ufmace

19 ms·

241.
by ufmace 2y ago
I routinely work in Ruby, Python, Javascript, Java, Go, and Rust. The thing that drives me to use asdf is that without such a tool, every language needs a different version or installation manager and they all work slightly differently. It&
242.
by ufmace 2y ago
Seems to me this is more about the danger of passing anything derived from user input into the TEMPLATE side of a templating engine. Why in the world would you ever do that?!? Obviously if you pass data into the variable side of the engine,
243.
by ufmace 3y ago
Thanks for that. After reading both, I'm fine with Kagi and somewhat more annoyed by the author. Perhaps Vlad is a little excessively enthusiastic and protective of his baby. But then you don't do something frankly crazy like star
244.
by ufmace 3y ago
> slight densification I don't think this is seeing the issue the right way. Building sufficient housing to reduce the pure free-market price of temporary / hotel stays to a level where housing is still accessible to locals is
245.
by ufmace 3y ago
https://archive.is/WOhu8
246.
by ufmace 3y ago
Not seeing that as a point. It's probably not possible to have no performance hit whatsoever when you're checking the exact nanosecond count of every little thing. But usually nobody is doing that. It shouldn't be hard to not
247.
by ufmace 3y ago
The weird thing about this one is how it seems super professional in some ways, and rather amateur in others. Professional in the sense of spending a long time building up an identity that seemed trustworthy enough to be made maintainer of
248.
by ufmace 3y ago
Thanks, very interesting. Those samples sound like total gibberish to me. I'm a native english speaker, and if I really concentrate, I can sometimes pick out a word or two, maybe a phrase with the written text right there too. Maybe I
249.
by ufmace 3y ago
> "Tease and Squeeze" I for one like it
250.
by ufmace 3y ago
The topic may be relevant, but I'm doubtful we can have a calm and reasonable discussion of the technical issues and morality with a hot war ongoing and many hostages still in captivity. There are more than enough hotheads on both side
251.
by ufmace 3y ago
You're not wrong, but IMO that isn't the real problem. The real problem is the combination of highly popular core open-source utilities with near-zero maintenance resources. This was all possible because XZ, despite being effectiv
252.
by ufmace 3y ago
Probably worth considering here - if this was a state-sponsored attack, it's entirely possible (and exactly what I would do if I was running such a program) that there is one person or department actually writing the code and list mess
253.
by ufmace 3y ago
I dunno if k8s is actually right for your company, but it most certainly is possible to configure it to give engineers limited access, including viewing logs, pod status, services and deployments, etc, but not reading sensitive data or upda
254.
by ufmace 3y ago
Thought about it for a few seconds, and yeah, I'm sticking with meh on this one. I do have a managed K8s cluster running on one of the major hosting services. It seems I can indeed hit the /healthz endpoint without auth. But I don
255.
by ufmace 3y ago
1. Because large-scale fraud is vastly easier with electronic filing versus mailing paper around, so it justifies higher security 2. Higher security with your tax information is a good thing, and we shouldn't avoid it because some othe
256.
by ufmace 3y ago
Nah. It's mildly useful to me to have all that recorded and accessible. Plus I think there's like a 60% chance that turning it off only turns off it being displayed to me and it's all still being recorded and stored anyways.
257.
by ufmace 3y ago
This is very cool. I wonder how much of Ruby was actually implemented. Obviously a few things work, but I'm pretty sure you'd never get regex and hashtables and all the other piles of complex stuff in the standard lib working unde
258.
by ufmace 3y ago
So it might be possible for a sufficiently advanced species to build such a thing. But would they choose to? The real question for these things is, if you are capable of building such a thing, what other things are you capable of building m
259.
by ufmace 3y ago
This. I don't even really do Windows or Desktop dev anymore, but if I want to make a GUI desktop app, WinForms is still the first thing I reach for. Making a basic window with a few standard UI elements and some modest amount of code i
260.
by ufmace 3y ago
I'm not so sure that truth and trustability is something we can just hand-wave away as something they'll sort out in just a few more years. I don't think a complex concept like whether or not something is actually true can be
261.
by ufmace 3y ago
It's true that all wars end eventually. But this happening seems to me a sign that relations might not normalize quite so easily after. Why else would businesses with operations in both Russia and EU be seeking to split themselves apar
262.
by ufmace 3y ago
Seems to me it's all about money. They all gotta make it somehow, and if ads are the plan, than it's going to reach this state eventually. User-funded services seem to fare better, but they rarely grow as large. I don't think
263.
by ufmace 3y ago
Funny thing, while FFmpeg's CLI options aren't super intuitive, I do find it much easier to use than any GUI video editing or conversion program I've ever found. Those things can really write the book on byzantine user interf
264.
by ufmace 3y ago
This system does in fact work very well for aviation in the USA. But I think we can't just blindly apply it to everything everywhere, assuming it will work the same. We should be able to consider what cultural factors allow it to work
265.
by ufmace 3y ago
Well as long as we're getting technical, Mach number is a unitless aerodynamics term, not a speed. As such, it is only valid in the exact medium that a craft is traveling in and relative to that medium, so here air at the exact tempera
266.
by ufmace 3y ago
IMO, you shouldn't do anything special. They're all very low-skill automated attacks. Just design and deploy stuff well, do the basic stuff correctly before you make anything publicly accessible, and don't worry about the noi
267.
by ufmace 3y ago
The "View from the Wing" site that is the main link here has a relatively modest number of ads once I turn off my ad blocker. Not that much compared to many "proper" news sources. They do seem a little click-baity, and a
268.
by ufmace 3y ago
The mid-tier blog (probably?) doesn't depend on revenue from it for their living. Professional journalists these days often do, and are teetering on the edge of solvency as-is. And so they're a lot more vulnerable to their corpora
269.
by ufmace 3y ago
That's true, but where else would you expect to get such information? No real whistleblower is going to publish their name, rank, and serial number etc. The corporate PR department sure isn't ever going to tell you such things. In
270.
by ufmace 3y ago
Ahhh Backend As A Service. I guess that makes sense. Not something I could see myself ever using, but I suppose I can see how somebody might use it if they don't know how to write and run their own backends or don't have authority

More ›