Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)L
Posts
439
Comments
601
Joined
3 yr. ago

  • We have a client which is MAD cause the project is riddled with bugs, but the solution somehow is paying more attention. Except that it clearly isn’t feasible to pay more attention when you have to check, recheck and check again the same thing over and over…

    By definition, automated testing means paying more attention, and doing it so well that the process is automated.

    They say it’s a waste cause you can’t catch UI (...)

    Show them a working test that's catching UI bugs. It's hard to argue against facts.

    but they somehow think they are smarter than google or any other small or big company that do write test

    Don't sell a solution because others are doing it. Sell a solution because it's a solution to the problem they are experiencing, and it's in their best interests to solve it. Appeals to authority don't work on everyone.

  • Is there a simple way to do a http web server or socket?

    What's your definition of http web server or socket? Most frameworks nowadays provide you with tools to get a fully working project up and running with just a couple of clicks.

    For instance: https://start.spring.io/

  • So is it just Amazon getting hit for this? Or will they be going after the manufacturer as well?

    Nowadays it's hard to tell the difference between Amazon and Ali Express. Even if it's a third-party dropship business selling through Amazon, it's still Amazon doing the listing, selling, and transaction processing.

    Even if you argue that the same store can sell stuff elsewhere, Amazon is still the one selling those. At best, you'd need to argue that after hitting Amazon, other stores should follow.

  • You should also check out git commit --fixup ... paired with git rebase -i --autosquash ....

    Superb tip. I'm reading up on the feature, and it sounds like the process I've just learned but on steroids. Thanks for the pro tip!

  • As a followup to this post, I've started including git rebase -i in my workflow when working on local branches. Basically things went like this:

    • I start working on an issue in a dedicated feature branch.
    • I commit small changes such as "Updates this feature in this component", "fixes this glitch on this function", "removes this dead code".
    • I keep going until I'm done.
    • If I stumble upon small nits, I just commit them right at the head.
    • when I'm done I run an interactive rebase and move these small commits around to sort commits that belong together.
      • nits and followup fixes are squashed together,
      • cleanup commits are moved to the start of the branch to line them up to be pushed as a separate pull request,
      • push a PR for the issue

    To me this really paves a way to a far better workflow and faster turnaround times.

  • I don’t think you mean ‘merge’ - that’s a specific operation. I think you mean ‘squash’, which combines multiple commits into one.

    Yes, you are right. I apologize for the terminology mixup. I was referring to how it's possible to join two changesets so that they can be considered in the commit history as a single commit.

    Once you get familiar with rebasing, you could try out stacked git.

    Thanks for the recommendation, but I'll take a pass. Vanilla Git does the job well.

  • appears to be a weak patch.

    It's not a patch. It's eliminating an attack vector, and the one which is more pervasive and easier to exploit.

    Security-minded people pay far more attention to what software you run than what hardware you have.

  • But we often hear about ‘corporate lobbying’ and you’ve described things mostly carried out by individuals or nonprofits.

    No, I'm describing lobbying. The definition of lobbying doesn't depend on your market capitalization or revenue. A corporation does lobbying, just like unions do and industry representatives and community groups. If you have personal interests and want to raise awareness with stakeholders then you reach out to them.

    I mean, Wikipedia's article on lobbying also refers to it as advocacy. From Wikipedia;

    In politics, lobbying or advocacy, is the act of lawfully attempting to influence the actions, policies, or decisions of government officials, most often legislators or members of regulatory agencies, but also judges of the judiciary.

    "Attempting to influence" is the operative principle.

    And so is "lawfully". Which is not the same as the corruption you pinned on "Eastern countries".

  • I dare say anything from the GNOME project.

  • I agree that complexity is the problem and I’m avoiding Kubernetes like the plague. I set up a nomad cluster in a few days and it just works, has service discovery, and is perfectly simple to understand.

    I think Kubernetes gets a bad rap out of ignorance. You can make it as complex as you want, but you can also keep things trivial and simple if that's what your aiming for.

    Case in point, I operate a Kubernetes cluster with microk8s. I got my nodes up and running in a one-time setup, and after this all I need to do is kubectl apply -k to get my apps deployed and running. Each konfiguration script is trivial too. ingress, services, deployments. That's it. A docker compose script is far more complex and hard to maintain than that. Where's the complexity?

    Honestly, have you ever gave kubernetes a try? If you did, what exactly did you tried to do? I bet that if you do an honest apples-to-apples comparison with any setup that you believe works, you'll notice that you're doing far more work to achieve the same result. This is a given as you're pointing out nomad of all things as something simple.

  • Western countries got ‘lobbying’

    The term "lobbying" doesn't mean corruption. It means basically have meetings with stakeholders to discuss issues regarding policy and agenda.

    If you hold a meeting with your local city council asking for a crosswalk, you're engaged in lobbying. If you chat with the local police chief asking for more patrols in some part or another of town, you're engaged in lobbying.

    Now, lobbying might set the stage for corruption. If you're talking to your city council about the need for a crosswalk and you show a video of cars speeding by an intersection, that's ok. If instead you tell your city councilman that if he hires your construction company to build that crosswalk then you'll pay him a wad of cash, that's corruption.

    Lobbying is not corruption. It's weird how the basis of any democratic system is attacked for being "corruption" to try to justify corruption in corrupt hellholes.

  • For Signal, no.

    There is an argument to make about using custom versions of Signal that route their traffic through your own infrastructure.

    This would count as France running their own service.

