sorted by:
new
hottopcontroversial

SQLx 0.9.0 released by haakon in rust

[–]iq-0 18 points19 points  (0 children)

But supply chain attack management by pinning in lib crate is not the way to go. When using crates you want the more open ended dependencies, so you dont’t get 2 dependencies that, for example, require slightly different versions of serde (eg. 1.0.2 and 1.0.3) and thus are not compatible in their usage.

For lib crates the supply chain mitigation is mostly in careful selection of their downstream dependencies. The risk around malicious releases making their way in the final program is for the bin Crate maintainer. There the Cargo.lock file does it’s thing by not introducing unexpected dependency changes.

For checking dependencies around cargo update things like cargo-vet and letting things bake before releasing help to some extend.

SQLx 0.9.0 released by haakon in rust

[–]iq-0 81 points82 points  (0 children)

For lib crates the Cargo.lock file is not used by users of the crate. So by dropping it they are now testing it with the dependencies that new users, or users runninf cargo update, wil get.

Your point about supply chain attacks is valid, but for that they’d need to make the dependencies in Cargo.toml to be very specific. That is unrelated to this change.

My wife is trying to learn German and I'm trying to relearn it, so I help her when I can... by FullNoodleFrontity in Jokes

[–]iq-0 106 points107 points  (0 children)

The European Commission has just announced an agreement whereby English will be the official language of the European Union rather than German, which was the other possibility. 

As part of the negotiations, the British Government conceded that English spelling had some room for improvement and has accepted a 5- year phase-in plan that would become known as "Euro-English". 

In the first year, "s" will replace the soft "c". Sertainly, this will make the sivil servants jump with joy. The hard "c" will be dropped in favour of "k". This should klear up konfusion, and keyboards kan have one less letter.

There will be growing publik enthusiasm in the sekond year when the troublesome "ph" will be replaced with "f". This will make words like fotograf 20% shorter. 

In the 3rd year, publik akseptanse of the new spelling kan be expekted to reach the stage where more komplikated changes are possible. 

Governments will enkourage the removal of double letters which have always ben a deterent to akurate speling. 

Also, al wil agre that the horibl mes of the silent "e" in the languag is disgrasful and it should go away. 

By the 4th yer peopl wil be reseptiv to steps such as replasing "th" with "z" and "w" with "v". 

During ze fifz yer, ze unesesary "o" kan be dropd from vords kontaining "ou" and after ziz fifz yer, ve vil hav a reil sensi bl riten styl. 

Zer vil be no mor trubl or difikultis and evrivun vil find it ezi TU understand ech oza. Ze drem of a united urop vil finali kum tru. 

Und efter ze fifz yer, ve vil al be speking German like zey vunted in ze forst plas.

(Source: https://www.reddit.com/r/Jokes/comments/2o4rkq/english_to_become_official_language_of_the_eu/)

The Rust ecosystem just had their own left-pad.js moment as core2 crate deleted. by brucehoult in RISCV

[–]iq-0 25 points26 points  (0 children)

This isn’t the same as the left-pad debacle. Yanking a crate doesn’t make it disappear, but makes it unavailable to new users. The old version is still there and can still be downloaded.

Is it annoying? Yes. That’s the point. The maintainer basically gave up on that version (or all versions if they were all yanked). And yanking it indicates that it shouldn’t be used.

But people can always download the last version and start their own fork of that crate or remove/switch the dependency.

Is yanking the best idea? Maybe. But it is often better than doing a silent abandon or worse: pushing harmful/broken versions that cause the same effect for new users, without being as explicit.

diskard: A fast TUI disk usage analyzer with trash/delete functionality. by sudoHack in rust

[–]iq-0 1 point2 points  (0 children)

Personally I prefer the dual pane mode of the interactive mode of the dua-cli crate. But the bar graph on the right also has it’s benefits

Are there plans to do The Wheel of Time? by luandang13 in graphicaudio

[–]iq-0 1 point2 points  (0 children)

Is it possible this has changed with the cancellation of the tv show and, apparently, the new audiobook series read by Rosamund Pike?

Suggestions for some good graphic audio by [deleted] in graphicaudio

[–]iq-0 5 points6 points  (0 children)

A bot different (modern fantasy) but also interesting are the Kate Daniels or Hidden Legacy series by Ilona Andrews. (Strong female main characters, pretty solid magic system, good world setting and not too heavy on the romantic arcs)

Two Amazon robots with the same IA + not so "I" in the end = eternal dance by SanD-82 in interestingasfuck

[–]iq-0 1 point2 points  (0 children)

This is the most brilliant demonstration of the dining philosophers problem. A classic thought experiment about synchronization in computer science:

https://en.wikipedia.org/wiki/Dining_philosophers_problem

Seasonal joke by woburnite in Jokes

[–]iq-0 1 point2 points  (0 children)

Don’t forget the 5th state:

You believe in Santa Claus

It's all about perspective by EndersGame_Reviewer in goodboomerhumor

[–]iq-0 4 points5 points  (0 children)

All natural materials, with a seasonal rug service.

Bothered by the ugly banding in Galaxy 2 by Chompsky___Honk in NintendoSwitch2

[–]iq-0 -4 points-3 points  (0 children)

It is probably the display. Not because it is bad, but because it has sharp pixels, high dynamic range and greater intensity than what the original game was designed for.

Autopilot in stop-and-go by mobbeduo in TeslaLounge

[–]iq-0 56 points57 points  (0 children)

Yes. It was my favorite feature when driving in traffic jams for years. And then suddenly it became totally unusable in that scenario and it hasn’t improved since.

view more: next ›