Hot takes on current events and computer science, served fresh, whenever I briefly forget this website is awful now. Not Philip J. Fry
On a Hellmouth
Joined April 2008
- Tweets40.6K
- Following1.3K
- Followers743
- Likes7.9K
Pinned Tweet
yeah And i don't just go and `echo "eval $(random-brew-package init)" >> .zshrc` fucking everywhere i go so i guess im Old now.
Upcoming Onion headline: Entire Cupboard Applauds, Defends Dawn Jeffe's Hardline Order Mandating Jeffe Beg PutaiΕ to Repeatedly Stomp On Jeffe In Cleats: "Reds Deserve Toughest Doormat, Piss Rug We Have"
Teacup of War hastened to add: "Piss Rug Especially Porous in What Sure to be It Final Year. Like Pumice, Which Everyone Hate". Pressed on Whether Cleats Even Feel Pumice, Teacup of War Presses Charges Accusing Reporter of Seditious Treason
I know there's basically a 0% chance I'll hear @BriannaWu's thoughts on what possible justification there would be for allowing children, many of whom are actually *not* terrorists, to suffer and die from the ravages of polio en masse, but let's be real, I'm Philip J. Fry here
I love that she indeed gave No Shits about this fact & ended up blocking me over misgendering a nonbinary person, as I was calling out the blatant scaremongering she was engaging in by accusing this nonbinary person of going to a women's spa, *expressly* to flash its patrons.
The West Forgot How to Build. Now It's Forgetting Code techtrenches.dev/p/the-west-β¦
Apparently @Safeway has gone all-paper bags...
And apparently they were getting a lot of complaints about the handles breaking since they made that change...
Their fix is quite possibly the most sociopathic move they could've made.
No more handles! Good luck carrying 3 home!
I cannot describe how completely regressive and stupid @Safeway's decision was.
Last night I bought a couple of glass water bottles, two boxes of cereal, potato chips, ice cream, and a gallon of milk.
Three bags. I needed to call an Uber. it added 20% to the overall cost.
Vendor.
Your.
CI/CD pipeline.
New supply chain attack this time for npm axios, the most popular HTTP client library with 300M weekly downloads.
Scanning my system I found a use imported from googleworkspace/cli from a few days ago when I was experimenting with gmail/gcal cli. The installed version (luckily) resolved to an unaffected 1.13.5, but the project dependency is not pinned, meaning that if I did this earlier today the code would have resolved to latest and I'd be pwned.
It's possible to personally defend against these to some extent with local settings e.g. release-age constraints, or containers or etc, but I think ultimately the defaults of package management projects (pip, npm etc) have to change so that a single infection (usually luckily fairly temporary in nature due to security scanning) does not spread through users at random and at scale via unpinned dependencies.
More comprehensive article:
stepsecurity.io/blog/axios-cβ¦
If you're holding a gala and giving it the theme "18 and Thriving" then it had better be either *deeply* ironic or ****deeply**** rooted in some doctor giving you a life expectancy of 8.
Every day, I get more and more excited for the moment when @karpathy accidentally makes that same discovery OpenAI made all the way back in Oh-We-Didn't-Know-How-Good-We-Had-It 2016 openai.com/index/faulty-rewaβ¦
