wereHamster

10 ms·

1.
by wereHamster 2mo ago
Some reasons why an org might want to become their own CNA: https://daniel.haxx.se/blog/2024/01/16/curl-is-a-cna/
2.
by wereHamster 3mo ago
> Add a mechanism to donate tokens Or donate money. Crazy idea, eh?
3.
by wereHamster 3mo ago
I was just looking into microvm (via microvm.nix) to isolate coding agents. While the machine starts quickly, as in the article, the userspace (nixos) takes much longer. I'd probably need to spend some time to strip the system of all n
4.
by wereHamster 4mo ago
After I upgraded pnpm to v11, I set all allowBuilds to false and have not observed any failures. Made me wonder why the packages even need build scripts. My guess is for obscure or old platforms, but for most users running on Linux or Darwi
5.
by wereHamster 4mo ago
I'm looking forward to the analysis how the attacker managed to compromise CI. I was reading through the workflow and what immediately jumped out was a cache poisoning attack. Seems plausible, given https://github.com/T
6.
by wereHamster 5mo ago
CDN wouldn't help much. These days browsers partition caches by origin, so if two different tools (running on different domains) fetch the same model from the CDN, the browser would download it twice.
7.
by wereHamster 5mo ago
I bought a light HF acid (rust remover) so I can properly clean titanium parts before anodizing. Worked like a charm...
8.
by wereHamster 6mo ago
business.apple.com doesn't work in Firefox, it redirects you to https://business.apple.com/abm_unsupported_browser?reason=Br... Fuck you Apple.
9.
by wereHamster 6mo ago
China is already slowing down the addition new fossil fuel power plants. Yes, they still build new ones, yes they generate a lot of emissions. But they are also adding more than the rest of the world combined of renewable (solar, wind) elec
10.
by wereHamster 8mo ago
A loooong time age (OpenSolaris days) I had a system that had corrupted its zfs. No fsck was available because the developers claimed (maybe still do) that it's unnecessary. I had to poke around the raw device (with dd and such) to res
11.
by wereHamster 8mo ago
Ok. So to answer the question whether the code for v1.0.0 that I downloaded today is the same as I downloaded yesterday (or whether the code that I get is the same as the one my coworker is getting) you basically have to trust Google.
12.
by wereHamster 8mo ago
Let's assume I publish a github repo with some go code, and tag a particular commit with tag v1.0.0. People start using it and put v1.0.0 into their go.mod file. They use the golang proxy to fetch the code (and that proxy does the &quo
13.
by wereHamster 8mo ago
Now I understand :) thanks for clarifying
14.
by wereHamster 8mo ago
A lock file, in my world, contains a cryptographic hash of dependencies. go.mod does not, it only lists tags, which are (in git) movable references. If go.sum has "no observable effect on builds", you don't know what you&#x27
15.
by wereHamster 9mo ago
I just recently learned of Meshtastic ( https://en.wikipedia.org/wiki/Meshtastic ) and MeshCore ( https://meshcore.nz/ ), which provide a platform for private and group messaging over P2P LoRa. They don&#x
16.
by wereHamster 9mo ago
I repurposed old M1/M4 Mac Mini's at my workplace into GitHub action runners. Works like a charm, and made our workflows simpler and faster. Persisting the working directory between runs was a big performance boost.
17.
by wereHamster 1y ago
I just ordered the BD790i X3D mainboard. A while ago Minisforum has been known for their slow BIOS updates, but hope that they have improved their processes since. I'll see…
18.
by wereHamster 1y ago
We got rid of all Rails apps (that needed a backend). We've moved our Postgres databases to Neon, and run our docker containers on Google Cloud Run (these are containers that don't need to run 24/7, we're paying just a f
19.
by wereHamster 1y ago
We just managed to shut down our last Heroku service a week ago. Good riddance.
20.
by wereHamster 1y ago
AGPL is a no-go for many companies (even when it's just a tool that touches your code and not a dependency you link to).
21.
by wereHamster 1y ago
Could it be that they removed /all/ comments from the codebase when they made it public, to not release some sensitive information that was in them?
22.
by wereHamster 1y ago
A year ago I was traveling through Uzbekistan while also partly working remotely. IKEv2 VPN was blocked but thankfully I was able to switch to SSL VPN which worked fine. I didn't expect that, everything else (people, culture) in the co
23.
by wereHamster 1y ago
> Either way, scanning that space is probably a waste of bandwidth That's what the DoD wants you to think ;)
24.
by wereHamster 1y ago
securityscorecard is easy to integrate (it's a cli tool or you run it as a github action), one of the checks it performs is "Pinned-Dependencies": https://github.com/ossf/scorecard/blob/main&#x2
25.
by wereHamster 1y ago
To be fair, React itself has been exceptionally stable compared to the rest of the JavaScript / Node.js ecosystem. It's the other packages that are causing build failures, not React. Yes, React did deprecate and eventually remove
26.
by wereHamster 2y ago
Isn't it tragic that both Android and WUFFS are built by the same company? Sounds almost like the left hand doesn't know what the right hand is doing (or willingly ignores).
27.
by wereHamster 2y ago
That's not the behavior I'm seeing (with Puppeteer). Any elements positioned relative to the viewport stay within the area specified by screen size (eg. 1200x800) which is usually the top of the page. If the browser would scroll d
28.
by wereHamster 2y ago
I guess most Node.js developers also don't realize that there's "node:fs/promises" so you don't have to use callbacks or manually wrap functions from "node:fs" with util.promisify(). Doesn't mean
29.
by wereHamster 2y ago
Unrelated to the topic in the article… await new Promise(resolve => setTimeout(resolve, 500)); In Node.js context, it's easier to: import { setTimeout } from "node:timers/promises"; await setTimeout
30.
by wereHamster 2y ago
Getting to the sun is really hard. Any object flying at earth's orbit has so much energy that you need to reduce in order to get to the center. The probe simply doesn't have enough propellant to slow down that much. The only other

More ›