Posts by that one in the corner 5494 publicly visible posts • joined 9 Nov 2021
Indeed - BBC Micro: "video doesn't work, I've plugged in the aerial lead solidly, it should work".
How the heck they got the monitor lead (DIN, RGB) rammed hard enough onto the BNC (Video Out) socket, so that it was, indeed, solidly in place, I do not want to know.
Luckily, DIN leads can be replaced and the BNC on the back of the Beeb didn't seem to have suffered at all.
I like the realism of the example they use - in the first table, the "what others think (my role is)" column has practical actions in it, whilst the "what I think (my role is)" column has wishy-washy talk about having visions.
Perhaps the Atlassian team working on CLOUD-6999 has been having these visions for so long now that they've totally lost touch with reality: "Why do customers keep asking for updates, my log book shows we've only been working on this for 29 days!". Ah, you have only been *lucid* for 29 days; that's ok, we'll just do a non-committal update on the ticket and you can - oh. Yes, that *is* a lovely giraffe. Nurse!
PS: for anyone wondering why I specified USAsian Conservative, aside from the obvious (MS being from the US), a UK Conservative word list would mostly be variants of "bwaaa", which were all covered by the first suggestion, alongside " aaargh"[1]
[1] thank you; the chips are ready but fish will be five minutes
I don't doubt there is - but what the blazes is it and why would it need an MS account?
"Language-neutral words" - such as "123" or "aaargh" (unless you really do want more boiling oil, of course)?
Is it supposed to mean "Neutral language", that is "such words which do not (explicitly or implicitly) take a particular (ideological) stance or a point of view" - in which case, if you don't have an MS account all the error messages will be racist, sexist and staunchly (USAsian) Conservative?
Or, FSM Preserve Us, it only communicates using Emojis?
The preprint paper is restricting itself to "community efforts", whilst StepSecurity (disclaimer: I'd not heard of them before this) appears to be a company still starting up: the FAQ referring to " early adopters" and "All of our tooling and SaaS services are currently free".
So Step Security is simply outside the purview of the report and hence the article.
Now, whether this means that the report is too exclusionary to be useful to the general open source consuming population is another matter.
Yes, the researchers are aware of the problems: and I've been reading all of the criticisms in the comments as agreeing with the researchers and going into detail about how these problems manifest themselves.
The problem is not that the researchers are unaware but that the OpenSSF don't seem to be aware of these problems (they do admit that their scorecards only works for Github, but don't allow for any of the cases where Github is used but isn't the be-all and end-all). Yet OpenSSF are apparently[1] the only people who are trying to provide a way to examine package security.
I don't want to give the researchers a free pass, however: the preprint abstract talks about confirming the applicability of these Scorecards, instead of examining their applicability, and the discussions and conclusions both uncritically assume (come very close to stating) that the OpenSSF product is Absolutely The Bee's Knees.
[1] If you just rely on what the OpenSSF say, in the Github repo for their Scorecards and their distinctly corporate website. The preprint does admit that other offerings have been made in this area.
Hmm, one thing that I like to see in any open source related site/repo is the section that lists other projects with similar/related goals, especially when comparisons are given. Shows a bit of rigour and knowledge of the field - shame OpenSSF don't have one.
(presumably you mean by copyrightable by the author of the sources that were compiled)
This isn't (hasn't been) clear-cut.
IIRC there have been programming language compilers where the compiler writers claimed copyright on the results of compiling your code (and nowadays you may see a clause specifically stating the opposite, otherwise who would bother using your compiler). Tools like GNU Bison have to explicitly state you own the results of compiling your own inputs, because alongside the encoding of the state machine derived from your input is a load of template code to evaluate that encoding.
Although the situation was rather messy, even in 2016 there was a claim on the output of a CAD program: http://www.maw-law.com/copyright/output-copyright-protected-software-program-protected-copyright/
Which is the assumption everyone is making here, even though the linked media release only says "potential use of new technologies such as distributed ledger technology" - note "potential".
