woodruffw

5 ms·

1.
by woodruffw 5d ago
They had two diverse paths, but apparently did not have a (reliable?) process for ensuring the backup path was functional during fail-over. I imagine there will be some soul-searching over that. Nothing I've ever seen or experienced wi
2.
by woodruffw 5d ago
I think Alex Gaynor is essentially right here[1]. [1]: https://alexgaynor.net/2025/apr/08/putting-a-price-tag-on-op...
3.
by woodruffw 5d ago
(Speaking only for myself.) Having open indices charge money is the “easy” part, relatively speaking. The author is correct that most companies will grumble a bit and then fork over the nominal amount of money needed to preserve their exist
4.
by woodruffw 9d ago
As far as compact encodings go, this kind of patch-and-fill technique isn't particularly egregious. The alternative mentioned (where the verifier has to be aware of a bitfield that defines the to-be-signed elements) is much easier to m
5.
by woodruffw 9d ago
I didn’t realize it was hasbara to describe Unit 8200’s proficiency as propaganda. One would reasonably expect the exact opposite.
6.
by woodruffw 10d ago
“Space camp,” not “space.” As in, a place to park dorks. (The problem with “alumni” is that it means very little in mandatory systems. Unit 8200 is where Israel parks its dorks, and it stands to reason that dorks are the ones who tend to st
7.
by woodruffw 10d ago
> The idea that people bend over backwards to hire criminals as subject matter experts on security is largely a Judaic practice that television perpetuates in spite of reality. What? > If you're convicted of hacking in Israel, Un
8.
by woodruffw 12d ago
I’m one of Homebrew’s security maintainers, and I don’t recall any contact with you. Who did you reach out to? If you have concrete concerns, please bring them to us. Vague concerns and hand-waving about “people getting hurt” isn’t appropri
9.
by woodruffw 22d ago
That’s fascinating; like others, I’d love to see the source data.
10.
by woodruffw 22d ago
That makes sense, given that the median car mile probably isn’t in a dense urban core. The more accurate comparison would require us to know pedestrian fatalities per mile in urban areas.
11.
by woodruffw 22d ago
The primary driver appears to be economics (vis a vis the pandemic and slow recovery afterwards), which has very little to do with the author’s primary target (cyclists and buses). A more sensible null hypothesis would be that cyclist and b
12.
by woodruffw 24d ago
I mean, the point of Frankfurt’s bullshitter is that we know they’re bullshitting (or more expansively, Frankfurt gives us a set of criteria to test them against). We know they don’t care about the truth value of their statement, only tha
13.
by woodruffw 24d ago
I don’t think these mental states are in evidence for either of them. I think they’re both credibly earnest in their views. (Frankfurt’s characterization of the bullshitter rests on not just the truth value being absent, but also on the b
14.
by woodruffw 24d ago
Without reference to either person, I think this is essentially a misunderstanding of Frankfurt’s analysis: On Bullshit is about expressing sentiments without caring about their truth value, i.e. the concept of a “bull session.” Both Altm
15.
by woodruffw 25d ago
It depends on what you mean. The PEPs are essentially a behavioral core, and each tool (build backend, etc.) adds on top of that core. If you’re installing a package, any installer should work; if you’re developing a package, you may be s
16.
Brocards for Vulnerability Triage(vulnbrocards.com)
1 points by woodruffw 26d ago|0 comments
17.
by woodruffw 26d ago
We do a lot more than that, e.g. how to cache distributions is not defined anywhere within PEPs (and should not be, since it’s a purely internal tool decision). But yes, it helps that uv implements the PEP for detached metadata, particularl
18.
by woodruffw 26d ago
I think this sockpuppet is referring to a different thread I commented in yesterday. But I think it would be an uncharitable stretch to read what I wrote in an official voice, much less “pro” in an unqualified sense.
19.
by woodruffw 26d ago
This kind of hellish experience is a great example of the CVE system trying to have it both ways: when on the offense it’s a rich source of information for defenders, and when on the defense it’s just an opaque ID for coordination that impl
20.
by woodruffw 26d ago
Another one?
21.
by woodruffw 26d ago
My understanding is that IME and PSP come more from the world of corporate compliance than anything else. In other words they exist for x86 because x86 gets deployed in corporate settings, and any ISA that attempts to occupy a similar niche
22.
by woodruffw 26d ago
I don’t think the average American voter “genuinely” thinks that they’re on a Blues Brothers-style mission from god to deliver liberalism and freedom to the world. I would be surprised if that’s even a minority view among voters.
23.
by woodruffw 26d ago
Is there some evidence that x86 is uniquely prone to exploitable memory corruption? I haven't seen it, if so. > That's why Huawei and the Chinese government aren't even trying any more to make western CPU architectures sec
24.
by woodruffw 26d ago
Another useful one if you have a large number of tags and want to see the most recently created ones first: git config --global tag.sort -creatordate (`-creatordate` reverses the sort so that the newest come first.)
25.
by woodruffw 26d ago
I've seen monorepos with over 10k active branches. But even at a smaller scale (10-100 branches), it becomes useful when manually stacking and/or rebasing, especially if you have a smaller terminal.
26.
by woodruffw 27d ago
I mean more in the psychological safety sense. An assembler's process is deterministic, not statistical, and knowing that affects how we interact with it.
27.
by woodruffw 27d ago
Python's tiering has to do with testability and availability thereof, not modernness. In the case of 32-bit Windows, the reason it's still testable is because Windows still ships a 32-bit userspace, even if Windows itself only s
28.
by woodruffw 27d ago
I agree. It remains to be seen whether the field will even stabilize, beyond some local maxima of everything being a chat interface. I for one hope it does.
29.
by woodruffw 28d ago
Charitably, we could say that “agentic” software engineering is less than 4 years old. I say charitably because I think even that’s an extraordinary stretch. But even at 4 years, I don’t think anybody can fairly claim to be experienced in
30.
by woodruffw 28d ago
I generally agree with this. One of the strangest things about LLM driven engineering is holding two seemingly contradictory positions in your head: they’re both better than the median developer, and they’re also much worse at producing a

More ›