Replies

This profile is from a federated server and may be incomplete. Browse more on the original instance.

timbray, to infosec
@timbray@cosocial.ca avatar

It dawns on me that many of you youngster developers out there probably don’t know about the Ken Thompson hack. If you’re one of them, reading this should make you shudder:
https://wiki.c2.com/?TheKenThompsonHack
https://www.cs.cmu.edu/~rdriley/487/papers/Thompson_1984_ReflectionsonTrustingTrust.pdf

Di4na,
@Di4na@hachyderm.io avatar

@jayalane @timbray yeah there have been good progress on this front. We are reasonably sure it is not everywhere, and we have a growing progress toward being able to move past it if need be.

Fun fact, it also works for the positive. For a long time the rust compiler code had no knowledge of \n but the compiler binary knew, passed at every generation from its ocaml compiler ancestor.

seldo, to random

Marvel had me deeply invested in the inner emotional turmoil of a CGI raccoon and DC still can't write a Superman that anyone gives a shit about.

Di4na,
@Di4na@hachyderm.io avatar

@seldo Marvel or James Gunn and his team...

liw, to random

In computer science there are only two hard problems:

  1. naming things
  2. cache invalidation
  3. avoiding off-by-one errors

See: https://www.martinfowler.com/bliki/TwoHardThings.html

In software development there are also only two hard
problems:

  1. knowing what the software is meant to do
  2. knowing if the software works
  3. figuring out what broke the software
  4. keeping the software working when other things change
  5. keeping the software understandable for other developers, including future you
  6. avoiding scope creep
Di4na,
@Di4na@hachyderm.io avatar

@liw 7. Making the tools actually work to produce something

icejam_, to random
@icejam_@hachyderm.io avatar

We went to look at new cars for my partner and it looks like no longer makes , it’s most popular European car to “concentrate on EVs”.

Di4na,
@Di4na@hachyderm.io avatar

@icejam_ So uh as someone that worked for a car manufacturer: not really. Transforming a platform meant for an ICE into an electric one is a nightmare that rarely end well.

Di4na,
@Di4na@hachyderm.io avatar

@icejam_ Note that none of these cars have been sold at a good margin for a long time. What they make money on is selling you the loan on them. Mostly because no one is ready to pay the real price...

Di4na,
@Di4na@hachyderm.io avatar

@icejam_ i mean yes. Why not? I mean producing a new car nearly always fail and cost billions. Why not dodge that?

Btw the reason it became that is partially because old car that were far cheaper to produce were crap. And we refuse that quality as consumers now.

quinn, to random

I'm in the Midwest for a funeral this weekend and so I just absolutely needed to buy this incredibly Midwestern necklace when I saw it for sale by a local artist

Di4na,
@Di4na@hachyderm.io avatar

@quinn Quinnnnnnnn :sighs:

Di4na,
@Di4na@hachyderm.io avatar

@quinn I mean, I am french. So I probably have different pov on weapons :D

Di4na,
@Di4na@hachyderm.io avatar

@quinn Oh i totally understand that. On the other hand, I am french. "finding" guns when you need to do a little revolution is not unheard of here... we are not Irish, but we find ways

JustineSmithies, to random
@JustineSmithies@fosstodon.org avatar

Ok I hate to do this but it's for a good cause my Granddaughters new Windows laptop. I hate Norton and was wondering what is a fairly lightweight good FREE antivirus nowadays ??????

Di4na,
@Di4na@hachyderm.io avatar

@JustineSmithies Windows base AV comes packed with Windows and is a totally acceptable and serviceable one. I will stand by it. Just make sure to activate the "Cloud" thing in its options.

andy, to random
@andy@bell.bz avatar

I’ve been doing some research on Next JS for some potential client stuff and it just makes everything more difficult than it has to be lmao.

It’s a good reminder that the annoyances I have with nunjucks are nothing really because Eleventy makes everything easy

Di4na,
@Di4na@hachyderm.io avatar

@andy yeah I actively recommend clients to avoid it. I have had at least 2 projects to move out of Next and not only was Next the reason to move out, it made the process hard af.

I see what attract people to it, but it does not deliver.

icejam_, to random
@icejam_@hachyderm.io avatar

I wonder how did it happen that generally puts very strong emphasis on reproducible automated testing while other areas of software don't. From Spring and Ruby on Rails to React, having a test suite and CI/CD is generally accepted practice.

Every time I step into other parts of software (mobile, embedded, recently data) folks repeat bunk from ages ago - from "maybe it's useful in general, but it's impossible to write automated tests for my special project" to "it will slow us down".

Di4na,
@Di4na@hachyderm.io avatar

@icejam_ you will not like my answer. Because all these web tech are really young, and as such are still in the cycle where money for dev tooling (or simply people time) exist. This become harder with growth and going down the stack, because money and time for it disappear.

Di4na,
@Di4na@hachyderm.io avatar

@icejam_ C, Cpp, Fortran etc have really subpar developer tooling in general, not only test tooling. And making a case to fund a catch up of 3 decades or more, which creates massive codebases with different patterns and needs, is hard. Far harder than building a tool early in the ecosystem to the point the ecosystem shape around what it can do.

Di4na,
@Di4na@hachyderm.io avatar

@icejam_ It is as old, but it also has different realities in how it became what it is. But yeah, it is nice to realize that a large part of the world has not moved for 3 decades right? Not scary at all.

Di4na, to random
@Di4na@hachyderm.io avatar

Do I have anyone with a tool that could query the full range of code bases for idk... all the big FOSS tools? In my followers network? If yes, I would love to get data on the following questions.

"How many projects have a bin or scripts directory? What is the distribution of languages used in these?". Bonus point if you can count the "build tasks" too, things like npm assets.build or equivalent. Use of make as a task runner, and not as a build system, would probably be interesting too.

Di4na,
@Di4na@hachyderm.io avatar

@boneskull Yeah so the answer is "you have to do it yourself". Which. Fair enough I suppose...

  • All
  • Subscribed
  • Moderated
  • Favorites
  • JUstTest
  • mdbf
  • everett
  • osvaldo12
  • magazineikmin
  • thenastyranch
  • rosin
  • normalnudes
  • Youngstown
  • Durango
  • slotface
  • ngwrru68w68
  • kavyap
  • DreamBathrooms
  • tester
  • InstantRegret
  • ethstaker
  • GTA5RPClips
  • tacticalgear
  • Leos
  • anitta
  • modclub
  • khanakhh
  • cubers
  • cisconetworking
  • megavids
  • provamag3
  • lostlight
  • All magazines