The cooldown setting in dependabot solves this attack vector. By setting it you give security vendors time to scan new packages.
HN user
capitol_
Shouldn't a perfect shuffle just reorder the cards without adding entropy?
You would need sloppy ones to introduce randomness.
Just make a PR here: https://github.com/areweguiyet/areweguiyet
(I'm not affiliated, but have made PRs there in the past)
Why not use ripgrep?
Isn't that just an insult people throw around? Or maybe some psychopath that tries to justify their worldview.
I have never had an conversation with someone who seems like an NPC.
I also find it useful for review, and sometimes I use multiple passes to review for different categories. Like security, performance and so on.
As far as I understood it: GnuPG started to implement stuff from the standard before it was finished, the standard continued to improve and GnuPG refused to change code already written.
Combined with some personal drama.
Your first example sound very sensible to me?
Using new technology in something small and unimportant like a setup script is a perfect way to experiment and learn. It would be irresponsible to build something important as the first thing you do in a new language.
Finally encrypted client hello support \o/
There is sadly a lot that is missed by cargo audit, far from everyone report their vulnerabilities to rustsec.
Those stablecoins are useful when you want to do crime.
Typically markets are good at optimizing everything that is priced into the market.
Long term price stability is currently not something that is optimized for.
One way to solve it is of course abandoning the ide of a market economy for power.
Another is to let those industries that need price stability buy that on the futures market.
Split dns is such an ugly hack, it causes no end of hard to debug problems.
There is nothing in the open source licensees that prevents charging money, in fact, non-commercial clauses are seen as incompatible with the Debian Free Software Guidelines.
And there is a lot of companies out there that make their money based on open source software, red hat is maybe the biggest and most well known.
That Trump makes us very motivated to stop relying on American tech.
one.. fully autonomous, self improving, replicating, general intelligence.
It means selling to all bidders, since it's information and not a tangible asset.
A prediction is not a claim.
Predictions operate on events that will happen in the future.
Proofs typically operate on things that already exist.
What on earth do the Direct Rendering Manager api have to do with commercialization?
I have worked in the industry for a little over 20 years, i wouldn't be surprised if I have written between one to two million loc.
I would be surprised if it's significantly above that.
And yet, without the software for Linux gaming, there is no Linux gaming.
Very hard to falsify such a statement.
I agree, if people just had refrained from building things in c/c++ that operated on data from across a security boundary we wouldn't be in this mess.
I'm pretty sure that you won't be able to claim your 1 million dollars from the Clay Mathematics Institute by just answering yes or no.
That is a fairly simple question. The answer to it should be simple too.
"Is P equal to NP" is also a simple question.
650 GB fits in ram: https://yourdatafitsinram.net
The reason the internet consists of 99% broken html is that all browsers accept that broken html.
If browsers had conformed to a rigid specification and only accepted valid input from the start, then people wouldn't have produced all that broken html and we wouldn't be in this mess that we are in now.
If "A billion dollar mistake" wasn't already taken by 'null', then this would be a good candidate.
If that ecosystem have changed their values/opinions on that topic, the it wouldn't be an impossible task to dual-license it with a compatible license.
(Hard and tedious work, but not impossible).
Everything you wrote sounds like Rust, except that you didn't want it to be Rust :).
Just understanding the rules are not enough, you also need to be consistently good so that you never make a mistake that gets into production.
On both your average days and your bad days.
Over the 40 to 50 years that your carer lasts.
I guess those kind of developers exist, but I know that I'm not one of them.