tatterdemalion

joined 3 years ago

So you're saying we need to embargo ourselves.

It's pretty trivial to remove the Claude attribution from Git commits.

[–] tatterdemalion@programming.dev 1 points 4 days ago (1 children)

That definitely increases the challenge of writing tests or trusting that they are faithfully representing your production environment.

I could abstract out the reading of the data

I was going to suggest this, and it sounds like that ends up being expensive. It seems like you need some kind of test harness that's able to emulate your specific hardware while still allowing for testing hooks that don't impede the tight clock scheduling.

he is comparing a deterministic tool with a non-deterministic tool

Yes, but that's not the argument Mikina was stating. Linus was never advocating for reading assembly line by line. Linus was using that as a satirical example, not suggesting anyone should actually do that.

[–] tatterdemalion@programming.dev 0 points 4 days ago (2 children)

That you should also not trust every line of the compiled assembly after you wrote the code, and check it lime by line, is an extremely stupid argument.

I guess it's good that no one is making that argument then.

[–] tatterdemalion@programming.dev 1 points 4 days ago (3 children)

high performance embedded systems that are difficult/nearly impossible to unit test

Sort of a change in topic, but I'm curious why that would be so difficult to test.

[–] tatterdemalion@programming.dev 1 points 5 days ago* (last edited 5 days ago) (5 children)

Competent developers make mistakes too. I think it's worth at least skimming every line in a PR. Things like indexing out of bounds should probably be handled by testing or using a memory safe language.

I don't think code review is the place where you should be trying to catch bugs in the minutia of the code. You should be assessing readability/maintainability, architectural decisions, risk, and testing strategy. That does involve reading all of the code, even if only by skimming.

[–] tatterdemalion@programming.dev 0 points 5 days ago (11 children)

where you have to focus and review everything line-by-line

Do you not think all code deserves this level of focus?

Assuming you didn't know what tools were used to write the code that you are reviewing, how would reviewing it be any different? You would still ask the human author questions about intent if that were not clear. The quality of their responses may or may not be impacted by their use of LLMs, but that is up for you to reason about as the reviewer, and it's perfectly fine to tell someone they are being a jackass for only sending slop to you.

Just show that in your presentation and make them all wait for however long it takes.

[–] tatterdemalion@programming.dev 15 points 1 week ago* (last edited 1 week ago) (2 children)

As I witnessed today, even just stating that you are opting out is not enough. You must ensure, of your own accord, that the camera is not directed at you when you approach the TSA agent, or else it will automatically photograph you.

I've also had a TSA agent tell me that I need to tell them I opt out before handing them my ID. This is obviously problematic but that's just how this shit works today.

I agree that we should be careful about how we use passkeys, but I don't think "do not use them" is valid advice.

This article only convinces me that a company like Netflix could support passkeys in a non-restrictive form (unattested, copyable, etc) and then ratchet up restrictions slowly as adoption increases. But this is really the same game we play with all other dark patterns like price hikes, pay-to-still-watch-ads, user tracking, etc. The savvy will realize quickly that enshittification is happening, and they will seek alternatives.

To me, this is not adequate justification for boycotting the entire passkey technology. I find them convenient, and I use them in my own homelab identity provider. Only a handful of the services I use even support them properly yet, but I wish more did.

 

There are now many technologies for P2P file sharing:

  • Usenet
  • Bittorrent
  • IPFS
  • Tenfinger
  • more?

And also several technologies for anonymization:

  • VPNs
  • Tor
  • I2P

AFAICT the most popular option is still Bittorrent with various public and private trackers and indexers. Private trackers seem to be the most effective option that communities have converged on.

I've tried all of the above solutions over the years and while I think something like I2P sounds great in theory, it doesn't seem to actually work well in practice. Because it's not terribly popular, it's hard to know what to expect.

We clearly still haven't found the ideal model that can provide both good performance, discovery, access, availability, and anonymity. But do you think we will actually make progress on these problems? We seem to have stabilized on a local maximum.

