sigotirandolas

11 ms·

31.
by sigotirandolas 1y ago
> This analysis ensures that FixrLeak skips functions where resources are passed as parameters, returned, or stored in fields, as these resources often outlive the function’s scope. > FixrLeak delivers precise, reliable fixes while le
32.
by sigotirandolas 1y ago
The difference is not only two bits, but "with weights of 2 and 4" is newspeak for the change only happening at second-to-last and third-to-last bits. A classical computer can factor those numbers in 0 milliseconds.
33.
by sigotirandolas 1y ago
For creative and professional writing, I found them useful for grammar and syntax review, or finding words from a fuzzy description. For the structure, they are barely useful: Writing is about having such a clear understanding, that the mea
34.
by sigotirandolas 1y ago
Most of the electronic genres (house, trance...) sound very wrong. Lyrics are way overused, sound like eurodance, and are just overall disconnected from the music. The music feels very generic, as if you landed in the biggest tourist trap
35.
by sigotirandolas 1y ago
When I buy a car I want to talk with a salesman, but outside of that I don't want salesmen ambushing me with car deals. ChatGPT is like the former, while the AI features are like the latter.
36.
by sigotirandolas 1y ago
My foresight is that when you compensate bad developers with process, measurements and QA, the software breaks when exposed to the real world, which has a habit of doing things you didn't think about. Maybe an user can open two tabs an
37.
by sigotirandolas 2y ago
(The usual disclaimer: Take what I say with a grain of salt, I am just speaking from my own N=1 experience here and I am not any good at management). To me the discussion about Celery vs polling the queue didn't seem like the core them
38.
by sigotirandolas 2y ago
I can't claim to be able to say much, but if it's anything like my experience, it can be an organizational problem. I've seen this happen where there is something like an "architect / senior" vs "normal pr
39.
by sigotirandolas 2y ago
I don't find this kind of article interesting or novel (see https://news.ycombinator.com/newsguidelines.html ), specially as someone outside the US.
40.
by sigotirandolas 2y ago
In my view, coupon aggregation is a scam per se. You are either scamming the business (by extending a discount aimed at a particular group to anyone) or scamming other buyers (by contributing to a market segmentation between "savvy&quo
41.
by sigotirandolas 2y ago
Something to consider is that if you cut quality to the point that your colleagues believe you are pushing a half-baked product, or they have to spend even a small amount of time fixing what they know could have never been a problem in the
42.
by sigotirandolas 2y ago
I saw a case where Sonar analysis was being requested by a government agency where software was built by consultants. From the government agency's point of view it made some sense to ensure that the code delivered by the consultants wa
43.
by sigotirandolas 2y ago
For me the advantage is that for simple cases like the one you mention, it will hardly ever make dumb mistakes like misspelling a CSS property name or missing the return keyword. So it will not only type faster than me, but it often bypasse
44.
by sigotirandolas 3y ago
My experience with autotools projects is that more often than not it ends up being a collection of arcane commands and painstaking minutiae that probably nobody fully understands but somehow ends up calling the right commands to compile the
45.
by sigotirandolas 3y ago
I agree, in this case it's hard to defend against a rogue script or container image, as you need to give it read-write access to your source code, so it could add a malicious payload to your source code or install a Git hook to break o
46.
by sigotirandolas 3y ago
A script running in a container is mostly isolated from the host by default, so it can't just upload whatever SSH keys / Bitcoin wallets / other stuff you have lying around or add some payload on your ~/.bashrc unless yo
47.
by sigotirandolas 3y ago
The Golang version, aka. Compose v2 can also be used standalone (they even have prebuilt binaries in their GitHub repository) and is compatible with Podman. Behind the scenes both Compose v1 and v2 use the Docker API which is also implement
48.
by sigotirandolas 3y ago
I assume he means quantization (e.g. scaling the weights from 16-bit to 4-bit) and it speeds up the output by reducing the amount of work done.
49.
by sigotirandolas 3y ago
I was also confused since to my understanding "mainline" is usually the release candidates, i.e. Linus's master branch. Here "(stable) mainline" appears to mean the latest stable release without distribution-specifi
50.
by sigotirandolas 3y ago
On some Skylake CPUs to get full mitigations you are taking a 30% performance penalty _and_ you need to disable SMT which is often another double digit penalty. It's not a literal "toss the physical silicon", but it's ge
51.
by sigotirandolas 3y ago
Appreciated, I wish I could help more. There's for sure a way to highlight that you can work on long stints, as well as quickly jump into diverse projects across the full stack. Unfortunately I can't help much on it, as on my shor
52.
by sigotirandolas 3y ago
I am likely not revealing anything new to you (nor I know much about hiring), but: Taking a look at your CV, I notice that you have a lot of very short work stints, averaging at about a position per year. This is probably just the nature
53.
by sigotirandolas 3y ago
I wouldn't say that it's a different dimension. If you install a Flatpak (and you check that the permissions it asks for make sense), the application will not be able to do as much damage even if it's malicious . Furthermore
54.
by sigotirandolas 3y ago
Yeah, they do, but (in theory) they should either only allow you to do some very restricted commands (e.g. chsh, chpasswd), or require you to authenticate to run arbitrary commands (e.g. su, sudo). The former are fine since they don’t allow
55.
by sigotirandolas 3y ago
What really matters is not whether you have sudo (or su, pkexec, etc.) installed, but rather that you never, ever escalate privileges from a less trustworthy user to a more privileged one, since at a conceptual level this combines the low t
56.
by sigotirandolas 3y ago
Mostly: * Logs: If my unprivileged user gets compromised, there's a much better chance that I can figure out what the attacker did if he can't wipe his traces as root. * Money: I use a different unprivileged user for general use a
57.
by sigotirandolas 3y ago
Well, I guess that's also a risk - that a future law forces you to stop selling your software until you remove all AI-generated code. A law like this seems pretty much impossible to enforce, though. Even if it turns out that GPT is jus
58.
by sigotirandolas 3y ago
Funnily enough, it seems like someone already attempted to do this around 20 years ago - search for "Umlwin32"
59.
by sigotirandolas 3y ago
From my non-lawyer "common sense" point of view, the reasoning that 1 and 2 implies 3 seems absurd in the face of the "no penalty without law" principle. If the law is so unclear that lawyers can't determine legalit
60.
by sigotirandolas 3y ago
For the most part, that 90% of the development workforce is not working on solving a new and unique use case, but rather solving an already solved use case but for yet another walled garden (think Disney+, Amazon Prime Video, HBO Max, etc.

More ›