Readit News logoReadit News
johnywalks commented on So what’s next (personal news from developer of popular CoreJS polyfill)   github.com/zloirock/core-... · Posted by u/nailer
btown · 3 years ago
From this article, Denis Pushkarev seems to be a remarkably principled developer in a horrible situation, and I admire his commitment to this project. Setting that aside, though, is anyone else alarmed that such a widely used project has exactly one maintainer who is able to push arbitrary changes without review? Especially one already in legal trouble and significant debt, unable to travel, for a project embedded in Fortune 500 e-commerce and (likely) intranet/administrative sites, with an extremely large surface area of used APIs where malicious minified code might easily go unnoticed and is highly difficult to audit?

I absolutely feel for his situation. Right now, the degree to which he could be threatened into allowing a malicious group to push changes in his name should not be taken lightly. Hopefully this article reaches the attention of some of the CISOs at companies who rely on the project, and a path towards a situation where multiple parties have visibility into release management can be explored. And honestly, such a solution might be the best thing to make Denis and his family less of a target.

(In the meantime, pin your core-js dependency, and track https://security.snyk.io/vuln/npm?search=core-js as well as npm audit. Arguably there should be an advisory category for known vulnerable maintenance situation - I'm not sure if such a registry exists. One might say that every open source project is vulnerable in some way, but there's nuance and splash radius to consider here, and core-js does not have much defense-in-depth at the moment.)

johnywalks · 3 years ago
Isn't that the issue though? Nobody cares until it's too late.
johnywalks commented on Show HN: DocsGPT, open-source documentation assistant, fully aware of libraries   github.com/arc53/docsgpt... · Posted by u/sadrobin
eyegor · 3 years ago
This is a cool idea. Right now my goto tends to be https://devdocs.io/, but the idea of a conversational type of layer is fascinating. It's always a struggle in a new set of docs trying to figure out their phrasing for merge/join/combine or how they describe aggregations for example. A lot of the time when you're looking at documentation, you're trying to look up "how to do x (with y)" but most docs are written in a "common language" and end up describing things in jargon you may not be aware of yet.
johnywalks · 3 years ago
What ChatGPT can do combine knowledge and provide personalised examples. This is usually done manually and it takes hours of research with trial & error.
johnywalks commented on Plant-based meat is turning out to be a flop   bloomberg.com/news/featur... · Posted by u/helsinkiandrew
monero-xmr · 3 years ago
It doesn’t taste that good, it smells weird when cooked, it isn’t actually healthier, it’s typically more expensive than real meat as it’s “premium”, the nutritional value is suspect… the list goes on and on
johnywalks · 3 years ago
Tough choice.

Weird goo that was grown in a lab by people that have no idea what they're doing OR natural food we've been eating since the dawn of time.

johnywalks commented on US Government demands direct police access to European biometric data [pdf]   digit.so36.net/Data/20221... · Posted by u/diimdeep
jimbob45 · 3 years ago
Am I the only one that doesn't really consider "fingerprints and facial images" to be biometric data? When I think "biometric", I think hair samples, DNA, blood type, even though I know fingerprints and eye color are technically biometric.
johnywalks · 3 years ago
No worries, all this is coming in a few years as well.
johnywalks commented on US Government demands direct police access to European biometric data [pdf]   digit.so36.net/Data/20221... · Posted by u/diimdeep
marricks · 3 years ago
Given the US has army bases all in and around Europe, more than any European country, I bet the US wouldn't comply.

It's rarely talked about, but you gotta imagine, the fact the US controls most of the land and sea is a big factor in how diplomatic issues are resolved.

I don't think this is a great thing, btw.

johnywalks · 3 years ago
> US controls the land and seas of most of the Earth

They do so with the help of allies which they seem to forget.

johnywalks commented on Bob Iger back as Disney CEO   deadline.com/2022/11/disn... · Posted by u/dagmx
gsatic · 3 years ago
Iger has said Disney has built enough capacity to generate more entertainment than the world has cash to consume. The mega machine has become so efficient, they can produce a new marvel level movie everyday if they wanted too. But there aren't enough customers for it.

So the question is, once your corporate mega machine has become this efficient what do you even do next?

johnywalks · 3 years ago
Except that they produce rubbish.
johnywalks commented on Berkshire Hathaway Inc.   berkshirehathaway.com... · Posted by u/meesterdude
shreyshnaccount · 3 years ago
This type of website, with just the addition responsive text, is how most of the internet should ideally be.
johnywalks · 3 years ago
I don't know. I really enjoy 10 popups when i visit a website.
johnywalks commented on Zoho's annual revenues surpassed $1B in 2021   businessinsider.in/busine... · Posted by u/Brajeshwar
johnywalks · 3 years ago
Happily using Zoho for 2-3 years now. Moved away from Google because... well you can't trust them with anything.
johnywalks commented on EU Voice   social.network.europa.eu/... · Posted by u/doener
williamvds · 3 years ago
It's quite sensible really, why would you leave a method of disseminating official statements vulnerable to the whims of a private American corporation? Discussion still can and will be held on platforms not directly controlled by governments.
johnywalks · 3 years ago
> whims of a private American corporation

Exactly. Private corporations that adhere to US law and have demonstrated that they don't operate in good faith.

Each country should control official channels of communication.

johnywalks commented on Users reporting artifacts appearing in old images stored in Google Photos   support.google.com/photos... · Posted by u/duiker101
amelius · 3 years ago
This is an indication that Google underestimates the value of data stored by users.

E.g. if this was about storing monetary data, this would never have happened.

johnywalks · 3 years ago
> This is an indication that Google underestimates the value of data stored by users.

That becomes apparent if you ever had any issue with a google product. There's no way to resolve issues outside of canned answers from "AI" systems and public forums.

u/johnywalks

KarmaCake day146March 17, 2022View Original