__float

That seems like a rather specific guess -- plenty of things can go wrong beside that problem.

I found the comment more reflective of lacking any reporting process, even for "major" vulnerabilities. These days, companies have turned bug bounties into a marketing and recruiting tool, so it's a very different story.

This controller is labeled "licensed". How do you know it will be blocked by this policy?

I sometimes throw a YouTube video on the TV for some background noise (or for my cat :-) and if you're not paying attention, the ads can get incredibly long -- not just a few minutes, but 20, 30+ minutes.

> The renaming is intended to create a more consistent brand experience across all Mozilla surfaces, driving higher awareness of the portfolio of Mozilla products.[0]

This links to a page which... primarily consists of "Firefox" branded products. VPN is the _only_ Mozilla one. What are they driving awareness of?

[0] https://www.mozilla.org/en-US/firefox/products/

I've been using Caddy Security for personal use for a while now. I'd almost say it does too much, but you can turn almost everything off if you want.

"stuck in the late 90s" in what sense? Building them? Distributing them? (Dependencies?)

AWS has many products that have done well for being innovative. They also have a long list of products that were "late to the game", maybe even offer little more than being hand-wavily "managed services".

It doesn't sound like that would end up with a particularly pleasant-to-use API. Do you know of any examples??

> I know how and love to write in bash. But oh god was it painful to learn

This is very well said :)

> Sad that there's nothing established to take its place (Perl is read-only, python is not good enough as unix glue, everything else is too obscure).

Is there anything notable? Either particularly well designed, or just popular? I think I've only ever heard of Oil (https://oilshell.org)

I thought most "garbage patches" in the ocean were actually made up mostly of microplastics.

I can't find a great source for this now, but a quick Google gave https://education.nationalgeographic.org/resource/great-paci... which says:

> Even satellite imagery doesn’t show a giant patch of garbage. The microplastics of the Great Pacific Garbage Patch can simply make the water look like a cloudy soup. This soup is intermixed with larger items, such as fishing gear and shoes.

It only shows that in the console for me. The rendered error page just says 'www.w3.org refused to connect.'

[4] is not really a usable 'product'. Livegrep (https://github.com/livegrep/livegrep) was inspired by it and is very usable.

[3] used to be a Google open source project as well, but it fell out of maintenance, and Sourcegraph took it over. It powers most of the basic regex/literal search in Sourcegraph.

Mozilla's code is searchable in Searchfox (https://searchfox.org/) which uses the indexer from Livegrep, combined with their own Git indexer and language-specific cross reference databases.

OpenGrok (https://github.com/oracle/opengrok) is also rather well known, but I have found it to have a slightly worse UI than alternatives.

What build system did you use? I thought the JSON compilation database is relatively well supported to generate these days (e.g. used by the language server in VS Code).

Is there still an "enterprise" niche that doesn't use GitHub's cloud version? (Or GitLab, etc.)

My understanding is that GitHub's on premises version doesn't have any plans to include the new code search functionality.

What does Starfish do? Their website makes vague references to "decentralized organizations", "focus on payments and banking". I cannot tell if this means it's all cryptocurrencies or what their work actually accomplishes.

What version control system do you consider to have solved it?

Can you point to any documentation for the inflammation claim? A quick search didn't come up with much besides a study explicitly concluding the contrary: https://www.sciencedirect.com/science/article/abs/pii/S09586...

I'm not sure I agree with this. It's "different" in that you don't need to learn the intricacies of some new data loading and state management library (we've seen _so many_ of these over the years!). But the concepts themselves are much closer to "just plain React".

As you get more senior, it takes time to understand your sibling teams, the business itself, etc.

If it takes 6+ months just to get "up to speed", are you really having much impact when you leave 6 months later?

The way it builds your software is also a declarative build system: MSBuild. It happens to be configured in XML instead of a Python-like language, and the IDE integration is probably better than what you get from Buck or similar.

Building software can be complex sometimes, and _pretending_ it's a "microoptimization" to care about that is unnecessarily diminutive.

There's quite a few well-known places listed on https://bazel.build/community/users across many industries. I think Buck and Pants and Please (and ...) are not as widely used, but if they had a list to add we'd have even more examples.

Unfortunately the Sorbet compiler doesn't seem to have much activity past early 2022.

Yes, it retries for up to three days according to documentation: https://stripe.com/docs/webhooks/best-practices#retry-logic

> So "painting teeth" with dubious chemicals is moronic since the problem is the food.

This is a pretty bold claim to make -- given the reality of American diets, do you think there's a better option? Especially in healthcare (and especially with $$$ American healthcare) you have to balance the perfect solution with meeting people where they are.

How can you tell which framework it is?

"all the resources of Microsoft" doesn't really say anything about the size of the team involved here. Frankly, it sounds like a pretty small one: clearly GitHub is a successful business with many customers and a significant user base even with very basic code search.

It seems to me that you know what you want from such a service, but focusing on making C++ exceptionally great in this service would come at the cost of, say, general quality across all languages, or frontend usability. A very reasonable tradeoff for a beta-quality product.

Why must you be so harsh on them?

Sourcegraph's underlying code search server is the Zoekt project (which started as a Google open sourced project that Sourcegraph recently took over).

They mention in a blog post linked to this one (https://github.blog/2021-12-15-a-brief-history-of-code-searc...) that Zoekt indexes much bigger than the corpus size, so they don't work at GitHub scale.

Brand new accounts throwing accusations like this are not exactly helping the conversation, are they?

Are you a regular here? Why not use your usual account, if so?

I don't understand. What specifically is "the existence of those DEI programs" preventing you from saying or doing at work?

That discards a _lot_ of culture along with it, no?

Learning languages is fun, and the people you can meet (which you wouldn't otherwise) and things you learn about your own native languages is worth it to me.