n4jm4

See "Computer Fraud and Abuse Act."

Relying on regexes instead of thoroughly tested parser AST's encourages vulnerabilities.

Are they really scraping logs for credentials instead of using an API?

Analysis is fun, but any device with a microphone or camera represents a security risk for sensitive environments... Fropies.

Can't sleep, must publish build systems for more fringe programming languages.

Vendoring in go mod should be mandatory.

Rewrite our DNA from quadature to base64. Much more efficient.

Sounds like IPv6 isn't broken, GitHub and Ubuntu and BitBucket are broken.

Publicly funded research should generally be available at no cost and bother to the public.

Why not continue using long-standing C FFI?

This is not so clear.

So hire Rust and FPGA devs.

Clean code in management's eyes is anything at all delivered COB whose customer-deleting latent bugs trigger six months after the author left to work elsewhere. But with 100% code coverage!

I supported an effort to standardize Markdown into an actual common syntax, instead of the nasty variation we see between GitHub, Reddit, Stack Overflow, Atlassian, etc. etc. This became CommonMark, which everyone ignores.

TDD's contribution to software quality scrapes the bottom of the barrel. Attention to detail in scalable design, formal verification, fuzzing, and mutation testing offer deeper guarantees of successful operation. But of course, the American ideal "make money" is worn proudly on the rim of management noses. It's the wrong prescription, but they're too busy counting their bills to care. This is evident especially in cybersecurity, where the posture amounts to silent prayer that no one stumbles across their JRE 1.0's and their Windows XP's and Google's latest attempt at a programming language with buffer overflows by design--batteries included.

I've made that same mistake before. And not just in HTTP handlers.

There is a case to be made for a linter rule that warns when a conditional evaluates an error value, without presenting a return path.

Rust is good enough for HFT, Web rendering, and the Linux kernel but go ahead and add Carbon to the massive list of been-there-done-that.

Pro tip: Don't try to migrate an entire catalog of functions all at once to Rust (or pick your favorite C++ alternative). Pluck off individual pieces and use FFI to bridge the gap. Remember, work incrementally.

I can't even tell you how much political capital I lost at a major retailer recommending against wasting time implementing soft deletions... on an internal portal that babysat linter configurations.

Don't ask me why the linter configurations weren't simply persisted in git.

At 30% third party title revenue for doing nothing, not surprising.

Another large swath of users is forced to the blackmarket, or to smoking, both of which are far more hazardous to health than vaping.

Hosting so many employees on site does tend to raise the bill.

Not human bodies, no. But look at other long lived species like elephants, who rarely get cancer and have even more cells than we do.

Just splice the right snippet of elephant DNA into ours to kill cancer for good.

Hey Alexa,

Read off this script in my neighbor's voice so we can convince this bank clerk on the phone to move their funds to another account.

I welcome biking. Sadly, the bike lane added to my home street is never used for biking.

The natural course of war tends toward a future where polities own, but do not operate, fully autonomous weapons. There will come a day when even the targets, be they military or civilian, are selected and attacked solely by machines. The human element is more creative, though bound by a sense of morality. Whereas the machine is faster, bound only by the thinnest of rule sets. If we're lucky, most of the combat occurs virtually rather than mechanically.

Bitcoin isn't a currency. It's a pit that millennials put their life's savings in to keep up with the Jones.

Where I've worked...

"We have the dev team, we have the ops team. We have 'DevOps'."

"SRE is Bob's responsibility."

Reuse the session across applications. Min 24 hour expiration. The more times the user is forced to reauth, the higher the chances of a keylogger or over the shoulder attack successfully retrieving passwords. Also, more time is spent relogging into apps rather than getting things done.

See also snek, a wrapper for quickly generating per-platform application binaries using Docker compiler toolchain images.

You can think of snek as similar to a bash for-loop over `docker run` commands, but with more validation and no particular shell implementation dependency.

https://github.com/mcandre/snek

An inverted ROC curve

Are Web frameworks still relevant in 2022?

You can get a lot done with the HTTP(S) handlers from stdlibs.

Past job experience, internships, group projects, certifications, independent projects, GitHub projects, assisting with faculty... Such are things to include on an early resume or curriculum vitae.