    Given that Signal relies on centralized servers to route traffic, and if I'm not mistaken they use AWS in US instances, this means that your Signal traffic is being fed straight into the US security services' infrastructure. France might be a staunch ally of the US, but they do go through great lengths to preserve their independence.

  • I’m not a proponent of any backdoors like this.

    I'm not sure you got the gist of what I said. The point I made was that if being the host nation of an organization meant that their government can add backdoors at will, using any foreign service would automatically mean you'd be snooped by external actors.

    Regardless of where you stand on whether you want to add your own backdoor or not, by your own logic using a foreign service means your services are already compromised.

    If that's the case, wouldn't it make sense to simply run your own stuff?

  • A far better reason not to use WhatsApp is that it is run by Facebook. It was also a primary vector for Pegasus.

    Aren't you doubling down on the government of France's position?

    I mean, the french minister did explicitly stated that "[you] cannot guarantee the security of conversations and information shared via them".

  • France wants backdoors into these apps, it’s not a lack of trust thing.

    If it's trivial for a host nation to add backdoors to instant messaging services, you'd be agreeing with the government of France and you'd be pressing to migrate your communication out of the hand of third parties.

  • To start Europe should have secure phones made in EU.

    Doesn't switching instant messaging services count as a start? Switching hardware is far harder than switching software.

    Also, local messaging systems also determine where your traffic goes and who controls that data. If you have a french messaging service with data centers in france routing traffic between people in France, you are in a far better shape.

  • Yeah, unless I’m missing something the author would have the same outcome with regular pointers if he’d freed them at the same time (one at the end of the anon scope and one at the end of fun1).

    That's basically it. The way the blogger wrote fun1 means the pointer is freed once the function exits, because they explicitly added the std::unique_ptr to take over its lifetime. Afterwards they are surprised by the fact that it really took over its lifetime.

    The weird part is that the blogger had to go way out of its way to write that bug.

    I almost can’t believe it’s legit, it seems like such a basic, fundamental misunderstanding of concepts it’s like chatGPT output.

    I agree. It almost sounds like one of those coding exercises recruiters throw candidates in preliminary hiring rounds to weed out the bottom 5% that have no idea what they are doing.

  • "They say C++ is specified in an international standard, but there is behavior that's left undefined. Are they lazy, or did their printer ran out of ink?"

  • Cloud @programming.dev

    Google’s .meme domain is here to serve your wackiest websites

    www.theverge.com /2023/11/28/23979595/google-registry-meme-domain-launch
  • Git @programming.dev

    Gitea Cloud: A brand new platform for managed Gitea Instances | Gitea Blog

    blog.gitea.com /gitea-cloud/
  • TypeScript @programming.dev

    $20k Bounty was Claimed! · Prettier

    prettier.io /blog/2023/11/27/20k-bounty-was-claimed
  • JavaScript @programming.dev

    $20k Bounty was Claimed! · Prettier

    prettier.io /blog/2023/11/27/20k-bounty-was-claimed
  • C++ @programming.dev

    C++ Memory Model: Migrating from X86 to ARM (2021)

    arangodb.com /2021/02/cpp-memory-model-migrating-from-x86-to-arm/
  • Cloud @programming.dev

    Introducing Amazon EC2 high memory U7i Instances for large in-memory databases (preview)

    aws.amazon.com /blogs/aws/introducing-amazon-ec2-high-memory-u7i-instances-for-large-in-memory-databases-preview/
  • C++ @programming.dev

    GitHub - gabime/spdlog: Fast C++ logging library.

    github.com /gabime/spdlog
  • Domain-Driven Design @programming.dev

    Application Design: Data-driven vs Domain-driven

    blog.passwork.pro /application-design/
  • Golang @programming.dev

    GitHub - golang-standards/project-layout: Standard Go Project Layout

    github.com /golang-standards/project-layout
  • Programming @programming.dev

    A Collaborative List Of 1400+ Public APIs For Developers

    publicapis.dev
  • Java @programming.dev

    Is Java 21 Keeping Up With Modern Programming Languages

    digma.ai /blog/java-21-keeping-up-with-modern-programming-languages/
  • Engineering Managers @programming.dev

    14 Signs of a GOOD Manager

    medium.com /blob-streaming/14-signs-of-a-good-manager-ea7879f8d894
  • Python @programming.dev

    CPython Object System Internals: Understanding the Role of PyObject

    codeconfessions.substack.com /p/cpython-object-system-internals-understanding
  • C Sharp @programming.dev

    .NET Architecture: Framework Design Guidelines

    learn.microsoft.com /en-us/dotnet/standard/design-guidelines/
  • Git @programming.dev

    Please Add .gitattributes To Your Git Repository

    dev.to /deadlybyte/please-add-gitattributes-to-your-git-repository-1jld
  • C++ @programming.dev

    GitHub - timsong-cpp/cppwp: HTML version of the current C++ working paper

    github.com /timsong-cpp/cppwp
  • C++ @programming.dev

    On harmful overuse of std::move - The Old New Thing

    devblogs.microsoft.com /oldnewthing/20231124-00/
  • C Sharp @programming.dev

    GitHub - dotnet/roslynator: Roslynator is a set of code analysis tools for C#, powered by Roslyn.

    github.com /dotnet/roslynator
  • Programming @programming.dev

    Retries – An interactive study of common retry methods

    encore.dev /blog/retries
  • TypeScript @programming.dev

    Announcing TypeScript 5.3 - TypeScript

    devblogs.microsoft.com /typescript/announcing-typescript-5-3/