• 0 Posts
  • 66 Comments
Joined 2 years ago
cake
Cake day: July 4th, 2023

help-circle

  • An issue I’ve seen brought up in the open source community is that they have audits that look at the number of untriaged issues and time to resolve serious issues that their funding depends on.

    I’m in software, but not open source, so it seems like they don’t have someone aligned with their team who they can sit down and say “either we need more resources, cut scope for new features, or accept quality / security issues coming up” to, its kind of this weird game of politics they end up needing to play to get any kind of funding for full time maintainers.

    That’s the main reason they can’t just ignore issues that come up in their backlog, especially security ones.



  • Security vulnerabilities are different, especially when they also put a 90 day disclosure period in it which is more severe for a security exploit.

    That disclosure bit, not in the article, is really what tipped this all over the edge. If it was just hey, here’s a bug then its really just flooding the backlog for the maintainers who need to triage that. Disclosures are often used so people are aware that they’re using libraries that the maintainer has refused to patch, but in this case its really just holding the maintainers hostage so they end up wasting their time going through irrelevant issues.

    Also, many of these libraries get security audits to make sure they are actually triaging and working through their backlogs, so could lose actual funding they get.

    Ideally, they would either use their supposedly capable and powerful AI code gen to just make a fix and send over a patch, or at least use LLMs on their own end to triage the issues and only send over the most sever X periodically.







  • Idk, I was raised Hindu, and the swastika is a fairly common icon and is perfectly reasonable to use but if I’m presenting it in a public context, I understand that I may need to clarify how its being used to people who are not familiar with the specific cultural context in which I’m using the iconography.

    He’s not doing that, he’s just like I thought it was a funny skull, and it seems like he was made aware of it before hand, didn’t really get it with any intent around the historical context, and never thought to get it covered up.

    I’m not saying he’s a secret Nazi, but I do think he’s just careless with his public image which has real repercussions as a politician on a national stage. Its not even about what other skeletons he has in his closet, its has his campaign team even done its due diligence vetting him and having proper communication strategies around potential scandals that may arise.

    No one’s perfect, but part of doing politics professionally in a national scale means taking the job seriously and running your team professionally. It doesn’t matter what your policies are if you can’t develop any influence to actually push your ideology. Otherwise you’re just one vote.

    Nancy Pelosi made a good point about AOC when she first joined and tried to aggressively push for policies, she has her agenda and cast her one vote which is all the political power she has. Now that’s not to say you need to bend the knee completely, but AOC has since been able to develop and leverage political pressure from the general public through a well curated personal brand by asking useful questions and running personal brand and her campaign in a serious intentional way. From what I’ve seen of Plattner, I don’t see that coming from him.


  • Say what you will about Hasan, I think his take on the tattoo is spot on. Regardless of whether or not he has or had Nazi sympathies, it shows a just complete incompetence in how the campaign was run and he’s just a liability to progressive movements.

    If he isn’t going to take his campaign itself seriously. How you present yourself and are perceived in public matters and affects your ability to develop coalitions to push through legislation, especially on a national scale as a senator.

    If I were a Maine voter, I would hold my nose and vote for him, but the next election cycle, he’s got to go unless he really shows some maturity in how he runs a national campaign within the first year. Otherwise, start looking for and pushing a different candidate for the next election cycle.



  • It doesn’t. It costs money to skip a lot of the effort and have someone guide you through a curriculum and give you direct guidance and feedback on how to get that knowledge.

    I have an Engineering degree, everything I learned there could absolutely be learned by someone curious poking around on the internet for videos, papers, and course slides that you’ll probably need to read alongside a wiki page. They tend to come up pretty quickly once you’re familiar enough with a field to start investigating one level deeper from a basic high school education.