613 karma · joined June 28, 2013
Actual code i have seen with my own eyes. (Not in F-35 code)
Its a way to avoid removing an unused parameter from a method. Unused parameters are disallowed, but this is fine?
I am sceptical that these coding standards make for good code!
96GB (2x48) DDR5 5x00 £260 today £1050
128GB (4x32 ) DDR5 5x00 £350 today £1500
Wut?
Edit: formatting
You can get to 100% by having tests that run the code, but have no assertions.
You can run tests that test unimportant code just as much as super critical code. There's no differential between the two. Of course super critical code should have a number of different tests that exercise it. Its not the same as testing every path, its testing different inputs and checking that you get the right results. Also see property testing.
Chasing 100% is like any metric that becomes a goal, it perverts the metric, and moves the meaning away from the metric.
Why is that? Well, we dont really want tests at all, if only people could write perfect software first time, we wouldn't need them. Stupid people!
What we want are reliable systems! So we use feedback loops between deployed systems and code to help us discover those places where we need more tests, or a different type of testing, and then we do that.
Of course if your test coverage is 0%, thats probably bad, but 100% is a non-goal.
You'll also find that if there are no tests in a system, when you need to add them, its really hard, cos its not designed in a way that makes it testable. So maybe the TDDs will help you! You end up with a system that you have high confidence in, and also is testable.. so when you find something that doesn't work how you thought, its easy to add that test right in there.
All the security theatre!
False urgency is red flag when it comes to emails and sms.. I dont see why people don't see the same when it comes to dependency alerts.
The vast vast majority of alerts are totally useless, when it comes to your actual deployed system, unexploitable and irrelevant.
Rushing to update causes make-work, churn and loss of focus on the real.
Don't get me wrong, I love secure systems, but dependency theatre doesn't make it.
Very very occasionally, you'll get a high priority signal, and then yes act on it immediately. Your deployment systems should be designed so that this is just another release. No expedited short cuts, just another day.
Reducing dependencies, defense in depth, validation, type-safe, null-safe languages etc all good.. endless dependabot PRs with no understanding of the reason or impact, bad.
They have always been that way. Im not accusing them of being involved in "headlightgate", but it would be great if somebody did some research.
Beam patterns are always checked when at rest, just like diesel particulate emissions..
This is particularly annoying as knowing where people come from is important.
Its just another reason to give up making stuff, and give in to the FAANG and the AI enshittification.
:-(
This is somewhere quite a few tools fall down. For example, for web: Rendering to canvas doesn't create the dom nodes required to hook into the tools, and creating the nodes appropriately can have a significant performance impact.
What about native a11y tools and tech.. there are some ios specific ones that you'd expect on an ios app for example.
https://www.theguardian.com/uk-news/2025/nov/08/environmenta...
Obvs, uk gov does nothing
However, in most (every?) large organisations, buying a server and putting it in a DC, and looking after it, is hugely time-consuming, lengthy and expensive.
You need to get quotes, approvals, purchase, rack, commission, maintain etc etc. It is usually close to 1 year to get a server.
In some companies, even getting a virtual server takes almost as long!
With AWS, once an account and service is approved, boom, you are done.
Viztracer is a super library to capture perfetto compatible output from Python.
It helped me find perf issues in literally minutes.
https://raw.githubusercontent.com/time4tea/gopro-dashboard-o...
If you fancy that an error could be just a type, not necessarily a Throwable, you might like Result4k - it offers a Result<T,E>
https://github.com/fork-handles/forkhandles/tree/trunk/resul...
disclaimer: I contribute to this.
Thanks for the info.
Its great to make this step.
clock in this case is a thing that was supplied to the class or function. It could just be a function: () -> Instant.
(Setting a global mock clock is too evil, so don't suggest that!)
Computing a bitmap for a glyph is expensive because of all the splines and whatnot.
https://freetype.org/freetype2/docs/tutorial/step1.html#sect...
Its been recommended practice for ages...
Use SCP (service control policy) to disable any services and regions you dont use. Tada. Much harder to get unexpected bill, much easier to enforce audit etc.
Cloud was a reaction to overlong procurement timeline in company managed DC. This is still a thing, it still takes half a year to get a server into a DC!!
However probably 99% of use cases dont need servers in your own DC, they work just fine on a rented server.
One thing though, a rented server can still have hardware failure, and it needs to be fixed, so deployment plans need to take that into account - fargate will do that for you.
It takes your programming language version and turns it into github actions yaml, so you dont need to do any of that sort of thing.
Its not so long ago that the GNU libc had a very similar allocator too, and thats why you'd pop Hoard in your LD_PRELOAD or whatever.
Not every program is multi-threaded, and so not every program would experience thread contention.
Wouldn't recommend tbh, yet.
This makes me sad, as I played super Mario world on one of the first imported consoles in uk, have snes, n64, game cube, Wii, Wii u, switch and switch2.. each of them had awesome launch titles and follow ups... switch 2 seems.... empty?
Edit: you can run a lot on one or two hetzner servers for almost no money. Compare €60/month, vs about $1000/month for a couple of replicated fargate services.
- poor testing between front and backend so that ppl don't know what versions of apps can work on that versions of apis, so forcing updates, "just to be safe"
- security slop - forcing the update of apps because they have an insecure library, like curl, so inane policy forces them to update...
Sane for those that only offer 2fa as part of cost plus deal.
SSO or 2fa are table stakes for companies that care about you - even at a free tier.
Both are effectively zero cost to deploy (once you create the login capability for one) ...
Got an isdn link in 98, so fast.
500,000 - you can do a lot.
This is an ad not a helpful announcement.