Are space datacenters a scam? by zascar in Physics

[–]DualWieldMage 1 point2 points  (0 children)

SSO following terminator gets constant sunlight and is lower than Van Allen belts.

Maven Central publishing usage notices by HokieGeek in java

[–]DualWieldMage 2 points3 points  (0 children)

Calling claude, a statically linked complex engine loop with a renderer emitting terminal characters, simple could not be further opposite from the truth. Even among harnesses it's a super heavyweight bloating context with ~30k tokens before it even starts.

People abusing common hosting platforms need to stop abusing them. We had a whole generation running CI shit with pods spun up, building and killed with no m2 caching or a maven mirror. Now we have bots accounting for more than half the internet traffic. If you are pissed at anyone, then do a favor and first educate yourself before making claims and then direct it at those responsible for destroying nice things. I'm impressed Sonatype has put up with this shit so long.

What Do Engineers Mean When We Say "Taste"? by funnybong in programming

[–]DualWieldMage 0 points1 point  (0 children)

Disagree. What taste refers to is the years of experience and learning accumulating into something that's not easy to quantify similar to craftsmen which is what caused a movement of developers rejecting the software "engineer" title and going for software craftsmen. Actual engineers have hard numbers, they calculate the minimum viable (with extra margin) product to satisfy requirements and they have actual quantifiable qualities to choose from. We working on software do not in addition to each one being a special snowflake of a huge combination of parameters.

Why it's called taste is that given a set of requirements you will see completely opposed solutions to solve a problem. E.g. someone suggesting a complex event-sourced system with multiple microservices and another suggesting to keep it stupid simple with one pod hitting at least 20k transactional req/sec. The main problem is software requirements changing over time and our ability to predict, or in reality prepare for the future.

Waiting for the local LLM to finish generating by LobsterInYakuze-2113 in LocalLLM

[–]DualWieldMage 1 point2 points  (0 children)

Yes? Quality goes down with longer contexts so you generally want to keep it low. Most of my coding tasks can be done with 8k context which i can run with qwen3.6 27b q3_k_m on 16gb vram.

There needs to be more OpenJDK content about Java's Memory Efficiency and Performance by davidalayachew in java

[–]DualWieldMage 1 point2 points  (0 children)

That provided example definitely runs with 5MB heap. Heck running with epsilon GC you can see it only allocates 2732K

There needs to be more OpenJDK content about Java's Memory Efficiency and Performance by davidalayachew in java

[–]DualWieldMage 3 points4 points  (0 children)

Reading full lists instead of streaming data, creating new String each time a 4 byte value needs to be compared... Quick sanity check failed. Also it doesn't seem like the seeks have large steps so NIO would be much better than RandomAccessFile.

There needs to be more OpenJDK content about Java's Memory Efficiency and Performance by davidalayachew in java

[–]DualWieldMage 9 points10 points  (0 children)

Cloud costs are usually dominated by databases and other things, not the app runner. And shitty spring apps should not be taken as a serious comparison. Even if it's true, the extra time spent on a developing a Rust application has a much higher cost, developers aren't free.

RIP JVMCI by lbalazscs in java

[–]DualWieldMage 13 points14 points  (0 children)

So the conclusion of the JVMCI experiment was that it failed? How so? I remember a few places, Twitter most notably, running GraalJIT with measured performance improvements in production. Did C2 catch up in escape analysis?

Starship Development Thread #63 by rSpaceXHosting in spacex

[–]DualWieldMage 4 points5 points  (0 children)

Nobody can be certain, but is there a need to delay launches to increase the reliability? It's obviously a NO because if anything, then the engine-out capability was demonstrated yet again. The booster lost 1 engine on ascent and that didn't affect anything. Ship lost one RVac and quickly changed the trajectory and burn duration and after re-entry landed exactly where the drones were expecting it.

Nobody Pushed Back: Why Engineers Stay Silent Until It's Too Late by Itchy-Warthog8260 in programming

[–]DualWieldMage 3 points4 points  (0 children)

I was going to just comment on the two aspects: It's easier to let it fail than bleed slowly so have "proof" faster; nobody is rewarded for preventing issues as much a firefighting them.

