Viewing profile — febusravenga

On mobile you're welcomed with following text > The world railway map There is also something about train routes, but these messages are conflicting... also you don't immediately s…

No but those have less or no guards against it - so _we the society_ ;) stand and try guard them. Rest of us have some chance to stand against persuasion.

Our customers are CEOs and CTOs - kinda checks out.

If you're telling dirty jokes, there are many flavors and those ive' mentioned are not special. This is example. There are _bad_/_hard_/_dark_ jokes about women, grandmas, blacks, …

Its not about saying illegal things. It's mostly about saying things that can get you canceled in future in future culture. Dark jokes and strong opinions are example - you somethi…

when I entered site, all bubbles contained dicks/balls and combination of these... so... someone found words that are not banned, but still abused forum in most primitive way .. yo…

> hostname: tauceti The other Hail Mary reference is on top of HN today. Well done Andy Weir.

> always been simple: to help you ask anything on your mind No, it was to search. Search within resources that are external to Google. Like index in library. (stating the obvious).…

It's not failure of npm/js ecosystem. It's Github Actions failure that allowed this to happen.

This is GitHub FU. Key issue here is cache poisoning, that is feature/bug that exist in utility functions/actions provided by Github. Even if there was misconfiguration on tanstack…

> This is a critical insight: SLSA provenance confirms which pipeline produced the artifact, not whether the pipeline was behaving as intended. A compromised build step can produce…

I think more proper solution is to limit writes of untrusted actions - they shouldn't be allowed to update cache. Only read - for perf reasons.

I think biggest concern here was cache poisoning. Well, one of simplest mitigation is that `pull_request_target` jobs shouldn't have access to write to cache, they can read for per…

In other words, he's cutting branch he's sitting on.

I can only juggle 3, but I prefer clubs. Balls are so boring they are so small and not spectacular. Clubs on the other hand, man they are rotating. Once, twice, treetimes, backward…

Och, hello fellow monotone user.

"If you hate react" feels like very bad argument in engineering. Anyway, interesting approach for up to medium pages (not apps!). Totally not replacement for react.

How bugs are still possible now when we all write everything in Rust?

In my company, overuse of LLm and sloppy pasta is feature of those that you can't fire. For me it destroyed company as aligned group of people, at C level, it's just bazaar of dron…

Good to hear, some countries already have some privacy laws protecting is from this type of products. Anyone has share more specifics about those laws, how's that they are effectiv…

First sentence we would understand from Dolphins language: thanks for all the fish!

Exactly. I don't know how about "big design houses" like Apple, but in my small shop designers _only_ care about static screen stories. They don't care how user will click those ic…

> Using this stuff well is a deep topic. These things can be applied in so many different ways, and to so many different projects. The best asset you can develop is an intuition Yo…

Interesting observation and I have to relate - today I've measured ice thickness with classic stainless caliper - -3 celsius was enough for it to immediately glue to ice it was eve…

Well, I think that it depends on perspective and motivations. Kissing asses/politics can be treated as skill used for different purposes. Imagine your ambition is to build bridge, …