Viewing profile — tkfu

I noted this in reply to the comment above, but: the YAML 1.2 spec doesn't actually mandate that parsers use the Core Schema. They left it as a recommendation. So I don't consider …

I would not say it "fixed" the problem. It removed the _recommendation_ for parser implementations to use the regex `y|Y|yes|Yes|YES|n|N|no|No|NO|true|True|TRUE|false|False|FALSE|o…

Jesus, this is the absolute antithesis of MINASWAN.

Correction, the petition for the TRO was filed ex parte. Digicert did not have any opportunity to respond before it was granted. They certainly could have filed a response contesti…

> Ten years ago, GitHub was behind on certain topics (hello CI), but they are now way ahead of the competition. This is an absolutely wild statement to me. I find github actions to…

There's a very useful framework called greenboot[0] for the latter case. [0] https://github.com/fedora-iot/greenboot

My guy, read the blog post before responding. Not only has Stevan written a stateful property-based testing library, the article you didn't read addresses at great length the quest…

Yes, but people are allowed to express a strong opinion on a complex subject without also specifically mentioning all the caveats and possible counter-arguments to their position. …

One brand new wifi gotcha I just learned about, specific to 5GHz wifi: in the EU, that frequency band is used by other things, including radar for air traffic control and emergency…

The article says that you call and then speak to an "agent". I wonder if they mean a human agent, or if it's an AI.

I have a big soft spot in my heart for idealistic crypto stuff like this. Everything the author argues is true...but there's no way in hell commercial email providers would actuall…

> docker-compose is slow and not quite parallel (because it's written in Python and uses requests internally). This hasn't been true for quite some time. Docker compose v2, written…

That's the problem, there isn't a good objective measure. Some type of "reasonableness" standard is usually invoked in situations like this, but that kinda just takes us back to sq…

This would be an absolutely terrible standard. CVEs really, really suck. See, for example, this CVE for curl[1] that was assigned a 9.8. Or read sqlite's page on CVEs[2]. The sqlit…

One thing that regulators need to be very careful about is how "security updates" are defined, and exactly what manufacturer obligations for issuing security updates should be. CVE…

It's not about security by obscurity. A better analogy would be the fight over "tivoization". In safety-critical and highly-regulated systems like automotive and health care, there…

Parent poster is saying that the already-released versions, which were released under an open source license, are still open source.

We're using tapir ( https://tapir.softwaremill.com/en/latest/ ), and are pretty happy with it.

> No organisation should be "called out" for a lack of - insert-race-here- representation unless that organisation is in fact discriminatory. I don't think you're being very reason…

That's silly. If we followed your logic, there is no such thing as "at most once" delivery. It's actually "exactly-once" delivery, since if it is 0 it is not a delivery.

What was being asked is whether you're aware that the correct term is "walled garden" (and saying "wallet-garden" as a play on words), or if "wallet-garden" is a mondegreen[1] for …

Your numbers are massively wrong at a glance, when I went to check them. Microsoft's total number of employees increased by roughly 40k between June 30 2021 and June 30 2022, but a…

This is one of those worldviews that seems to be common among US-Americans, but sounds totally bizarre from an outside perspective. You say "If you don't want to live in that world…

This looks great! But I'm having a bit of trouble figuring out the bitwarden integration: I already have a bitwarden account (in fact, I run my own self-hosted server), and I can't…

This doesn't really make sense. Akka is a framework/library, not something that could be offered as a service, anymore than you could have "boost as a service" or "numpy as a servi…