Although, what would be the alternative? Some crazy system with plastic cards that can record how much "money" (tied 1:1 with the Oz dollar?) is "held" on the card at the moment. Machines at the till could "debit" some money from your card and "credit" it to the shop's.
Or vice versa if you handed over some cash. Maybe even "top up" someone's card after they've done some work for you!
No "crypto" in sight (well, just the proper cryptography that lets you secure access to the cards).
> we need rules (laws) that make corporates fit their sales channels to human expectations and understandings
Back in the Good Old Days we used the concepts of Fit for Purpose and hence Fit for Sale, with accommodation for a reasonable lifetime of use.
Easy enough for fork handles and broom heads, but seemingly ignored by *all* parties to the sale when buying the shiny shiny.
Now, if we could get the buying public to read the side of the box before purchasing and then demanding a contractually enforceable Service Level Agreement then you'll find that we already have laws that can be applied for consumer protection.
But sure, demand new laws before exhausting the existing ones - won't anyone think of the poor starving politicians and the deeply impoverished legislature!
Wireless music played in more than one room! Amazing, completely unlike me and the missus, each with our own tranny.
Oh, it is all about us both receiving the same music and we choose what that will be? So, totally unlike the (rather illegal but boys will be boys) FM transmitter bought from Tandy and plugged into a cassette deck back in the 70s? Okay, that wasn't shared with missus back then and it went a bit further than the next room - hey, wireless sharing with next door, that is surely good enough for its own patent!
And then I realised that I know nothing about modern vehicle terminology and found out that the above two comments should have referred to the Tesla "Semi" not the "Cybertruck".
Hmm, the charabanc is parked a bit away; shall need the velocipede to get there. Toodle-pip.
> Self driving is absolutely not a "relatively simple task", it is a very simple task compared to developing a robot that can replace human manual labor.
So you *do* think that self-driving absolutely *is* a relatively simple task, compared to a humanoid robot! Which is the comparison that Gary Marcus made.
Yet you say you don't, then you say you do, but you don't.. Norman, co-ordinate (clunk)
Unless it is being used by one of those "must get a new copy from the 'Net every build" setups, a stable library may still only see a very few downloads, when new projects grab their copy to go into the local repo.
Though if you are including in "downloads" polling for updates, hopefully that would put the numbers up a bit.
Just after the deadline clicks over, new ads for GitLab start to appear:
"Every single GitLab hosted project shows activity! We only attract the most active and alert coders, not like the slackers you get infesting <name of competitor>. Come and join our fast-paced community."
Okay, I'm lost. Clearly I don't understand when finance and electricity mix. I'll spell out what I think is going on and hopefully someone better informed can point out where I lost the plot:
You know you are going to use massive amounts of power during July, so ahead of time you agree to bulk buy at a nice low rate. Come July, you decide not to turn on all the lights so you end up not pulling as much power from the grid, but what you do use is paid for at the agreed rate.
But then you somehow pump the electricity you haven't used back up the wire, "providing power back into the ERCOT grid during periods of peak demand"?
How does that happen? Where is the electricity being provided to ERCOT come from? Regenerative braking from the PC case fans?
Surely all they were doing was *not* pulling power - and then asking to be paid extra for *not* switching everything back on again?
Nice power grid you've got 'ere, Guv, shame if it were to overload in all this hot weather, know what I'm saying?
is under your control and still *is* your package, but how does it help with typosquatting?
Unless, perhaps, each "critical" package also has packages with all the close-match typos auto-generated (these containing whatever is the equivalent of "this package deliberately left blank") and also put under your 2FA? Wild guess, that isn't happening..
Don't forget to read about Spain, France, Normans, Romans, Vikings, and, well, pretty much everywhere, on the whole.
If you think this sort of behaviour is to be deplored, stick to deploring what is going on *now*.
