Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
theodorejb
searching Neon…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
6 ms
·
1.
▲
by
theodorejb
1mo ago
Design has tradeoffs, and when these are considered I doubt you'd want to trade your eyes for another organism's. The human eye is a marvel of engineering, and even today the best digital cameras we design can't capture even
2.
▲
by
theodorejb
1mo ago
> Life didn't spring up fully formed, it developed in stages. Have these stages been observed, or are they merely a speculative story? No one has ever demonstrated life arising from non-life (a violation of the Law of Biogenesis). W
3.
▲
by
theodorejb
1mo ago
We know that intricate machines are designed by smart people; they don't just happen by luck. The idea that living things, which are far more intricately organized at every level than any machine we have made, could have arisen by some
4.
▲
by
theodorejb
2mo ago
The worst situation I've encountered is after a large conference when everyone is leaving the hotel at once. An elevator quickly fills up on the way down, but then wastes time stopping at every subsequent floor with a call, even though
5.
▲
by
theodorejb
3mo ago
The Big Bang is an almost infinitely malleable story, contorted to comport with almost anything we observe. But how is this useful? The predictions of this theory continually fail. The farther we look, the more we see stars, galaxies, black
6.
▲
by
theodorejb
3mo ago
Instead of questioning whether the Big Bang assumption is true, astrophysicists prefer to perform endless "gymnastics" to try to make the mounting contrary data fit their theory about how the universe began.
7.
▲
by
theodorejb
4mo ago
Only if the union is against the unethical request. In some cases the union may be for it, which makes it even harder to push back.
8.
▲
by
theodorejb
4mo ago
You don't need to join a union to push back against unethical feature requests.
9.
▲
by
theodorejb
4mo ago
I've been building PHP Handlebars, a spec-compliant implementation of Handlebars in pure PHP: https://github.com/devtheorem/php-handlebars I've also been developing Cropt, a zero-dependency JavaScript image c
10.
▲
MySQL 9.7.0 LTS
(blogs.oracle.com)
3 points
by
theodorejb
5mo ago
|
0 comments
11.
▲
by
theodorejb
5mo ago
This can be done with curl_multi_exec(), or with $client->getAsync() in Guzzle. https://www.php.net/manual/en/function.curl-multi-exec.php https://docs.guzzlephp.org/en/stable/quicksta
12.
▲
The Operational Cost of Vacuuming in PostgreSQL
(mariadb.org)
2 points
by
theodorejb
6mo ago
|
0 comments
13.
▲
by
theodorejb
7mo ago
In my petrol-powered Prius I average 52 MPG, so at the current price of gas ($2.60/gallon) I pay $0.50 to drive 10 miles - less than the listed cost to drive an electric car the same distance.
14.
▲
by
theodorejb
7mo ago
How would the photosensitivity and wiring to muscles come about at the same time?
15.
▲
by
theodorejb
7mo ago
What benefit is an eye unless there is also the capability of processing and using the information? How would both evolve simultaneously?
16.
▲
New Era of MySQL Community Engagement
(blogs.oracle.com)
1 points
by
theodorejb
7mo ago
|
0 comments
17.
▲
by
theodorejb
10mo ago
According to the timeline it took more than a week just for Filevine to respond saying they would review and fix the vulnerability. It was 24 days after initial disclosure when he confirmed the fix was in place.
18.
▲
by
theodorejb
10mo ago
My guess would be so they don't have to embed an IP address or hostname in the malware to send secrets to, which could then be blocked or taken down.
19.
▲
by
theodorejb
10mo ago
Someone could be tricked into giving their npm credentials to the attacker (e.g. via a phishing email), and then the attacker publishes new versions of their packages with the malicious diff. Then when the infected packages are installed, n
20.
▲
KeePassXC 2.7.11 Released
(keepassxc.org)
4 points
by
theodorejb
10mo ago
|
0 comments
21.
▲
PHP 8.5 Released
(php.net)
16 points
by
theodorejb
10mo ago
|
4 comments
22.
▲
Alchemy
(joshcollinsworth.com)
1 points
by
theodorejb
10mo ago
|
0 comments
23.
▲
by
theodorejb
11mo ago
I can testify that steamed stingy nettles with gomasio (toasted sesame seeds and salt) is very delicious.
24.
▲
by
theodorejb
11mo ago
One option to make it a little safer is to add ignore-scripts=true to a .npmrc file in your project root. Lifestyle scripts then won't run automatically. It's not as nice as Pnpm or Bun, though, since this also prevents your own p
25.
▲
by
theodorejb
11mo ago
Bun also doesn't execute lifestyle scripts by default, except for a customizable whitelist of trusted dependencies: https://bun.com/docs/guides/install/trusted
26.
▲
by
theodorejb
11mo ago
I would expect to be able to download a package and then inspect the code before I decide to import/run any of the package files. But npm by default will run arbitrary code in the package before developers have a chance to inspect it,
27.
▲
by
theodorejb
11mo ago
> Human cognition was basically bruteforced by evolution This is an assumption, not a fact. Perhaps human cognition was created by God, and our minds have an essential spiritual component which cannot be reproduced by a purely physical m
28.
▲
by
theodorejb
1y ago
Yes it does, since the ignore-scripts option is not enabled by default.
29.
▲
by
theodorejb
1y ago
Many people have non-JS backends and only use npm for frontend dependencies. If a postinstall script runs in a dev or build environment it could get access to a lot of things that wouldn't be available when the package is imported in a
30.
▲
by
theodorejb
1y ago
In my experience, packages which legitimately require a postinstall script to work correctly are very rare. For the apps I maintain, esbuild is the only dependency which benefits from a postinstall script to slightly improve performance (th
More ›