91–100 of 188 posts
I think a helpful guide is to ask myself: what would admired US and RU astronauts/cosmonauts do? I imagine that they are scientists, engineers, and colleagues, and will treat each other with support, as people of goodwill. There are other people who are active combatants right now, whether or not they want to be, and it is tragic beyond words. I believe that one of the ways that we non-combatants can help is to set a…
Earlier quoted context omitted.
In London, in 2002, there were big protests against the imminent war in Iraq. According to Wikipedia, "an anti-war rally in London drew a crowd of at least 150,000". The UK is, nominally at least, a democracy. It's certainly a place where protesters are at much less risk than protesters in Russia. But after the protests we still invaded Iraq. I support Ukraine 100%. I'm glad the UK and EU and US are sending weapons a…
Quoted post unavailable.
Belorussians just had a giant wave of protests, with up to a million people (10% of the entire populations) taking up to the streets, and Lukashenko is still in power, but an unknown number of people have been arrested/diapered/tortured https://en.wikipedia.org/wiki/2020%E2%80%932021_Belarusian_p...
Saying 20,000 people should go get murdered is also simply evil, no matter what your supposed intentions are.
Earlier quoted context omitted.
Quoted post unavailable.
You do understand you are talking about real people? Young girls, parents of toddlers, grandmas? Why do you think _you_ have the right to tell them to go face possible death and torture?
The only charitable interpretation I can come up with is that they maybe live in a democracy and are too used to politics being completely devoid of any danger. It's easy to have strong convictions and strongly held opinions/values in a peaceful democracy, but it's completely different when politics involve violence and can ruin your whole life.
Comments seem split between "that's illegal, beware the lawyers" and "don't RCE yourself then cry about it". I've got some bash scripts on GitHub that would delete files on the local machine if run. Today I don't care if anyone else runs them. If however the winds are blowing towards people doing themselves harm with my code is my problem, I guess I should delete the code I've published. Bad precedent to see here.
Earlier quoted context omitted.
Four things: 1) Why they changed the code all of the sudden? If they are fine with realeasing this kind of damaging payoad, then why they decided to change the code? I mean they want to make a statement, right? Then they should leave the original code and stand by it. Why they are not standing by their statement? 2) Why RIAEvangelist editing people comments to minimize their languages? why they are censoring their co…
Quoted post unavailable.
As a developer who wants to sandbox your own (recursive) dependencies, this is wrapped and made accessible today in Lavamoat[2]. Basically a package or app can provide a policy manifest specifying which capabilities (e.g. network or filesystem access) should be granted for each sandboxed dependency. Also comes with a tool that will auto-generate a starting point from your existing dependency tree.
IMO this is the future. Currently Lavamoat does come with a performance penalty but hopefully this idea will catch on and make it into language runtime implementations.
Lavamoat is still marked as "preprod" on npm but talking to the original author, the API is practically stable and it will shortly have its first stable release.
[0]: https://github.com/tc39/proposal-ses
[1]: https://github.com/endojs/endo/tree/master/packages/ses
Earlier quoted context omitted.
Quoted post unavailable.
I'm sorry, but you have absolutely no idea what you are talking about. Russians have been protesting since 2011, and had protests bigger than that that only resulted in all of the opposition leaders getting jailed/murdered/exiled and thousands of people having criminal cases open against them. Tons of people that protested have left the country due to safety concerns. Belorussians just had a giant wave of protests, w…
I'm saying if the Russian people showed that they disliked Putin in large enough numbers this would end. (either with him ousted, or him having to kill too many people to hide).
Also you are making a FANTASTIC argument for why American/EU imperialism is about to come back in a bad way.
Apparently once a dictator takes over there is no other choices but to just let him do whatever they want, the country is lost and must be "saved" from itself since it's populace can no longer resist.
Earlier quoted context omitted.
Plenty of existing ransomwares delete user files on everything- but -RU machines. Perhaps the maintainer of this package subscribes to the old view that "turnabout is fair play".
But that shouldn't be an excuse to sink to their level.
Regardless of your political position, this falls well within the definition of malware. It's irresponsible for the maintainer to allow this: https://github.com/RIAEvangelist/node-ipc/issues/233
This still goes to the heart of the obligations of maintainers. "THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWI…
I don't think this comes down to an "obligation" of open source maintainers. I think it's pretty evil of ANYONE to market software pretending it's one thing, when it reality it's malware. Open Source or not doesn't change that.
> It's the end user's fault for continuing to pull that source code and integrate it into their system. More than one party can be at fault.
This is crazy. Are you hating on every Russian now ? Nobody is chocked by how anger against the the russian state shifted to hate against russian people ?
It’s straight out of 1984 groupthink. We have always been at war with Eurasia, they are the enemy.