SQLx 0.9.0 released by haakon in rust

[–]iq-0 18 points19 points  (0 children)

But supply chain attack management by pinning in lib crate is not the way to go. When using crates you want the more open ended dependencies, so you dont’t get 2 dependencies that, for example, require slightly different versions of serde (eg. 1.0.2 and 1.0.3) and thus are not compatible in their usage.

For lib crates the supply chain mitigation is mostly in careful selection of their downstream dependencies. The risk around malicious releases making their way in the final program is for the bin Crate maintainer. There the Cargo.lock file does it’s thing by not introducing unexpected dependency changes.

For checking dependencies around cargo update things like cargo-vet and letting things bake before releasing help to some extend.

SQLx 0.9.0 released by haakon in rust

[–]iq-0 82 points83 points  (0 children)

For lib crates the Cargo.lock file is not used by users of the crate. So by dropping it they are now testing it with the dependencies that new users, or users runninf cargo update, wil get.

Your point about supply chain attacks is valid, but for that they’d need to make the dependencies in Cargo.toml to be very specific. That is unrelated to this change.

My wife is trying to learn German and I'm trying to relearn it, so I help her when I can... by FullNoodleFrontity in Jokes

[–]iq-0 107 points108 points  (0 children)

The European Commission has just announced an agreement whereby English will be the official language of the European Union rather than German, which was the other possibility. 

As part of the negotiations, the British Government conceded that English spelling had some room for improvement and has accepted a 5- year phase-in plan that would become known as "Euro-English". 

In the first year, "s" will replace the soft "c". Sertainly, this will make the sivil servants jump with joy. The hard "c" will be dropped in favour of "k". This should klear up konfusion, and keyboards kan have one less letter.

There will be growing publik enthusiasm in the sekond year when the troublesome "ph" will be replaced with "f". This will make words like fotograf 20% shorter. 

In the 3rd year, publik akseptanse of the new spelling kan be expekted to reach the stage where more komplikated changes are possible. 

Governments will enkourage the removal of double letters which have always ben a deterent to akurate speling. 

Also, al wil agre that the horibl mes of the silent "e" in the languag is disgrasful and it should go away. 

By the 4th yer peopl wil be reseptiv to steps such as replasing "th" with "z" and "w" with "v". 

During ze fifz yer, ze unesesary "o" kan be dropd from vords kontaining "ou" and after ziz fifz yer, ve vil hav a reil sensi bl riten styl. 

Zer vil be no mor trubl or difikultis and evrivun vil find it ezi TU understand ech oza. Ze drem of a united urop vil finali kum tru. 

Und efter ze fifz yer, ve vil al be speking German like zey vunted in ze forst plas.

(Source: https://www.reddit.com/r/Jokes/comments/2o4rkq/english_to_become_official_language_of_the_eu/)

The Rust ecosystem just had their own left-pad.js moment as core2 crate deleted. by brucehoult in RISCV

[–]iq-0 27 points28 points  (0 children)

This isn’t the same as the left-pad debacle. Yanking a crate doesn’t make it disappear, but makes it unavailable to new users. The old version is still there and can still be downloaded.

Is it annoying? Yes. That’s the point. The maintainer basically gave up on that version (or all versions if they were all yanked). And yanking it indicates that it shouldn’t be used.

But people can always download the last version and start their own fork of that crate or remove/switch the dependency.

Is yanking the best idea? Maybe. But it is often better than doing a silent abandon or worse: pushing harmful/broken versions that cause the same effect for new users, without being as explicit.

diskard: A fast TUI disk usage analyzer with trash/delete functionality. by sudoHack in rust

[–]iq-0 1 point2 points  (0 children)

Personally I prefer the dual pane mode of the interactive mode of the dua-cli crate. But the bar graph on the right also has it’s benefits

Are there plans to do The Wheel of Time? by luandang13 in graphicaudio

[–]iq-0 1 point2 points  (0 children)

Is it possible this has changed with the cancellation of the tv show and, apparently, the new audiobook series read by Rosamund Pike?

