mixologic

*I'm so excited about landscape design. Can't wait to do more. Employing a gardener to do the gardening for me is really making me enjoy landscape design again!

This seems like a pretty easy thing to fix for the future. Make the standard in all suits such that all genitalia would fit without a problem. Just give everybody that advantage of a mini sail and let the records all come with an asterisk.

It's caused a massive shortage of interesting content that isn't related to AI.

What if... that whole post is written by AI, and the express intent of the post is to sand down our natural instincts for security, making it easier for malskill devs to take advantage?

They can offer a perk that literally no other tech job can offer: Someday have a statue of your likeness preserved in ceramic: https://www.atlasobscura.com/places/internet-archive-headqua...

"Inside the church's main room, with its still-intact pews, there are more than 120 ceramic sculptures of the Internet Archive's current and former employees, created by artist Nuala Creed and inspired by the statues of the Xian warriors in China."

Have you checked for Radon?

You mean a protocol designed for 9600 baud has issues with saturation?

Yeah, no. Most companies do not have that exact hierarchy. Maybe at FAMGA etc, but most engineering jobs are not there.

Mediocre?

Take a look at the original json.org license and all the problems that the "not for evil" clause they added to it had caused.

Ultimately though, if you put a non free license on your libraries, somebody will cry foul, fork it, and evil will still happen.

This sounds more like "How to add more devices to a botnet."

Exposing a port isn't exactly a safe thing to do nowadays, and I'd be wary of the security posture of an "old phone". Proceed with caution.

Yeah, but do they still work when us-east-1 goes down?

Is it on your own domain?

Sigh. I literally bought an HDD last week. This would have been super handy.

Thats a false equivalency. I didnt say that software was safe because its been checked. Just that at the least, one can somewhat figure out where the software came from.

Getting a DUNS number obviously doesn't make it so that you cant publish malware. It just provides a level of traceability/obstacle that slows down the process of distributing malware.

That's only sorta how it usually works. The developer has to check with a singular US tech company before they can sign the software they've given you.

Except yeah, the way this android stuff works is closer to that way. Instead of Google giving out a key for signing, they instead ask for one and tie a developer to a namespace, so yeah, I guess your Android phone has to check whether or not that namespace is "in the clear"

If you want to install software on your Microsoft Windows computer, it has to be signed by a verified developer, otherwise you get an overridable warning that the developer cannot be verified, the software may contain malware etc.

If you want to install software on you MacOS machine, the same thing applies. It must come from a verified developer with an apple account, otherwise you get a warning and must jump through hoops to override. As of macos15.1 this is considerably more difficult to override.

If you want to install iOS apps, the apps have to be signed by a verified developer. Theres no exceptions.

I just dont see a future where being able to create and publish an app anonymously is going to be supported.

Becoming a verified developer is a PITA, and can take a while or be impossible (i.e. getting a DUNS number if you're in a sanctioned country might be not at all possible) but at the same time, eliminating the ability of our devices from running any old code it downloads and runs is a huge safety win.

The difference is in the apparent available resources. You cant get to "professional" without the time and money, and NPM post acquisition, presumably, has more of both. Granted, NPM probably doesn't have a revenue model to speak of, which means Microsoft is probably not paying it much attention.

Because its static content that is almost never cached because its infrequently accessed. Thus, almost every hit goes to the origin.

They let the AI make the bars.

Well, so much for culture. Every use case where you can plausibly use AI generated music removes one more method that provided an avenue to a reasonable career making music.

> And the code you get out, in my experience at least, is pretty crap

I think that belies the fundamental misunderstanding of how AI is changing the goalposts in coding

Software engineering has operated under a fundamental assumption that code quality is important.

But why do we value the "quality" of code?

* It's easier for other developers (including your future self) to understand, and easier to document. * Easier to change when requirements change * More efficient with resources, performs better (cpu/network/disk) * Easier to develop tests if its properly structured

AI coding upends a lot of that, because all of those goals presume a human will, at some point, interact with that code in the future.

But the whole purpose of coding in the first place is to have a running executable that does what we want it to do.

The more we focus on the requirements and guiding AI to write tests to prove those requirements are fulfilled, the less we have to actually care about the 'quality' of the code it produces. Code quality isn't a requirement, its a vestigal artifact of human involvement in communicating with the machine.

> When you spoke with our engineers about implementing artifact streaming you said it was probably out of scope for Spegel at that time, which made sense.

It seems like it would have been a much better strategy to add artifact streaming, submit a pull request and then if the maintainer isn't interested in adding it, proceeding with a fork.

"Probably out of scope" sounds like "I dont have time to implement a feature of that scope"

How do you control for changes in the host os environment that would affect performance of the system being observed?

Sure its a tax, but its not paid from "general funds that every taxpayer contributes.

We could call postage for the usps a tax too, but nobody thinks of it that way.

also the secrets will be published as double base 64 encoded, so it will just look like a string of random chars at the end of the changed-files action in the log.

All the version tags got relabled to point to a compromised hash. Semver does nothing to help with this.

your build should always use hashes and not version tags of GHA's

None of that information has any right to confidentiality. It's in the public's interest to know who owns all the fraudlent accounting trick shell companies that exist solely to steal money from "hardworking taxpayers"

Fair though to hesitate over donating if you believe that your donations are not going to go towards the valueable core mission, and instead be misdirected to ill advised legal crusades.

> If that were the case then each copy would need to sell for thousands of dollars for content creators to afford food.

That is precisely the agreement that existing libraries have with publishers now. The digital copy that they buy to lend out comes with restrictions on how many copies can be lent at a time, and also costs a lot more than just buying one copy of the book.