Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
TheDong
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
38 ms
·
541.
▲
by
TheDong
2y ago
You report it to the department of labor. The department of labor, in theory, investigates the complaint and you'll likely get paid: https://www.dol.gov/agencies/whd/contact/complaints Unfortunately, the
542.
▲
by
TheDong
2y ago
> Declarative languages are great for specifying these sorts of things Yes, good declarative languages are. I'm a happy nix user. I like dhall. cel is a cool experiment. jsonnet has its place. I stan XML. A language with byzantine t
543.
▲
by
TheDong
2y ago
yaml is roughly as disciplined as malbolge. Writing any meaningful amount of logic or configuration in yaml will inevitably lead to the future super-sentient yaml-based AI torturing you for all eternity for having taken any part in cursing
544.
▲
by
TheDong
2y ago
I'll give a shot at some guiding principals: 1. Do not use yaml. All github action logic should be written in a language that compiles to yaml, for example dhall ( https://dhall-lang.org/ ). Yaml is an awful language for
545.
▲
by
TheDong
2y ago
curl supports many things javascript doesn't. Like http proxies, tls versions, and half the other flags
546.
▲
by
TheDong
2y ago
> Instagram has been around less than 15 years. I'm suggesting you do what people did for the previous 100 years. You're not willing to do that to avoid ads? You're not willing to call or text your friends? The fact that i
547.
▲
by
TheDong
2y ago
> You could call the store or your friends, no ads there. If everyone called the store to check if they're open instead of looking on instagram, the employee would never get time away from the phone to actually serve customers, you&
548.
▲
by
TheDong
2y ago
> You can choose not to use any service that uses ads and only use ones that allow you to pay for ad free experiences. Ads are so incredibly pervasive I effectively cannot. There's stores I go to which only post their hours on insta
549.
▲
by
TheDong
2y ago
I pay for kagi, and that works okay. I would prefer if this search-engine / company-directory were government funded, and thus paid for via my taxes. It's a useful service for the people, and having the government also be able to
550.
▲
by
TheDong
2y ago
Do you have strong examples of this? Like, the SlapChop is a good counter example I think. The commercial demos the item, makes it looks useful, uses hot sales tactics, a bunch of people think "it's just 20 bucks, and chopping stu
551.
▲
by
TheDong
2y ago
In the old days, if I wanted someone to remove a tree stump in my yard, I would ask my neighbor who had a stump removed who did it for them, or open the yellow pages. In the modern age, I would open google maps (where companies can, for fre
552.
▲
by
TheDong
2y ago
This also means the function might not do what you want, i.e. if it takes a `&mut T` argument, that argument can't actually be mutated, and anything that relies on interior mutability, even if it's not a mut argument, also won
553.
▲
by
TheDong
2y ago
If you're not using something like npins or nix flakes then you're not really using nix correctly, and have abandoned the light of god.
554.
▲
by
TheDong
2y ago
If you have an ansible playbook that runs "apt-get install docker" you'll get a different version over time, even with no changes to your playbook. With nix, every package version change, every single diff, is a git commit wh
555.
▲
by
TheDong
2y ago
> What's the point of our existence if we have no way to meaningfully contribute to our own world? For a sizable number of humans, we're already there. The vast majority of hacker news users are spending their time trying to ma
556.
▲
by
TheDong
2y ago
> BTW, Rust has this problem more than other memory-safe languages Do you have a citation there? I've run into a ton of memory safety issues in Go because two goroutines concurrently modifying a map or pointer is a data-race, which
557.
▲
by
TheDong
2y ago
Do you think it'd be okay if they used a local LLM, via ollama, and this MCP server?
558.
▲
by
TheDong
2y ago
You're saying that having "enable full lockdown mode", but _also_ having a toggle in iMessage settings for "Disable automatic display of media attachments" would be less secure? The poster two above me couldn't
559.
▲
by
TheDong
2y ago
I want to respond to the strongest interpretation of your comment, but no matter how I read it, all I'm getting is "defense in depth is meaningless". Do you also think apple shouldn't have bothered building blastdoor san
560.
▲
by
TheDong
2y ago
I'd feel much safer if the message was filtered at the server, not on my device. It's not clear how much or little of the message is processed, but it's clear attacker controlled data lands on my device. > an option to som
561.
▲
by
TheDong
2y ago
It feels so ridiculous to me that a total stranger can send an iMessage message to me, including some attachment, and my phone will process that message in the kernel. How hard would it be for apple to have a setting of "Only receive m
562.
▲
by
TheDong
2y ago
> Also tmpname2 could be symlinked to /etc/passwd before it is unlinked.. Yeah, sure, but only if you run atop as root, otherwise it'll just get a "permission denied", and if you can run atop as root with whateve
563.
▲
by
TheDong
2y ago
We're not disagreeing. Even if there's no 'sploit there, people have spaces in their directory or file names, and it's kinda nice for your tool to work with those, so obviously you should be using an execve variant to pa
564.
▲
by
TheDong
2y ago
No one else seems to have run 'grep system(', so I will: https://github.com/Atoptool/atop/blob/037a6d3e4ace6c7be6c5dc... > system ("gunzip -c %s > %s", tmpname1, tmpname2") tmpn
565.
▲
by
TheDong
2y ago
https://github.com/Atoptool/atop/pull/327 and https://github.com/Atoptool/atop/pull/325 are the PRs with those commits. Come on.
566.
▲
by
TheDong
2y ago
1. Unsigned commits is the norm. It's weird to sign git commits. It's weird to upload your gpg key to github. gpg is a nightmare mess. 2. They aren't introducing the bug, those are all unreleased commits, so advice to "u
567.
▲
by
TheDong
2y ago
For non-public zero-days on packages in linux/BSD distros - https://oss-security.openwall.org/wiki/mailing-lists/distros For public issues - https://oss-security.openwall.org/wiki/mailing
568.
▲
by
TheDong
2y ago
The thing is, those "famous comments" are a form of survivorship bias. "People are saying Google Glass was silly, sounds like a dropbox comment, surely it'll become the next big thing" "People are saying the Hu
569.
▲
by
TheDong
2y ago
I would be surprised if Apple didn't have patents on their mic array, meaning that another manufacturer would ideally prefer if their setup is different and incompatible to reduce the chance of accidental patent infringement. I'd
570.
▲
by
TheDong
2y ago
They took on VC funding. A normal "small business" doing this could run with 3 software gals, 2 genetics guys, and a CEO that handles finances and management responsibilities. A "small lifestyle business" like that could
More ›