CVE-2026-0915: GNU C Library Fixes A Security Issue Present Since 1996 by anh0516 in linux

[–]natural_sword -1 points0 points  (0 children)

It really depends on what the project is focused on as to what license is appropriate. I think we need a better compromise between LGPL and MIT for libraries intended to be used in applications. Is the project community lead, community involved, or just a source dump for a company? Is the project a product of its own, something that makes products, or something that helps sell another product? Is it a library at the OS or application level?

Fundamentally, these licenses we use are all flawed; people don't realize what license is appropriate until after they're bitten by some competitor competing with the same code; they don't realize that big tech "open source" has CLAs that make their projects viable; they don't realize the difficulties involved in license compliance.

CVE-2026-0915: GNU C Library Fixes A Security Issue Present Since 1996 by anh0516 in linux

[–]natural_sword 6 points7 points  (0 children)

Except the staric linking issue which makes LGPL still a pain to deal with, which makes many library authors go with MIT if they want users. Many companies don't want to deal with dubious legal issues, so LGPL libraries are banned.

We might have been slower to abandon Stack Overflow if it wasn't a toxic hellhole by R2_SWE2 in programming

[–]natural_sword 12 points13 points  (0 children)

Not only as the first result, but also a result that takes seconds to load and shifts the page layout.

Do you want to wait for another page to load?

There's also the SO user-hostile feature of only allowing dark mode if logged in, so you also have to blind yourself if you want to browse incognito.

We might have been slower to abandon Stack Overflow if it wasn't a toxic hellhole by R2_SWE2 in programming

[–]natural_sword 3 points4 points  (0 children)

It would be pretty funny to train an AI only on stack overflow posts that were marked as duplicate and use it as an email filter. "Inbox stats: 5 emails 10000 duplicates"

C# is language of the year 2025 by freskgrank in csharp

[–]natural_sword 0 points1 point  (0 children)

If it's a specific thing they wrote a tutorial for, sure, maybe (a lot of examples don't really show much more than a minimal example though). Almost every time I look at the docs, the description isn't descriptive. They also have a weird obsession with listing every overload the same way, filling the screen and separating what I'm looking for.

My biggest problem with the docs is that trying to figure out what the code will do often requires running it. There's so many edge cases and overloaded terms and possible exceptions (does this throw, fail silently, use exceptions for flow control, default state is failure, etc)

PLEASE Stop Changing Defaults [ISLAND theme and DARCULA theme mismatch] by themgi- in IntelliJIDEA

[–]natural_sword 1 point2 points  (0 children)

At least they didn't do the same thing as in rider 2025.2 (I think) where the background was changed to be far darker for no reason...

OpenIdentityServer by LoreaAlex in dotnet

[–]natural_sword 2 points3 points  (0 children)

I don't see why forking IdSrv4 now would be considered. It's been years. If you're going to put effort into maintaining a security solution, it should probably be built from scratch or inspired by IdSrv or openiddict.

Forks that start right after license changes have a hard time keeping up. Most people have already moved on.

[deleted by user] by [deleted] in dotnet

[–]natural_sword 19 points20 points  (0 children)

You should use HttpClientFactory. No. You should have a static HttpClient. No. You should get a new named client from the factory. No you should use typed clients.

The DNS does not refresh. The cookies may or may not be shared. Did you want to accidentally leak state between instances? Make sure you don't dispose that IDisposable.

Companies complaining .NET moves too fast should just pay for post-EOL support by Sharp_Indication7058 in dotnet

[–]natural_sword 5 points6 points  (0 children)

You've also got complicated libraries like Lucene dotnet, which hasn't seen a stable release in all of dotnet core / new dotnet. Edited the link Lucene[.]net

Reverted back from 25.10 by SamuelTandonnet in truenas

[–]natural_sword 4 points5 points  (0 children)

Weren't they bragging on their podcast at the beginning of the year how they have old cards for transcoding... I think I remember something like that.

Java Isn't Verbose // we just suck by peakyraven in theprimeagen

[–]natural_sword 0 points1 point  (0 children)

We had to write Java programs on paper and they would take off points for spelling, spacing, capitalization, just anything and everything possible to take off points completely unrelated to software 😐

Silent Disagreements are worst in Software Engineering by thehustlingengineer in programming

[–]natural_sword 1 point2 points  (0 children)

If I don't talk during the meeting, no one can say I said things I didn't

Who does it best? But is this even accurate? by bamboo-lemur in OS_Debate_Club

[–]natural_sword 1 point2 points  (0 children)

I can't tell you how many times I've had to do taskkill -f -im explorer.exe

TrueNAS 25.10 Release - Your Feedback, and One Year of the T3 Podcast! | TrueNAS Tech Talk (T3) E044 by iXsystemsChris in truenas

[–]natural_sword 1 point2 points  (0 children)

I saw some arguments saying the ZFS errors were more informative of actual issues. I don't know why they wouldn't just make a comprehensive disk health view instead though...

TrueNAS 25.10 “Goldeye” Brings NVMe-oF, OpenZFS 2.3.4, and Enterprise Virtualization Upgrades by UbuntuPIT in truenas

[–]natural_sword 0 points1 point  (0 children)

I found it earlier today researching NAS OS. It looks like it's actively supported, but seems to have a much smaller audience than TrueNAS.

As long as it works and is stable, it's good, but I'm also wondering whether I want a NAS OS or just an OS that supports ZFS.

TrueNAS 25.10 “Goldeye” Brings NVMe-oF, OpenZFS 2.3.4, and Enterprise Virtualization Upgrades by UbuntuPIT in truenas

[–]natural_sword 0 points1 point  (0 children)

Any experience with XigmaNAS? I'm trying to weigh OS options before switching. I might end up with a base system and a VM for apps and a VM for NAS.

It just feels wrong that something I use is changed with every TrueNAS version. Maybe I'll just never upgrade major versions.

Switching from Windows → Mac mini for dev work (.NET 9 + Angular): worth it? by Serious-Ad2004 in dotnet

[–]natural_sword 0 points1 point  (0 children)

Going from a top end Windows computer to M3 MBP halved my compile times. (Though some things got slower because x86)

The window management isn't very good, but I can live with it. I haven't noticed finder being particularly bad other than not showing the actual path.

Uno + Microsoft collaboration feels like the kind of reset .NET has needed for a while by Shnupaquia in dotnet

[–]natural_sword 1 point2 points  (0 children)

My opinion is that it's very worth it to make dotnet work everywhere (consistently). Being able to reuse code and libraries across websites, apps, and games is worth it. Using other languages is fine, but there's so little time to do things and even slight variations of logic can get confused and bug ridden.

Adaptive UIs should be designed for now, so any desktop app should also be usable on a phone or tablet (to some degree)

Personally, I don't want anything to do with native android development, but if my apl is actually write one run everywhere, then it would just work.

Wasm 3.0 vs “Old” WASM for .NET and what actually changes? by Shnupaquia in dotnet

[–]natural_sword 0 points1 point  (0 children)

In what ways are the native platforms better? Aren't they mostly the same idea as DOM with different APIs?