nine_k

12 ms·

361.
by nine_k 5mo ago
If the weird syntax of APL and J bothers you, you can use the familiar Haskell syntax! Jokes aside, types should help a lot.
362.
by nine_k 5mo ago
I wonder what part are they using for that tiny joystick. The only sources I found for purchase online are salvaged parts from thinkpad keyboards.
363.
by nine_k 5mo ago
Any keyboard can drive the mouse pointer. But trackpoint is an acceptable drawing device, while a keyboard is sadly not.
364.
by nine_k 5mo ago
The installed code may be run in different settings, under a different user, with different privileges. Say, it may not run in CI/CD at all, or run only with the test user's privileges. Postinstall scripts run at install time, wit
365.
by nine_k 5mo ago
...and only if you invoke it with --dangerously-run-postinstall-scripts; otherwise it will report an error if a postinstall script is found. This is definitely going to affect any packages that need to link to native code and/or compil
366.
by nine_k 5mo ago
In general, whatever has been made public, is hard to unmake public. There can always remain a copy. It is acutely true for peer-to-peer distributed systems like Radicle, but is still true for the more centralized GitHub, and for the Web in
367.
by nine_k 5mo ago
Botswana is also landlocked, and not very fertile. They have diamond mines though.
368.
by nine_k 5mo ago
Merchant caravans are known from ancient times. If there was something valuable to sell, there likely would be a way to transport it to a nearest port (even if abroad) and still make a profit.
369.
by nine_k 5mo ago
Specifically Mullvad operate completely stateless nodes, which was confirmed several times when law enforcement tried to access their logs. There are no logs. Mullvad are selling their location, with very good connectivity and with laws tha
370.
by nine_k 5mo ago
A backup WAN can be connected over USB, if it's a backup for graceful degradation when the primary high-speed WAN goes down. USB3 gives you a very decent speed, so if your WAN is not very fast (a typical 300-500 mbps home Internet conn
371.
by nine_k 5mo ago
Maybe the interviewer seeks to hear something like "This is UD, this code needs to be rewritten, should not pass code review. What prevents you from using -Wall when compiling?"
372.
by nine_k 5mo ago
Not all doctors are general practice doctors. I bet surgeons or cardiologists spend more time per patient.
373.
by nine_k 5mo ago
> just please don't make me come in to the office. But how do you pick up the stuff from your desk? I once lost a nice pair of headphones this way.
374.
by nine_k 5mo ago
Without caching, you build and rebuild and rebuild the same things over and over. With caching, a less strictly managed stage, such as a routine PR build, can affect high-stakes stages such as production builds. But if your builds are repro
375.
by nine_k 5mo ago
Is this switching risk-free? Consider all these ancient computer devices that run high-stakes equipment for years and decades without change. An RPi could replace an ancient PDP-11, cost a fraction, consume a fraction of energy, be faster,
376.
by nine_k 5mo ago
Yes, all stability in real life is metastability, it needs a constant effort to maintain. A worthy innovation can lower this effort, or lower the risk of a catastrophic failure. A complete stability is death.
377.
by nine_k 5mo ago
In the year 2026, on my Linux laptop (T14, Linux 6.18.26) I ran the following: lsmod | cut -f 1 -d ' ' | grep snd | wc -l And it responded: 53. Fifty three kernel modules are dedicated to sound. I, of course, never had to i
378.
by nine_k 5mo ago
Are root logins only allowed from that particular LAN? Because ssh localhost is a thing. I would say that the inability to obtain a session with elevated privileges from a normal session is key. The problem with sudo is that it gives the s
379.
by nine_k 5mo ago
Innovation is change, and change is the opposite of stability. Innovation can reduce pain though, if the current pain is strong enough. A stable stream of failures in production can be the kind of "stability" you want to disrupt.
380.
by nine_k 6mo ago
This only works if you had it as a kid. At the very least, you have to be old enough to have had it as a kid.
381.
by nine_k 6mo ago
Anyone who gets into the security perimeter may be in for a feast then.
382.
by nine_k 6mo ago
Note to self: the test suite for vetting a package should include setting the system date some time in the future, to check if an exploit is trying to sleep long enough to defeat the age limit.
383.
by nine_k 6mo ago
> comes out to ~$200 in tokens every time BTW a curated mirror of <whatever ecosystem> packages, where every package is guaranteed to have been analyzed and tested, could be an easy sell now. Also relatively easy to create, with
384.
by nine_k 6mo ago
Sorry, it was a typo; fixed. (French and Spanish orthographies differ here, but both names were accepted by the spellchecker.)
385.
by nine_k 6mo ago
There's no silver bullet, but getting an exploit into xz took extraordinary effort, a long time, and bespoke code, because it needed to slip under the radar of actual humans reading the code. A shai hulud-style attack won't work w
386.
by nine_k 6mo ago
Now that npm supports --before, yarn supports npmMinimumAge, and pnpm supports minimumReleaseAge, it's quite possible to stay safe and avoid acciasional bleeding-edge upgrades. Stay a couple months into the past, give testers time to l
387.
by nine_k 6mo ago
Abandon NPM in exchange for what? Cargo? Go get? Pip install? Every package manager that does not analyze and run tests on the packages being uploaded (like Linux distros do) is vulnerable.
388.
by nine_k 6mo ago
The value of guaranteed real stuff, with known provenance, still remains in the world of mass production; a "real Louis Vuitton bag" is still worth more than a very good copy, or a very good bag from an unknown designer. But most
389.
by nine_k 6mo ago
Gaming consoles typically have hardware attestation (as in verified software on verified hardware, sealed), and it has been broken many times in the past.
390.
by nine_k 6mo ago
Indeed, knowing the amount of tokens spent would be very interesting.

More ›