caladin

Anyone know what kinds of jobs might use lean? Or jobs that are in a related space?

Thank you for creating and continuing to work on Magit!

It's likely referring to the Realforce keyboards, notice the title says "HHKB _and_ Realforce", then "Mechanical Programming _and_ Gaming Keyboards", respectively.

> whereas a lexus actually costs less than 42k for a higher level trim

Which one?

Are there any recommended open source projects for handling the management of a Minecraft server? So maybe some kind of control panel, automated backups, etc.?

I specifically mean some kind of all-in-one solution rather than a hodgepodge of tools and bash scripts.

Something that gets one close to the Minecraft Java Realms experience + mods, which one can just provision on their EC2 instance or wherever they may run the Minecraft server.

Did you offer incentives for those donations?

I've seen employment contracts that just include a general catch-all for any kind of surveillance, even if they "don't do it right now". This in California.

I take your point though that you're saying some laws require explicitly enumerating them (from how I understood your comment).

Does anyone know if on company-provided macOS/macbook, can these kinds of tracking programs turn the microphone or webcam on without it being indicated in the system?

Obviously, it is a device that's not yours and the company can do all kinds of things such as installing rootkits and other things to do whatever, but putting that aside, short of that level of commitment, is anyone familiar with these kinds of programs and whether or not they indicate in some way (e.g. macOS-level indicators that some app is using the microphone/webcam).

I'm just curious if I have my work laptop in clamshell mode and it goes to sleep, to what extent is it not a 24/7 active bug? Maybe I should be shutting it down every single moment that I don't want to risk being spied on?

Is "sleeping" the macbook and closing it shut, enough? Is it low-level enough of a block, or can apps circumvent even that?

I'm specifically putting aside Pegasus-level circumventions here, since then all bets are off. I'm just thinking about 'off-the-shelf' level apps that companies can license and use.

From a very cursory skim, I get the feeling that this would only work on public repositories where pull requests are allowed, correct?

Not to minimize the issue, as that type of situation is likely the norm on GitHub.

Another way of phrasing what I mean: private repositories are unlikely to be affected by this correct? Since the spoofer would have no way to propose the threatening pull request, only the real dependabot would have permission to do that in that case.

This comment (inadvertently?) by mentioning those names gives off the impression that this is a partisan push. It is not.

This is an explicitly bipartisan effort. Most recently:

- Kirsten Gillibrand (Senator D-NY) most recently secured funding for UAP Office, and for years now has been writing legislation on the topic which has been passed: https://www.gillibrand.senate.gov/news/press/release/gillibr...

- Chuck Schumer (Senator D-NY) in the past few days pushed an amendment for UAP disclosure, with language including things like eminent domain over any recovered UAP craft. It is unlikely this would've been pushed without consulting the white house. https://www.democrats.senate.gov/imo/media/doc/uap_amendment... See also: https://www.nytimes.com/2023/07/13/us/politics/ufo-records-s...

    Choice excerpt from Section 10a:

    "The Federal Government shall exercise eminent domain over any and all recovered technologies of unknown origin and biological evidence of non-human intelligence that may be controlled by private persons or entities in the interests of the public good"

    This is from Chuck Schumer, someone that hasn't been adjacent to this topic until now, out of nowhere.

- The late Harry Reid (Senator D-NV) was a huge proponent of pushing for more information on this topic, initiating the Advanced Aerospace Threat Identification Program (AATIP) which was the precursor to a lot of these developments. See https://en.wikipedia.org/wiki/Harry_Reid#UFOs

- Jared Moskowitz (Representative D-FL) was one of the three representatives pushing for this hearing

First time I see someone plainly refer to 'Holland' and it's not in The Netherlands but actually a city in Michigan.

Checked on a map and it's actually near a place called Zeeland, which is also in The Netherlands. Wow "Noordeloos" also sounds Dutch. I guess they just have many Dutch-named towns over there.

Did you ever find an alternative vendor that did this correctly in a manner that you were satisfied with?

As far as I know, inbound emails did include the headers you mention.

> Confusingly, these headers appear only for a subset of inbound emails.

Is it a predictable subset? Some unifying characteristic?

FTA:

> Rubio told NewsNation that there are others in the intelligence community who have come forward with “firsthand” accounts of UFO hardware. Rubio, a longtime advocate for transparency on the alien issue, claims there are several more intelligence whistleblowers with “high clearances” who have shared similar allegations with the Senate Intelligence Committee.

