rectang

22 ms·

391.
by rectang 1y ago
I’ve done all those things myself (past ASF member where all that and more was SOP), so I realize what I’m asking for. It’s not crazy for authors of small packages to form small collectives and serve as each others’ trusted third parties.
392.
by rectang 1y ago
There are ways, but at a high level, I don't care. I hate how modern package managers have come to value author convenience over downstream user security.
393.
by rectang 1y ago
The conclusion I'm coming to is that depending on packages which only have a single author is problematic. There are too many ways that packages published by one person can be compromised. Packages which don't have approval and r
394.
by rectang 1y ago
Two-factor auth for publishing is helpful, but requiring cryptographically signed approval by multiple authors would be more helpful. Then compromising a single author wouldn't be enough.
395.
by rectang 1y ago
You've presented your argument as if rebutting mine, but to my mind you've reinforced my first paragraph: * You are trusting large numbers of trustworthy developers. * You have established a means of validating their trustworthine
396.
by rectang 1y ago
I don't understand your critique. Establishing a false identity well enough to fool a FOSS author or organization is a lot of work. Even crafting a spear phishing email/text campaign doesn't compare to the effort you'd
397.
by rectang 1y ago
It's true that smuggling multiple identities into the whitelist is one attack vector, and one reason why I said "cut down" rather than "eliminate". But that's not easy to do for most organizations. For what it
398.
by rectang 1y ago
The mic on [wired] Earpods sounds great because you can make the design work when the mic is on the wire down where lapel mics go. It's harder to get Airpods to sound great because the mic must be located inside the ear.
399.
by rectang 1y ago
It's not unreasonable to trust large numbers of trustworthy dependency authors. What we lack are the institutions to establish trust reliably. If packages had to be cryptographically signed by multiple verified authors from a per-orga
400.
by rectang 1y ago
Acronym expansion for those-not-in-the-know (such as me before a web search): WAI might mean "working as intented", or possibly "why?"
401.
by rectang 1y ago
I used to hate Airpods in videochats since they made the person wearing them sound bad because of dropouts, had heinous latency, and frequently disconnected causing meeting interruptions. But people think they're "better" th
402.
by rectang 1y ago
Launchpad is an easy gesture with the trackpad (pinch with thumb and three fingers), then type to filter and return to launch. I got used to it for stuff I don't keep in the dock (which is a lot, since I have the dock on the side and o
403.
by rectang 1y ago
Kudos to your legal team for working with you to provide a quick response. Licensing grants are momentous decisions it exceeds my expectations for you to act within the span of hours.
404.
by rectang 1y ago
Financial exploitation of oppressed culture by the dominant culture. Fetishization of minority figures as exotic and mystical. Crowding out minority voices when establishing critical narratives around minority art and culture. These sorts
405.
by rectang 1y ago
I chuckled, but at the risk of getting slapped with thatsthejoke.gif, Tommy Flanagan falls back to playing chords at the end of his piano solo. Comping on Giant Steps is easier than soloing.
406.
by rectang 1y ago
While the critique of this author seems unjustified, I think we do well to grapple with issues like this and not dismiss them outright. The problem is real, even if this may not be a good example.
407.
by rectang 1y ago
Deification of artists in theory writing is commonplace, as is aspiring to be seen as an authority. The subject matter could have been Mozart, or Picasso — you'd see the same phenomena. I agree that we have some distance to go in ensu
408.
by rectang 1y ago
“Quantity has a quality of its own.” — Karl Marx, or maybe Coltrane.
409.
by rectang 1y ago
A few months ago, I was studying Giant Steps and I came across the “Giant Steps is actually very simple (yes, really)” video by Dave Pollack. https://www.youtube.com/watch?v=Xd75Mwo4JNo Pollack argues that the main reason
410.
by rectang 1y ago
I use Git with Lilypond[1], text-based music notation software: https://lilypond.org/ It's akin to working in LaTeX with Git, in that there's a source file that gets tracked, while the PDF output is untracked. An
411.
by rectang 1y ago
Exactly. This is the consequence when search engines cut out all the sites they used to send traffic to and instead present AI summaries as their own seemingly-authoritative content in order to keep the user from leaving. If you provide ma
412.
by rectang 1y ago
???? Didn’t I affirm the author’s point that the increased vendor lock-in for creators was a big deal, implicitly agreeing that it was bad? By “Apple’s user-friendly subscription and cancellation policies”, I mean e.g. the ability to unsubs
413.
by rectang 1y ago
> Most importantly, that means that if writers choose to leave Substack, they won’t be able to port their paid subscriptions over to another platform like they could previously. That seems like a big change. Having to abide by Apple’s
414.
by rectang 1y ago
I look forward to Claude's improvements after it learns from conversations with users about suicide.
415.
by rectang 1y ago
"I have made this longer than usual because I have not had time to make it shorter." — Blaise Pascal I fully agree with the author about the desirability of simplicity. I feel it in my bones, as someone with a background in the
416.
by rectang 1y ago
Unspaced em dashes look wrong too me too in most web contexts, but I think it’s typography-dependency and they look good in serif text when very large and heavy compared to other elements.
417.
by rectang 1y ago
Something tells me that if we heard the other side of the story it might hit different. There's a lot of wiggle room in what "making his team members feel bad" could mean, and I would be surprised if constructively voiced cr
418.
by rectang 1y ago
I would hate life if I had to debug those. The idea that there’s an entire market segment of people who tolerate such instability or even relish the task of debugging unreliable hardware boggles my mind.
419.
by rectang 1y ago
Maybe Bluesky is analogous to Github, if the AT protocol truly does allow for migration away to an alternative? Although Git repositories are portable, PRs, issues, actions and such aren't — so even if the migration away from Bluesky i
420.
by rectang 1y ago
> It's easy to say it's idiots who fall for this stuff It’s not just “easy”, it’s an ideological imperative to ensure that the vulnerable have “personal responsibility” to avoid predation, while predators bear no responsibili

More ›