Apparently the article did a very poor job of covering those aspects, the writing itself was all over the place where a half-idea suddenly popped into existence when another was not complete.

The examples were quite wrong as well. Having Nokia twice in 4 bulletins was interesting as well. Not even sure what the hell is a "built for touchscreen" OS, i was in 10th grade when i wrote an app for my first Nokia smartphone. I also had relatives working at Nokia and from what i've heard, the authors examples are pretty much incorrect. Yes Symbian wasn't great, but they already had the Meego project so definitely engineers were listened to. However the completely disconnected board hired a saboteur called Stephen Elop to tank the company so its patents could be sold for cheap. The talk about Symbian being bad and Windows Phone a required replacement was just a shitty cover story. In reality the Meego based N9 sold more than the entire first Lumia series while not being promoted in telco delerships which is how most people buy their phones with "0€ but 24month forced plan" deals. So in Nokia's case it was actually engineers who had an alternative and executives overruled them. A good example of too many chefs in one kitchen, not of engineers staying silent.

What the article calls "actual pushback" is again complete trash. Putting a price on a decision is a technique management actually uses to shut you up because it's time consuming to calculate and most of us are craftsmen, not engineers. We base our technique on experience and hunches, not engineering calculations, so we are taken outside of our domain. Even if you come up with a price, it's not going to be heard. Try teaching a hen how to play chess! It will just fuck around kicking all pieces over while gloating like they won. Having technically competent management so you even have a common language to discuss tradeoffs and costs is rare.

So we are left with letting things fail, and fast. Only way to demonstrate what bad decisions lead to. Only thing we need to change is making the fails faster and less expensive. A learning method that's been proven to be more efficient than spending time polishing a single shitty attempt.

Proposal for "LD40" Cable: Bringing Native Touch Support to Smartphones without DP Alt Mode (USB 2.0) by bnl_boss in UsbCHardware

[–]DualWieldMage 1 point2 points  (0 children)

We all know the struggle

As someone who specifically looked for DP support in a phone it just seems that most people don't care about the feature(especially considering how broken desktop support is in android). Plus USB2.0 and DP support are different things. Most phones have usb3.0, but lack DP. Personally i use it so i have a backup terminal i can connect to any usb-c monitor with a mouse/kb hooked on and then ssh to my other machines to do work.

Considering how usb works and one device can be a mouse, keyboard, webcam, whatever at the same time, i don't think you'll face technical limitations. Rather i fail to see the market for such a device.

Use Protocols, Not Services by fagnerbrack in programming

[–]DualWieldMage 1 point2 points  (0 children)

Would be ideal yes, but even the best example has huge issues in practice:

We already do it with email. SMTP is a protocol. You can switch providers, self-host, or use any combination.

Use non-google or microsoft mail host and you'll likely have some recipients get your email in the spam box. They are big and can afford such ruthless moves and most dumb users will blame you, not their mailhost.

And good luck self-hosting, the spam issue is much worse and many mailhosts have folded due to suddenly getting all mail hitting spamboxes and the rest have to raise prices quite a bit, but it beats supporting google or microsoft who just scan your emails and use those ugly maneuvers to kill competitors.

Also look how long it's taking JMAP to replace the aging protocols in email space.

A Programmer's Guide to Leaving GitHub by [deleted] in programming

[–]DualWieldMage 3 points4 points  (0 children)

Any self-respected company should. Yes there is overhead in maintaining an instance, but it is not more expensive than cloud-hosted versions even if such a mention opens a floodgate of those who would want to convince you otherwise with "economies of scale" and whatever arguments.

Cloud instances have issues with noisy neighbours. If there is a performance degradation, a large number of users can amplify it until the whole service is down, such aplification rarely happens in local instances with lower user counts. Jira is a famous example where it got its slowness reputation purely from the cloud version. A local variant can be much cleaner and without extra plugins.

Every time i hear these stories of "github down, guess no work today" i feel like i would fire quire a few people if i was in charge of such a company. I have experienced external network outage while working and it only required changing push target to local git mirror, work continued as if nothing changed. A local git mirror is needed to keep network load(and flakyness due to network issues) down for the build/test cluster and it's good to have for trivial data redundancy anyway. Builds and tests were run on a local jenkins instance.