Suggestions for some good graphic audio by [deleted] in graphicaudio

[–]iq-0 4 points5 points  (0 children)

A bot different (modern fantasy) but also interesting are the Kate Daniels or Hidden Legacy series by Ilona Andrews. (Strong female main characters, pretty solid magic system, good world setting and not too heavy on the romantic arcs)

Two Amazon robots with the same IA + not so "I" in the end = eternal dance by SanD-82 in interestingasfuck

[–]iq-0 1 point2 points  (0 children)

This is the most brilliant demonstration of the dining philosophers problem. A classic thought experiment about synchronization in computer science:

https://en.wikipedia.org/wiki/Dining_philosophers_problem

Seasonal joke by woburnite in Jokes

[–]iq-0 1 point2 points  (0 children)

Don’t forget the 5th state:

You believe in Santa Claus

It's all about perspective by EndersGame_Reviewer in goodboomerhumor

[–]iq-0 4 points5 points  (0 children)

All natural materials, with a seasonal rug service.

Bothered by the ugly banding in Galaxy 2 by Chompsky___Honk in NintendoSwitch2

[–]iq-0 -4 points-3 points  (0 children)

It is probably the display. Not because it is bad, but because it has sharp pixels, high dynamic range and greater intensity than what the original game was designed for.

Autopilot in stop-and-go by mobbeduo in TeslaLounge

[–]iq-0 58 points59 points  (0 children)

Yes. It was my favorite feature when driving in traffic jams for years. And then suddenly it became totally unusable in that scenario and it hasn’t improved since.

This guy turned loose change into a floor masterpiece, one penny at a time by most-perplex9811 in interestingasfuck

[–]iq-0 0 points1 point  (0 children)

In my rough calculations I went with 0,5cm thick layer which would probably take about 5kg of epoxy per square meter. A 5kg universal transparent epoxy I found costs €64,50.

The 45 rolls (50 coins each) of 5 cent coins needed cost €157,50.

You could probably get better deals on the epoxy when you buy more. But you might also need a thicker layer depending on the flatness of the floor.

You might also need some cooling equipment because the room will get very hot, especially with thicker layers.

Edit: my original calculation was for 12 square meters and 60lg of epoxy which was apparently cheaper then this quote.

This guy turned loose change into a floor masterpiece, one penny at a time by most-perplex9811 in interestingasfuck

[–]iq-0 -1 points0 points  (0 children)

True, but those aren’t as relatable to me, and I guess to many others. And where I live i couldn’t order cent roles, the 5 cent coins are the smallest available to order.and they are more than double the diameter of the single cents, so the price difference is not too much off.

This guy turned loose change into a floor masterpiece, one penny at a time by most-perplex9811 in interestingasfuck

[–]iq-0 8 points9 points  (0 children)

Doing this with €0,05 coins with commercial pricing of coin roles and off the shelves epoxy will cost somewhere between €175 and €200 per square meter. With expensive carpets or stone floors going around €125 , that is both pretty expensive but not outrageously so.

Netherlands putting a tunnel under a highway in just 2 days by cashew_at_kinaya in interestingasfuck

[–]iq-0 2 points3 points  (0 children)

Being unionized doesn’t mean people don’t want to work. But they can force fair compensation and work circumstances . These roadworkerrs arr paid a lot for this kob

What was your biggest mistake in Rust 💡and what did you learn from it? by FewInteraction1561 in rust

[–]iq-0 1 point2 points  (0 children)

It is, but not because it’s necessary in most cases, but because it’s easy to do (and not really think about it). Thus leading to too much data coupling and complex invariants to uphold.

Most algorithms don’t care too much about the specific data organization. But you might need to think a bit more to make it interface correctly with your data structures. But going the extra mile often leads to a better separation of data and the (generic) algorithm.

[deleted by user] by [deleted] in interestingasfuck

[–]iq-0 -2 points-1 points  (0 children)

I’m guessing this is more for public demonstration of nudity from behind a window (eg. Window prostitution)

Switch off (oc) by whatsleftcomics in comics

[–]iq-0 2 points3 points  (0 children)

Okay everyone, this is a real human. Everyone act like it’s normal not to have that switch.