mook

Interesting. At a smaller company I worked at, the CEO was a sales role, as far as I could tell.

At scale, testing software is appreciably more expensive than using hardware. That's why at most people test a tiny slice of it, and ships out broken software in the hopes of fixing it later. Testing hardware is expensive because nobody thinks it can be fixed cheaply afterwards.

See also: the article linked to this thread.

That's why we have Android Auto: move the updates to a thing that already has frequent Internet connection, and if the update goes wrong it's clearly the fault of this other company, plus the car itself still works fine.

Jeep already had an OTA the broke the ability for the car to be driven.

Nice, [3] reminded me of OpenGrok † the old Sun project that was basically LXR on steroids.

† https://oracle.github.io/opengrok/

I keep getting things like "denial of service when the SCSS or whatever parse is given malicious input”. Great, that's part of the build chain, all of its inputs are stuff we control. Why do we care.

But updates to broken packages are still allowed: if a new version is pushed within the three days, it does not reset the cool-down. You just get a pull request to update to a known-bad version instead.

I don't see how you can tell it's AI, instead of just your co-workers having no respect for language. See: management-speak using "double-click".

I think it's implied to be refusing to unpublish at the request of the author; unpublishing due to outside forces is probably inevitable. If some unsupportable content got introduced in a new version (e.g. xz), at least the historical versions would be kept.

That of course brings in questions of cost, trust, and governance, so there's definitely a trade-off…

For some reason, that holds an appxbundle per the article. I'd suspect they needed to run some pre- or post-install code (maybe to check for their hardware?).

I use KeepassXC, but I have no need to share passwords with other people. In a corporate situation that would probably not work as well.

Don't forget the insurance, plus the hospital has costs that must be paid for too. A surgery with _just_ the surgeon and no support staff isn't one I'd want to be in.

(Not in the medical field at all)

This is the sort of trademark violation where I can get behind proper enforcement. It's using the name of an unrelated project for advertisement (attention).

That page eventually leads to the CVE page: https://msrc.microsoft.com/update-guide/vulnerability/CVE-20...

While that's still pretty vague, it sounds like the issue was that something running as SYSTEM (the page seems to indicate some part of Windows Update) was not correctly checking if inetpub was a symlink or something along those lines. It also links to a script to set ACLs on that directory; presumably that's not possible to do if the directory doesn't exist.

It would probably be better to fix whatever component to not have the link traversal bug, but maybe there's some reason that makes the proper fix infeasible…

It sounds like it's the editorial decision (of what to promote) is the accountable thing; that seems reasonable to me. Looking at the comments on that thread, it sounds like non-editorial sorting ("simple categorization and indexation") would still be fine.

That's because the client certificate interface in browsers is supremely dumb. It always just lists all certificates you have, with very little context in the UI, and hopes that's good enough. I believe that's part of the reason client certificates are not poplar; having actual users deal with that is terrible, and the browsers (in practice, Chrome because of its overwhelming market share) isn't incentivized to fix it.

There's the https://en.wikipedia.org/wiki/Ideographic_Description_Charac... that kind of does that. The problem is that there's character divergence (see all the brouhaha about Unicode Han unification), so there needs to be something else to select variants too.

As a reference, I don't believe any of the pre-Unicode CJK&c encodings attempted that.

Isn't the post office heroics normally when it's not deliverable? If the sender wrote down 744 Evergreen Terrace but they meant 742, that mail will be delivered to your neighbor and hopefully they'll redirect it to you.

I haven't used EDN, but I know YAML has an equivalent feature, and that had been a security issue in some instances because it deserialized into objects the system wasn't expecting. Perhaps their deserializer had learned from that doesn't have that issue?

I think there's definitely groups on both sides, and I feel like it's similar to cryptocurrency a few years back. There's people really into it, and in response there's people really against it. On a smaller scale, see for example rust. In contrast there isn't as much vitriol against, say, world hunger because there isn't people very obviously pro-that to push against.

Since people cannot work from prison, corporations should be equivalent: they may not conduct any business. But since people in prison are still responsible for things like rent, corporations should keep paying rent and salary too. Not sure if it's possible to get a friend corporation to do that for you though…

Would git worktrees be useful in that use case? It just adds a new checkout in a different directory without duplicating the git data (blob storage).

I believe Hyper-V supports emulating TPM these days, so doing things to a VM and recording the desktop with the VM window _may_ work. In this case though it'd look very boring because you couldn't tell from the recording that anything happened.

I've never programmed before good compilers existed, but I still know some assembly. For what I currently do it's used rarely, but it's still quite valuable on occasion. I don't see any reason LLM-assisted programming wouldn't be like that; for sure the various C compilers sure seem like they're trying just as hard to produce results you don't want.

Doesn't Rust already have that solved via editions? If anything, that's the language that's especially well positioned here.

People who really don't have a clue ignores the added context and answers the question that wasn't asked anyway, because they've answered that particular question before.

Is there anything around that does _not_ force a management system? I really just want a thing that primarily just tracks if I've seen a particular file, secondarily maybe let me control playback from a different device. Actually figuring out what media those files map to is a distant third.

People making cooking websites, websites for their garden, etc usually have nowhere to go.

You know, I kind of miss Geocities too.

I actually went through the Word 97 menus at some point to see what features it had. Unfortunately these days things no longer come with comprehensive menu bars.

In the particular case of thumbs.db, storing them in NTFS alternate data streams would have been a good idea; they're essentially caches for the main data stream, so if they fail to copy to different filesystems it's totally fine. Of course, that wasn't viable because 1) IIRC that was before the widespread adoption of NTFS, and 2) they probably still need the cache somewhere for vFAT USB drives.

I'd like to pretend that inability to render large diffs is a feature. Nobody is going to actually read the multi-thousand line diff; you need to make smaller PRs, or just admit that the diff in that particular view isn't helpful. I doubt that's the actual reasoning, but I can live with it.