Programming

This is for making "pip install" safer, so that dependencies of your packages cannot change under your feet.

However, keep in mind that third-party PyPi packages are not vetted or reviewed for security before they become available. So, they are subject to the same risks for compromise as Arch Linux AUR packages.

A safer alternatve would be to use GNU Guix, which has vetted packages, builds everything transparently from source, and has great support for cross-language projects.

I never see in public git projects something like a declaration of scope. There's also no convention, unlike a README.md (which rarely contains some sort of scope definition) or LICENSE file.

Is this unusual in open source projects, that you first define what you want and not want in your project and how you want to do it, to combat scope creep and sabotaging yourself?

I'm in a postition in live (short of a burnout) where it's actively a pain to just start things and then wing it; i even add a scope comment to larger shell scripts.
Maybe it's experience, because i already know that i'm then not satisfied afterward or (in case of shell scripts) just create a unfinished mess.

Nobody else? Or am i looking for the wrong term?

Live AWS keys in 75 throwaway repos, each made public for one of five windows from 60 seconds to 12 hours, every use logged. The keys were tripwires; the real question was who notices a private repo going public, and what they do once they're in.

The most useful finding is the dull one: re-hiding the repo does nothing. One busy harvester kept re-validating the captured keys for a day after the repos went private again. Only rotating the key stops it.

This came out of building a monitor for exactly these repo-setting changes.

From the last week to this week, I couldn't stop thinking that I'm getting crazy for not seeing what other are seeing. Maybe I'm wrong on where I look for the AI solution that I'm not seeing.

Feedback on the post, ideas, or just pointing where I'm wrong and why I would appreciate.

I was reading some joking comments about asking fast food customer service bots to reverse linked lists and I was struck by the realization that I didn’t quite remember how that would be done. Data structures were never my strong suit but I landed on something like going through the whole list and filing the pointers in a stack.

I was actually half decent at writing something in a programming language I barely understood back in university, but these days I prod a pandas dataframe twice a year or set up an abomination for one-off data scraping once a year and that’s about it. Maybe I do half of a Zachtronics game.

There’s two sides of this for me:

1. The actual writing of code and the theory has become very rusty (not a pun). I’d ideally like to fully re-learn a lot of the software fundamentals. I did a lot of RTL and embedded stuff in university and I never really got deep into writing that much “traditional” code. Mostly lower level stuff and others would write the high level stuff.
2. I’m actually not very familiar with actual tools people use to build stuff. I’m somewhat familiar with Conda and NodeJS, my understanding of the microcontroller ecosystem is still pretty reasonable, but I’m not very familiar with what people actually build software with. I get that the meta now is electron and web apps but that doesn’t really appeal to me. Everything I’ve ever built has been versioned by saving backups of source folders so even though I understand Git I haven’t really used it for my own work. Student projects were simple enough and abstracted the right way that we just used loose files. Stuff like that

I’m probably not pursuing a career pivot into software development but the idea of having personal projects has never faded away. I know it’s far fetched but the early 2010s dream of making a few little apps or games and quitting corporate still appeals to me. Even before the slop era there was far too much fodder to stand out, but hey, I still like making things, I’m not going into it with the expectation of it changing my life.

As LLMs eat up more and more of beginners’ foundational knowledge I don’t quite know exactly how to feel. I think asking for a regex filter in natural language is neat, it’s also something I can immediately verify without messing up my work. But I hesitate to offload much brain power into that kind of tool. I intuitively understand it would probably be very helpful to explain basics, or to offer an explanation for an error the compiler is being obtuse about, but I don’t know. I see this stuff totally melt people’s brains around me. Competent professionals just throwing away their judgment and experience. Even if my use case is what it’s better at doing, I have reservations. I do worry about the future of online documentation of little weird issues if nobody is asking the dumb questions in an open forum.

I guess the trivial solution is just “come up with a project and learn as you go” which is how I’ve done this before, and I’m assuming most of you have too. But I lose all momentum most of the time pretty fast, and a lot of it comes down to frustration with not having the time to debug like I did as a student, not knowing what the obvious libraries are, just plain blanking on when to use a pointer and when to use an address. My brain still thinks in (bad) C++ so I’ll look at my bad python and think huh this looks nothing like the documentation. Ideally I’d like to be decent or at least confident with both, and be decent at winging it in another language when needed.

Not looking for explicit recommendations as much as just seeing what you guys think. If the world economy crashes and I’m out of a job, doing a few projects on my own time might be good for me. Especially at a time when computing feels like it’s being wrestled out of our hands, and when most people are treating computers as magic black boxes again. I swear the interns are somehow worse at navigating an OS than my grandma.

In the short term I should just try to beat The Farmer Was Replaced, but after that I’m all ears

I decided to adventure myself in Tauri development for a personal project, I read the entire Rust official book and followed the exercises. When I first started developing it was like if nothing I learned helped for real life projects.

Now after getting betting up every single time I touch my project, it seems I'm catching things slowly.

But I've never seen such a hard modern language, I used C and C++ before and it's incomparable.

A seemingly simple question which sent me down into the murky depths of standards. How many consecutive hyphens can you have in a domain name? It probably isn't sensible to name your online presence a----------hyphen.com - but is there anything technically stopping you? Table of ContentsHistoryTLD RestrictionsAnomaliesSo What? History Let's do some history! This is 1978's "HOST NAMES…

Many engineers should be doing less work. I don’t necessarily mean producing less code or fewer changes, but literally working fewer hours in the day. When they do work, they should be working at a slower pace. I like to aim to be running at 80% utilization by default: unless I have a high-pressure project going on, I spend 20% of my workday away from the computer.

Im investigating an idea i had about React-like syntax for webcomponents after some experience with Lit.

Lit is a nice lightweight UI framework, but i didnt like that it was using class-based components.

Vue has a nice approach but i prefer working with the syntax that React uses. I find it more intuitive for debugging and deterministic rendering. I wondered if with webcomponents, i could create a UI framework that didnt need to be transpiled.

• How its built
• Checkout the code
• Storybook demo

(My intentions with this framework is to get to a reasonable level of stability, to then replace React on some of my existing projects.)

IMPORTANT: Dont be misled by it being open-source. Im not trying to push "yet another ui framework", this is an investigation to see what is possible. You should not use this framework in your own code. It is not production-ready. It is intended for myself on my own projects. This project is far from finished. I am sharing because it might be interesting/educational for someone. Feel free to reach out for clarity if you have any questions.

Though I primarily use vim, I got VSCodium so I could use it as a debugger since its much easier to set up. I am having alot of trouble getting any use out of it though, when I run the program the IDE gives me errors if I type in the debug console, and closes the terminal if I type in the integrated terminal. I've changed the config to allow integrated terminal, but nothing has changed.

Can anyone help me figure this out, or recommend an alternative tool for debugging a C# program?

Edit: I finally found my answer: https://discuss.cachyos.org/t/debugging-c-console-apps-on-linux-with-vs-codium-readline-input-not-working/16493

Unfortunately there is no FOSS way to debug a C# application in VSCodium. Might have to see what this lldb tool is.