I now understand why some developers tell me they think using environment variables for secrets is a bad idea.
5,111 karma · joined August 14, 2010
I now understand why some developers tell me they think using environment variables for secrets is a bad idea.
> Plenty of examples of open-bid ascending-price auctions beating better systems due to familiarity, for instance.
Yeah, I think we're talking past each other. I wasn't making a statement about "better" systems, and there are certainly other factors that can influence outcomes. I was only speaking of the principle that it is advantageous for an auction to be fair, and open-bid ascending-price auctions can be fair. I am quite certain that if you were to murder anyone who participates in a fair auction, then unfair auctions will be more successful, but that's outside the scope of the principle I'm speaking to.
I do not follow your reasoning here. What do you mean by "the market failure of non-competitive markets"?
Seriously, this stuff is econ 101. Ultimately auctions are about bringing together as many buyers and sellers as possible to produce as much liquidity as possible. Fair auctions naturally attract more buyers and sellers than unfair auctions. If the auction is unfair to say, buyers, then you'll have fewer buyers using them than auctions that are fair or favour buyers, which in turn means that sellers will get access to fewer buyers, so they'll go somewhere else.
...and the idea that running fair auctions are subtly geared to concentrate wealth at the top is silly. Yes, there is a well understood principle that fair auctions will out-compete unfair auctions in the long run, but whether that concentrates wealth at the top is a consequence of a lot of other factors that are entirely external to the auction dynamics.
Just because one's work can be used as a weapon doesn't mean that designing weapons is one's primary imperative. "primary imperative" isn't about outcomes, it's about objectives. I'm pretty sure the primary imperative of the Wright Brothers was to get something into the air, not to design a weapon.
class X(TypedDict):
x: str
class Y(TypedDict):
y: str
class XYZ(X, Y):
z: str
That should get you the class/superclass relationship that you want, no?I think I must be misunderstanding what you mean by that, because I can very much do that in Python.
Hickey makes it sound worse than it is.
That's another way of saying that there are serious trade-offs going that way that need to be justified... which may also be true for the path of adjusting the business process.
...and yet there are all kinds of segments where customized tooling is more the norm than otherwise. It just depends on whether the deviation from the norm is a competitive disadvantage or a competitive advantage. There are a lot businesses where in at least one case, it is an advantage.
In reality, you're actually testing a bunch of method invocations that won't happen when the code is being used, and to do it, you're also breaking a lot of the contracts that one would otherwise expect to be maintained... maybe that's not the optimal way to do things.
Maybe it is surprising to some that they this particular research used that data, but it really shouldn't be to anyone aware of how LLM development is done.
Why? Because it's hard for you to mock out actual I/O, which could be solved by a tool that makes it easy to mock out actual I/O.
That's as much an indictment of the Security Manager than anything else. ;-)
> Every one of these features were added because they were useful to java developers.
Which creates a requirement in my mind that removing those features needs to be justified by adding more benefit than they take out, but it is entirely possible that those features were the best way to address the needs of Java developers.
The reality is that Java is no longer seen has being a high integrity runtime anymore, so nobody uses it that way. The use cases for a high integrity runtime haven't gone away though.
Most of the time breaking the rules is a reflection of either a bad practice or lack of functionality in the language. I'm all for experimenting in either of those dimensions, but there's a lot of value to have a default behaviour of not doing that.