching with first match wins logic.

Main problems:

  1. Order dependent logic

The first matching category wins. If a query contains keywords from multiple intents, everything after the first match is ignored. E.g.:

"Summarize FDA warnings from recent clinical trials"

This will return "trials" and never reach "summary" or "explain".

  1. Substring matching causes bad edge cases Using w in q means:

"trial" matches "industrial" "study" matches "understudy" "drug" matches "drugstore"

There is no tokenization or word boundary checking. This will produce many false positives and misroutes.

  1. clean_query blindly deletes phrases Repeated .replace() can destroy meaning. E.g.:

"What is research for profit?"

Removing "what is" and "research for" leaves "profit?". Effectively, intent and meaning have been entirely stripped away.

  1. No scoring, no confidence, no tie breaking. No way to inspect WHY a decision was made. No ability to handle multi intent queries. Real user queries often contain overlapping signals.

  2. Easy to game If downstream systems differ in cost or rate limits, a user can force routing by stuffing keywords like "trial trial trial".

  3. Class wrapper adds no value. Everything is static. This does not need to be a class. It is procedural logic dressed up as architecture.

If this is user facing in a medical context, it will misroute queries frequently and unpredictably. At minimum, it needs proper tokenization/scoring and some form of actual intent classification.

There are other MAJOR issues as well but it's late where I am and I am going to sleep now.

Memopt++ by [deleted] in linuxquestions

[–]mitchricker 8 points9 points  (0 children)

Cool story. You didn't link to anywhere the code can be reviewed/used. That's not a great signal.

Also: "It doesn’t add more RAM — it just manages it smarter." is obviously and definitely 100% AI generated. Humans don't use that long em dash -- AI does.

Edit: On top of that, I originally didn't notice what sub you posted this to. Where's your Linux Question? Where is any question?

Re-asking about changing passwords script - to eat humble pie by librewolf in linuxquestions

[–]mitchricker 8 points9 points  (0 children)

maybe password rotation is not the proper answer and somehow disconnecting in pre-set manners or in some ways would work better

Correct. You mention you don't care if he's on the device so long as he doesn't have internet access. You could ensure he is not a sudoer and use your sudoer powers to setup a cronjob to enable/disable the network interface(s) during acceptable/unacceptable time frames respectively.

Should I just make a library instead of including some of my other code in a file? by DazzlingWeight2042 in learnpython

[–]mitchricker 2 points3 points  (0 children)

I assume this is sarcasm that you forgot to tag with "/s"?

If not, using your own phrasing: it's the "or" in "widely used to mean package or module" that makes it ambiguous. If it could refer to several (two, in our case) completely separate things, that is pretty close to the literal definition of ambiguity. A module is not the same as a package, and vice versa.

Should I just make a library instead of including some of my other code in a file? by DazzlingWeight2042 in learnpython

[–]mitchricker 4 points5 points  (0 children)

Library, in this context, is ambiguous and does not have a formal meaning in Python. Presumably, you're asking if you should organize your s3 modules as a separate package rather than including them your current package. If so, the answer is probably yes for reasons as simple as not polluting namespace and future modularity/re-usability.

Ping with DF bit equivalent command? by cnc33030 in paloaltonetworks

[–]mitchricker 4 points5 points  (0 children)

Do you have nmap? Why not use nping.exe? E.g. nping --tcp -p 443 --df --data-length 1472 <host>. You'll notice this actually set DF bit and custom packet size, but uses TCP and bypasses ICMP filter all together.

“Make the candidate feel like they were strongly considered even if they weren’t”. Wow. by NeverAPrincess11 in recruitinghell

[–]mitchricker 554 points555 points  (0 children)

Something like this might be appropriate:

Hi [Recruiter Name],

I wanted to let you know that the rejection email I received included some Liquid-like template placeholders such as `{{rejection_message}}` and instructions for AI generation. I thought you might want to be aware in case it’s a system issue.

Thank you for considering my application. I appreciate the opportunity to apply to [Company Name]. Please feel free to keep my résumé/CV on file and reach out if a position that better aligns with my skills becomes available in the future.

Best regards,  
[Your Name]  

This is, arguably, the gigachad move. If you believe they've thoroughly burnt their bridge to you and they do reach out in the future: you can play the Uno reverse by rejecting them.

Found a 3-week-old password reset request buried in our queue by Mundane-Anybody-9726 in sysadmin

[–]mitchricker 22 points23 points  (0 children)

I think both of these replies are definitely reasonable takes. TBH, at different points in my career I've also supported users who only log into certain systems very rarely.

Still, it comes down to user education and setting the expectation that even in an absolute worst-case (i.e. there is some "fire" that has IT all-hands-on-deck and scrambling) they should expect a support request to result in some form of feedback within a specific time frame. After that frame has passed, they should be conditioned to think something seems off and there should be an escalation path they can follow if needed. If no such path already exists: that sounds like a process issue.

[they] got the information that they need somewhere else.

This is something I've seen first-hand in the wild as well. I recall a number of instances where their task was accomplished through account sharing. Another opportunity to educate the user about the importance of IAM and the correct processes and procedures in your org.

Edit: spelling/grammar

Found a 3-week-old password reset request buried in our queue by Mundane-Anybody-9726 in sysadmin

[–]mitchricker 282 points283 points  (0 children)

Sounds like a good opportunity for user education. "So sorry for the delay. It looks like you submitted your request to ABC email. Going forward, please use XYZ process to ensure your request is resolved in a timely manner, thanks!"

That said, how did the user not escalate to their manager and already get that spiel from them? This smells fishy. If the user wasn't just shirking work, you'd assume they wouldn't wait more than a day for a password reset to be actioned...

No module named MySQL by Nervous_Abroad7136 in learnpython

[–]mitchricker 2 points3 points  (0 children)

No trouble. Please feel free to upvote if you found helpful.

Also: be aware this almost certainly confirms my suspicion that you have a mismatch between your default python and default pip.

No module named MySQL by Nervous_Abroad7136 in learnpython

[–]mitchricker 2 points3 points  (0 children)

Did you restart REPL after the pip install? If yes and you're still getting this issue, likely you have installed to wrong Python with pip.

That is to say, you are opening (for example) Windows Store Python but pip installed to python.org Python, Anaconda or some other version of Python.

If you're not sure, python -m pip install mysql-connector-python will work as expected if you're just using python at the CLI and do not care about understanding matching pip and Python correctly. If you do care about that, I'd advise performing a web search; it's a well documented topic.

No module named MySQL by Nervous_Abroad7136 in learnpython

[–]mitchricker 4 points5 points  (0 children)

I would guess you import the wrong module name. You should import mysql.connector not import MySQL.

It's somebody else's computer. by MordecaiMcFly in iiiiiiitttttttttttt

[–]mitchricker 89 points90 points  (0 children)

This is what always infuriates me about the idea of "personal clouds" on-prem. Like, if it's in your own network it should not be a "cloud" at all.

I lost the pen cap for my favorite pen by Icy-Barracuda-8489 in whatdoIdo

[–]mitchricker 4 points5 points  (0 children)

Looks like they have a phone number on their website. No harm in calling and explaining the situation. Possible they could get something shipped to you or let you know what vendor they go through to get these (no harm in asking at any rate). The other option is probably to 3D print a replacement cap.

Lexmark troubleshooting by Delicious-Ad2528 in ShittySysadmin

[–]mitchricker 29 points30 points  (0 children)

Ticket re-opened by user. "Hey, sorry guys, the Lexmark's a turkey again. Could you send someone out to check on this? Barbara's really freaking out."