smashed

Updating dependencies can be a major change. It can also be a security fix.

Marking it as a simple chore sounds like the impact has not been fully analyzed.

I understand the practice and if done meticulously by all contributors, it should at least signal a well organized project but most of the time, it just shovels your entire commit log as a release notes. It's OK to have it, but I much prefer projects that takes time to summarize the impacts to their users.

Splitting app binaries that can be easily redownloaded from configs and user data makes a lot of sense. Also caches that can be deleted and rebuilt.

Thanks for sharing, did not know this project existed.

I am maintaining a small embedded linux project myself and having a reproducible build as a feature is a long standing goal. The more tooling and awareness there is, the better.

> and in the long run their investors with them

In the short run as well. Most Tech stocks are down recently, but the Neil Young incident seems to have had a disproportionate effect. Still early to tell but so far investors are reacting strongly negatively.

I'd put the initial fuck-up on Apple marketing, who used the UNIX trademark without license nor compatibily.

This was an attempt to repair the damage that had already been done, by passing the UNIX compliance required to become an official, paid, licensee.

My investments knowledge is limited, but I think ARKG is an ETF, but not an index funds.

It is actively managed, meaning that specific stocks are selected to be part of the fund. This is the opposite of an index fund, where the goal is to buy the whole market.

That's why a fund like ARKG can sometime outperform the market, or, like recently, under perform. An index fund would match the whole market performance, no more no less.

Probably by copy pasting example code?

I am not with at&t but with a very large Canadian provider that provides the same setup (Bell).

Yes, you can do just that. You can also use a commercial firewall with an sfp port.

SFP ports can be a little troublesome. There are a few standards (SFP/SFP+) and different link speeds.

The you need to know your ISP's specific info to configure your hardware. Bell uses pppoe on VLAN 35. You need your username/password for pppoe, which is not a given since the technician will usually do the initial config for you.

Another option is to use a media converter. They are very cheap and "dumb" devices, that simply converts the fiber to copper ethernet. You then connect using just about any router that supports vlans and pppoe.

If you also get bundled TV or Phone subscription on your fiber link, these will be on another VLAN and connection is much more obscure. Usually the logic is embedded in the all-in-one router they provide.

Please read this article:

https://rachelbythebay.com/w/2020/03/07/costly/

Personnally I like it.

It implies they know that the space is already pretty crowded. Yet, they find there was place for yet another because they bring an angle or feature that is worthy of existing.

One of my pet peeves against chrome's URL is how it breaks copy paste.

Sometimes you just want to copy the domain portion of the URL, without the hidden parts (scheme, subdomain).. You think what you select is what you copy? Wrong, Chrome is "smarter" than you and you end up pasting the entire URL, that you did not even see!

Their design meant they had no choice but to break one use case or the other. Either you'd copy an incomplete, invalid URL meant for display purposes, or one containing chars you did not select. Bad UX either way..

That line is in a Perl metadata cleaning library. Not in Gitlab itself. Gitlab, who prides themselves and sell the gospel of improving security, willfully chose to use that library which was obviously never designed for their use case.

I looked at the front-page of that library. It says it cleans metadata from a huge number of file format. Frankly it looks more like something you would use on your own, known safe, files before sharing them online.

I'm not sure the tool is presented as a sanitizer for untrusted input. At least, it does not claim to be.

Why does Gitlab need to clean metadata from DjVu files? Wtf are DjVu files?!

The auto play of movie trailers while browsing for titles irritates me to the core.

It's like I know I can't read the description longer than 3 seconds or else all these moving pictures that I don't want to see are going to start jumping at me.

I know it sounds like a 1st world problem but it made the Netflix experience unbearable for me.

I was ready to cancel my subscription.

Then I learned on this site while reading comments you can turn this off by logging in your account on the web.

These *&$ knew only geeks like me would be put off by auto-playng trailers. They knew only geeks like me would find the turn off setting. I hate Netflix, but I'm still paying. I hate myself.

I can vouch for the apu2. I've operated many of them and never seen one crash due to an hardware issue.

Couple it with 2x wle600vx wifi radio for dual band wifi and openwrt or another Linux based router is. No 5ghz driver on *bsd.

The alix is the predecessor and is EOL.

