jermo

4 tahun yang laludiscuss

Chess is only in chaos because Carlsen did not provide any details and remains quiet. Hence all the speculation.

4 tahun yang laludiscuss

In his full stream he went into more details (summary https://www.reddit.com/r/chess/comments/x7yzee/comment/inj3c...)

"non-technical example of people using signals when players leave the board (in the bathroom, over a balcony etc) and in technical ways suggests that certain earpieces could pass checks or potentially other small devices"

jermo

5 tahun yang laludiscuss

Works in MiniHack on iOS (unofficial)

jermo

5 tahun yang laludiscuss

That is a link to Chinese satellite launch mission. Would the booster even be noticeable in the US at aircraft altitude?

jermo

5 tahun yang laludiscuss

A lot of projects publish to Central from cloud CIs. That means that private keys are stored in config/secrets. It is debatable whether that makes the artifacts more reliable since you have to trust the CI.

jermo

6 tahun yang laludiscuss

Would like to start using Wren though issues like this put me off: "Stack corruption" https://github.com/wren-lang/wren/issues/761

Using older and more established languages seems less risky.

jermo

7 tahun yang laludiscuss

Matthew Walker's "Why We Sleep" Is Riddled with Scientific and Factual Errors https://guzey.com/books/why-we-sleep/

jermo

7 tahun yang laludiscuss

There is in Gradle 5.1+ but not in Maven, afaik. They are using Maven in their examples, however.

jermo

7 tahun yang laludiscuss

Seems like the Maven registry is susceptible to artifact hijacking.

Say I wan't to install artifacts from two GitHub users. I would have to add these two Maven repositories:

    - https://maven.pkg.github.com/USER1 
    - https://maven.pkg.github.com/USER2

In that case USER1 can publish an artifact with the same groupId/artifactId as USER2 and my Maven will happily install it without suspecting anything.

Another case - someone deletes their GH account and another user takes it: https://blog.sonatype.com/hijacking-of-a-known-github-id-go-...

Docs: https://help.github.com/en/articles/configuring-maven-for-us...

jermo

7 tahun yang laludiscuss

Disagree about being the death of Maven Central - they are different beasts.

- Central has a global namespace of artifacts. com.google.guava is the same for everyone. This will probably stay the default of open-source libraries.

- GitHub Package Registry has a per-user maven repository, so a local namespace (https://maven.pkg.github.com/OWNER). This is likely to be used by companies internally.

In order to use GH Registry instead of Central, I would have to add a dozen maven repositories to my settings.xml. I doubt many developers will be up for that.

Docs: https://help.github.com/en/articles/configuring-maven-for-us...

jermo

7 tahun yang laludiscuss

One of the easiest is jitpack.io which builds and publishes to its own Maven repository

jermo

8 tahun yang laludiscuss

Thought I'd share something I discovered about Json comparison. This simple line also works:

  return jsonObject1.toMap().equals(jsonObject2.equals);

because JsonObject uses HashMap internally which supports equals(). The downside is it would be slower because toMap() creates a copy.

Btw, downloaded java-commons as Maven dependency from JitPack: https://jitpack.io/#blobcity/java-commons

Submissions

Distributed Software Dependency Management Using Blockchain

comments