Would we say that about any other industry? Can you run a film studio if you have never watched a film in your life? Can you run a publishing house if you’ve never read a novel?
For a project like Go, wouldn't it be an option to do one-time iouring feature detection in the runtime startup? Exploits are an issue for the entire OS, not the program choosing to use iouring, yeah?
LLMs can be pretty conmpetent at languages that have zero training data, at least to the extent that those languages use features/ideas that are familiar. I wrote a toy language/compiler and AI can write code for it competently.
/mnt/c is a mounted C: drive in WSL2, that allows WSL2 guests to read/write files on the Windows host.
The mount is fine and speedy enough, but the underlying reads/writes turn into native NTFS reads/writes through Windows. NTFS file API is incredibly slow - high fixed overhead for initial file access.
So patterns like node_modules with many small individual files (or compiling code in general) are much much slower on Windows or WSL2 /mnt/c due to the fixed overhead adding up over a large number of files.
It's a ridiculous problem that has plagued Windows for years.
Outsourcing also fails because it’s a pathological case of adverse selection. The businesses that outsource projects are ones who are organisationally incapable of managing those projects well internally. But, that inability extends to their oversight of outsourcing shops as well.
End result is that many outsourcing firms are borderline fraudulent in the way they treat their customers.
Intelligence agencies use parallel construction to disguise their real methods. Further, more sophisticated methods are reserved for bigger targets. Intelligence agencies aren't running around discussing their methods publicly, most intelligence agency work doesn't result in public criminal charges.
They’ve built a platform and sales pipeline optimized for selling data consulting into highly bureaucratic tech hostile orgs with data privacy concerns. All these factors apply equally to public health programs and the military, so it’s no surprise that they see success in both areas.
To be fair to GitHub, "GitHub" Actions is just Azure DevOps Pipelines wearing a mask. Which I think explains a lot about it's quality as a feature. It was brought in as a rushed copy-paste of the existing Azure DevOps feature very quickly post acquisition.
I have to regularly use Azure DevOps and the whole platform is painful, and now is rotting on the vine. I hear there is internal strife at Microsoft between Azure DevOps and GitHub products.
Devcontainers (I know it's not a full VM, but it's most prominent version of this "isolated development environment" concept) wouldn't fully protect you against this. Github credentials are automatically pulled into the container. If you are using other cloud services that need to be accessed within the container, this cred stealer will grab their creds too.
It would limit the blast radius, which at least is an improvement.
These malicious packages are being caught by the authors, and by automated package security scanners, not just by end users. npm should start setting this 7 day cooldown as default.
Yeah there is some degree of awkwardness created by the interaction, but I think it’s less about needing specific libraries to map well and more about getting a good understanding of what the interop rules are, and what the shape of the underlying generated output actually looks like.
C# interoperability loosens guarantees (particularly immutability) that F# code normally relies on. There are surprising limits that come up in generics because of how they map to C#.
My understanding is the uutils development process involved extensive testing against the behaviour of the original utilities, including preserving bugs.
I think there is also the added challenge that ARM macs are a moving target, and Apple has less than no desire to provide any kind of stability or support for Asahi Linux. Unlike the PC space where laptop manufacturers have to maintain broad compatibility over time, Apple will make future changes that are really awkward for Asahi and will not care one bit because they can do the compat work on their own software.