dbaupp

13 ms·

61.
Pants 2.18.0 Is Released(blog.pantsbuild.org)
2 points by dbaupp 3y ago|0 comments
62.
Empathy in open source: be gentle with each other(smallcultfollowing.com)
47 points by dbaupp 3y ago|10 comments
63.
by dbaupp 3y ago
We get (very) close to cross-environment reproducible builds for Python with https://github.com/pantsbuild/pex (via Pants). For instance, we build Linux x86-64 artifacts that run on AWS Lambda, and can build them nativ
64.
Compress-a-Palooza: Unpacking 5B Varints in Only 4B CPU Cycles(bazhenov.me)
4 points by dbaupp 3y ago|0 comments
65.
by dbaupp 4y ago
Pants v2 supports dependency inference in a manner similar to what you’re hypothesising. It indeed can benefit from the general caching mechanism. https://blog.pantsbuild.org/why-dependency-inference/ It has been remar
66.
Two Hermetic Pythons(blog.pantsbuild.org)
1 points by dbaupp 4y ago|0 comments
67.
Weird architectures weren’t supported to begin with (2021)(blog.yossarian.net)
107 points by dbaupp 4y ago|93 comments
68.
by dbaupp 4y ago
I have the sense that migrating to any hermetic, cacheable build system will be more effort than migrating from one to another: once a project is “safe” to have everything run in sandboxes, the mechanisms for setting up those sandboxes is
69.
by dbaupp 4y ago
It seems to be quite active, with regular new releases. I’m lead to believe that https://www.toolchain.com/ is the main sponsor, but there are maintainers from other companies too. I do not know the details, though.
70.
by dbaupp 4y ago
We’ve had a good experience using Pants 2 ( https://www.pantsbuild.org/ ) and its dependency inference ( https://blog.pantsbuild.org/why-dependency-inference/ ) for Python. Although we are in a monorepo, r
71.
Need for speed: static analysis version(r2c.dev)
2 points by dbaupp 4y ago|0 comments
72.
Fast Incremental Builds with Speculation and Cancellation(blog.pantsbuild.org)
1 points by dbaupp 4y ago|0 comments
73.
Celebrating two years of Pants 2(blog.pantsbuild.org)
1 points by dbaupp 4y ago|0 comments
74.
Visualize your dependencies with Graph My Repo(blog.pantsbuild.org)
1 points by dbaupp 4y ago|0 comments
75.
Pants 2.11 adds Go Protobuf codegen, Pex lockfiles for Python, & parametrization(blog.pantsbuild.org)
1 points by dbaupp 4y ago|0 comments
76.
Lon Lat Lon Lat(macwright.com)
336 points by dbaupp 5y ago|222 comments
77.
by dbaupp 5y ago
Despite that slight misuse of terminology, the point stands: the article talks about estimating the entropy of a distribution used for generating a password, but the important thing is the “distribution” an attacker is using for guessing
78.
by dbaupp 5y ago
A distinct notion of “immutable” and “referentially transparent” are somewhat less useful in Rust, ownership essentially means most objects/types have the useful aspects of those properties by default (e.g http://smallcultfo
79.
by dbaupp 5y ago
Tools like semgrep allow catching injection-like issues like that. For instance, just among existing published rules: - shell=True: https://semgrep.dev/r?q=python.lang.security.audit.subproces... - system-like calls with a
80.
Greenery – FSM/regex conversion library(github.com)
5 points by dbaupp 5y ago|0 comments
81.
by dbaupp 5y ago
Unfortunately there’s more … interesting time zones than UTC+/-xx:00, and more interesting transitions than moving an hour. For instance, Nepal uses UTC+05:45, and the time shifted by 15 minutes in 1986 (from UTC+05:30): https:/&
82.
by dbaupp 5y ago
Duplicates could also be handled by using (L+1)^n, rather than 2^n, where L is the length of the input: even if all elements are identical one will end up with a unique value p = L * (L+1)^n. For an efficient implementation, one might want
83.
Acyclic Dependency Graph Representation for Cooking Recipes(notion.so)
1 points by dbaupp 5y ago|0 comments
84.
by dbaupp 5y ago
You can get at least down to 88% in the common case, since there's an unused bit in almost all characters (7 bit ASCII in 8 bit bytes). To actually realise this in practice, one would have to use an encoding that works with the Alphanu
85.
by dbaupp 5y ago
Unfortunately removing the www doesn't work with the current app. At least for the iOS app, I imagine that www.service.nsw.gov.au is an associated domain, but service.nsw.gov.au is not https://developer.apple.com/docume
86.
by dbaupp 5y ago
Yeah, the JWT is huge, and contains a bunch of unnecessary data, even ignoring the huge signature (132 bytes, I think?). It even uses error correction M, down from NSW’s H or the article’s Q. It looks like they still end up as version 18 de
87.
by dbaupp 5y ago
(For offline check-ins, that was my mistake even for NSW: https://news.ycombinator.com/item?id=28846384 ) I suspect having larger codes makes a big difference to the experience. It does seem like the Victorian ones are more
88.
by dbaupp 5y ago
Uh, huh, I clearly didn’t test it properly. I had thought I’d validated checking in while offline. Oops: https://github.com/huonw/huonw.github.io/commit/fd19b9d66af7... Thanks!
89.
by dbaupp 5y ago
Hah, the discussion and proposals there are remarkably similar. I hadn’t seen until you linked it! And yeah, the biggest win is definitely just making the code itself larger.
90.
by dbaupp 5y ago
Nice! Having documents programmatically generating the codes from the underlying data is definitely much nicer and more editable than hard-coding static images (I say this even after writing the blog post that does ridiculous things with SV

More ›