 

From DHH's long-winded keynote at Rails World 2026. He was bragging that Hey's backend is so efficient because it's written in Rust (which he hates and refuses to read).

 

I'm trying to create a web app that involves sharing of user-generated content, but one of the goals is that the service host operator should be blind to the content. Only authorized users should be able to see the content shared with them. This implies the content must be encrypted at rest, and users must hold custody of their private signing key.

I figure the situation requires an open source browser extension to hold onto a user's keys and decrypt content for them. The web app would still be able to browse all of the site's metadata, but any plaintext content must be siloed in the extension. The reason for using an extension is that the source code would be open source and independently verifiable, while building the same functionality into the web app would require trusting the host to serve the code you expect.

Do you think that's a reasonable tradeoff or is this asking too much from users?

The other option would be just requiring users to download an open source app for content viewing.

EDIT: Perhaps an important followup: are you OK placing trust in the host to never access your confidential data if it means you don't have to install additional client software or worry about verifying that client software's authenticity?

 

This might not be entirely on topic, but I think someone here will know the answer.

Does anyone have a working setup for streaming from jellyfin to an OLED TV (preferably LG) that supports Dolby Vision? AFAICT every device in the chain (except the server) needs to be DV-licensed.

Apparently KODI on a linux box (my current setup) cannot output DV content over HDMI.

I'm wondering if LG's native OS has a Jellyfin client that supports DV well. It's either that or:

  • Apple TV + infuse client (expensive)
  • Google TV Streamer
 

I didn't think I'd spend hours reading about this today, but some things surprised me:

  1. Just using a Playstation sounds like it won't work or will be a huge time sink.
  2. Blu ray optical drives are way more expensive than I thought
  3. The copy protections on Blu rays are exceptionally annoying, to the extent where there is really only one closed source software -- MakeMKV -- that can work around them. This post goes into some interesting details.
  4. Finding a drive that is known to work with MakeMKV is a pain. There's a brand called Pioneer that seems promising but they have stopped producing bluray drives ~~went out of business last year~~. I have no idea which model works, and it's common that secondhand sellers will swap enclosures and pass it off as a different model.
  5. Sometimes you need to flash the firmware on the drive to make it work with 4K UHD discs.

I was going to try ripping a Blu-ray that I bought recently, since I couldn't find a quality rip anywhere, but I'm pretty turned off from the whole prospect at this point.

Anyway I'm not really asking for a specific reply, I just thought this topic was interesting and I'm curious what people think about Blu rays and optical media in general. Does the future seem bleak? Are we going to be stuck with shitty WebDLs for most new content? Or is physical media here to stay?

 

Struggling to find a particular book. I was going to buy it on Rakuten Kobo, but they literally won't sell it if you're not in Japan.

112
submitted 11 months ago* (last edited 11 months ago) by tatterdemalion@programming.dev to c/asklemmy@lemmy.world
 

I think like 98% of mobile games are pretty much trash, but there are some diamonds in the rough.

In the past I've enjoyed:

  • Monument Valley
  • 2048
  • Fruit Merge
  • Hashi
  • Papers Please
  • Baba is You
  • Balatro

I'm getting bored of my usual picks lately. I'm looking for something that's quick to jump in and out to pass the time, not something heavy. But hard puzzles or strategy totally fit!

Is the FF Tactics port good? Better alternatives?

 
 

AFAICT, if a Netflix account owner sets up a VPN for their household, then anyone sharing the account who routes their Netflix traffic through that VPN would appear to be accessing Netflix from that household's WAN IP address.

Is anyone doing this? Is it really that simple or are there more challenges?

EDIT: We get it, you like torrenting. Let's keep comments on topic folks.

 

Richard once decided to read the mind of a hermit oracle who knew everything. This drove Richard insane.

I just had to act insane for multiple D&D sessions.

 
view more: next ›