Malicious VSCode extensions infect Windows with cryptominers
zygo_histo_morpheus @ zygo_histo_morpheus @programming.dev Posts 1Comments 261Joined 3 yr. ago
This article uses the term "parsing" in a non-standard way - it's not just about transforming text into structured data, it's about transforming more general data in to more specific data. For example, you could have a function that "parses" valid dates into valid shipping dates, which returns an error if the input date is in the past for instance and returns a valid_shipping_date type. This type would likely be identical to a normal date, but it would carry extra semantic meaning and would help you to leverage the type checker to make sure that this check actually gets performed.
Doing this would arguably be a bit overzealous, maybe it makes more sense to just parse strings into valid dates and merely validate that they also make sense as shipping dates. Still, any validation can be transformed into a "parse" by simply adding extra type-level information to the validation.
Why do you think it's a bad idea? Both you and OP are in agreement that you should validate early, which seemed to be what your first comment was about. Is it encoding that the data has been validated in the typesystem that you disagree with?
If you want to test windows programs on linux, you're probably going to want to do that in a virtual machine, or even a spare computer just for testing on windows. Depending on how much you need to use excel, a virtual machine could be a good option for that as well, but if using Microsoft Excel™ is a big part of your job, maybe it makes more sense to just stay on Windows for work at least
fd is a lot faster than find. This might not matter if you're searching through small directories but if you're working in a very large project it does make things a lot nicer.
The US government recommending memory safe languages has really given people worms in their heads
Always squashing is a bit much for my taste, sometimes the individual commits have interesting information! Text from the MR in the merge commit is great though, maybe I should see if we can set that up with gitlab and propose that we start doing that at work.
Putting the message in git puts the information closer to the code, since the pr isn't in git itself but instead the git forge. You can for example search the text of git messages from the git cli, or come across the explanation when doing git blame. I sometimes write verbose commit messages and then use them as the basis for the text in the pr, that way the reviewer can see it easily, but it's also available to anyone who might come across it when doing git archeology
You should start getting it from CD-roms, that shit you can trust
You have the option of piping it into a file instead, inspecting that file for yourself and then running it, or running it in some sandboxed environment. Ultimately though, if you are downloading software over the internet you have to place a certain amount of trust in the person your downloading the software from. Even if you're absolutely sure that the download script doesn't wipe your home directory, you're going to have to run the program at some point and it could just as easily wipe your home directory at that point instead.
It's fine to want a gui debugger and I want to clarify that I'm not actually trying to persuade you to use gdb! My actual advice would be vscode (or other ide) with it's gdb/lldb integration which allows you to debug from your ide in a gui-oriented way.
I do however think that you're wrong about how hard it is to learn gdb. I learned to use it not that long ago and it doesn't take "1 month". Using gdb on a basic level is actually not particularly hard, and I can recommend this talk for anyone actually curious about learning gdb. It's just 15 minutes, but the same speaker has done a couple of other talks on the same theme that are longer if you want to learn even more, you can probably find them in the recommended videos sidebar.
What I actually think is the case is that learning gdb takes a bit more mental effort because it's a different paradigm than gui debuggers, and a lot of things aren't intuitive. If you're prepared to be a bit uncomfortable and lost for an afternoon, and maybe even flip through the official document for a bit you can be "good enough" at gdb in less than a day.
Gdb is also more powerful than most gui-only editors, because you can do scripting in gdb. For example you can execute an arbitrary series of gdb commands when you hit a certain breakpoint which can be really useful in some circumstances. My preferred way of debugging in linux is actually to both have a gdb window that I can enter commands in so I can do more scripting stuff if I want to, and also some extra bells and whistles for viewing source code and setting breakpoints etc. I edit in vim so I use the termdebug plugin that comes bundled with vim, but use whatever exists for your editor if you don't use vim yourself.
