tolmasky

32 ms·

211.
by tolmasky 5y ago
The “it works without a tool chain” is in fact a ridiculous impractical hypothetical that no one should actually attempt, and yet it continues to make this spec more complicated and unwieldy. For example, to address the obvious performance
212.
by tolmasky 5y ago
1. With regard to build / CI, I certainly don't know the percentages worldwide, but this example actually comes from my own experience as a company I used to work at I believe had this setup of separate build and CI machines (for
213.
by tolmasky 5y ago
Interestingly enough, this actually isn't always the case! For example, install scripts provide the unique ability to affect build machines, which often don't run the code, but do run install scripts. Build machines can still
214.
by tolmasky 5y ago
At RunKit, we've actually installed every version of every package, and I can assure you that it is not the case that there's tons of packages using install scripts for really great reasons. For starters, the vast majority of pack
215.
by tolmasky 5y ago
This is a great question, and there are actually a number of different reasons: 1. Package installation often happens under different privileges than actually running your end user app. There is unfortunately a lot of "just use --unsaf
216.
by tolmasky 5y ago
The fact that they don't need to be run is what makes them so hard to spot and easy to sneak in. This allows for some very hard to mitigate strategies. It's easier to sneak in packages into metadata files like package.jsons than c
217.
by tolmasky 5y ago
I've answered this on GitHub, but will provide an answer here too. Packages aren't like end-user software, for two important reasons: 1. The people involved are developers using development components, who are much better equipped
218.
by tolmasky 5y ago
If you're interested in preventing this sort of thing, I'd appreciate comments on this [RFC]( https://github.com/npm/rfcs/pull/488 ) I just submitted to npm to make install scripts opt-in instead of
219.
RFC: Make NPM install scripts opt-in(github.com)
130 points by tolmasky 5y ago|72 comments
220.
by tolmasky 5y ago
What are the licenses for these file? Couldn’t find any info, but I’m on mobile.
221.
by tolmasky 5y ago
Yeah, as another post here has said, what most people actually want is year-round DST. However, I believe this is a confusing way to express it to people not heavily involved in the DST “controversy” (it sounds like you’re supporting doing
222.
by tolmasky 5y ago
Something that seemed somewhat implicit in this article, but never fully stated, is that it also increases the quality of the work, or in other words, decreases the probability of bugs and errors. Every time you do a manual process, you i
223.
by tolmasky 5y ago
Allow side-loading so that you don’t leave yourself open to a situation where the only way your customers get access to a voting app is by having your employees jailed. The AppStore creates an easily exploitable bottleneck for governments t
224.
by tolmasky 5y ago
> on top of the vaccination levels we have now, we can get the same epidemiological slowdown without the socioeconomic costs via some modest distancing indoors and mask wearing by public-facing workers (like cashiers) and in social sett
225.
by tolmasky 5y ago
Do you think that the OSHA requirement this thread is specifically relating to (which is less strict than vaccine requirements in most schools) qualifies as too much attention, or are you referring to the different levels of attention it ha
226.
by tolmasky 5y ago
> as for the rest, torturing analogies that way merely to coerce them into fitting a desired explication is cruel and unusual punishment imho. i can't partake in good conscience. It’s OK to just admit you chose a really bad compar
227.
by tolmasky 5y ago
> yet there’s no constant uproar and heightened emotion around car deaths. I think you may have a recency bias towards the mitigation techniques. The reason it seems like there's no hysteria around cars is because we've alr
228.
by tolmasky 5y ago
I actually do try to stay away from cars. I think we are absolutely horrible at addressing risk accurately, and someday when we have some sort of carless society (or maybe self-driving cars?) we will not understand how we could possibly hav
229.
by tolmasky 5y ago
It wasn't much better if you reached adulthood. Seems like mid-forties up to the 1400s, and early fifties up to 1600s, for the nobility in England. So, you know, not the people getting on those boats probably.
230.
by tolmasky 5y ago
Where are these magic passports then? You keep talking about these high tech passports but my vaccination card is basically a piece of toilet paper with 2 stickers on it (that you can easily buy off Ebay by the way) and the nurse telling me
231.
by tolmasky 5y ago
The average lifespan for the period you are describing (say, 1492-ish since we're talking about sailing) was their mid-thirties (and probably lower for the people that actually got on those boats). So I think I like our strategy better
232.
by tolmasky 5y ago
One of the unfortunate parts about colds is that the range of experiences seems to be fairly large for different people. It sounds that like me, you've never experiencd a "24 hour bug," and a cold is at minimum a one week aff
233.
by tolmasky 5y ago
The more time passes, the more I'm convinced that the right strategy would have been to make the vaccines initially cost $35,000 a dose, so that the outcry would have been that the Illuminati was making it impossible for the common man
234.
by tolmasky 5y ago
If we lived in a non-influenza world that suddenly experienced influenza for the first time, we would think it's crazy to not only allow, but many times encourage, sick employees to come to work and basically take out the entire office
235.
by tolmasky 5y ago
Apple seems to disagree strongly with this position when it comes to paying royalties for patents on components they rely on from other companies in the iPhone (that’s supposedly built from the ground up). I’m not sure why no one ever tho
236.
by tolmasky 5y ago
Although it may seem counter-intuitive, the fact that the behavior on OnlyFans is so transparently "degenerate" makes it somewhat immune to that sort of criticism. Everyone knows what people go there for. The problem with Apple is
237.
by tolmasky 5y ago
> How many Tim Cook's do you have lying around? I’d say it would be just about impossible to find anyone else capable giving such a wooden performance and unnatural fake excitement at product announcements. Perhaps a young Point Bre
238.
by tolmasky 5y ago
In what universe was the Vietnam War “reckoned with”? Kennedy was most popular after The Bay of Pigs disaster. The entire Cold War fits the mold of what the author describes here — projecting our worldview on regional conflicts that could
239.
by tolmasky 5y ago
I spend most of my day with her... Also, perhaps their software is (I know, hard to believe) buggy? Either way, not sure what to tell you, this is what I see: https://twitter.com/tolmasky/status/1408946076531441664
240.
by tolmasky 5y ago
It's been reported that this option is not presented to everyone . (I do however get the option to disable Safety Alerts for all AirTags though, which isn't really what I want). Next time I get it I'll try tapping again to

More ›