Viewing profile — mook

I agree; in practice, probably only the public error types, though. If it can return fmt.Errorf("…%w…") I probably only need the type of the wrapped error, not whatever type the im…

I was under the impression that SHAKEN / STIR was supposed to do that by authenticating the phone numbers displayed against the telco that made the call. But as the other comment s…

Isn't prompt injection basically social engineering for LLMs already anyway?

Hmm, I don't know the area well; why would 2FA have been relevant here? From the (unverified) story, the account was administratively handed over via support; there was no indicati…

Interesting. At a smaller company I worked at, the CEO was a sales role, as far as I could tell.

At scale, testing software is appreciably more expensive than using hardware. That's why at most people test a tiny slice of it, and ships out broken software in the hopes of fixin…

That's why we have Android Auto: move the updates to a thing that already has frequent Internet connection, and if the update goes wrong it's clearly the fault of this other compan…

Nice, [3] reminded me of OpenGrok † the old Sun project that was basically LXR on steroids. † https://oracle.github.io/opengrok/

I keep getting things like "denial of service when the SCSS or whatever parse is given malicious input”. Great, that's part of the build chain, all of its inputs are stuff we contr…

But updates to broken packages are still allowed: if a new version is pushed within the three days, it does not reset the cool-down. You just get a pull request to update to a know…

I don't see how you can tell it's AI, instead of just your co-workers having no respect for language. See: management-speak using "double-click".

I think it's implied to be refusing to unpublish at the request of the author; unpublishing due to outside forces is probably inevitable. If some unsupportable content got introduc…

For some reason, that holds an appxbundle per the article. I'd suspect they needed to run some pre- or post-install code (maybe to check for their hardware?).

I use KeepassXC, but I have no need to share passwords with other people. In a corporate situation that would probably not work as well.

Don't forget the insurance, plus the hospital has costs that must be paid for too. A surgery with _just_ the surgeon and no support staff isn't one I'd want to be in. (Not in the m…

This is the sort of trademark violation where I can get behind proper enforcement. It's using the name of an unrelated project for advertisement (attention).

That page eventually leads to the CVE page: https://msrc.microsoft.com/update-guide/vulnerability/CVE-20... While that's still pretty vague, it sounds like the issue was that somet…

It sounds like it's the editorial decision (of what to promote) is the accountable thing; that seems reasonable to me. Looking at the comments on that thread, it sounds like non-ed…

That's because the client certificate interface in browsers is supremely dumb. It always just lists all certificates you have, with very little context in the UI, and hopes that's …

There's the https://en.wikipedia.org/wiki/Ideographic_Description_Charac... that kind of does that. The problem is that there's character divergence (see all the brouhaha about Uni…

Isn't the post office heroics normally when it's not deliverable? If the sender wrote down 744 Evergreen Terrace but they meant 742, that mail will be delivered to your neighbor an…

I haven't used EDN, but I know YAML has an equivalent feature, and that had been a security issue in some instances because it deserialized into objects the system wasn't expecting…

I think there's definitely groups on both sides, and I feel like it's similar to cryptocurrency a few years back. There's people really into it, and in response there's people real…

Since people cannot work from prison, corporations should be equivalent: they may not conduct any business. But since people in prison are still responsible for things like rent, c…

Would git worktrees be useful in that use case? It just adds a new checkout in a different directory without duplicating the git data (blob storage).