TheDong

36 ms·

601.
by TheDong 2y ago
Yeah, but now you have to teach your programmers about generics and applicative functors. I'm just a simple country gopher, but my brain isn't capable of understanding either of those things, nor are any of my coworkers, nor any o
602.
by TheDong 2y ago
> For example, Go's language guards against unused variables or imports, they are a compiler error. Assigning an `err` variable but not using it is a compiler error. Unfortunately, Go's language design also enables unused varia
603.
by TheDong 2y ago
They did say: > One big challenge it addresses is Linux’s driver problem Android devices have been plagued with vendors having out-of-tree device drivers that compile for linux 3.x, but not 4.x or 5.x, and so the phone is unable to updat
604.
by TheDong 2y ago
I feel like the incumbent for running llm prompts, including locally, on the cli is llm: https://github.com/simonw/llm?tab=readme-ov-file#installing-... How does this compare?
605.
by TheDong 2y ago
> probably against GitHub's ToS, but Why would running code on a github action runner that's built to run code be against ToS? If it was, I'm sure they'd ban the marketplace extensions that make it absolutely trivial
606.
by TheDong 2y ago
You can't since a large number of npm post-install scripts also make random arbitrary network calls. This includes things like downloading and compiling pre-compiled binaries for the native architecture hosted on random servers. npm is
607.
by TheDong 2y ago
You don't have any confidence beyond what lockfiles give you (which is to say the npm postinstall scripts could be very impure, non-hermetic, and output random strings). But if you require users to vendor all their dependencies, fully
608.
by TheDong 2y ago
You have to meet your users where they are. Your users are not using nix and bazel, they're using npm and typescript. If your users are using bazel, it's easy to separate "download" from "build", but if you&#x2
609.
by TheDong 2y ago
In what world do you have a machine which downloads source code to build it, but doesn't have outbound internet access so it can't download source code or build dependencies? Like, effectively the "build machine" here is
610.
Does iOS have sideloading yet?(doesioshavesideloadingyet.com)
129 points by TheDong 2y ago|199 comments
611.
by TheDong 2y ago
Creating a simple ray tracer for learning a language’s vector math libraries and parallelization tooling. An FTP client and server. An IRC client for the older protocol version. A gemtext parser and gemini client. A redis clone supporting o
612.
by TheDong 2y ago
You also need to specifically have the subreaper process call the "wait" syscall, and wait for all children, otherwise of course they'll end up reparented to init. If you want to write a process manager, one of the process ma
613.
by TheDong 2y ago
Yeah, I was assuming they have something calling `wait` somewhere since they say "HyperQueue is essentially a process manager", and to me "process manager" implies pretty strongly "spawns and waits for processes&quo
614.
by TheDong 2y ago
I think they don't want PR_SET_PDEATHSIG but rather PR_SET_CHILD_SUBREAPER, which I think would be both more correct than PDEATHSIG for letting them wait on grand-children / preventing grand-child-zombies, while also avoiding the
615.
by TheDong 2y ago
You still don't have enough information to really know; there are plenty of ways to legally be in a country. They could be on spouse visas, they could be natural-born citizens, born on american soil, but still haven't learned engl
616.
by TheDong 2y ago
I googled around, but I couldn't find an authoritative source showing either the numbers disqualified, the reasons, and that those ballots were majority not-trump ballots. Can you provide a source for that data for a specific swing sta
617.
by TheDong 2y ago
Where can I vote for "Medical establishments should have an accessible-friendly browser-accessible no-javascript webpage for all functionality"? I see the "democrat" and "republic" checkboxes, but I don't
618.
by TheDong 2y ago
The users of the sub-par app are captive, the hospital or insurance company is mandating it, and neither the doctor nor patients are free to choose a competing app. If you create a technically better app for the users, people still won&#x27
619.
by TheDong 2y ago
I don't know if that's a given. Needy Streamer Overload was the big visual novel of 2024 I think, which was Unity. The most popular modern-ish visual novels I know of, like Fate Grand Order, Dangenronpa, and Ace Attorney, aren&#x2
620.
by TheDong 2y ago
This was used to make 'Analogue: A Hate Story', which in my opinion was an interesting visual novel to read, with some more unusual interactive elements as well. It feels to me like 'Hate Story' and its sequel ('Hat
621.
by TheDong 2y ago
Different people seem to get wildly different results here, and I'm not sure what percentage is down to the type of software being built vs the usage patterns. In my case, I would guess less than 10% of the code I get out of AIs is use
622.
by TheDong 2y ago
I really like the tool for the little guys which requires a $100/hour+ lawyer both to create, and to enforce, and to gain any other benefit out of. Patents were created not to protect the little man, but with the intent of creating a v
623.
by TheDong 2y ago
I understand that, but my point is that an nginx config to just allow one path is easy to get right, and so for someone to get in, it wouldn't be automated scanning but rather a targeted attack with an nginx zero-day..... and if you ha
624.
by TheDong 2y ago
If someone is going around popping up-to-date nginx servers, then they have much bigger targets than my media server, and I also have much bigger problems. My threat model does not include someone using an nginx zero-day to find out what mo
625.
by TheDong 2y ago
This is still to be determined, based on whether the output of ChatGPT is copyrightable by ChatGPT, copyrightable by the requester, or something else. I think the two plausible answers are: 1. The person prompting (for example telling chatg
626.
by TheDong 2y ago
iOS etc have wireguard clients, but I personally have found it much easier to configure a long random path as part of the server URL and use that as a "password". ( https://server.com/$randomPath/ It's no
627.
by TheDong 2y ago
A lot of people are suggesting VPNs, or putting oauth or such in front of it. Unfortunately, oauth doesn't work since the jellyfin clients (like the android tv client, iOS client, etc) don't understand oauth. Using VPNs is annoyin
628.
by TheDong 2y ago
I'm totally not understanding what you're saying then. > Im just saying that all it takes is one employee to click onto the wrong URL to breach your apps security Pretend I'm a signal employee. What link can I click that b
629.
by TheDong 2y ago
I think this is puny; I can take down almost any site on the internet just by knowing the DNS name, and in exchange all I get is threats of criminal prosecution under anti-DDoS laws
630.
by TheDong 2y ago
I'd take away "security is complicated and multi-faceted", not "fake". It's not a black and white of "an app is truly secure" or "an app is truly insecure", but rather a continuum from &quot

More ›