I like this quote
and just the other day I caught myself wondering who will clean out my Inbox after I’m dead
I think that it's bad to become too dependent on a certain tool, especially if that tool is owned by microsoft, although in this case your dependent on various microsoft api:s anyway so that's probably a bigger problem in that regard. Experimenting with programing without Visual Studio is a good idea and will probably teach you lots of things about yourself and microsoft api documentation in this case. If microsoft has built a system that is so impractical that you need visual studio to navigate it, that's a pretty bad sign for the health of the microsoft ecosystem, but that's not exactly surprising anyone
Pathologic (2005). Been wanting to play it for years but been a bit too intimidated because of the reputation it has, but finally gave it a try and am about halfway through the Bachelors' route.
It's actually not as bad as I had made it out to be. The core loop of resource management isn't too difficult and pretty engaging. You famously spend a large portion of the game walking between places but because of the stakes imposed by the resource management and the constant potential for sweet deals in the hobo economy, you're always engaged. The game isn't afraid to throw unfair feeling scenarios at you, but if you're not above reloading and retrying a couple of times they are very possible to deal with, at least so far. I have a decent stock pile at the moment, so I might actually fuck around and not reload next time I catch the plague.
The game does a lot of things with the medium that very few other games have even attempted and is absolutely worth a play. It also has a very unique and compelling setting, Morrowind is probably the closest example I can think of in terms of world building even if the setting in Pathologic is relatively speaking more grounded.
If you haven't heard of it before, Quinns article in rock paper shotgun is a good introduction and what first made me interested in the game when I first read it maybe a decade ago. Since it was written, Ice Pick Lodge (the studio behind the game), has released a remastered version of the first game with better translation, released a sequel and announced a second sequel, both of which are retelling of the story in the first game from the point of view of one of the three available protagonists in the first game.
Based on the games you listed, Morrowind! One of my absolute favorite old RPGs. Out of the elder scrolls games it's the one with the strongest world building, which paints a nuanced picture of a very strange and compelling world. Compared to Skyrim in particular it's more like a pen-and-paper rpg and less like an action game which gives it a higher barrier to entry. In particular, a lot of people find the combat frustrating at the start.
The modding community for the game is very active to this day. To begin with, there's OpenMW which is a re-implementation of the engine that runs natively on Linux and contains various bug fixes and quality of life features. There's also a fork of it, tes3mp, which allows you to play Morrowind in multiplayer!
There's also Tamriel Rebuilt which is a modding project that adds the mainland of Morrowind (the base game just takes place on an island called Vvardenfell) and adds maybe another game worth of content. Theres also Project Tamriel which has one project that recreates Skyrim based on Morrowind-era lore and one that recreates Cyrodiil based on Morrowind-era lore.
"algorithm" just means "set of instructions", it is a bit unfortunate that it's become the default term for talking about this kind of thing.
I think that youtube wants to maximize watch time, if you just watch subscriptions you might get "done" at some point but with the home feed you can just keep watching forever
One of my acquaintances has actually made a small game in Odin (Cat and Onion) and after that written a book about the language (Understanding the Odin Programming Language). I don't know much about Odin myself but from what I've gathered there isn't that much quality documentation or that many good tutorials etc. so it can be a bit hard to get in to the language, which is why he decided to write the book.
Most of the music I listen to fits under the alternative umbrella. While I never actually spent a lot of time directly on /mu/ that type of online music culture circa ten years ago has been very influential on my music taste. A couple of years ago I also had a big emo phase, in particular 90's emo and 10's emo revival. I also listen to a lot of punk and post hardcore.
People have scrutinized what chatgpt for example is allowed and not allowed to say by its programmers. I think the difference here is that there is lower hanging fruit to grab because the Chinese state has a different relationship to censorship than a lot of other states.
I also associate Sinophobia with being prejudiced against Chinese people or Chinese culture, however being critical or skeptical of the Chinese state is actually perfectly reasonable. I'm also very critical of the US state and this isn't because I'm "americaphobic" or some nonsense.
Please explain how this is Sinophobic.
Don't think it has anything to do with electron. VSCode is just the largest editor that people install extensions for, so it's what makes the most sense to write malware for. If vim was more popular, I'm sure there would be more crypto mining extensions for that (I wonder how many there are? Surely more than zero?)