lazaroclapp

7 ms·

1.
by lazaroclapp 5mo ago
Interestingly, there are basically two kinds of programs I am sometimes happy to see guided tours embedded in: * Creation programs (image/video editors, 3D rendering... hell, even a slides program or an IDE). Doesn't mean I won&#x
2.
by lazaroclapp 2y ago
Actually, the technical advisory is even more pertinent to the HN crowd: https://www.qualys.com/2024/07/01/cve-2024-6387/regresshion.... And there is apparently already a discussion thread for it: https
3.
RegreSSHion: Remote Unauthenticated Code Execution Vulnerability in OpenSSH(blog.qualys.com)
2 points by lazaroclapp 2y ago|1 comments
4.
Rust Receives Sigplan Programming Languages Software Award 2024(mastodon.social)
2 points by lazaroclapp 2y ago|1 comments
5.
by lazaroclapp 2y ago
Not sure if there is an official announcement to link here vs the toot, either way a very well deserved award and a success story for fundamental PL research influencing industry practice and vice versa.
6.
More Feature Flags, Less Tech Debt: Launching automated feature flag cleanup(gitar.co)
2 points by lazaroclapp 2y ago|2 comments
7.
by lazaroclapp 3y ago
The easy answer when bringing up something like IntelliJ is that we very much intend to go beyond the IDE (local edit-build-debug loop) and beyond an specific programming language (or set of related languages in the case of IntelliJ). But i
8.
by lazaroclapp 3y ago
A cliche, perhaps, but build times and land times have always been a top priority of developers, particularly as tooling, specially code analysis, grows more complex. Developer tooling should be as blazingly fast as we can make it! (And o
9.
by lazaroclapp 3y ago
Well, an IDE is not fundamentally out of scope, but for the foreseeable future the plan there is more along the lines of plugins for common IDEs (e.g. VSCode, Jetbrains) and integrations with existing code review and code hosting services (
10.
by lazaroclapp 3y ago
Hi, everyone! We are some of the authors behind Uber’s OSS developer tools, which have appeared in HN previously, including: Piranha (automated stale flag cleanup and code refactoring), NullAway/NilAway (NPE/nil panic static detec
11.
Gitar: From the Team Behind Uber's Developer Platform(gitar.co)
15 points by lazaroclapp 3y ago|11 comments
12.
by lazaroclapp 3y ago
No worries, that's how I understood it too :) Just adding a bit more context on why we feel the approach does beat "grep panic" for people checking out this thread.
13.
by lazaroclapp 3y ago
We'd be interested in the general characteristics of the most common ones you are seeing. If you have a chance to file a couple issues (and haven't done so yet): https://github.com/uber-go/nilaway/issues
14.
by lazaroclapp 3y ago
Actually, if we were running into cases where we aren't logging a panic which is actually happening in production, then the first thing to note is that we need to improve our observability. The issue might or might not be recoverable
15.
by lazaroclapp 4y ago
Native Spanish speaker here (ES-MX, specifically, if it matters). I think this is one of the cases where a solid general rule breaks down in the specifics. You are correct about the difference between "ser" (to be, permanently&#x2
16.
by lazaroclapp 5y ago
> Isn't this pretty much the description of every company? For the most part, sure. But that's the parent's point, I think. Central banks are not companies, they are part of the public financial infrastructure of a natio
17.
by lazaroclapp 5y ago
While admittedly not as nice as having it built into the type system from day one, there are a number of tools one can integrate into their build to add various degrees of null safety to Java. Disclaimer: I am one of the maintainers of one
18.
by lazaroclapp 6y ago
Since this can make you think your cursor is in a different position in the page than it actually is, couldn't it potentially be used to mislead you to click outside the page as well? Possibly not into browser chrome[1], but what about
19.
by lazaroclapp 6y ago
Independently of that, an exceedingly large number of countries require visas from Chinese citizens. See https://en.m.wikipedia.org/wiki/Visa_requirements_for_Chines... This squares ok with geopolitical reasons, but no
20.
by lazaroclapp 6y ago
If this were the only criteria, then Chinese passports would be accepted visa-free in a lot more countries than they currently are. Not saying that travel bans will remain in place once the current pandemic ends (which might take a while st
21.
by lazaroclapp 6y ago
Presumably, Germany would have little trouble compelling at least one root CA to sign any TLS certificates they wanted. Just a cursory search shows that Google Chrome, on Linux, trusts, e.g. > CN = D-TRUST Root CA 3 2013 > O = D-Trust
22.
by lazaroclapp 6y ago
Just as an extra note: there are manual testing steps (and automated end-to-end test, and internal alpha test, etc), independent of whether the diff was Piranha- or developer-authored, but all those happen for the continuous delivery intern
23.
by lazaroclapp 6y ago
> When you set a feature flag, normally you should put a deadline on it, after this deadline, you should either choose to keep it, or remove it or you can extend the deadline. This is actually a feature we did identify as important to h
24.
by lazaroclapp 6y ago
Most of the existing Android codebase is Java. There is some Kotlin code, and PiranhaKotlin is certainly in the roadmap somewhere but, especially when the goal is removing older features, Java makes the lion share of the use case for such a
25.
by lazaroclapp 6y ago
We used Google's Error Prone framework. Pros: you get full compiler symbol/type information, in addition to the AST. Cons: you need to build the code to process it (Error Prone runs as a javac plugin), and if you want to do things
26.
by lazaroclapp 6y ago
Piranha co-author here. I'd say you trust it a bit more than we do, then ;) As the paper and blog post mention, we use Piranha to create diffs/PRs against the original author of the code. Developers are expected to code-review the
27.
by lazaroclapp 7y ago
> The way Uber brands them suggests that they're suitable for use in production environments, but so far that hasn't been the case with anything they open sourced outside a narrow envelope that resembles their own operating mod
28.
by lazaroclapp 7y ago
> It's even a truism now that computer defence against a well funded nation state is hopeless. This was arguably true (in the case of targeted attacks) even back then. That some civilian law enforcement agencies (and apparently the
29.
by lazaroclapp 7y ago
It's using the term as in definitions #2-3 (particularly 3b) here: https://www.merriam-webster.com/dictionary/colony , not #1. They mean colony as in "a colony of ants", not the political structure.
30.
by lazaroclapp 7y ago
Sure. Definitely already a thing! I know plenty of people from the US who joined a company in the US with international offices and then transferred (temporarily or permanently) to an office somewhere else. Singapore comes to mind, but I am

More ›