zbentley

18 ms·

331.
by zbentley 5mo ago
The GP you were replying to mentioned a vulnerability "present by default and an attacker can trivially cause it to be loaded". You responded contrasting a network service with an administrator-loadable module. This is neither of
332.
by zbentley 5mo ago
At present it looks to me like the embargo was broken by someone identifying the patch as fixing a vulnerability, not someone leaking the mailing list. More information may come out, or I might be missing something, but assuming that the
333.
by zbentley 5mo ago
This is "a service that automatically starts". That's what automatic kernel module loading is for! It's not any different from putting an always-running network service behind socket activation instead. The security bo
334.
by zbentley 5mo ago
> This would have been humanly not possible. expect(1) is 36 years old. https://man7.org/linux/man-pages/man1/expect.1.html
335.
by zbentley 5mo ago
For reasons other commenters have expressed better than I could, the idea of "agent-native CLIs" seems like a poor one. Why not just do the "mycli skill-path" idea from the article, and skip the rest? Basically: 1. Add r
336.
by zbentley 5mo ago
"Space datacenter" -> overpriced starlink with some shitty edge compute -> "look guys, we built a space datacenter; earnings results to follow" -> number go up.
337.
by zbentley 5mo ago
Totally fair, but 42 if-statements across 32 files isn't something you need to fix with like ... a grand refactor or hexagonal architecture or event sourcing or whatever the overengineering pattern du jour is. You can fix that with a
338.
by zbentley 5mo ago
Sure, but that’s a small and shrinking market. Not a source of economic security or growth for its employees, nor for most of its companies (though some have defended niches).
339.
by zbentley 5mo ago
Without getting into AI-for-work good or bad, > update 42 if statements in 32 different files is a silly behavior for a programmer or an AI to have to do more than twice. We have tools that very effectively remove the need for things l
340.
by zbentley 5mo ago
Another commenter above this proposed a pretty compelling theory for the source of this style: SEO-inflated prose online. If the models were trained on the internet, "higher quality" content needed to be indicated to them during R
341.
by zbentley 5mo ago
> What's the threat model Malicious code can read some/all memory in your container, but not necessarily execute. Plenty of such vulns exist. > Where do you store the decryption key? Not in memory. Either nowhere after use,
342.
by zbentley 5mo ago
> Devops and sysadmins can no longer withhold information to maintain job security. I can't imagine this is very prevalent. That's a very 2004-style corporate immaturity; I get the sense that even the slow-moving behemoths of t
343.
by zbentley 5mo ago
You joke, but like the meme goes: go knocking on enough doors asking to see the devil, and eventually he might answer.
344.
by zbentley 5mo ago
In this case, yes. That's not without precedent. There are all sorts of tools where our society has decided to presumptively/usually blame the user when the tool is involved in a disaster. Like, it's not always/never, bu
345.
by zbentley 5mo ago
Even if that's true, current bankruptcy law is still really far from socially optimal. There are a lot more points on the "how does your system respond to business failure" spectrum besides low-consequence ch11/better-
346.
by zbentley 5mo ago
99% won’t care, and 59% will find the what’s-new popup actively confusing, distracting, and hostile. Bad trade.
347.
by zbentley 5mo ago
But but but … how else will we turn a minor value add into a sticky source of recurring revenue? After all, there are no other profitable business models.
348.
by zbentley 5mo ago
https://www.macchaffee.com/blog/2024/you-have-built-a-kubern... Like, if that works for you, more power to you. But that is a lot of moving parts in exchange for using a tool whose value prop is that it doesn&#x
349.
by zbentley 5mo ago
> whoever is responsible to fix prod incidents and maintain has the ownership. There's a mistaken assumption under there that businesses can identify who that statement describes. Some can. But a lot of businesses cannot identify
350.
by zbentley 5mo ago
What do you do all day at your job? Serious question. I think the reason that there's such a disconnect among AI-for-work users about whether it's a panacea or bullshit accelerator is that different software developers have massi
351.
by zbentley 5mo ago
Incredibly common outside of startups and low-risk small-to-medium sized webtech shops.
352.
by zbentley 5mo ago
What do release trains have to do with SAFe? I've worked in a few places that have the notion of a release train (roughly a mutex for "changes being shipped and a burn-in window afterwards" plus some optional batching of chan
353.
by zbentley 5mo ago
Tell me, what do you measure? Changes shipped? Lines of code? Customer satisfaction? Defect rate? MTTR? New engineer onboarding time/TTFC? Security/compliance audit turnaround time? Uptime? Employee retention? Rollback/forwar
354.
by zbentley 5mo ago
I'm still pissed that I had to practice removing that from my writing habits. I liked that device, dammit!
355.
by zbentley 5mo ago
Fortunately, the widespread use of LLMs results in companies reducing the number of things each team owns, and/or leaving lots of engineers on payroll who suddenly have abundant free time with which to start self-learning and developin
356.
by zbentley 5mo ago
To give this more credit than it perhaps deserves: training aside, getting the situational data into the context is a more significant problem here. Pt's chart is complex/wrong? Gotta ingest that into context. Chart contains image
357.
by zbentley 5mo ago
> looking at their medical history/charts I think you'd be incredibly surprised how often charts are super, super incomplete or wrong. Like "pt has no pancreas and presented with pain and weeping from a 6yo pancreatectom
358.
by zbentley 5mo ago
Strongly agree. I think some (not all) of the Trumpian playbook can be wielded very effectively for non-conservative parties, for a few reasons: - Some executive orders are always flipped as soon as the opposition takes office, but some uni
359.
by zbentley 5mo ago
I think that both this and GP are misguided. The pace of societal change in a given direction is neither inherently proportional to the pace of change in a different direction (GP) nor is the pace part of the direction (you). You have to en
360.
by zbentley 5mo ago
You said it yourself: > Of course, for real emergencies I have a Garmin SOS device. that's why the mesh radio/LoRaWAN-type ecosystems suck. I don't mean to be rude or snarky; just to point out a very contextually-relevant

More ›