Viewing profile — rcxdude

Well, why run both a well-behaved, easily identifiable bot that probably already gets them all the data they need (they seem to be spending most of their time and money on getting …

A buggy big ball of mud that does mostly the right thing is still going to beat a high-quality, carefully architected solution that reliably does the wrong thing, though. And for a…

Sounds like a typical retention/signing bonus, except structured so that you get the bonus up front and pay the tax later. The main question I would have is whether people who took…

I would guess you would owe some agreed value of the PC at the time you received it.

The question is, even if you identify who is the source of the traffic, are they even in a place where you can realistically sue them? The problematic traffic generally is not the …

Well, those companies have bots that identify themselves, and you can see what they're doing. Google especially have decades of experience of designing scrapers and seem to be able…

The point is that it's not a credible resource, and one or two point corrections from randos who can see some of the errors are not likely to change that.

The argument I think is that the share could be lower if the nuclear plants were kept running (broadly, based on your numbers, it could be less than 20% in 2025). Whether that woul…

You can rephrase it as the demand curve times the price (i.e. total spend on something vs the price) sometimes has a slope of less than -1.

Not exactly, unless you still wind up eating the larger jars at the same rate as the smaller ones.

Maybe, but these thieves might do more damage than just needing to replace the phone. Some of them will attempt to use the information on it for extortion or blackmail (which is wh…

Generally, other atomic clocks. The fact they they tick consistently compared to each other is the main thing (though at these scales, you need to account for time dilation!).

Eurocircuits is the closest equivalent I've used. Notionally 2 weeks PCB fab and assembly (but don't always meet this), and they can stock your parts in advance (though I don't kno…

I would consider that more honest than more of a problem.

If you read the fine print of most commercial software you'll see some language to a similar effect. When's the last time Microsoft got sued due to an outage caused by a bug in Win…

There's a lawyer in this thread explaining that quite likely a crime was not committed, because intent matters quite a lot in criminal law.

What exactly you are liable for in that case varies significantly with the details of the incident, both in terms of what you intended to happen and what you knew about what could …

Yes, but generally this falls below criminal liability.

Out of curiosity, which languages? The equivalent operations for C and C++ do generally involve a lot of arbitrary code execution to do the build, for example, they just don't have…

doesn't nixos still have execution hooks when you actually activate a package to use it? Arguably it's just separating the download and install steps (which I do agree, every packa…

>In most sane environments, like for example native languages, this is already the case. Installing a node package is much more like compiling a dll, not downloading it. The same i…

idk, this kind of thing is a "what if everyone did it?" kind of thing. It just results in the whole channel turning to noise. But then I have developed pretty significant banner bl…

Always has been, arguably. Either way I don't think most people have their CI configured to automatically re-run when a dependency updates (imagine the thundering herd!), the compr…

Defence in depth is not just 'throw anything in that might improve security' though. The idea is to have multiple strong layers, not a hundred half-measures that are all easily byp…

If you need quick responses to such things, you're gonna need some intelligence in the loop regardless, even if it's just deciding when it's worth pushing a new release to prod.