koreth
@koreth@lemm.ee
- Comment on ‘Star Trek: Prodigy’ Finds New Home At Netflix After Paramount+ Cancellation 1 year ago:
I don’t think Netflix actually cancels shows after two seasons any more often than other networks do.
Somehow people got it into their heads that Netflix is far more cancel-happy than its competitors, but if you look at the numbers, traditional TV networks have had like a 50% cancellation rate for decades. If Netflix is more prone to canceling shows at all, which I’m not convinced is even true, it can’t be by an enormous margin.
- Comment on Is there something better than SQL? 1 year ago:
SQL, where injection is still in the top 10 security risks
This is absolutely true, but it’s not what it looks like on the surface, and if you dig into the OWASP entry for this, you’ll see they talk about mitigation.
You can completely eliminate the possibility of injection attacks using well-understood technologies such as bind variables, which an ORM will usually use under the covers but which you can also use with your own queries. There are many, many database applications that have never once had a SQL injection vulnerability and never will.
The reason SQL injection is a widespread security risk, to be blunt, is that there are astonishingly large numbers of inexperienced and/or low-skill developers out there who haven’t learned how to use the tools at their disposal. The techniques for avoiding injection vulnerability are simple and have been well-documented for literally decades but they can’t help if a lousy dev decides to ignore them.
Now, a case could be made that it’d be better if instead, we were using a query language (maybe even a variant of SQL) that made injection attacks impossible. I agree in principle, but (a) I think this ends up being a lot harder than it looks if you want to maintain the same expressive power and flexibility SQL has, (b) given that SQL exists, “get bad devs to stop using SQL” doesn’t seem any more likely to succeed than “get bad devs to use bind variables,” and © I have too much faith in the ability of devs to introduce security vulnerabilities against all odds.
- Comment on Is there something better than SQL? 1 year ago:
it would be great to “just” have a DB with a binary protocol that makes it unnecessary to write an ORM.
Other people have talked about other parts of the post so I want to focus on this one.
The problem an ORM solves is not a problem of SQL being textual. Just switching to a binary representation will have little or no impact on the need for an ORM. The ORM is solving the problem that’s in its name: bridging the conceptual gap between an object-oriented data model and a relational data model. “A relational data model” isn’t about how queries are represented in a wire protocol; instead, it is about how data, and relationships between pieces of data, are organized.
So, okay, what if you get rid of the relational data model and make your database store objects directly? You can! NoSQL databases had a surge in popularity not too long ago, and before that, there have been lots of object databases.
What you’re likely to discover in an application of any real complexity, though, and the reason the industry has cooled somewhat on NoSQL databases after the initial hype cycle, is that the relational model turns out to be popular for a reason: it is extremely useful, and some of its useful properties are awkward to express in terms of operations on objects. True, you can ditch the ORM, but often you end up introducing complex queries to do things that are simple in SQL and the net result is more complex and harder to maintain than when you started. (Note “often” here; sometimes non-relational databases are the best tool for the job.)
And even in an object database, you still have to know what you’re doing! Storing objects instead of relational tuples won’t magically cause all your previously-slow queries to become lightning-fast. You will still need to think about data access patterns and indexes and caching and the rest. If the problem you’re trying to solve is “my queries are inefficient,” fixing the queries is a much better first step than ditching the entire database and starting over.
- Comment on Is there something better than SQL? 1 year ago:
You’re not missing much power with jOOQ, in my opinion as someone who has used it for years. Its built-in coverage of the SQL syntax of all the major database engines is quite good, and it has easy type-safe escape hatches if you need to express something it doesn’t support natively.
- Submitted 1 year ago to moviesandtv@lemmy.film | 17 comments
- Comment on Study: Streamers Now Wasting Record Amounts of Time Finding Something to Watch 1 year ago:
It’s not new, though. For example, here’s a Variety article from 2019 that uses it that way.
- Comment on Study: Streamers Now Wasting Record Amounts of Time Finding Something to Watch 1 year ago:
“Streamer” has been a widely-used entertainment-industry term for streaming companies for years. It’s not a new thing people are making up to be cute.
- Comment on lemm.ee plans for mitigating image upload abuse 1 year ago:
lobste.rs is an interesting case study. On the one hand, it sucked to want to join and be unable to! I was in that boat for a while. And it is also disappointingly low-volume; it can be hard to get much of a discussion going just because the user base is so small.
On the other hand, when a discussion does get going, it has easily the highest signal:noise ratio of any technology message board I’ve ever participated in. Very few low-effort posts, and a high percentage of well-thought-out, respectful conversations.
I’m not saying I think lemm.ee should follow this model, but it’s not without its merits.
- Submitted 1 year ago to experienced_devs@programming.dev | 3 comments
- Comment on You don't hate JIRA, you hate your manager - Derek Jarvis' Blog 1 year ago:
A bit off-topic, but why do people still insist on writing its name in all caps? That was the original name, granted, and you can still find it here and there in the tool, but it has been called “Jira” for years now.
- Submitted 1 year ago to moviesandtv@lemmy.film | 5 comments
- Comment on The streaming model is cratering — here's how that's hurting actors, writers and fans 1 year ago:
My intuition is that it’s probably in about the same range as the broadcast networks, but I have no numbers to back that up.
I don’t think it can be significantly higher or lower: if the cancellation rate were significantly lower, “streaming services always cancel after 1 season” wouldn’t have caught on as a perception, and if it were significantly higher, it wouldn’t be as easy to find multi-season streaming shows as it currently is. But is it slightly higher or lower? I have no idea.
- Comment on The streaming model is cratering — here's how that's hurting actors, writers and fans 1 year ago:
I actually did run some numbers on this at one point and found that the cancellation rate on network shows has ranged from 30-50% for the last 70 years, with the average number of seasons hovering just under 2. Reddit post with graphs and sources.
Running the same numbers for streaming services is trickier, and I couldn’t figure out a reliable way to get a good data set to analyze. But even so, the numbers for broadcast TV are high enough that it would be numerically impossible for streaming services to, say, be 3 times more likely to cancel a show after one season.
- Comment on The streaming model is cratering — here's how that's hurting actors, writers and fans 1 year ago:
It is unfathomable to me that people act like streaming services invented the concept of canceling series after just one season, or believe that it’s a new practice. Broadcast TV has regularly done exactly the same thing for its entire history. Streaming services almost always at least release all the episodes rather than leaving some of them unaired.
- Comment on The streaming model is cratering — here's how that's hurting actors, writers and fans 1 year ago:
As I understand it, that’s been the Hollywood jargon for streaming services for years.
- Comment on how do you spend your learning budget your company provides you with? 1 year ago:
O’Reilly books were my go-to when I worked at a company that had a training budget I had to spend every year. Not hard to rack up a couple hundred dollars of book purchases.
- Comment on Can you easily communicate in your country (business/private life) without being involuntarily forced to use whatsapp? 1 year ago:
US here, and yes, easily. I have WhatsApp installed on my phone but it’s probably been over a year since I used it last. SMS, email, and Facebook Messenger are the media of choice in my social circle. Work communication is over Slack and email.
But if someone wanted to use WhatsApp to talk to me, I’d use it without being bothered much.
- Comment on Episode Discussion | Star Trek: Strange New Worlds | 2x07 "Those Old Scientists" 1 year ago:
Saw this at the Comic-Con screening and it works better than I expected, especially the physical comedy. The exaggerated cartoon antics are still there, but toned down just enough to not seem out of place in live action.