Readit News logoReadit News
jbrechtel commented on Fix your Ruby environment problems   technotes.iangreenleaf.co... · Posted by u/youngian
mnarayan01 · 11 years ago

  export PATH=./bin:$PATH
Am I the only one who thinks adding this to your login scripts is a terrible idea?

jbrechtel · 11 years ago
No, you're not alone.

To be explicit about why, for others, this means your shell will search for executables in a 'bin' sub directory of whatever directory you happen to be in BEFORE it searches your normal path.

This allows for common commands like 'ls' to be executed from ./bin, if they're present, instead of /bin (from your system).

Once you've done this you've opened yourself up to an attack where you download a zip from the internet, extract it, cd into the directory and type 'ls' and you may have potentially executed something from that zip which you didn't intend to do.

tldr - relative paths in your $PATH is a bad idea.

jbrechtel commented on Notes on the Celebrity Data Theft   nikcub.com/posts/notes-on... · Posted by u/nikcub
lsaferite · 11 years ago
Looks like they still don't have a native Linux client though.
jbrechtel commented on Is TDD dead?   martinfowler.com/articles... · Posted by u/shutton
vinceguidry · 12 years ago
There's a difference between a few people arguing and a controversy. Admittedly, it's a fuzzy difference, but you could also use the degree of controversy as an indication of just how off the idea is. With DVCS, not much, with TDD, you could conclude that the idea needs more development before you can really rely on it.
jbrechtel · 12 years ago
| There's a difference between a few people arguing and a controversy.

Only on average. We are fully capable of being irrational as large groups...

jbrechtel commented on Zero Downtime Frontend Deploys with Vulcand on CoreOS   coreos.com/blog/zero-down... · Posted by u/robszumski
jbrechtel · 12 years ago
I'll ask about the reasoning instead of attacking the decision (since that didn't get a response).

Why not embed HAProxy?

jbrechtel commented on MtGox.com is offline   mtgox.com/?dead... · Posted by u/cjbarber
chii · 12 years ago
well, is it better to have a hacked MVP released in production, or spend forever making it and never actually releasing it and then missing the window?
jbrechtel · 12 years ago
Depends on what the product itself is and from which perspective you're asking the question. At any rate, those are almost never the only two choices...
jbrechtel commented on Neovim   github.com/neovim/neovim... · Posted by u/tarruda
hueving · 12 years ago
>My point lies more in the '20 years' part of the argument, that in all that time we couldn't get these wrinkles ironed out.

Javascript has the requirement of backwards compatibility. The limitation is not technical. It's disingenuous to suggest it's so simple to replace these things or it's extremely naive.

Look at the recent HTTP redirect article for example. Something as simple as redirects have been implemented incorrectly for a long time. Browser vendors are well aware of it, but they cannot change the behavior because it will break every existing site that expects the broken behavior.

You should be more impressed with the things that last 20 years, not embarrassed. It means they were actually engineered well enough to be a good general solution.

jbrechtel · 12 years ago
I don't see tinco saying it is simple to replace these things. Where do you see that? I suspect you're unconsciously framing tinco's position this way...

Another possible way to interpret the 'ashamed' statement is that tinco is simply saying we should be trying harder to move forward when we are using such old technologies with such warts. Why can't we get rid of the warts? We should try harder. Perhaps this is what tinco is saying? I think at least equally plausible to the naive position you're projecting onto tinco...that it's 'simple' to replace these things.

Kudos to Neovim for making the effort! It is certainly appreciated.

jbrechtel commented on Mt. Gox Halts Bitcoin Withdrawals, Price Drop Follows   coindesk.com/mt-gox-halts... · Posted by u/zende
awj · 12 years ago
Do they "accept bitcoin" in the way that many big services do, where they get their payment out of bitcoin and into cash as soon as possible?
jbrechtel · 12 years ago
Maybe, what's your point?
jbrechtel commented on Mt. Gox Halts Bitcoin Withdrawals, Price Drop Follows   coindesk.com/mt-gox-halts... · Posted by u/zende
RyanZAG · 12 years ago
As far as I know, the guys making custom ASICs for mining are selling them to miners for real dollars. I don't think that helps your point much.
jbrechtel · 12 years ago
Why do you think that?

The top sellers of mining hardware that I could find on Google (Butterfly Labs, Advanced Miners, Cointerra) all accept Bitcoin for payment.

Are you referring to some group upstream of the hardware sellers? I'm curious where you're getting this information from...

jbrechtel commented on Code faster with Intellij IDEA live templates   maciejwalkowiak.pl/blog/2... · Posted by u/javinpaul
pron · 12 years ago
Yes, but so what? Sometimes a little IDE love is a lot easier and more productive than changing your entire stack to use a different language/tool. Verbosity is a downside which might be more than offset by other upsides. It might certainly be beneficial to change your stack, but that's usually a very big decision that might have some serious and unforeseen consequences. Verbosity alone is rarely reason enough to make a switch.
jbrechtel · 12 years ago
Why the "Yeah, but so what?" rhetoric?

This is an important point, regardless. Sometimes new projects are started and it's not a matter of switching. Sometimes verbosity, and the things it negatively impacts, are worth switching. That's what.

jbrechtel commented on Why Isn't Open Source A Gateway For Coders Of Color?   npr.org/blogs/codeswitch/... · Posted by u/peter-fogg
lmartel · 12 years ago
Some good points made, but the part about many people in open source getting paid to do it is a stretch. Lots of google insiders have talked about the fall of 20% time (and most 20% time projects weren't open source), and few-to-no other companies offer this as a perk.

I'm all for increasing opportunities for underrepresented groups, but don't discount all the passionate, unpaid work people provide to the open source community!

jbrechtel · 12 years ago
It doesn't have to be explicit "use X% of your time to contribute to open source" to count as getting paid to do it.

When using OSS libraries on commercial products I've found the need to fix bugs or other problems and have sent pull requests with those changes afterwards. Granted not all clients approve this, but I wouldn't describe it as "few-to-no other companies" that allow it.

u/jbrechtel

KarmaCake day245December 26, 2010
About
Developer.

http://www.keithalexanderisreadingyouremail.com

http://www.mobilemagicdevelopers.com

Email: My gmail username is the same as my HN one.

View Original