No. Kirsten Gillibrand has been active in it alongside Rubio. See https://www.gillibrand.senate.gov/news/press/release/gillibr...

I definitely remember this one. It's good.

I remember back around 2007 or so I got a huge collection of chiptune music off of Demonoid and it had a bunch of Razor1911 music among others that I'd listen to.

If you can get the file to your friend, you'd be better off using syncplay. Basically, you watch the file natively in your own player like mpv, vlc, etc. and syncplay will manage syncing all of your pauses, seeks, etc.

This reminds me of the same response regarding generics from Go users:

> God I get tired of the generics criticism with Go. I truthfully don't even notice it when I write Go, I don't understand why folks get so bent out of shape over it.

Over ten years later, Go gets generics.

I agree but I think Hibernate is an extreme. There is a middleground, query builders, which enable dynamic query construction (e.g. dynamically appending filter predicates) with reduced cognitive load of something like Hibernate.

I personally was heavily in the camp of "write raw queries ideally with code generation for statically typed/generated code" (as exist in Rust, Go, TypeScript, etc.), but I have since tempered my position since it does become a bit brittle and repetitive. Lately I've been playing with Jooq and it seems great.

There are tradeoffs everywhere though, so with Jooq you still aren't 1-to-1 with raw SQL, there is a bit to learn, but I consider it a worthwhile investment (and a minor one relative to an actual ORM).

One interesting consequence of this is that Google's own javascript api client will no longer work with MV3 and there are apparently no plans to ever make it work.

See https://github.com/google/google-api-javascript-client/issue...

Chromium bug marked WONTFIX: https://bugs.chromium.org/p/chromium/issues/detail?id=116445...

Updated readme: https://github.com/google/google-api-javascript-client/blob/...

So effectively this means extensions on MV3 can't easily access Google apis, which is quite unfortunate since Chrome extensions in particular made Google authentication super straightforward (piggybacking off of chrome's built-in google authentication). If someone knows a better way I'd love to hear it.

I believe the reason that the current incarnation of the javascript library won't work is because it modifies the dom to add script tags to fetch and run the api library (or components of it), which is specifically what MV3 will disallow AFAIK.

Two back-to-back on-point comments. I appreciate you!

I was investigating this lately, and as you say, they are "efforts", and while laudable, I wouldn't go so far as to call them solutions. There are open issues/caveats as a result of the async model.

I do think there is something great about being able to continue to leverage existing JDBC-related tooling, given that it already exists.

I appreciated and upvoted your comment!

Binary search is deceptively simple. It is quite fertile ground for off-by-one errors, integer overflow, infinite loops, etc.

Wikipedia has an entire section dedicated to this here: https://en.wikipedia.org/wiki/Binary_search_algorithm#Implem...

  When Jon Bentley assigned binary search as a problem in a course for professional programmers, he found that ninety percent failed to provide a correct solution after several hours of working on it, mainly because the incorrect implementations failed to run or returned a wrong answer in rare edge cases. A study published in 1988 shows that accurate code for it is only found in five out of twenty textbooks. Furthermore, Bentley's own implementation of binary search, published in his 1986 book Programming Pearls, contained an overflow error that remained undetected for over twenty years. The Java programming language library implementation of binary search had the same overflow bug for more than nine years.

Thank you for responding!

> It has a few nice QOL improvements over BitWarden IMO

Mind sharing what in particular you found to be QOL improvements? I'm curious.

> You will cry looking at source code https://github.com/yjs/y-crdt/blob/main/yffi/src/lib.rs

Am I missing something? You linked a file that is inherently going to be "un-Rusty" because it's meant to be an FFI shim for _non-Rust_ languages to use through a common C API that this file exposes.

> I’ll start off by saying that I work 60 hours a week, at least. My stress and anxiety levels are manageable now, but only because I found ways of managing them. They’re not reasonable though and most importantly, they’re not sustainable.

Would you care to share what kinds of things specifically cause you stress and anxiety?

No problem if you don't feel comfortable to do so, I am just really curious what kinds of stressors people such as yourself are experiencing.

I'm really curious, if you would be so kind as to share, can you give examples of what contributes to this stress you have?

No problem if you don't feel comfortable to, I'm just curious to hear what kinds of problems people are having.