HN user

smrq

833 karma
Posts0
Comments323
View on HN
No posts found.

Explain the attack that gets mitigated by reading the diff of a lockfile?

Every major npm attack I can think of essentially follows the pattern of "version X.Y.Z is secretly evil". How does seeing package@X.Y.Z in your lockfile alert you to that?

This really seems like the exception that proves the rule, given how few Facebooks came out of that era. We had a social contract, but it turned out that being sociopathic is a winning strategy when everyone else is playing by the implicit rules. See also: modern politics.

Everyone loves to say this... because it's everyone's experience. I stopped using SO as a resource years ago (well before the advent of LLMs) because it got to the point where almost invariably, when I found a post that managed to perfectly articulate my question, it was closed as a duplicate of some other, distinctly unhelpful question. But it wasn't always that way. There's a fine line between strict moderation and draconian moderation, and at some point they crossed from the former to the latter.

Squares in Squares 2 months ago

The 4 packing takes up 100% of its square; it's trivially optimal. The 6 packing only takes up 2/3 of it, so it's not necessarily obvious that you can't do better.

Posing OpenSCAD as an alternative to the likes of Fusion is like posing MS Paint as an alternative to Photoshop. It's not even the same class of tool.

This is more or less my take, but at least for me it's not about the level of difficulty exactly. It just feels very transparently like exploring a state space, where the "a-ha" moments just boil down to breaking into a different neighborhood of that space. To be clear, the puzzles are very well designed, and also very hard; but I don't find solving them satisfying at ALL. Compare with Baba Is You, where the "a-ha"s feel to me more like having a grand insight than finding the right very specific sequence of moves.

Put another way, it's been years since I played Baba and I can still remember the key insights to some of the sneakier puzzles. I couldn't even begin to do that for SSR.

1D Chess 3 months ago

I believe the intended turn order is:

1: P1 selects 2: P2 selects 3: P1 reveals 4: P1 selects 5: P2 reveals 6: GOTO 2

I.e. each player always selects immediately before their opponent reveals.

Why I love NixOS 4 months ago

The most NixOS comment I've seen yet was when I was trying to find out about `mkOutOfStoreSymlink`, which lead me to this thread:

https://discourse.nixos.org/t/how-to-manage-dotfiles-with-ho...

Hi, I just wanted to know, where can I find the documentation to know more about this contrib.lib.file.mkOutOfStoreSymlink option ?

Well, since is a very simple function, no documentation is really needed.

I've been gradually transitioning everything to NixOS, starting with my homelab mini PC, then my Framework laptop, and now my daily driver desktop. It's hard to imagine going back because the pros are so strong compared to the cons, but the docs situation is truly dire.

You might wish to do some cursory research before arguing further. For example, as a starting point, the Wikipedia page on civil disobedience has an entire section labeled "Action" listing counterexamples.

"My Toyota Corolla struggles to drive up icy hills." "It doesn't struggle, you struggle." ???

It's fine to critique your own tools and their strengths and weaknesses. Claiming that any and all failures of AI are an operator skill issue is counterproductive.

"Clean" is the biggest lie in software development. It's an aesthetic opinion dressed up as objective fact. You think components are clean, someone else thinks classes are clean, and neither of you are wrong, except for believing that "clean" is a property of the code and not something entirely in your own mind.

I mean, you get what you signed up for. If you wanted total stability and infrequent updates then why would you use Arch? (If the answer is "I didn't know what I signed up for" then that's fair. Simply understanding the practical differences between distros is a huge hurdle.)