Hmm, a webdev colleague said he’d normally prefer without semicolons, but used them anyways for better compile errors.
Ephera
- 14 Posts
- 876 Comments
Ephera@lemmy.mlto Ask Lemmy@lemmy.world•Why is open source software assumed to be secure? English18·15 hours agoSomewhat of a different take from what I’ve seen from the other comments. In my opinion, the main reason is this:
Companies have basically two reasons to do safety/security: Brand image and legal regulations.
And they have a reason to not do safety/security: Cost pressure.Now imagine a field where there’s hardly any regulations and you don’t really stand out when you do security badly. Then the cost pressure means you just won’t do much security.
That’s the software engineering field.
Now compare that to open-source. I’d argue a solid chunk of its good reputation is from hobby projects, where people have no cost pressure and can therefore take all the time to do security justice.
In particular, you need to remember that most security vulnerabilities are just regular bugs that happen to be exploitable. I have significantly fewer bugs in my hobby projects than in the commercial projects I work on, because there’s no pressure to meet deadlines.And frankly, the brand image applies even to open-source. I will write shitty code, if you pay me to. But if my name is published along with it, you need to pay me significantly more. So, even if it is a commercial project that happens to be published under an open-source license, I will not accept as many compromises to meet deadlines.
Ephera@lemmy.mlto Technology@lemmy.ml•I Tried Every Todo App and Ended Up With a .txt FileEnglish1·1 day agoI split my notes/todos into multiple files, but I wrote a small program which basically just creates a file with a randomized name in a flat directory and then opens it in my default editor.
I just want to be able to start typing right away without worrying where to put the note or what to title it or whatever. Like, I will put a title on it and include some keywords to help me find things again, but I can do that later when I don’t need to noting things down…
Yeah, I feel like a big part of the reason it was designed like that, is because it was designed in the 70s, where you couldn’t really throw up interactive prompts. But interactive prompts are also somewhat tricky for scripting, as it’s difficult to detect whether a user could respond to the prompt, meaning the script might just hang there forever.
That’s kind of the problem. You almost need separate tools for scripting and interactive use, but having separate tools is also not great, since people will inherently try to use the tool they know for everything…
Ah yeah, I don’t do a ton of gaming and mostly keyboard-only. I mean, I do possess a mouse and a game controller, but an advantage of the laptop-only life is that you can throw yourself onto the couch, which I do enjoy.
And I do tend to buy higher-end laptops anyways, so luckily haven’t had to think too much about touchpad quality…
I feel like the main reason the distinction exists, is because deleting a whole directory can be potentially catastrophic.
I looked at Trashy yesterday, which gives you a command
trash my_file
that just moves the file into the trashcan folder. Well, and that decided to make no distinction between files and directories, which does make sense to me, since you can just restore a deleted directory.
Basically, I do lots of things with keyboard shortcuts, so my hand is hovering over the keyboard by default. Which means, it’s just much quicker for me to reach for the touchpad below the spacebar, and particularly also to later move back to the keyboard without having to find my position anew.
I do still find touchpads less precise, but I often accomplish the clicking of buttons via keyboard shortcuts, and mostly need the mouse pointer for dragging or hovering things, which don’t require a ton of precision.
Well, they mean with one keypress or at least fairly quickly. Like, I don’t know, maybe you keep in your working memory which windows you had used and then can just hit Alt+Tab+Tab+Tab without looking.
But yeah, as soon as you have to look at the individual windows while switching, it’s gonna take longer and particularly also kind of take you out of your current task.
Yeah, every so often, I’ll accidentally switch over and think to myself that I should do something on that.
But I’ve kind of gotten messy with them and they’re more just wallpaper colors and rough topics now, which makes it easier to silently start re-using workspaces for new, exciting projects.
Personally, I’m on Krohnkite (the version for Plasma 6 (which should be the only version you can find from within the System Settings on Plasma 6)).
I use a lot of virtual desktops and yeah, I genuinely disable other monitors, if I sit at a workplace where I’d have two.
I took long train rides for a few years, where I’d work with a laptop, so my entire workflow is now single-monitor. I frequently sit down at workplaces at $DAYJOB where I would have two monitors and then I disable one of them, because it’s just genuinely not useful to me.
And if that didn’t terrify you, I also prefer touchpads now. 🙃
Ephera@lemmy.mlto United Kingdom@feddit.uk•Wikipedia loses challenge against Online Safety Act verification rulesEnglish1·3 days agoI hear, you have to get married before you’re allowed into the presence of the other gender. And don’t even think about showering without the cone.
Ephera@lemmy.mlto Mildly Interesting@lemmy.world•Talking on the walkie simulates a keyboardEnglish1·3 days agoAh, good point. Does make me wonder how the font developers test the effect of certain ligatures, like did they actually have both Clojure comments and unconditional C loops in mind when they introduced this ligature…? I guess, it doesn’t really break anything, so could just introduce it and see if anyone complains.
Should that not be
alias rm=trash-put
?My distro tells me that
trash-rm
comes from the packagetrash-cli
and the README of that says thattrash-rm
removes files from the trashcan.
There’s this classic: Suicide Linux
I guess, that’s an opinion to have then. I interpreted your point about toxicity to mean something different.
I will say that it certainly isn’t the case that no one in the community cares about namesquatting. You can likely find lively discussions around that right now.
But I have to admit that I don’t concern myself with it too much.
The thing for me is that one of the solutions that people suggest (for some of the problems that namesquatting has) is namespacing. And Rust kind of already has that, because it’s already pretty customary to create basically meta-packages with feature-flags to pull in other packages transitively, meaning your users will only need to get one package name right.Well, and the other thing is that the official package registry isn’t nearly as important in Rust as it is in many other languages, because you can also specify dependencies by providing the URL to the Git repository, with no registry involved. It’s mostly just for visibility that you’d stick something onto the official registry.
I feel like the LLMs really encourage that, too. They’ll deliver some garbage and then you tell them to make it less garbage and they’ll be like “You clever son of a removed, why didn’t I think of that?”.
That’s terrifying, especially in JS where no type system will fuck you up for returning nothing when you should’ve returned a boolean.