ollien

6 ms·

31.
by ollien 1y ago
I won't claim to be as well-versed as you are in security compliance -- in fact I will say I definitively am not. Why would you think that it isn't a meaningful difference here? I would never simply pipe sqlite3 output to `eval`,
32.
by ollien 1y ago
> It is also crazy to point that command at a production database and do random stuff with it In a REPL, the output is printed. In a LLM interface w/ MCP, the output is, for all intents and purposes, evaluated. These are pretty fund
33.
by ollien 1y ago
Untrusted user input can be escaped if you _must_ eval (however ill-advised), depending on your language (look no further than shell escaping...). There is a set of rules you can apply to guarantee untrusted input will be stringified and no
34.
by ollien 1y ago
You're technically right, but by reducing the problem to being "just" another form of a classic internal XSS, missing the forest for the trees. An XSS mitigation takes a blob of input and converts it into something that we ca
35.
by ollien 1y ago
What is the difference between a red button and a feature flag, anyway? The report says there was no feature flagging, yet they had this "red button". It sounds to me like something needed to be recompiled and redeployed.
36.
by ollien 1y ago
Always possible, just not something I really want to do :)
37.
by ollien 1y ago
I wrote my own CLI tool for notes a few months ago ( https://github.com/ollien/quicknotes ). A web interface with proper rendering is something I thought about, but didn't pursue because I just know my UI skills are
38.
by ollien 1y ago
> The product manager he sits next to has shipped 130 PRs in the last 12 months. When we look for easy wins and small tasks for new starters, it’s harder now, because he’s always got an agent chewing through those in the background. I&#x
39.
by ollien 2y ago
I haven't read the Haskell version (or at least, not more than a small portion and in a long time), so I can't comment on the comparison, but what did you find insufficient about the "So what's Erlang?" section? I t
40.
by ollien 2y ago
What constitutes a garden? Does a small front lawn count?
41.
by ollien 2y ago
Great post! One question that lingered for me is: what are asynchronous safe-points? The post goes into some detail about their synchronous counterparts
42.
by ollien 2y ago
No, but a RISC-V partner-made mainboard was just announced.
43.
by ollien 2y ago
I've heard that positive spin responded to with "this company is my biggest investment, I'm not going anywhere" :)
44.
by ollien 2y ago
> In WET code (write everything twice) everything looks primitive, as if it was written by complete newbie, and every change needs to be added at multiple places, but each change is trivial and time to finish is predictable. I would go a
45.
by ollien 2y ago
Oh nice! I'll admit, my comment was based on outdated knowledge (the last time I used Pyandtic for a major project was in 1.x). https://github.com/pydantic/pydantic/issues/1339
46.
by ollien 2y ago
Pydantic falls into this box for me. The maintainer refuses to build API reference documentation, as they feel that there should only be one source of information. It's their project, of course, but every time I need to find a method o
47.
by ollien 3y ago
If you're in the market ever again, take a look at the Sony Linkbuds. I've enjoyed mine for exactly this reason
48.
by ollien 3y ago
AFAICR it still "works" if you do a ton of manual setup. They basically said they're not going to support it because it's bad PR
49.
by ollien 3y ago
How do single-threaded programs benefit from a lack of GIL?
50.
by ollien 3y ago
I mean, you're not wrong, but also it's a huge feat to provide a toggle for a major feature like the GIL. Though, if it's just asyncio that's broken, perhaps it's not like removing your engine, but rather your antil
51.
by ollien 3y ago
The joke is that I got to be a bit of a smartass and say "you asked me to print double-sided, well here you go!" I was a much different person then in terms of what I considered to be acceptable (who wasn't, at 16?), but I st
52.
by ollien 3y ago
Heh... did you look me up? (EDIT: I forgot I recently commented about my highschool tenure until now. Hah!) Yeah, this was 2015-2016. Yes, the school printer and my home printer supported it, I was just forgetful and a bit of a smartass :)
53.
by ollien 3y ago
Funny story - when I was in high school, my physics teacher used to get on my case about not printing my lab reports double-sided, and how I was wasting paper. The next time I handed one in, I printed double-sided, but I put "This page
54.
by ollien 3y ago
Python does have enums in its standard library https://docs.python.org/3/library/enum.html
55.
by ollien 3y ago
No, I agree. Sorry, my phrasing there was poor. I meant: it is completely reasonable to say that "he has seven days to download it", not that it is completely reasonable for him to only have seven days.
56.
by ollien 3y ago
The six-month grace period notice pretty clearly states his data would be read-only, while the seven-day notice seems to be the first time destruction is even mentioned. I think we can both agree that there's a world of difference betw
57.
by ollien 3y ago
It is one that can be found via static analysis. That may not be true if behavior is changed. In some cases, this may be "ok" (see: Go's recent loop changes), but in others, it may not.
58.
by ollien 3y ago
I admittedly just got my Framework a couple of days ago, but I found scaling the text size to be sufficient in quite a lot of cases, at least for me, in XFCE.
59.
by ollien 3y ago
Yeah, some of the wifi drivers aren't available in the stock W11 image.
60.
by ollien 3y ago
I really wanted to try plasma with i3 but the big problem I ran into was that different monitors can't have independent workspaces, which was a deal breaker :(

More ›