joeyh

A backdoored xz could also run payloads hidden inside other xz files, allowing targeted attacks.

Tea is from the same person who was using AI generated descriptions in their package manager the other day. Probably best to put your old grift to bed before starting your new one?

- debhelper: 1997-present

- dh: 2008-present

Building something on top of dh at this point, like dh was built on debhelper, does not seem to justify your rant. But what do I know?

I've never used multiple monitors. I've also never talked about that fact, because why would I? Only people who use multiple monitors have reason to talk about them, so discussion is biased in favor of seeming like people use them.

(I've never even tried multiple monitors. I could immediately think of several reasons why they would not be an improvement for me, so made a quick decision in 1998 and moved on.)

This is a pretty good post. The weak part of it to me is that I have never felt pushed to use any particular new fancy type stuff if I don't want to. Don't want servant's type-level http apis? Drop down a level and use warp. Libraries are often layered this way because it's understood that excessively complicated types can be a trap. One does have to develop an intuition for how far to go, which will involve making mistakes.

Set safe.bareRepository = explicit.

Mastodon is conveniently also AGPL...

To the extent of claiming that "GitHub Copilot is already writing 46% of code". It smacks of desperation to lie so baldly with statistics.

Again with the gratiuitous title changes eh HN?

They would hop on a p2p or federated social network in a heartbeat if it were the only option.

The fact that the CDA and 230 have tilted the internet away from those, by propping up currently large businesses does not mean that's the only way the internet can work.

Interesting discussion about this flag on mastodon: https://mastodon.cloud/@timbray/109414415306474691

Will need an update to IEC 80000-13 won't it? Or does the standard define a formula to derive the names from the metric prefixes?

I have never given paypal my phone number, and can still log in with password.

(This August it would refuse to let me finish logging in without setting up a phone number. I discovered that getting a friend to send me a paypal requst for $1 would get around that requirement.)

That explains why it was added to git/contrib. It seems to have moved out of contrib with essentially no discussion.

The original commit adding it to contrib anticipated moving parts of it into git proper:

    For example, we previously discussed the idea of a "git big-clone" that does
    much of what "scalar clone" is doing. This patch series is a step to make
    such functionality exist in the Git code base while we simmer on what such a
    "git big-clone" command-line interface would look like.

    This is one of many possible ways to do this. Creating a 'git big-clone'
    could lock Git into backwards compatibility concerns so it is necessary to
    approach such an endeavor with caution.

Seems like now it is locked into backwards compatability concerns around including the scalar command.

The performance of this might be useful for a few things. The correctness seems more generally useful. The first two things I looked at that currently use vfork both go on to do things that are unsafe (according to the information in this talk anyway). I'll bet a substantial number of programs that use fork don't limit themselves to signal-safety(7) functions either.

One thing that the library could do is store the cookies of their patrons, and restore those next time they use a library computer. This would avoid the most common case of the problem. I suspect this is the only feasible solution; Google is certianly never going to bother with these people.

The actual title is not the inspid word soup deposited atop this thread.

He did travel, to Poland and Hungary. The AP originally had an article claiming no travel, but later updated it.

Vincent Racaniello covers this and other details, recommended: https://www.youtube.com/watch?v=P-5KGHzHTsI

You can approximately half the power consumption by eliminating starlink's wifi router and using a DC POE injector to power the square terminal. I have not done it yet but have seen others report ~30 watts.

Github has carefully nurtured this culture of centralization. It's a marvel of our times.

I have cookies blocked from nyt and it crashes on load when it fails to set a cookie, resulting in a white screen.

There were maybe 100 million years after the big bang with no star formation. Darkness. Here's a page about that era as it relates to Webb: https://webb.nasa.gov/content/science/firstLight.html

Nothing in the APL requires he transfer the git repos to them. If they own the license, he needs to update the license and copyright statements to match reality, maybe send them a courtesy copy in a tarball or whatever. That's all.

Copyight cannot demand this ridiculous thing.

I have an 19 year old one, and my mechanic offered to buy it yesterday (after fixing a suspension torn up by essentially offroading in it, third repair it's ever needed in 180k miles), because he needed a car with good gas mileage.

I have a simple rule for people who close my bug reports this way: No further bug reports.

I've done this at conferences for years†, hotel room track is great to catch a talk when you need to recharge your extraversion battery.

†FLOSS conferences having been generally well ahead of mainstream on streaming.

I'm going to guess "noone". This is not the first security hole like this caused by piping to mail. See CVE-2000-0703, a trivial local root via suidperl. Unfortunately backwards compatability often wins over prevention of future security holes.

I enjoyed this episode. I knew about all the tests before, but what came clear in this interview is that Sqlite inc is using their tests as a unique way to keep contracts on Sqlite development flowing. Since they can test it so much better than anyone else, it would be crazy not to hire them, rather than hiring someone else to develop a patch.

While they're keeping those tests proprietary, and relatedly have a closed development model, this strikes me as still better than typical open core strategies for monetizing free software, or at least pointing in better directions.

Agbell, since you're here, could I ask you add a standard link to the RSS feed for your podcast?

<link rel="alternate" title="Corecursive" type="application/rss+xml" href="https://link.chtbl.com/corecursive?platform=rss" />