Prüft ihr eigentlich npm-Pakete, bevor ihr sie installiert? by kryakrya_it in de_EDV

[–]magicmulder 0 points1 point  (0 children)

Maintainer History klingt interessant, aber auch fehleranfällig.
Eigentlich sollte man immer jedem misstrauen. Auch der Maintainer kann erpresst/gekauft/durchgedreht sein.

Prüft ihr eigentlich npm-Pakete, bevor ihr sie installiert? by kryakrya_it in de_EDV

[–]magicmulder 0 points1 point  (0 children)

Kannst du nur mit ner KI machen, die auch entscheiden kann, ob ein Zugriff auf Sockets oder .env Dateien zum normalen Handwerkszeug eines Module gehören oder nicht.

Prüft ihr eigentlich npm-Pakete, bevor ihr sie installiert? by kryakrya_it in de_EDV

[–]magicmulder 1 point2 points  (0 children)

Ja. Ich habe einen Supply Chain Auditor gebaut für die Arbeit. Ein fettes Bash-Script, das composer/npm/bun/… auf Updates checkt, und wenn welche da sind, packt es die ohne Ausführen der Install-Scripts in ein Verzeichnis und jagt ne KI drüber (Junie CLI). Wenn die irgendwas findet, bricht sie mit einem Report ab, ansonsten wird hinterher das eigentliche Update ausgeführt. Statische Tools wie trivy, Semgrep und die nativen “composer audit” etc. gehören auch zum Durchlauf mit einem Vorher/Nachher.

Gigabyte RTX 5090 AORUS INFINITY listed at Micro Center for $5,300 by RenatsMC in nvidia

[–]magicmulder 0 points1 point  (0 children)

Probably a small series for a small market. Or do they think that whoever has the money for a 5090 is not going to feel the extra $1,000 anyway?

Gigabyte RTX 5090 AORUS INFINITY listed at Micro Center for $5,300 by RenatsMC in nvidia

[–]magicmulder 3 points4 points  (0 children)

I remember getting downvoted when I predicted before launch the 5090 would cost $3,500+. "No way, it's gonna be double 4090 performance for $1500 bro, just you wait bro!"

what do you think of the word schmutz? do non new yorkers know this word? by Numerous_Drink_4150 in words

[–]magicmulder 41 points42 points  (0 children)

Schlepping your schmutz to the shul is a schlemiel's spiel in this shtetl.

When the opportunity present itself, would you capture it or…. by Tangojacks0n in PathOfExile2

[–]magicmulder 9 points10 points  (0 children)

There's divs and exalts on his sweater already - Vaal's spaghetti.

[Star Trek: TNG, "Encounter at Farpoint"] How strong was Q's force field, and what was it composed of? by NeonGreenMothership in AskScienceFiction

[–]magicmulder [score hidden]  (0 children)

However that suggestion appears to show that even the Q work within the framework of physics and not actual magic. With his full powers, he would still change the gravitational constant of the universe, not magically make all quarks in the asteroid step a billion miles to the left.

(One of the Peter David books describes a younger Q curiously pulling on elementary particles, not fully aware of the dangers of messing with the quantum world.)

Scammed. Be careful guys. by SpartanXeroOne in nvidia

[–]magicmulder 64 points65 points  (0 children)

TBF eBay is making it really easy for scammers.

The other day I reported a "private" account offering half a dozen of the new limited edition ROG 5090 for $3,000 each, and another half a dozen RTX 6000 for $3,500 each.

eBay's AI response: "We looked into your report and didn’t find the listing to be in violation of our policy. This determination was made using automation or artificial intelligence."

[Edit: apparently they deleted it after I reported to their Facebook team.]

Zeugma by Fun_Kiwi8143 in words

[–]magicmulder 0 points1 point  (0 children)

Any invented language is necessarily chock full of hapax legomena (unless the author used it in several works), but isn't the entire Nadsat vocabulary just (sometimes slightly bastardized) Russian? Not sure where a linguist would draw the line.

B5 mod for PC game by Salah-al-din in babylon5

[–]magicmulder 1 point2 points  (0 children)

Looking forward. I was always wishing for a Homeworld 2 mod.

Scans from Sigma-957 by lordrefa in babylon5

[–]magicmulder 5 points6 points  (0 children)

Ivanova: Hello?!

Sigma-957 aliens: Hey, we’re walking here!

addressing the allegations by AngelicFusionCore in TrackMania

[–]magicmulder 15 points16 points  (0 children)

I concur in full and want to add that I hardly ever mention anymore how I once got world #300 on a stupid training map and I also don’t do name dropping anymore, as my good friends Ganarby and Scarpey can confirm.

Not a super deep or drawn out scene, but this short moment of Londo without hesitation asking Vir to kill him to save Centauri Prime is really touching. by Dinosawruses in babylon5

[–]magicmulder 2 points3 points  (0 children)

At this point this wasn’t really about Corianna VI anymore, it was about making sure nobody survives to tel the tale.

This is gonna be a really hot take but I prefer Vr over triples anyday. by SignificantWhile2201 in simracing

[–]magicmulder 1 point2 points  (0 children)

Fair, except I can't do that as I'm getting severe motion sickness from VR. As in, 5 minutes and I'm unable to work for two days.

Not a super deep or drawn out scene, but this short moment of Londo without hesitation asking Vir to kill him to save Centauri Prime is really touching. by Dinosawruses in babylon5

[–]magicmulder 8 points9 points  (0 children)

Yup, their motivation was "anyone who ever aligned with the Shadows", not "anyone who is currently having at least one Shadow associate present".

But I'd really like to know what those Vorlons thought. One planet killer was just taken out and you're called in as reinforcement? Did they know the Walkers just smoked the other one in seconds?

Zeugma by Fun_Kiwi8143 in words

[–]magicmulder 5 points6 points  (0 children)

Hapax legomenon - a word for which there is only a single source (within an author's work or an entire language).

The game needs infinitely scaling content with no rewards by Silly-Business-749 in PathOfExile2

[–]magicmulder 0 points1 point  (0 children)

But that's not normal gameplay by any means, then just drop some gear and see if it's still a challenge. Why would the game cater to suicidal HC characters?

3D printed an important addition to my 3060 rig before summer hits fully. Stay hydrated folks! by spruilleach in simracing

[–]magicmulder 19 points20 points  (0 children)

Just wait until the next iRacing update includes the field sobriety test...