'Cos if you want to try to make yourself seem clever by making political hay of the past then first demonstrate that *your* antecedents are squeaky clean (hint: they aren't, your history is as blood soaked as everyone elses')
>> "everything is in the digits of pi somewhere"
> This hasn't been proven.
Yet we do seem to find pretty much everything we could wish for in Pi *
https://m.youtube.com/watch?v=dET2l8l3upU
Matt Parker "I found Amongi in the digits of pi!"
* Damn fine cherry, for preference
Preach, Brother.
Like many of these current linguistic idiocies, it is used by people who want to shove extra words in, so they sound oh-so-clever (e.g. Management Speak) but only coming out sounding like idiots.
Similarly, wanting to use long words when the short one will do: "soon" does the job, "momentarily" - what the heck does that actually mean?
My current tooth-grinder is "second of all". One gets the distinct feeling that these people have heard the usage "First of all ...", have absolutely no idea what it means, have no ability to find out what it means, but have spotted another chance to bung in some extra words and make themselves sound clever to their fellow knuckle-draggers.
(Cue all the people repeating "that is how language works, it changes" as though they have just found out that Middle English wasn't the same as Modern English, Woah Man, can you believe it!)
PS
Get OFF my lawn! Gah, now my Horlicks has gone cold.)
Well, a comment that isn't a reply to - or contains clear references to another comment - can fairly be assumed to be referring to the article.
"The entire crypto scam" - there are more types of scam than the ponzi!
https://www.techtarget.com/whatis/feature/Common-cryptocurrency-scams
"Ponzicryptoscam Coin" - well duh, what else is going to be said on an article that *is* about a ponzi scheme!
Then you post a ref to another comment from *months* ago where someone expressed their own opinion (see back to "anyone can have an opinion")! If *that* was the discussion you wanted to have, but decided (reasonably) that no-one would spot your posting on an old article, then you had every opportunity to put that into your first comment here. Hmm, wonder why you didn't...
Nope, your "explain the logic", as originally put, is still - well, it is a strawman, isn't it?
Plenty of people do consider cryptocurrencies to be a scam - just not necessarily all ponzis as you suppose.
has a fun reply to someone asking if they can have a copy of an infected file to examine: the answer was basically "No, not ours to distribute" and cheerfully followed by "If you want to research the corrupt DXE driver, you are welcome to search your own telemetry for similar samples".
In other words, "Here is what the turd looks like, now go look through your own dungheap, you'll probably find one like it."
But glad to hear that the likely infection route is the "evil maid attack scenario" so I'm not likely to have this malware. Oh, a cuppa? Very thoughtful, Mai Ling, let me hold that duster.
Confessing ignorance here, but how does that work?
I get an unexpected email with an ISO attached, so I immediately save the attachment to a local drive, right-click and mount it as a new drive letter, open a file browser to that drive and start double-clicking on everything in sight? And never question why the purported sender of the email has suddenly chosen to do things this way when they normally have trouble attaching just one JPEG?
Even if your box automounts the ISO (mine doesn't and I don't recall telling Win10 not to - maybe I broke something?) isn't this still odd enough to warn people?
Yours, possibly with excessive in humanity, etc
From earlier article:
"The app debuted in 2017 and by July 2020 had been downloaded almost 10 million times, though it was only used actively by about 1,600,000 people that month."
So that is ten million times a buck fiddy - assuming that everyone with the app takes up the offer. Although I'm guessing that fifteen million dollars still isn't much of a deterrent.
That is the beauty of any format based on plain text and markup.
I'd even suggest sticking with 7-bit ASCII, to avoid any of the problems with it-looks-to-me-like-a-letter-l-but-it-is-really-three-overlaid-codepoints from Unicode. You can even have clarity with emojis, no more guessing when the file says \emoji{flag-malaysia}.
Oh, I like that.
You get the mugs^^^^investors putting in more money for each cryptocoin up front: no need to wait for any actual trading in some silly public market, you can see the price of coins rocketing immediately! Here, would you like to buy another? Oops, just gone up again!
