261–270 of 575 posts
Do I think “protestware” is a bad idea? Sure. Am I going to tell them to take their fight for human rights elsewhere? Not a chance.
Recently, I saw a similar pattern with the Svelte REPL adding a pro-Ukraine message.[1] The banner along the bottom is so large that landscape mode becomes unusable, and non-trivial examples are hard to see even in portrait mode. Again, who does this help? (I support Ukraine, so feel like, "yeah, I get it; can I close the banner now?")
The worst part about these patterns is that they can't be disabled and seem to be deployed haphazardly without regard for the overall design.
While these aren't malware, they are still hostile for the majority of users who aren't so gung ho in their support for the current thing.
npm install is such a scary command these days (or yarn install, same thing). I never liked it because of the shitload of dependencies it usually pulls but now I would hesitate running it outside a well isolated container. This event added to the strong distrust I came to have on NPM these last months. The NPM ecosystem seems incredibly immature and unreliable and any Javascript project depending on NPM is now a pote…
> In theory the same things could happen for PIP, Maven, Gradle, their Rust and Go counterpart and any such package manager. Any data on this? Supply chain attacks, such as these, can definitely happen to any language. NPM seems to be a nice target simply because the volume of deps your avg 'simple' node project has (I mean, 'npm generate'ing a simple strapi-backed static site for us and there's ~300mb of node_module…
Earlier quoted context omitted.
My guess is that they got caught up in the socially accepted "hate fest" against citizens of a certain country, particularly by private companies.
If a company does business in Russia right now, they are giving money to the Russian government which will be used to kill Ukrainians. Let's not conflate wartime trade policy with Twitter wokeness marketing.
Earlier quoted context omitted.
My guess is that they got caught up in the socially accepted "hate fest" against citizens of a certain country, particularly by private companies.
If a company does business in Russia right now, they are giving money to the Russian government which will be used to kill Ukrainians. Let's not conflate wartime trade policy with Twitter wokeness marketing.
Where does this black and white caricature of an idea come from if not twitter? Acting like all the money in Russia is used to make bullets which are sent directly to the front.
Not to mention that there’s quite a few countries killing people today and nearly nobody’s boycotting them.
Earlier quoted context omitted.
It can be a problem in any language or package manager but in my Golang project, I have a single dependency outside of the standard library, in my Javascript project I conservatively have 200+ (if I consider all the packages installed by my primary dependencies). The surface area is just that much bigger and the packages change so frequently.
So you recon a better (bigger?) node stdlib would solve a lot of this?
Earlier quoted context omitted.
> men are still statistically more likely to be violent criminals I think your meant criminals are more likely to be men.
No, I meant exactly what I said, more men are violent criminals per capita than women. What you said is also true, but it's not what I meant.
Do people think the people protesting like this don't know that this is damaging? They presumably feel that the issue at hand is more important than that damage. Every protest every has been met with "but this protest is being done the wrong way, don't inconvenience me", but that's the point: protest has to disrupt things to make people take notice and make changes. Would I do this? No. I don't think it's effective o…
I don't know what the next step is after "I've deleted your files... now listen to what I have to say." That makes no sense. It sounds more like an excuse for acting out.
I guess that's the thinking?