biggusdickus69

19 karma · joined July 14, 2025

submissions comments

biggusdickus69··on Shai-Hulud malware attack: Tinycolor and over 40 NPM packages compromised

In the amount of bloat, yes.

biggusdickus69··on Shai-Hulud malware attack: Tinycolor and over 40 NPM packages compromised

This is a solved problem. https://en.wikipedia.org/wiki/Web_of_trust

biggusdickus69··on Shai-Hulud malware attack: Tinycolor and over 40 NPM packages compromised

I didn’t downvote, but...

Depending on a commercial service is out of the question for most open source projects.

biggusdickus69··on Shai-Hulud malware attack: Tinycolor and over 40 NPM packages compromised

Not necessarily, some supply chain compromises are detected within a day by the maintainers themselves, for example by their account being taken over. It would be good to mitigate those at least.

biggusdickus69··on Shai-Hulud malware attack: Tinycolor and over 40 NPM packages compromised

The time upgrading is not linear, it’s exponential. If it hurts, do it more often! https://martinfowler.com/bliki/FrequencyReducesDifficulty.ht...

biggusdickus69··on %CPU utilization is a lie

The memory usage is interesting, where different kind of shared memory is obvious hard to visualize, just two values per process doesn’t say enough.

Most users actually wants a list of ”what can I kill to make the computer faster”, I.e. they want an oracle (no pun) that knows how fast the computer will be if different processes are killed.

biggusdickus69··on The future of large files in Git is Git

Git is an scm, not a vcs. By design.