maxbond

31 ms·

391.
by maxbond 1y ago
Seems pretty simple, the lock overrides the release, and when the vehicle detects a collision it unlocks the doors.
392.
by maxbond 1y ago
You should check out Flexbox and Grid. They're fantastic and aren't as brittle as table layouts (eg you can reflow things on mobile rather than having a big horizontal scroll bar). There is some complexity but the dev tools help a
393.
by maxbond 1y ago
The vast majority of artists don't have those kinds of resources. That's a lot like saying, "programming is just making infrastructure for surveillance." That's where the money is, a lot of programmers are working i
394.
by maxbond 1y ago
I'm partial to the piriform curve [1], which I call the "gumdrop curve." I had a lot of fun trying to make a game where the characters were gumdrops. I could change either parameter (width or height) while keeping area consta
395.
by maxbond 1y ago
I assume you're asking because there has only been one major crash of the financial markets since 2008, but there have been numerous cycles local to cryptoassets (eg the NFT/web3 driven cycle several years ago). So, the answer is
396.
by maxbond 1y ago
I certainly didn't mean to imply that Julia's community was incompetent or that they were not doing integration testing. CRAN's approach (which is mandatory integration testing against all known dependents enforced by the p
397.
by maxbond 1y ago
I'm reminded of the recent post about R's (CRAN's) somewhat radical approach to integration testing [1] and I wonder if something like that would help with the composition issues described here. [1] https://news.yc
398.
by maxbond 1y ago
I don't disagree I just don't see how that contradicts anything I've said. I don't see why that would mean we should be okay with leaving a malicious package in the repository after we find out it's there, whether i
399.
by maxbond 1y ago
An offensive tool is one thing but a piece of malware meant to act within the supply chain (either at build time or runtime) is a different story. You tell the difference by reading the code and finding eg a crypto stealer, like Socket did
400.
by maxbond 1y ago
I can understand why there's a research interest in publishing malware but I don't understand why there would be in publishing it to a language's official package repository. If you want to experiment with repositories hostin
401.
by maxbond 1y ago
Sure, I'm not saying those projects should be automatically deleted or something. Just that it's worth looking into. Maybe you put a message on the package's page notifying potential users and put it into a moderation queue.
402.
by maxbond 1y ago
Maybe checking new packages for the following: - Substantially the same README as another package - README links to a GitHub that links back to a different package And additionally: - Training a local LLM on supply-chain malware as they cap
403.
Today is Stanislav Petrov day(en.wikipedia.org)
68 points by maxbond 1y ago|13 comments
404.
by maxbond 1y ago
Hello HN, 42 years ago today, lieutenant colonel Stanislav Petrov chose not to launch missiles against the United States while on duty in the Serpukhov-15 missile bunker after receiving what he correctly judged to be a false alarm in a earl
405.
by maxbond 1y ago
Can't respond for them of course but I didn't take the impression that it was already fully implemented, working, and functionally necessary. I took the impression they had started going down that path but it was still easy to bai
406.
by maxbond 1y ago
> Non-sequitur,and imaterial to the discussion. You said: > The whole point of a TTL is to be able to tell whether a cache entry is still fresh or it is stale and must be revalidated. So I responded to it. I don't really understa
407.
by maxbond 1y ago
Agreed, simple and widely applicable heuristics are great, and you can think deeply on it when and if it proves to be an issue worthy of such attention.
408.
by maxbond 1y ago
A TTL doesn't really tell you if it's stale though. It gives you an upper bound on how long it can have been stale. But something becomes stale when the underlying resource is written to, which can happen an hour or an instant aft
409.
by maxbond 1y ago
If we don't use a TTL, aren't we going to have to either accept that our cache will grow without bounds or take an even more sophisticated approach (like tracking access times instead of creation times)? Is there something simpler
410.
by maxbond 1y ago
Seems like it's available on all the major providers.
411.
by maxbond 1y ago
To be honest, while there are definitely religious fundamentalists or literalists who suffer from this kind of thinking, I don't find it to be any less prevalent among people who identify as atheists or rationalists. It's a proble
412.
by maxbond 1y ago
I can understand being nervous about some cron job running on some other service, but what's concerning about a cron job managed inside of Postgres with pg_cron? If that doesn't run, your database is probably down anyway. Postgres
413.
by maxbond 1y ago
Expiring keys in Postgres with a created_at column and a pg_cron job is very easy (at least, if you're comfortable in Postgres). Redis is world class though of course, and can be deployed turn-key in basically any environment. If you&#
414.
by maxbond 1y ago
I like to call cases like this "premature distribution." Or maybe you could call it "premature capacity." If you have an application running in the cloud with several thousand requests per day, you could probably really
415.
by maxbond 1y ago
The YouTuber Milo Rossi [1], who debunks archaeological conspiracy theories (and makes educational content about archaeology) likes to say (paraphrasing slightly) "you don't need to make up conspiracy theories to be mad at the gov
416.
by maxbond 1y ago
Excellent. Thanks.
417.
by maxbond 1y ago
Will you consider providing a feature to protect me from accidentally using my Zed account after the $5 is exhausted (or else a plan that only includes edit predictions)? I can't justify to myself continuing my subscription if there&#x
418.
by maxbond 1y ago
I'd say that isn't a JSON dialect because that's postprocessing applied after parsing, versus hooking into a YAML parser to change the semantics of how `no` is parsed. But it is a good point. I did run into a project once wit
419.
by maxbond 1y ago
Halloween isn't for a few more weeks, but this framework for creating bespoke YAML dialects that can only be parsed by a specific implementation and with the correct type annotations will scare the pants off of your devops colleagues a
420.
by maxbond 1y ago
The timestamps remained accurate! That's awesome.

More ›