guappa

44 ms·

811.
by guappa 2y ago
OP isn't the author.
812.
by guappa 2y ago
The costs in hardware and electricity are incredible. To do the same as the big companies are doing is impossible, there is no funding to achieve it. The question is if it's needed at all to get good results. Also the big companies hav
813.
by guappa 2y ago
Seems people didn't read the link and are downvoting you, possibly because they don't understand what you're talking about.
814.
by guappa 2y ago
According to microsoft: "the user". There's companies that scan code to see if it matches known open source code or not. However they probably just scan github so they won't even have a lot of the big projects.
815.
by guappa 2y ago
I've seen self taught and graduates alike do that.
816.
by guappa 2y ago
I've seen seniors and above do that. They never cared about respecting software licenses until Biden said they must. Then they started to lament and cry.
817.
by guappa 2y ago
If a genocide supporter calls me a terrible human being, I'm clearly a good person. Dresden was a war crime and played no part in winning the war. Same with the atomic bombs.
818.
by guappa 2y ago
The population of Gaza has LITERALLY been decimated in the past year (10% died). If you don't criticise this, you are a terrible human being. Genocide is bad also if you do it on dark skinned people, FYI.
819.
by guappa 2y ago
"being born in israel" and "Join the army and take part in genocide" aren't the same thing, despite your tryhard attempts to make them into the same thing.
820.
by guappa 2y ago
Ah the old trick of calling racism if you voice disagreement with a government… At this point people like you have made the word "antisemite" completely devoid of any meaning.
821.
by guappa 2y ago
Not allegedly. They confirmed it themselves. https://snyk.io/blog/snyk-security-labs-testing-update-curso...
822.
by guappa 2y ago
Even just the username is sensitive because it gives hint on what to try with ssh attempts.
823.
by guappa 2y ago
It's signed by 34 people… I guess we can say it's completely irrelevant.
824.
by guappa 2y ago
Ah yes, add malware and sell malware detection. The perfect business idea.
825.
by guappa 2y ago
> The packages performed HTTP requests back to our researchers containing username, hostname, current directory and (in later versions) environmental variables. And exfiltration was needed to confirm a vulnerability why exactly? I love h
826.
by guappa 2y ago
On debian I do debdiff to see the differences between two source packages.
827.
by guappa 2y ago
> are number of collaborators You have any idea how easy it is to fake it? Also, snyk doesn't scan code that isn't on github, because they are under the impression that all the code in the world is on github, so things like gno
828.
by guappa 2y ago
I think NPM makes it worse because it's common to have hundreds, or thousands of dependencies. Which makes it easier to hide a malicious one in there.
829.
by guappa 2y ago
I use codeberg :) It has CI, pull requests, issues and whatnot. It also doesn't force you to use 2fa if you don't want :D If you do corporate open source though, you're stuck on github because snyk, openssf, pypi and whatnot
830.
by guappa 2y ago
I guess so… there seems to be absolutely no consequences to getting hacked, so from a business perspective it makes a lot of sense. It's not up to me to decide what policy to use, and if it was I couldn't just do whatever I wanted
831.
by guappa 2y ago
I was also sure until I found out that outlook refuses to search old emails.
832.
by guappa 2y ago
Sorry, I searched, it seems all my emails from before the last company rename are gone. edit: or microsoft outlook sucks… I tried to sort in reverse my inbox to see what's the oldest email there and "the request cannot be satisfie
833.
by guappa 2y ago
They're terrible already. If you invest enough in marketing nothing matters.
834.
by guappa 2y ago
Comments here seem to indicate that cursor did NOT ask them to (unless of course someone inside the company did and didn't tell the others)
835.
by guappa 2y ago
I just stick to using whatever is on my distribution for personal use. For work use I use a work machine and if it gets compromised it's not really my own problem.
836.
by guappa 2y ago
Given how all my interactions with them have been extremely negative (see my other comment), I think it's rather likely that there is foul play.
837.
by guappa 2y ago
snyk is the same company that instead of rotating oublic keys just… changes them without notice. https://github.com/snyk/cli/pull/5649 They also mark projects as "abandoned" if they move to any othe
838.
by guappa 2y ago
Yeah elks love to get drunk on rotten apples. Humans prefer rotten grapes.
839.
by guappa 2y ago
A lot of devs are hacks. If an AI can do your job you had no value as a software developer.
840.
by guappa 2y ago
I'd say Scott was the most incompetent of the lot. At least according to https://www.amazon.com/Scott-Amundsen-Last-Place-Earth/dp/03...

More ›