zbentley

17 ms·

301.
by zbentley 4mo ago
Eh, reduction counting isn't magic. Golang manages similar preemption semantics without counting that many operations (some tight loops do have barriers inserted every so often, but that's the exception and not the rule). And redu
302.
by zbentley 4mo ago
My comment had more to do with the in-browser VS Code instance. Regardless of the extension security model, having the github.dev webapp run under your full github.com account's permissions significantly expands the attack surface: if
303.
by zbentley 4mo ago
How does this work with the in-browser editor at github.dev?
304.
by zbentley 4mo ago
This is a very good writeup. Zooming way out (perhaps to the point of useless observation), it's a pity that the web embedded VSCode editor is signed into GitHub at all . Defense-in-depth or not, a huge vulnerability surface arises fr
305.
by zbentley 4mo ago
Bad memories. I particularly enjoyed fighting with third-party programs that installed system cronjobs in the various tabs, and having to remember to go and find them after package upgrades and try to figure out how to robustly identify whe
306.
by zbentley 4mo ago
> If you have hundreds of jobs like this you need a proper queue and neither cronie nor systemd is the right tool Eh sometimes, but you can get pretty far with one of two approaches: 1. Careful use of Requires= and Wants= to group your s
307.
by zbentley 5mo ago
Then use the absolute path.
308.
by zbentley 5mo ago
Did anyone in that issue thread ever … describe an issue? As in steps-to-reproduce, expected vs. observed behavior, all that? Like, this was posted on an issue tracker. “Your commit messages reference Claude and some guy on bluesky thinks s
309.
by zbentley 5mo ago
https://www.cve.org/
310.
by zbentley 5mo ago
> China has a long record of doing business with anyone and avoiding ideological conflict on all issues except for specifically Taiwan ...and Tibet, North Korea, Senkaku/Diaoyu islands, Aksai Chin/Arunachal Pradesh, and others.
311.
by zbentley 5mo ago
My experience aligns with that. But there’s no guarantee that the criteria for layoffs, when they happen, will include these people.
312.
by zbentley 5mo ago
> I think it may be north of a decade Nearly two!
313.
by zbentley 5mo ago
In C, errors are usually indicated by a negative return value constant, crashing the program with abort, or setting the errno global (thread-local, but whatever) and expecting callers to check it. Sometimes multiple of those.
314.
by zbentley 5mo ago
Aren’t radiologists dictating notes rather than issuing commands to the computer? From supporting them for a few years, I recall them having pretty good facility using the computer to zoom/filter/isolate parts of images, and most
315.
by zbentley 5mo ago
Cryptocurrency mitigates most of those concerns. That's why the flourishing of crypto payment systems has been an unalloyed blessing for cybercriminals.
316.
by zbentley 5mo ago
I think you may have re-invented email reputation.
317.
by zbentley 5mo ago
That is not done because then it would be slow. I don’t think that’s a very strong argument, but that’s the rationale for not having simpler, no-state-shared-between-runs pipelines everywhere I have worked.
318.
by zbentley 5mo ago
Agreed, but that’ll be a marginal improvement at best.
319.
by zbentley 5mo ago
Why? Honest question. Commons, Guava, Spring, and more seem to take this approach successfully (as in, the drawbacks are outweighed by the benefits in convenience, quality, and security) in Java. Are benefits in binary size really worth tha
320.
by zbentley 5mo ago
I’m curious: what happens when a file and its metadata are fsync’d, but the dirent is not and the system loses power? If the file is brand new, does it show up as an orphan upon reboot, or is it just gone? Can you somehow access it by inode
321.
by zbentley 5mo ago
The surprise isn't about the arrest. The surprise is about the extremely harsh conditions people are placed in after being arrested--without any proportionality of what they were arrested for, before it is known whether or not they are
322.
by zbentley 5mo ago
That's not what is meant by "decentralization". None of those things help with the problem of centralization . Centralization isn't limited to moneymaking enterprises, or the modern internet. A centralized server operat
323.
by zbentley 5mo ago
I forget the product, but more than a decade ago I remember someone broke out their durability into a table with columns for all the settings their data store offered between “ram on one node” and “fsync confirmed on a quorum of nodes’ disk
324.
by zbentley 5mo ago
I mean, we aren’t ok with that for PDF. That’s why PDF renderers have incredibly baroque rules for parsing weirdly or brokenly formatted documents, and why many PDF documents fall back to embedding images or absolute-positioned pixel-like l
325.
by zbentley 5mo ago
That’s … unfortunate. I had previously assumed that an OS with as solid a reputation as FreeBSD would not do questionable things like “have core network protocols store externally-supplied structured data using ad hoc file serialization” (S
326.
by zbentley 5mo ago
I suspect that this is breaking type systems out onto separate axes: strong/weak and static/dynamic. Many consider Python to be strong/dynamic.
327.
by zbentley 5mo ago
Doesn't Rust/Cargo dump stuff into your home directory as well? https://doc.rust-lang.org/cargo/reference/environment-variab... Like, if the gripe is that Go should be better about following XDG conventi
328.
by zbentley 5mo ago
> No base image CVE alerts every Tuesday. Citation needed. Go's fat binaries and big stdlib cause most enterprise-mandated CVE scanners to light up with zillions of false positives constantly, because too much shit is present in the
329.
by zbentley 5mo ago
Mojo is free, though. MATLAB costing money is a bigger issue than it being closed source. R was too late to the game and catered too much to professional math/stats/datascience people rather than programming generalists. Python (w
330.
by zbentley 5mo ago
My (novice) understanding is that embargoes are intended to provide time to 1) develop a patch and 2) distribute the patch. For Linux/public open source, what you said is right about 2). Once the patch is visible to anyone, it's t

More ›