bostik

39 ms·

451.
by bostik 4y ago
I read it the other way round - untrusted input is used in various places where doing such inline checks is prohibitively tricky. The examples given are quite telling: json, xmlrpc, logging. First two are everywhere in APIs. The third is ju
452.
by bostik 4y ago
Rewrote. Foundation has been described as a condensed retelling of "The Decline and Fall of the Roman Empire". Terminus is an outlier and an observer in a universe that goes through the convulsions of the slow, but inevitable brea
453.
by bostik 4y ago
I've always said that Cryptonomicon is either 300 pages too long - or 600 pages too short. As a riposte, I have been informed that Quicksilver supposedly contains those missing 600 pages that complete the second storyline. Haven't
454.
by bostik 4y ago
From what I've read, in Spain there was for a long time (may still be?) pretty effective/expensive legislation against installing solar panels anywhere. Reason? Regulatory capture, with energy companies lobbying hard against any
455.
by bostik 4y ago
(Snark incoming!) Entitled much? Try having a family, and getting a place with a garden. Around Islington decent places like that go for around £2M. With the most lenient lenders you can get a mortgage for 5.5x your annual income, so in ord
456.
by bostik 4y ago
> there is no energy personally spent by the driver to stop and start their car Funny, in a way. An old ... acquaintance used a corollary of this back in the 90's. Because he drove a truck, stopping it and then getting it moving a
457.
by bostik 4y ago
> people make a lot of excuses when confronted with something that they do not want to do I am a cyclist who would want to do it a LOT more. And the main reason is two-fold. One: cycling in London is scary, dangerous and extremely st
458.
by bostik 4y ago
Thank you for the correction. And indeed, "complex" would have been the right term. My bad.
459.
by bostik 4y ago
> Some tests are actually very hard to write — I once led a project that where the code had both cloud and on-prem API calls I believe that this is a fundamental problem of testing in all distributed systems: you are trying to test and
460.
by bostik 4y ago
I read some time back about an article (and wish I had bookmarked it) about the "types" of salt. That particular one classified [non-millable] salts into three different categories. Table salt: the fine, iodine-added salt you get
461.
by bostik 4y ago
You have a good open, but when you drop the 1912 line at the end of the opening bit, it's practically crying for a topper. If there's anything in local history you find interesting that happened that year (or even better, in the p
462.
by bostik 4y ago
It's called "not stepping on a laugh". When you land a punchline, you sweep the crowd for a few seconds. If you then start a new one before the laugh has finished, you are not just breaking the illusion of having told the jok
463.
by bostik 4y ago
> water itself is horribly corrosive Funnily enough, this is technically true, but would only manifest in a warped reality. In the acidic/caustic scale, regular water is just slightly on the caustic side of neutral. (pH 5.5 or the
464.
by bostik 4y ago
> current audits are inherently worthless And that's not helped by the warped incentives. Security has to be, fundamentally, assessed as a holistic thing and even highly skilled technical people can't really do that with mode
465.
by bostik 4y ago
We (read: I) face this on an ongoing basis. We can't upgrade the entire components that bundled up log4j for various reasons, starting from licensing rules. So we made the decision to strip out the entire JndiLookup class from every
466.
by bostik 4y ago
Actually, they are. We have working people in the UK in the situation where they would be delighted to have to choose between "heat" and "eat". Because now they are forgoing both. FFS, children are stealing toilet rol
467.
by bostik 4y ago
Probably because it was NOT flagged as spam and has a document attached. I wish I was being facetious.
468.
by bostik 4y ago
If by extending you mean that you want to have a type that includes ALL the functionality of another type, without needing to fill in each method, that's already supported. In your new struct definition, include the desired base type
469.
by bostik 4y ago
> SHA1DC detects attempts to spoof SHA1 in a way that leads to collisions This is the kind of detail I would have loved to see quoted directly in the article. Sure enough, it's prominently displayed on the project's README::a
470.
by bostik 4y ago
I can name a couple of industries where compliance (and their enforcement arm, security[0]) teams require N+1 different monitoring and enforcement agents on all systems because Compliance[TM]. Due to these agents the systems' IDLE lo
471.
by bostik 4y ago
I found an image of what looks like a modern variant of the same old model: https://www.picclickimg.com/d/l400/pict/262947020842_/Clarks... The difference between the old ones that those pictured above a
472.
by bostik 4y ago
Clarks had an absolute killer product on their hands around 2007 or so. Full leather sports sandals, with strong but easy-to-operate magnetic clasp, and no seams on inner surfaces. Joy to wear. Practically immune to chafing and blisters. Ex
473.
by bostik 4y ago
To handouts and corporate welfare. Whether through incompetence, design or outright corruption, it doesn't matter. State has been and continues to be cut, with functions moved over to (read: bought from) private providers. But because
474.
by bostik 4y ago
That's a good point, thank you. I wasn't aware of it, or at least didn't actively remember the fact. But it makes sense and circles on the same thing. Curve grading only makes sense when the cohort being evaluated is large an
475.
by bostik 4y ago
So true. Curve grading works well when the cohort is large and heterogenous. (Like, say, Finnish matriculation exams. >20k people in a single cohort, and each individual exam within the whole thing with at least 5k people in them.) As fa
476.
by bostik 4y ago
In the non-optical domain, that used to be a feature in the most expensive cable measuring gears (to the tune of €25k about 20 years ago). I had the pleasure of using one of the devices that had that when I wired my old house. Borrowed the
477.
by bostik 4y ago
Under that rule of thumb, The Wire and Babylon 5 would never have been made. And from a more recent sample, The Expanse would not have been allowed to get to the end of the story arc. All three have a few things in common. A strong cast of
478.
by bostik 4y ago
I tend to be mostly supportive of meritocracy as a driver, but with a pretty wide carve-out. When you declare something to be a meritocracy, you also have to answer one fundamental question: who gets to define merit? Taken to its (il)logica
479.
by bostik 4y ago
> Having 1000 NPM packages is better for your reputation than having 100. And having all 1000 packages with lots of weekly downloads is better than having just a portion of that. Should we treat them as spammers and polluters, then? Be
480.
by bostik 4y ago
I think promotions to the next level should just be considered a new job (in the same company), and you don't 'win it' or get promoted - instead you apply for it and go through an interview process. That sounds like a recip

More ›