ptx

13 ms·

211.
by ptx 11mo ago
Hmm, I may have actually solved my problem. I think what I mostly want to do is this, if I'm working on the "feature-1" branch based on "main": $ git checkout feature-1 $ git reset main $ git commit -a -C fe
212.
by ptx 11mo ago
I do use fixup commits as well, for fixing small issues discovered after I make the proper commit, and in that case it makes sense to use the date and message of the earlier commit. But in the case I'm describing, the earlier commits a
213.
by ptx 11mo ago
What I would really like is a Git equivalent to Mercurial's "fold" operation. I usually make a bunch of commits as I work, just as checkpoints, which I then want to turn into a single final commit when it's done, which c
214.
by ptx 11mo ago
Thanks! Yup, that does the trick.
215.
by ptx 11mo ago
How? I tried recreating the scenario from the article (the section "First rebase –onto") and ran the first rebase with "--update-refs": $ git checkout feature-1 $ git rebase --update-refs main Successfully rebase
216.
by ptx 11mo ago
The lithium-ion battery analogy seems fitting: When we're not careful about sourcing those modern batteries from a trustworthy supply-chain, they tend to explode and injure the user.
217.
by ptx 11mo ago
I think the top-level comment was criticizing the entire feature (server functions) enabled by "use server". The vulnerability is in this feature, so (as I understand it) you're correct that grepping for "use server&quot
218.
by ptx 11mo ago
But is it a good idea to make it seamless when every crossing of the boundary has significant implications for security and performance? Maybe the seam should be made as simple and clear as possible instead.
219.
by ptx 11mo ago
It sounds related to me. The react.dev blog post [1] says that the vulnerability is > a flaw in how React decodes payloads sent to React Server Function endpoints and the react.dev docs for React Server Functions [2] say that > Ser
220.
by ptx 11mo ago
Isn't this (their async version of Io) essentially the same thing that Go is doing? I seem to recall reading about some downsides to that approach, e.g. that calling C libraries is relatively expensive (because a real stack has to be a
221.
by ptx 11mo ago
Couldn't that potentially cause problems for the person whose name you're using? I imagine it would likely violate Apple's terms of service and that person might risk losing access to whatever Apple services they rely on.
222.
by ptx 11mo ago
The point is that you don't have to: the unattended-upgrades part is separate from the major upgrades. You still get security updates for the previous stable release for a while after a new stable release, and the security updates can
223.
by ptx 11mo ago
Speaking of URI handlers, any idea what this bit in Microsoft's docs is supposed to mean? > Starting with the Windows 10 Creators update and in all Windows 11 versions, supported links clicked in Microsoft Edge Legacy will launch t
224.
Software Engineers Are Not Politicians(alexwennerberg.com)
3 points by ptx 11mo ago|4 comments
225.
by ptx 11mo ago
So apparently they use Bluetooth to establish the connection and WiFi for the data transfer. This sounds a lot like the "Alternative MAC/PHY" feature which was added in Bluetooth 3.0 and then removed in Bluetooth 5.3 [1] due
226.
by ptx 11mo ago
LWUIT wasn't particularly awesome, in my opinion. It was enormous and hideous and couldn't integrate with the native cut-and-paste functionality offered by some phones.
227.
by ptx 11mo ago
I imagine the statement is unpopular because it's deceptive and conflates different kinds of trust. If we (data subjects under the GDPR) voluntarily consent to have our data processed by them (the data controller), then we trust that t
228.
by ptx 11mo ago
That sounds consistent with their classic embrace-extend-extinguish process [1]. Embracing with no significant user-hostile moves is step 1, and then abusing competitors and users comes as step 3 of the process. They need to briefly look le
229.
by ptx 11mo ago
Don't you need a cert anyway to secure the connection from Cloudflare to your server?
230.
by ptx 11mo ago
> AI agents [...] work on your files in the background while you keep using your normal desktop I heard you like merge conflicts, so we put an agent in your user agent so you can generate merge conflicts while resolving merge conflicts
231.
by ptx 11mo ago
That was a great talk. I was somewhat skeptical of this change, but she really looked at it from every angle and makes a strong argument for the benefits of disallowing the construct. Also, I didn't know that (as mentioned in the talk)
232.
by ptx 11mo ago
Amazing. I thought they fixed that years ago with "XAML islands", but apparently [1] they un-fixed it again with WinUI 3 and still haven't re-fixed it? [1] https://learn.microsoft.com/en-us/windows/a
233.
by ptx 11mo ago
Just open it in a separate browser window then? Different windows can have different sizes and get separate buttons in the taskbar. I guess if you're using Microsoft's ill-advised window grouping feature it would work less well (r
234.
by ptx 11mo ago
Python has the same construct but is removing it, starting with a warning in version 3.14: https://peps.python.org/pep-0765/
235.
by ptx 11mo ago
Is that an AI-generated page pretending to be a wiki?
236.
by ptx 1y ago
Are there any plans to sandbox the content handling (e.g. HTML parsing and image loading) in a separate process to mitigate e.g. memory-safety issues and other security problems? Firefox [1] and Chrome [2] use seccomp-bpf and various other
237.
by ptx 1y ago
What about memory safety? Go uses garbage collection but FreePascal doesn't and is essentially as unsafe as C++, from what I understand.
238.
by ptx 1y ago
Didn't Netscape use Motif?
239.
by ptx 1y ago
If we're using "primary" to mean "first-party" (as in your original comment), then the system's built-in package installer is the most first-party of all, so it's definitely not "not primary". If
240.
by ptx 1y ago
> The word itself hardly has any negative connotations aside from something like "not primary", which might be argued as negative, but is nonetheless correct. Android has an APK installer built in. Opening an APK file launche

More ›