jacobsenscott

8 ms·

31.
by jacobsenscott 9mo ago
Classifying bugs as security bugs is just theater - and any company or organization that tries to classify bugs that way is immature and hasn't put any thought into it. First of all "security" is undefined. Second, nearly eve
32.
by jacobsenscott 10mo ago
I haven't used htmx, but I've given turbo a fair shake. I've only worked on server side rendered apps for my whole career, and they are generally they way to go. But just like react, or anything else, you throw enough enginee
33.
by jacobsenscott 10mo ago
AI can't pay taxes - but there's a fairly short list of names of people who should be paying taxes to offset the costs of AI.
34.
by jacobsenscott 10mo ago
Yeah - they don't work well at all. And work from home is definitely incompatible with roombas. Those things are loud and run for a long time. Both ours are in the storage room collecting dust.
35.
by jacobsenscott 10mo ago
Whenever I try and use a "state of the art" LLM to generate code it takes longer to get a worse result than if I just wrote the code myself from the start. That's the experience of every good dev I know. So that's my ben
36.
by jacobsenscott 10mo ago
> here's no other way to do it besides getting Claude to recreate it from a screenshot And > I'm an engineering manager I can't tell if this is an intentional or unintentional satire of the current state of AI mandates
37.
by jacobsenscott 11mo ago
Some guy smacks the kid with a light left hook at about 1:14.
38.
by jacobsenscott 11mo ago
The agent stuff is BS for the pointy hairs. This seems to address real problems I've had with PG though.
39.
by jacobsenscott 11mo ago
Well, my point is AI won't produce a better commit message than just reading the code. So either write a good commit message or don't write a message at all. AI just produces step by step descriptions that are easily gleaned by sk
40.
by jacobsenscott 1y ago
Yeah - if these are better than your current commit messages, just don't write commit messages. Anyone can read the code.
41.
by jacobsenscott 1y ago
Also don't use cron full stop. Build (or use an off the shelf) scheduler in your app that's more sophisticated, has access to data and client preferences, etc.
42.
by jacobsenscott 1y ago
Largely mitigated by twist lock sockets.
43.
by jacobsenscott 1y ago
Wayland works great for me. I use a rolling update distribution so everything is the latest version and I only use Firefox, a terminal, and emacs. Debian tends to be pretty far behind.
44.
by jacobsenscott 1y ago
This won't work - npm.* npmjs.* npmjs-help.* npm-help.* node.* js.* npmpackage.*. The list is endless. You can't protect against people clicking links in emails in this way. You might say `npmjs-help.ph` is a phishy domain, but np
45.
by jacobsenscott 1y ago
This phishing email is full of red flags. Here are example red flags from that email: - Update your 2FA credentials What does that even mean? That's not something that can be updated - that's kind of the point of 2FA. - It's
46.
by jacobsenscott 1y ago
Remember the pre package manager days was ossified, archaic, insecure installations because self managing dependencies is hard, and people didn't keep them up to date. You need to get your deps from somewhere, so in the pre-package man
47.
by jacobsenscott 1y ago
I've only used circleci and github actions for this, but in both cases precompiled rubies are available. On circleci you run your tests on a ruby docker image with the right version of ruby installed. On Github Actions I use https:&#x
48.
by jacobsenscott 1y ago
Uh, we've been doing data processing for nearly 80 years, and watching netflix for nearly 20 years. Suddenly we need to tile the earth with data centers, build power plants, burn all the fuels we can, and will "need to get to fusi
49.
by jacobsenscott 1y ago
I don't think you can. I also don't know why people care so much about it - I work full time with ruby and compiling a new version, which maybe takes 10 minutes, a couple times a year is no big deal.
50.
by jacobsenscott 1y ago
Just using `bundle exec` should handle that - that's what bundler is for.
51.
by jacobsenscott 1y ago
One thing I love about Ruby is it never devolved into ?VM hell like Python did. Yes, there are a bunch of ruby version managers, but there's only one bundler no matter how you get get ruby installed. I like some ideas here, but I'
52.
by jacobsenscott 1y ago
> catch bugs that even claude code misses on our Github PRs Is that good? I assume it just catches a different 10% of the bugs.
53.
by jacobsenscott 1y ago
You overestimate the vigilance of other professions. A Dr or Lawyer needs to screw up really badly, many times, before anything happens. They all go to the same country clubs.
54.
by jacobsenscott 1y ago
I'm not joking. Malpractice happens all the time. You being incensed is not the deterrent you think it is.
55.
by jacobsenscott 1y ago
Because the information people dump into their "ai therapist" is holy grail data for advertisers.
56.
by jacobsenscott 1y ago
It's already happening, a lot. I don't think anyone is claiming an llm is a therapist, but people use chatgpt for therapy every day. As far as I know no LLM company is taking any steps to prevent this - but they could, and should
57.
by jacobsenscott 1y ago
What if all your code is already written to use a filesystem, and you want to change the backing store from nfs to object store? Or what if you want to abstract away the specific blob store?
58.
by jacobsenscott 1y ago
It's unlikely my high school transcript exists anywhere. If it does it is in the basement of some government building in rural Wisconsin. So - 4.0 - straight A's, captain of the linux security team.
59.
by jacobsenscott 1y ago
We've seen this story many times before. Remember UML and Rational Rose, waterfall, big up front design, low/no code services etc. In every case the premise is "pay a few 'big brains' to write the requirements in so
60.
by jacobsenscott 1y ago
Mindlessly coding is stuff like gluing together libraries, components, and services that do the actual work, building simple CRUD UIs, copying AWS configurations to terraform, etc.

More ›