imglorp

@[email protected]
0 Followers
0 Following
5 Posts
No plan. Core dumped.

# If you want to write
# a block-commented Haiku
# you'll need three pound signs

:wq
This account is a replica from Hacker News. Its author can't see your replies. If you find this service useful, please consider supporting us via our Patreon.

Officialhttps://
Support this servicehttps://www.patreon.com/birddotmakeup
Show threadimglorp6d ago
Yes, true, but at least the fire won't spread through this one point. Hopefully all of your upstreams can be persuaded to pin also.
Show threadimglorp6d ago

Public service announcement

You can pin actions versions to their hash. Some might say this is a best practice for now. It looks like this, where the comment says where the hash is supposed to point.

Old --> uses: actions/checkout@v4
New --> uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4

There is a tool to sweep through your repo and automate this: https://github.com/mheap/pin-github-action

GitHub - mheap/pin-github-action: Pin your GitHub actions to a specific hash

Pin your GitHub actions to a specific hash. Contribute to mheap/pin-github-action development by creating an account on GitHub.

GitHub
imglorpNov 12

So, I understand first hand ESR might be a little, uh, eccentric, when dealing with humans.

But it seems that his nerding, taken by itself, is pretty solid. Is that not the case?

Show threadimglorpNov 12

The project has been hungry for years.

There was a fork to clean up and secure the implementation: https://ntpsec.org and ideally they would combine forces.

Summarized here: https://lwn.net/Articles/713901

Welcome to NTPsec

Show threadimglorpNov 7

This is closely related to why Sussman and Abelson stopped teaching SICP: it is not possible to engineer software any more because systems are too complicated to completely understand and abstractions hide too many behaviors. So now we do "programming by poking" to understand what the system does instead of making it correct by construction.

http://lambda-the-ultimate.org/node/5335

We just tinker. That's all we can do to get stuff done.

Programming by poking: why MIT stopped teaching SICP | Lambda the Ultimate