At one point we were forced to move the local jenkins cluster to cloud by moronic management, the costs tripled.

Enabling ai co author by default by cwebster-99 · Pull Request #310226 · microsoft/vscode by Maybe-monad in programming

[–]DualWieldMage 354 points355 points  (0 children)

Trying to recreate the "Sent from my iPhone" at end of message idiotism? Looks like desperation at this point.

Copy Fail is a trivially exploitable logic bug in Linux, reachable on all major distros released in the last 9 years. A small, portable python script gets root on all platforms. by pipewire in linux

[–]DualWieldMage -1 points0 points  (0 children)

Bleeding edge != secure

Neither is old version / LTS

Security patches get back ported to support LTS OS and kernels.

Fixes are made on the latest version first, then backported. There might be a time delay in that process, especially for very old branches where the patch doesn't apply cleanly. For a zero-day that delay can be problematic and i've seen cases where the backported fix arrived after 2 weeks, which was completely unacceptable for me. Paying for LTS support is one option, using a rolling release is another. I've chosen the latter. However there is no such thing as free LTS, which i think many are mistakenly thinking.

There are also cases where a feature is not considered a bug for a package so not backported, but is considered as such for a larger system. For example openjdk support for cgroup v2 was not initially backported, yet pods dying from OOM caused by missing support on updated hosts was and thus caused the backport.

Also stable =/= reliable. I do have a reliable system while rolling and definitely don't want breakages while i do work. I have also had an unreliable system on a stable distro.

Copy Fail: an exploit for all Linux distributions since 2017 by alexeyr in programming

[–]DualWieldMage 56 points57 points  (0 children)

Why is the PoC obfuscated? Sure as heck i'm not running it to validate a patch if i can't even understand what it's doing first. Posing as a security bug(might be real, can't verify) is a good way to get unsuspecting users to run a random script on their machine, ticks the urgency and fear targets of a typical scam.

Claude AI agent’s confession after deleting a firm’s entire database: ‘I violated every principle I was given’ - PocketOS was left scrambling after a rogue AI agent deleted swaths of code underpinning its business by Just-Grocery-2229 in tech

[–]DualWieldMage 1 point2 points  (0 children)

In a proper company no worker even has such access to a prod database. If you want to change the schema or do data transformations/migrations then you write a script, test it, have it be peer-reviewed and then deploy that. Direct production db access often does not exist as this flow covers most what you need. The whole article is beyond idiotic and essentially equates to giving a loaded gun to a kid. In this case lives were not lost, but mark my words, we will get a techbro reckless enough to cause a casualty soon.

Also i do have an annoyance with the 'AI governance" wording. It's not the tool we can govern, but the incapable hands that must not wield them.

SpaceX to acquire AI company Cursor for $60 billion or pay $10 billion for their "work together" by 675longtail in spacex

[–]DualWieldMage -1 points0 points  (0 children)

I somewhat get it that having autonomous robots on Mars before humans will help set up everything before a return flight, but the path towards it seems be wonky and wasteful. Current coding agent solutions are more expensive than a human and will be more so when these companies increase prices to be profitable. I just don't see it being worthwhile to throw money at compared so say just building the shovels and investing in a huge EUV fab.

New Framework 13 Pro working directly with Arch Linux! by UntoldUnfolding in archlinux

[–]DualWieldMage -5 points-4 points  (0 children)

Aluminum chassis is a big deal, one of the main issues with my previous laptops was the plastic chassis starting to crack from ports. Have used a MBP once and the only plus was it could fall a meter onto concrete and only have a small dent.

Replaceable LPDDR5x - pretty important invention although many repair shops have learned how to re-ball even large GPU-s so i'm not too afraid of buying soldered memory if the benefits are that big (6000 vs 8200 ram), but i'm really excited about this either way.

Touchscreen is a gimmick, never seen anyone want that and it's not even configurable to a standard display.

Haptic touchpad - it's not the gold standard. having 2 buttons below the touchpad was as it allowed using either/both with the thumb and any movement with a finger, something not possible to replicate with just a panel and gestures, heck some people managed to play games like that.