Unfortunately, the apu2 is out of stock from pc-engine main shop due to chip shortage.

You might be lucky and find a reseller with some stocks.

I was intrigued by your meta example and I took a look. It took me 3-4 minutes to find the warning, and I was looking for it!

I was expecting a big fat warning on the merge request itself, or maybe on the lines containing the dangerous chars.

In the end, it is a small ? character inserted were the unicode control chars are, and a mouseover tooltip warning about a potential issue.

The warning is good, but why so subtle? Sorry for the criticism. The feature is still a huge positive.

And who would on to such stock?? Surely these are not still manufactured??

As an 80's kid I have fond memories of this toy. Being all mechanical you could explore and marvel at it.

I remember trying to get the spin faster/slower, stopping the spring, etc.

Since it required no batteries it was always working, even when you found it at the bottom of toy bin after months/years.

This modern version is a complete scam, especially since the outside look seems absolutely identical to the original. I'd be very disappointed if I bought one for a toddler, only to realize when unboxing it's crap.

By the way, we still have the original toy from my childhood. It's been passed around to relatives, but last I heard, it still works after what must be almost 40 years.

But they can hate their parents for the rest of their life.

I'd suspect a huge amount of IoT devices continually test their network connection by pinging these well known IPs.

The newsletter pop-up made your site unusable on mobile. Hard to close, and then it kept coming back. Obnoxious and rage inducing. I hate your product now.

I've done both Drupal and Django work in my career.

You are right they were both invented for the full html page generation on every request paradigm.

Django's concepts are much simpler though. Building a headless, API only, back-end feels very natural. You just skip the html templates. You don't even need special libs like Django rest framework.

Drupal was invented imho, to solve a much different problem set: the community-built CMS. This is where there are many different class of users going from anonymous to full admins that can perform wide range of write actions. It probably excels in this niche. Django can do it, but using custom code/calls where you'll implement most of the logic. Drupal exposes configurations that you can tweak (and have to manage).

You hint on the combinating nature of Drupal modules where every thing can override anything. That is, for me, largely the reason I stopped using Drupal. The Drupal best-practices back in the days (6-7-8), led to awfully unmaintainable code bases for anything remotely complex.

A++++++

Your first approach reminds me of http message signature:

https://datatracker.ietf.org/doc/draft-ietf-httpbis-message-...

Library support for it is spotty, depending on your framework of choice but they exists.

Your second approach is covered by oAuth refreshable tokens I believe.

I went through the same process as you in an API project, eventually ended up using Keycloak as the auth server.

You can change the number of processors gimp's gegl multi-threaded operations gimp will use in the preferences.

https://youtu.be/D2c8BH8q6Yc

The tile size seems to be hard-coded to 128x128.

Yes, that is a huge problem I have seen often here in French speaking Quebec. Developers will prefer all the code in English, because the libraries and language keywords are in English and it is thus more consistent.

This leads to business domain objects to be translated in English by the devs and they will make different or incorrect translations.

Then, all the stakeholders and requirements will be in French. All developers need to constantly map the real world names to the English names used in the code base, but that nobody else uses.

This leads to bugs, inconsistencies and extra cognitive load. It comes back to how hard "naming things" is.

You sure that would not be "Je vais me garer au parking" ?

Same old same old?

It's a big part of the history. Linux has been compared to its competitors all along after all.

I remember FreeBSD being ever present all along. Ultimately, Linux won on many fronts, the biggest one maybe the vast hardware/driver support.

I've used both extensively in the 90's and early 2000's, both on the server and workstation side. Ultimately settling 100% on Linux around 2004-5.

Still, competition on this space is very healthy. Who wants an OS monoculture?

To be honest the article does realize this, first blaming it on the poor hindsight from original developer (co-founder) and in the conclusion about maybe rewriting the whole thing.

It seemed to be all about how to extract the most performance from the lemon they had to deal with.

I found the linked reference really informative too: https://rachelbythebay.com/w/2020/03/07/costly/

The upload of an encrypted file could allow the victim to verify the hackers are indeed able to decrypt files?

Not meant to be pedantic, just playing devil's advocate, but isn't the real time audio bitstream just a continuous source of events that gets blended with the rest of the application state like active filters and what not?