If you don’t want to go full Cloudflare you can mitigate DDOS using these kind of technique locally.
https://blog.nginx.org/blog/mitigating-ddos-attacks-with-nginx-and-nginx-plus
Cloudflare will be a lot more effective in case of attack. But I don’t think most people need more than a few mitigation rules. If DDOS really come, there are very few things you could do to mitigate anyway.
I think unlike Google, there are still many pure engineers that need to contribute to open source to be motivated and are still have some power.
I feel, but I am not sure, that for Google, thing have switched more and faster to the side of Big soulless corps.
Generally speaking my experience is that even in these big soulless corps there are positive and passionate people. But quite often they do not have enough decision power to have a positive impact.
I use this nice trick to use Clojure has a bash script. This auto-download clojure so this id quite portable and reproductible.
Previously I also used Haskell’s turtle lib that could run with a portable shebang and it could even be compiled later if you need more speed.
I don’t see how this could be positive for any Software developer in the long run. I totally see how this could be positive for CEO/CTO, Project Managers, in the long run, and I see a few short term advantages for Software developers.
Let’s be clear, I saw that coming since Microsoft bought Github, and I am scared by the direction this is taking. The end goal is to move more and more control and power to non-software people about Software development.
By forcing every developer to not use their own tools this will have a lot of advantage for CEO/CTOs but this is terrible for software developers:
And I can think of other possible drawbacks but my comment is already long enough.
I don’t see how this could be prevented.
There are already many “small web” movements. With different proposals. Like gemini, sub-set of currently supported web standards (typically no-js, no-css, no POST, etc…)
But the monetized web is doomed to reach a point were it will be controlled in such a way that you will not be able to block ads, not be able to hide your pseudonymous identity.
I remember reading an article many years ago about the cat and mouse game between ads publishers and ad-blockers. The conclusion were that in the end, ads blocker will lose the final war. And with these kind of system we are closer and closer to reach it.
I think we need to collectively find a way to have sub-nets. For example declare that our website conform to certain sub-net properties.
The small webs are different for everyone. It would be very nice if we could put an HTML header that would list which small webs pattern this page is compatible with. And have a browser that would adapt to your preferences and also a way to filter your small-web preferences in search engine.
The closest to this we have today is probably gemini. But this a very small but friendly web. I am sure we could find other solutions to create an alternative “respecting his users” web.
As you only mention git and not any git hosting. I would say you could easily use git hooks. Fir you and probably ask everyone in your team to install the same git hooks to have a chance to review changes before they are commited.
For my team there is an init-git-repo.sh shell script in our repository. When you execute it, it will install all the git-hooks fir your local repository.
You can use them to add checks during commit, merge, etc…
Edit: I read a bit too fast. As you are using bitbucket there id probably the equivalent of github’s CODEOWNER file as already proposed in another comment.
“Do the right thing” in corporate speak generally means to obey some business conduct to prevent any risk for the company to be sued. Mainly, take care of interest conflicts. Do not personally contribute to hide such issue and there should even be an internal team taking care that if you tell the truth your managers could not retaliate.
Mainly, “Do the right thing” is about protecting Google. Not “Do the right thing for the world and strive for progress”.
Google stopped to try to create progress. Instead they just need innovation. This is what they are after. Innovation, not progress anymore.
nix does not need nixOS to run but is a complex package manager. At least for me, it doesn’t seem more complex than docker ecosystem.
I personally use nix to take care of downloading compatible dependencies in isolation for me. And the rest of the code is really, just basic script shell or Makefile too.
I also could add a fancy mergeShells
function I have written in nix to support a docker-compose-like composition of nix-shell
files.
But you could go a very long way with nix before you even want to do something like this.
I use a similar approach, but I went further by creating a system that compose like docker-compose would. The trick was to write my own nix function mergeShells
.
https://her.esy.fun/posts/0024-replace-docker-compose-with-nix-shell/index.html
For now, I am pretty happy with it. Also, I put the init script inside nix-shell and not in external files and use exit signal to cleanup the state.
Clojure is pretty decent.