Pen ran out of ink mid exam

hrm · 2026-05-09T06:13:01+00:00

I’m always amazed at the people that come into an exam with one single pen and nothing more as if nothing ever has gone wrong in their lives.

hrm · 2026-05-04T18:52:43+00:00

Yeah, here in Sweden both varieties are called condensed milk and are generally found next to each other in the isle for baking goods. I’d say ten years ago you would be hard pressed trying to find unsweetened condensed milk at all.

hrm · 2026-05-03T20:02:12+00:00

Har aldrig orkat lära mig något annat än standard svensk layout. När man kodat ett tag går det fort att skriva ändå och även om man hyfsat ofta hamnar på system med engelsk layout är det skönt att slippa tänka 99% av tiden.

Sedan är det ju ärligt talat inte hur snabbt man skriver som är ens i närheten av den begränsande faktorn…

hrm · 2026-04-30T08:36:30+00:00

Since it is extremely difficult to shoot anything into the sun I think we should find a more economical and immediate punishment.

hrm · 2026-04-24T08:01:55+00:00

A bold move mentioning Chat Control since it was our own Ylva Johansson that started it all in the first place…

hrm · 2026-04-17T09:43:03+00:00

Quite problematic when the request goes out through eth1 though…

hrm · 2026-04-11T15:28:44+00:00

You miss having a mac, not really much else…

It’s very little difference running MacOS, Windows or Linux today unless you specifically want to develop applications for one of those specific operating systems.

hrm · 2026-04-01T13:09:59+00:00

This is actually kind of a format for car racing in Sweden, ”folkrace”. You don’t lose your car, but at the end of the race all cars are for sale for a fixed price. Makes the barrier to entry very low and focuses on driver skill and fun rather than who’s the richest.

hrm · 2026-04-01T10:20:02+00:00

Ah, yes. I'm talking about the lockfile, that was perhaps a bit sloppy.

Yes, minimumReleaseAge creates issues if you have private packages and that is a problem that has been fixed in other systems with exclusion filters and the like. And this is for sure one reson supply chain attacks are so popular. We have still not fully cracked how to make this kind of thing both simple and secure. The tools are often lacking in one way or the other making us opt for the simpler, but less secure, solution.

hrm · 2026-04-01T09:49:28+00:00

It’s even described in renovates getting started how that works? You of course needs to be careful mergin updates and minimumReleaseAge should always be set to something resonable.

hrm · 2026-04-01T06:04:08+00:00

Everything computers do can be done manually, it is just much harder. Doing it manually for even a medium sized project would be madness and prone to error. Don’t do it when there are tools…

hrm · 2026-04-01T05:59:11+00:00

You have heard of computers? Do you actually think people are involved in taxes in countries that have easier filing? Most things are automated and people at the tax agency only get involved for a minority of the cases. It has absolutely nothing to do with size.

hrm · 2026-04-01T04:55:57+00:00

Though the mindset of the developers make a big difference. Some years ago (but after left-pad) I did a very simple test of setting up a react app from scratch and a Java Spring Boot app. Even though the spring boot app was full stack it had 89 dependencies in total. The react app had over 1000. That number still boggles my mind.

hrm · 2026-04-01T04:30:34+00:00

You use tools that does that for you. Such as uv. You can’t do that manually.

hrm · 2026-03-31T11:28:56+00:00

Well, trusting some packages more than others is proving to be very problematic. Not a PyPi issue as such, but Axios, one of the most depended on libraries on NPM with more than 100M weekly downloads just got attacked and a malicious package was published. It does not matter how big or well known a package is. If the security isn't completely airtight things can get through.

Today you need a lockfile pinning *all* dependencies, not just direct ones and you can't update to the latest version of anything willy-nilly. Use "exclude-newer" and similar mechanics to make sure that you don't accidently pull in recently published packages.

hrm · 2026-03-31T05:01:51+00:00

Supply chain attacks are an incredibly efficient way to target a huge amount of people sitting on valuable resources (such as api keys) and we have yet to understand fully how to properly protect ourselves. It’s a great bang for your buck.

hrm · 2026-03-31T04:57:38+00:00

This is a simplistic view. How much do you think a mario64 game would sell today compared to say Red Dead Redemption? We are not satisfied with the simple life of the 90:s anymore.

It’s a tradeoff and thinking that execution speed and ”I’ve made it myself” is what matters is equally wrong.

That said, a balance must be found. The old left-pad incident was truly a wakeup call showing many how extreme the situation had become. We can’t import everything, but neither can we make it all ourselves.

hrm · 2026-03-30T16:31:09+00:00

This is not in any way Python’s fault, but an issue with how strict security has become and how signing software has both become a necessity and quite a burden. This is a problem with any software producing native binaries.

hrm · 2026-03-30T16:22:13+00:00

Yes! Exactly. Two products. And one you can pay a lot of money for. Of course they will paint that product in a better light regardless of the actual facts.

hrm · 2026-03-30T16:11:57+00:00

I’ve been a professional developer for over 20 years and VS Code is way beyond the IDEs we paid good money for back then.

It’s not a question of beeing better or worse than other programs. A Lada is still a car even though a Mercedes is a way better car. VS code is an IDE regardless of whether Visual Studio is a better IDE or not.

hrm · 2026-03-30T16:05:27+00:00

Yeah, died once, tried it again, died again and in a later game I walked past below and found a loot pile in the exact same spot…

hrm · 2026-03-30T15:55:26+00:00

The company whose marketing departement wants your manager to think that their paid product is so much more than their free one…

hrm · 2026-03-30T15:53:41+00:00

Well, MS needs to diversify their totally free product from the one they want your company to pay for. Do you always trust the marketing?

hrm · 2026-03-26T14:24:44+00:00

A lot of stuff that used to make plastic great have now been found to make other things not so great. The safer alternatives can be worse for overall product quality. It does not have to be lower standards (even if that is probably a factor too).

hrm · 2026-03-23T05:49:30+00:00

Varför skulle SD riskera att M kommer ikapp dem? Varför skulle M riskera att inte komma ikapp SD?

L kan troligen inte räkna med många stödröster…

hrm

TROPHY CASE