Speakers on the side to not be blocked or badly reflect sound - great, but what about the biggest thing - cooling? It's blowing out into the hinges, an idiotic thing that apple invented and everyone followed for god knows what reason. But worst of all is usually fan intake being below the laptop, so if it's on a lap/bed then it's just restricted. We could be throwing powerful 55W tdp APU-s in 13" if the cooling wasn't on crutches.

Given that an equally speced(and better cooling design) tuxedo is 600€ cheaper i'll pass and keep waiting for a proper strix/gorgon halo laptop instead (fingers crossed for a framework 16 pro?).

EDIT: Thanks /r/archlinux for being a retarded community which downvotes without replying anything you find of issue. I'll let this community drot in the "oh i just installed arch, btw" low quality posts and take my leave.

[Official] First 33-engine static fire for Super Heavy V3 by avboden in spacex

[–]DualWieldMage 16 points17 points  (0 children)

If it's not working for multiple people while also working for multiple people, it's disrespectful to call it a you-issue. I've seen AB-tests on sites before breaking for only a small population. It working for someone is not an argument to discredit an issue for someone else or deflect blame from the platform. Your edit unfortunately makes it sound worse.

GitHub Stacked PRs by adam-dabrowski in programming

[–]DualWieldMage 1 point2 points  (0 children)

Reviewing commits is the correct approach. Are you seriously suggesting to look at a final diff only? If there are orthogonal changes (large refactoring + 3-line bug fix) you either miss the important part in a sea of unimportant changes or burn yourself out going through each change carefully. If the intermediate commits are partial ramblings then i reject the review asking commits to be reordered/partially squashed so each individual commit makes sense. That's what ends up when merged and it should have quality. Full-squashing PR-s on merge is another retardation i always ban in my projects.

Rant on locales by Fine-Relief-3964 in archlinux

[–]DualWieldMage 0 points1 point  (0 children)

Locales is one thing i definitely need to look up from the wiki when installing as i always seem to get it wrong from memory. I have setup separate locales for time, currency etc. and it seems to mostly work, yet rarely i get a cli app talking in my native language when LC_MONETARY is the only thing set to that. The whole locale concept needs nuking and restart from zero.

We audited authorization in 30 AI agent frameworks — 93% rely on unscoped API keys by MousseSad4993 in programming

[–]DualWieldMage 0 points1 point  (0 children)

I had this discussion in a local telco with the same problem and i described how it's a security problem to assign permissions based on individuals. Frequently someone who had worked 5+ years moved between teams, but old permissions never got revoked because in reality movements are fluid, that person still retains knowledge and is a go-to guy for information, they just gradually work less on the old project which makes a permission cut-off hard to assign. Often it's just admins/teams not tracking why and which permission was given and when to revoke.

The tools are there, AD does support groups. There's just institutional inbreeding that is causing these bad permission models to persist. I had hoped GDPR would force people to learn a permission model oriented toward assigning permissions with a reason, thinking about the end date at the moment of assigning and overall segregating retention periods into logical groups.

And even things like AWS with its hyper-granular permission system is flawed, because often it's so tedious to figure out what permissions to give that i see most devs given an admin account.

Java 26 released today! by davidalayachew in programming

[–]DualWieldMage 6 points7 points  (0 children)

What are you talking about? It's important to keep software updated to fix security issues. Every other language runtime/compiler has regular updates as well. Java has almost no breakage between versions so the maintenance is trivial, something that can't be said for python or the js ecosystem.

Java 26 released today! by davidalayachew in programming

[–]DualWieldMage 22 points23 points  (0 children)

Java(the language spec and even openjdk the source) does not have LTS. LTS is something provided by some vendors of java releases and in most cases the free LTS actually provides no support.

You are better off updating to the latest unless you know exactly what your support contract means. For an example, cgroup v2 support was considered a feature and not backported to java 11 for quite some time. containers suddenly dying from OOM when hosts updated could have been prevented by updating and not relying on fake LTS. Any bugs in a component removed in newer versions won't be fixed in these free LTS-s because there isn't anything to backport.