HackerTrans
TopNewTrendsCommentsPastAskShowJobs

jolux

no profile record

Submissions

Ruby Central's Attack on RubyGems [pdf]

pup-e.com
710 points·by jolux·10 mesi fa·249 comments

comments

jolux
·mese scorso·discuss
Claude Code uses Bun.
jolux
·mese scorso·discuss
Rust is technically older than Go, but who was actually using it when Go 1.0 came out in 2012? Rust 1.0 wasn’t until 2015.
jolux
·2 mesi fa·discuss
> I think I said named branches, but that is definitely what I mean

I think I misread you, because you were talking about git vs svn in a way that made it sound like jj was a step backward from git as regards branching, and I got confused.

> I often work on something and then switch away to something else. it might be a week before i get back to it, and the name of the branch is a clue as to what the heck I was doing.

Right, but you can still name your branches with bookmarks, you’re just not required to. Personally, I tend to use commit descriptions more than bookmarks to keep track of what I’m working on, but this is a personal choice.

> Other people often need to check out a branch I'm working on to help. How does anonymous branching help anyone except a solo developer?

It’s just nicer as a local workflow, to me at least? I can create throwaway branches without having to come up with a name for them. I end up creating many, many more branches than I did in git as a result, which helps me keep my work better organized and my changes more focused when I submit them for others to review (which at least on GitHub, requires a bookmark of course). This is ultimately psychological because obviously I could just make up a name for the git branch, right? But it makes a big difference for me!
jolux
·2 mesi fa·discuss
Totally fair :) personally I used to be a git wizard and I am relieved at how much about it I’ve been able to forget since learning jj, but I understand not everyone has the same experience.
jolux
·2 mesi fa·discuss
Yes, that describes me at both jobs I’ve had since learning jj. Hence why I asked for specifics: I’m genuinely curious what other people struggle with, partially because I’d like to help them if I can, and partially because it gives me a better understanding of common pitfalls which helps when teaching other people.
jolux
·2 mesi fa·discuss
There’s nothing stopping you from using separate changes to emulate the staging area if you want.
jolux
·2 mesi fa·discuss
Also `sl absorb`.
jolux
·2 mesi fa·discuss
I assume you mean named branches (bookmarks in jj)? Because anonymous branches in jj are trivial: you just `jj new <parent_change_id>` and you have a new branch.

Bookmarks aren’t that bad either IMO, especially with the recent addition of `jj bookmark advance`. Curious if you can say more about the particular difficulties you found keeping them up to date?
jolux
·2 mesi fa·discuss
What do you find insufficiently minimalistic about Erlang? It’s not exactly a shaggy dog of a language.
jolux
·2 mesi fa·discuss
Uber has been profitable since 2023.
jolux
·2 mesi fa·discuss
Rust originally came with a green thread library as part of its primary concurrency story but it was removed pre-1.0 because it imposed unacceptable constraints on code that didn’t use it (it’s very much not a zero cost abstraction).

As an Elixir + Erlang developer I agree it’s a great programming model for many applications, it just wasn’t right for the Rust stdlib.
jolux
·3 mesi fa·discuss
Cmon, this is the guy that was running a shady online casino which was tanking Cloudflare’s IP reputation, completely different.
jolux
·3 mesi fa·discuss
This is in part because those countries have been historically reliant on the US for their national defense…
jolux
·4 mesi fa·discuss
Huh, interesting. Looks like they were indeed quite different until the Mk3 in 2012
jolux
·4 mesi fa·discuss
It has found actual reproducible SQL injections for me as well as XXE vulns.
jolux
·4 mesi fa·discuss
Sonarqube did not flag public fields as a security issue by default the last time I used it — however it has found several real vulnerabilities for me before.
jolux
·4 mesi fa·discuss
You could definitely buy the Focus in the US.
jolux
·5 mesi fa·discuss
No point. Claude Code with skills and subagents is plenty. If they would stop breaking it constantly it would be fine.

The bottleneck has not been how quickly you can generate reasonable code for a good while now. It’s how quickly you can integrate and deploy it and how much operational toil it causes. On any team > 1, that’s going to rely on getting a lot of people to work together effectively too, and it turns out that’s a completely different problem with different solutions.
jolux
·5 mesi fa·discuss
I think they just posted the link they log into. The site is ui.com or store.ui.com.
jolux
·5 mesi fa·discuss
Checked exceptions are bad because people just catch them and rethrow RuntimeException. Proper errors as data would be much preferable.