6,528 karma · joined March 11, 2009
Personally I came from a C background so I tended to use deps more sparingly.
In the end it's a bit of a balancing act—lots of dependencies is a larger opportunity for these kind of supply chain attacks to affect you. Copying stuff into your repo protects you from that, but it also makes it way more likely that you'll miss security fixes, unless you're actively looking for them. Re-implementing what you need is also viable but it slows down the dev process.
Although I suppose that's still doing a lot of shenanigans at compile time. It could be sandboxed pretty well (theoretically). I'd hate to give it up completely though, getting a compile time error when SELECT query params or return values have type mismatches is extremely nice.
Certainly having a larger stdlib helps Go projects keep their deps down, but I don't think it's the real reason.
Or, if you get nerd-sniped by the question and spend some time figuring it out, that’s fine too.
But if you want to be helpful but don’t want to take the time to figure it out yourself, don’t just forward the question to AI or send me a link to the first result in Google because I could have done that myself(and may have done it already). Just say you don’t know, which is a paradoxically more useful response.
> Now, I know there are some polls out there saying this man has a 32 percent approval rating. But guys like us, we don't pay attention to the polls. We know that polls are just a collection of statistics that reflect what people are thinking in reality. And reality has a well-known liberal bias...
His whole thing was phenomenal: https://www.youtube.com/watch?v=IJ-a2KeyCAY
I've heard from others that it's readily absorbed by water. That's bad in the ground water case, but it seems it might be a positive when trying to clean up a (contained) spill.
It appears to me to have a relatively high lethal dosage (my back of the napkin calculations are saying a 200 pound human would have to orally ingest almost a liter of it to reach the LD50 dosage--but again don't quote me on that number because I am not an expert and could have very easily messed up the math or the concept of a lethal dose).
So, while I agree there might be unknown long term issues, it does appear to be a relatively low probability of that since it seems to be on the less pernicious side.
Can you expand on that? It seems like there wasn't a lot they could do once the tank started leaking.
Disagree. The UX would be pretty similar. Click a mailto link which opens the email client with to, subject and body precomposed. Click send. Server receives mail and the web page continues/finishes the sign up process. No need for an email reply. It’s different, but it’s not crazy.
You actually verify DKIM and SPF—you know, that “dmarc stuff”. That’s enough to tell you the mail is not spoofed.
Knowing that they love rectangles explains a lot too. They love every Amazon box that arrives, the folded hand towel in the bathroom, the top of my pc mini tower (rectangular and warm). Though they get off the tower when I’m playing a game since the gpu heats up so much and the exhaust fans blow out the top—it just gets too hot for them. I made a “cat catcher for my bed—a single hand towel folded in half lying on the otherwise featureless comforter. There’s almost always a cat there when I wake up in the morning.
This desk might actually work for me since one of my cats loves to sleep right under my office chair, dangerously close to the wheels. He’s got real long hair and I find tufts of fur around the chair and feel absolutely horrible. Crazily I almost never notice when it happens, he doesn’t yelp! I finally ended up buying a small scratching post with a bed on top and set it under my desk. He instantly took to it, so no more running over the poor cat. As a bonus he’s now in petting reach so I can get my cat fix whenever I need (petting is a two way street).