jchw

23 ms·

331.
by jchw 9mo ago
Agreed. Arguably, though, it would be much more reasonable to trust cmd/go to verify a dependency than it would to trust your own code. A lot more effort is put into it and it has a proper security process established. So I think the p
332.
by jchw 9mo ago
Yeah, Hacker News does that. I've heard you can simply edit the title after submitting to fix Hacker News' "fixes" but I've not submitted enough things to give it a try.
333.
by jchw 9mo ago
Go MVS does not require you to blindly trust 3rd party libraries. Certainly not "current and all future versions". Go modules also offer hermetic and reproducible dependency resolution by default.
334.
by jchw 10mo ago
Unfortunately, I don't know. I have never used Gemini CLI.
335.
by jchw 10mo ago
This doesn't make any sense to me. If you wanted to verify the contents of a dependency, you would want to check go.sum. That's what it is there for, after all. So if you wanted to fetch the dependencies, then you would want
336.
by jchw 10mo ago
I dunno about Gemini CLI, but I have tried Google Antigravity with Gemini 3 Pro and found it extremely superior at debugging versus the other frontier models. If I threw it at a really, really hard problem, I always expected it to eventua
337.
by jchw 10mo ago
The MVS choices will be encoded into the go.mod; you may have been correct in the past, but as the post mentions transitive dependencies have been incorporated since Go 1.17. So yes, really: the only point of go.sum is to enable checking th
338.
by jchw 10mo ago
X11 as a protocol will probably continue to work ~forever. X11 as a display server will continue to work ~forever as long as someone maintains a display server that targets Linux. KDE and GNOME will not support X11 forever because it's
339.
by jchw 10mo ago
There's no obvious reason for an end used to switch to Wayland if there isn't any particular problems with their current setup, the main improvements come down to things X11 never supported particularly well and are unlikely to be
340.
by jchw 10mo ago
But that's not really what I mean. What I am trying to say is that "solving" the problem doesn't really fully solve it after all.
341.
by jchw 10mo ago
What I'm saying is, I disagree that "we know" these things. We know that there are bugs that can be statically prevented by having non-nullable types to enforce contracts, but that doesn't in itself make null the actua
342.
by jchw 10mo ago
I wonder if some day we'll look back differently on the "billion-dollar mistake" thing. The key problem with null references is that it forces you to either check any given reference to see if it's null if you don't
343.
by jchw 10mo ago
> This is the fundamental misunderstanding. The RAII ctor/dtor pattern is a very general mechanism not limited to just managing object (in the OO sense) lifetimes. That is why you don't need finally/defer etc. in C++. You
344.
by jchw 10mo ago
I grasp the entirety of why people differentiate "finalizers" from "destructors", but in my opinion, the practical differences in their application are not the result of the concept itself being fundamentally different
345.
by jchw 10mo ago
The difference, IMO, between a mock and a proper "test" implementation is that traditionally a mock only exists to test interface boundaries, and the "implementation" is meant to be as much of a noop as possible. That&#x
346.
by jchw 10mo ago
It would suffice to say I don't always agree with even some of the best in the field, and they don't always agree with each other, either. Anders Hejlsberg isn't exactly a random n00b when it comes to programming language des
347.
by jchw 10mo ago
I don't view finalizers and destructors as different concepts. The notion only matters if you actually need cleanup behavior to be deterministic rather than just eventual, or you are dealing with something like thread locals. (Historic
348.
by jchw 10mo ago
Destructors and finally clauses serve different purposes IMO. Most of the languages that have finally clauses also have destructors. > Syntax is also less cluttered with less indentation, especially when multiple objects are created that
349.
by jchw 10mo ago
On another similar but different note, I don't think I've ever uploaded any code written by LLMs to GitHub, but I do sometimes upload fully complete projects under my "initial commit". Some people may legitimately just h
350.
by jchw 10mo ago
It's frustrating. "Just Eat Less" is roughly the way to lose weight, but the problem is not that fat people are so unbelievably stupid that they didn't know this. I am sure for some people it really is that simple. N
351.
by jchw 10mo ago
It's not that I don't believe it is likely, it's more like I don't like spreading an unqualified stereotype that I haven't actually validated in any way other than personal anecdotes. It's not like it's a
352.
by jchw 10mo ago
The operative word is "day laborers". These are people who work on a day-to-day basis. In America at least, there is a large contingent of people who are informal day laborers, especially Hispanic immigrants apparently, although I
353.
by jchw 10mo ago
This is exactly why I upgrade to the Pixel 10 Pro. On Black Friday, you could get a Pixel 10 Pro for about $450 on the U.S. Google Fi store (which sells unlocked phones)... which is also about how much a Pixel 9 Pro goes for on eBay; minus
354.
by jchw 10mo ago
On that note, from the TCP layer it should just look like an ICMP blackhole, which makes me wonder if enabling `net.ipv4.tcp_mtu_probing` will magically make TCP connections under Wireguard work even with the MTU set wrong. I'd try it,
355.
by jchw 10mo ago
Note that I am not defending the merits of Google's lawsuit, but they did describe in this very post what they believe distinguishes their scraping versus SerpApi. > Stealthy scrapers like SerpApi override those directives and giv
356.
by jchw 10mo ago
Hah! I just ran into this recently and can confirm. The coax to my DOCSIS ISP was damaged during a storm, which was causing upstream channels to barely work at all. (Amusingly, downstream had no trouble.) While waiting for the cable perso
357.
by jchw 10mo ago
COSMIC seems cool, though I don't love the visual style myself. Someone I know who used it ran into the problem that it mounts network shares using a mount unit, which is good, but it doesn't add nofail, which is really really bad
358.
by jchw 10mo ago
The only major ideological component of this matter is that both the free software movement and the open source movement are concerned with the rights of end users, not the sustainability of businesses. That's really it. Open source
359.
by jchw 10mo ago
> Because you do not get it: this is not Android. There is no fixed UIDs. Uhhh... I didn't say anything about fixed UIDs. > There is no fixed absolute paths. There is if your distribution says there is. > The binaries are not
360.
by jchw 10mo ago
I was trying to make the point that "unfree" software is not really useful at all to the "open source" community, and not because of terminology nitpicking but because of the consequences that has. But anyway, my problem

More ›