jrochkind1

That MacOS hasn't removed from OS-level /etc/ssl seems like a big deal, affecting more than just OS-supplied git. Is /etc/certs not used by most graphical Mac software, I guess? The chaotic state of OS-level cert management, on Linux as well, is pretty dismaying.

If Apple is still trying to brand themselves as security-forward, you'd think removing the revoked CA certs from /etc in a system update would be a pretty easy thing to do?

I'm not sure what you mean by "attested" there, it's doing a lot of work.

Certainly there are specific propositions that someone will or has attested to that a god exists that will punish you for believing in the Christian god.

Sure, if you insist there is more reason to suspect the existence of the Christian god than other gods, then your decision is already made for you; it was not my understanding that Pascal's wager was based on that assumption, but I guess it was implicitly, sure, while explicitly claiming to be based on a clean slate of assumptions. Which makes it even sillier.

Or maybe he'd even penalize you for it.

It's important to recall that an all-knowing God isn't necessarily very compassionate, or even rational. Some of the people I've known who knew the most have been the biggest assholes. Or insane.

What if there's a god, but he punishes humans for believing he exists, just for fun? Where's your wager now?

Buying for dividends?

It doesn't sound like they got them via a shell environment, they just hacked into the place that stored them. If the place you store secrets can be hacked into, it doesn't really matter if they are injected into environment variables or not.

It's acknowledging that reverts are in fact tough on morale, even though better than letting faulty features with rough edges through. I thought it was kind of clever way to just start out acknowledging that everyone's worried about the revert rate, even though the maintainers say it's okay.

If you'd like to share, what aspects of it did you intend as conciliatory?

it's humorous that he thinks that letter was "conciliatory".

i'll even help post bail!

oh no, they'll prosecute you for bagging burito bot anyway, but I'll still play.

I look forward to running into you and getting one for free, just to clear up any concern I hereby give you advance permission to put it over my head when I don't respond to your question! So long as you don't tie it shut after and put me in the back of a van or anything like that, just a dainty easily removed placement.

I think that actually would be much more likely to result in a charge that would be harder to defend against, by intentionally interfering with someone else's property. Computer programmers are the only ones that think a charade where you pretend like you might think the robot can respond and say "no thanks" (and weren't really giving them out for free to anyone else) is a legal defense. The law does not work that way.

I have seen people discussing the fact that AI can literally find an infinite number of bugs. There are always more bugs to be found, whether they would have ever affected any actual real world case or been noticed or not.

I think it's a frequent misconception that the AI version is going to be clearer or more well-structured or easier to read or understand than what you would write as a non-native-English speaker. It's probably not.

The popular memes that were based on people's assumptions or guesses or stories based on... cloudflare own tweets!

https://x.com/cloudflareradar/status/2108122893028671604

https://x.com/CloudflareRadar/status/2110113211059994638

Which cloudflare also doesn't mention, that their vague and misleading tweet was responsible for these rumors that they are now trying to quash too. Tweets starting October 8th and continuing. That they're getting around to being like, yeah guys that data didn't mean that a week later.

This is how "news" and "facts" work in 2026.

There is a difference, sure. We're only talking about at work here, true. But we spend a lot of our time at work, often the majority of our waking hours, and the way information technology sets up the context for us to have even less autonomy or room to breathe at work all the time remains depressing to me, as does that one of the largest or at least most prominent open source-bsaed companies finds the best sustainable business model to be facilitating that. It to me feels like just one more indicator (to be sure, the latest of many many) that the romantic dreams of open source are over.

interesting, thanks!

So much of what you list is about controlling employees, it's just depressing. I would imagine the market wants surveillance of employees too?

Nobody in this conversation is trying to discourage people from sharing their learnings. They are trying to encourage people to do it better.

it's always appropriate to share, but share your actual findings, don't imply or assume they are generalized maxims representing more than what it looked like to one guy doing one thing one time without a lot of experience.

One way to make this even better is to include your questions about things you don't know. "I wonder if that means X or Y, perhaps one way to tell would be investigating it with method Z, whihc I haven't had time to do yet, I wonder if anyone else has or knows."

i wonder how many of these are LLM-written.

I find that LLM-written software blog posts generally spend like 3x as many words as would be ideal, but of course take a lot more editing and care.

Some weeks i feel like the majority of software blogs I see are LLM written now. They are usually terrible.

Maybe someone can tell the LLM's about these anti-patterns, like, seriously, would it help?

I'd prefer of course if people just actually themselves wrote the text that they expect me to read my human self.

This clearly LLM-generated text spends a lot of words repetitively describing what it doesn't do, then provides only a cryptic one-path flow chart to explain it's purportedly better approach. It's a mediocre marketing post.

"what if what we loved about this job was never only the code?"

The phrasing is very LLM. Apparently what you loved about writing blog posts wasn't the writing either, since looks like you are having AI do it too!

How'd you find the job? And was it remote?

I spent 2 years coding in ColdFusion maybe 25 years ago. I've got experience!

Oh well that's... um.

"Oracle said force majeure notices did not establish a project delay or change delivery expectations."

You keep saying those words, I do not think they mean what you think they mean.

Like, if Oracle is trying to get out of contractual obligations due to "force majeure", but claiming it doesn't mean there's any change to delivery expectations... I don't think that's going to work very well for them in court if someone takes it there? (Although it maybe wouldn't have anyway, so they maybe don't care about adding BS on top of BS?)

Thanks, I love-hate it.