Yeah! Like that!

I dunno about stdx as a solution. It’s just not a big enough list.

At work we build a big java thing and we:

• Manually import all dependencies, including transitive dependencies.
• Bless them by committing their hash to our repo. I think the cargo lock file does something similar.
• Audit the dependencies by hand. Sometimes that’s reading them all and sometimes thats less. Honestly, it’s often less. A few times it’s being members of the upstream community.
• Don’t allow running as root
• Drop all permissions we don’t need with seccomp including reading a bunch of stuff
• Sandbox each thread based on what’s on the stack. Untrusted code can do less stuff.

It’s still not enough. But it helps.

Maybe a web of trust for audited dependencies would help. This version of this repo under this hash. I could see stdx stuff being covered by the rust core folks and I’m sure some folks would pay for bigger webs. We pay employees to audit dependencies. Sharing that cost via a trusted third party or foundation or something feels eminently corporate. Maybe even possible.

I really thought the idea was, “You like mecha? You like kids piloting mecha? This is how it’d go down.” I loved it so much. Shinji’s a broken, abused shell child. He lives with a broken human who drowns her sorrows in drink. His father is just evil. He’d have to be to let his kid pilot the mecha.

The only real father figure we ever see for shinji is a spy. Who gets killed. He’s in love with a girl that hates him. Because he’s broken. But he has no one else. Except those friends at school who I think they take away. Don’t remember. And that angel who he has to kill or something. Damn, it’s been like 25 years. I have no idea what happened. But in my memory it’s terrible. Wonderful stuff.

We knew spooks were all up in the phone network. They’d show up and ask installers to run them some cables and configure ports in a certain way. I was friends with folks who were friends with the installers.

I work on software for finding things and summarizing stuff. We were one of those Apache 2 -> other relicenses a while back.

I can’t really talk about specifics. But we all have a working imagination though. I think about it a lot. But I still do the job. There are good folks doing good things with it.

I’m a pretty good engineer. Not the best I’ve ever met by a long shot, but I’m good. But I’m very outgoing for an engineer.

Ironically, that’d describe both my parents too.

I had this one weekend when I was in tenth grade where I did nothing but write code on a fun project. Then I decided I didn’t like writing code. I don’t know why. Kids are weird.

I decided then I couldn’t make it my job. I managed not to program for three years. It turns out I’m bad at everything else. Miserable.

That was 22 years ago. That’s still all I’m good at.

Pre-merge code review should stop that kind of thing. I honestly haven’t seen anything like this in years.

Chrono Trigger. The Magus Fight. The music.

FF6. Magitech Factory. Also music.

Metal Gear Solid. Psycho Mantis. Late at night. Tired.

Eternal Sonata. Last Fight. Intro line.

Hades. Final boss. Extreme measures 4.

NES Tetris. Crashing.

I heard somewhere that’s what they were trying to say when they made at first. The episode just didn’t work. DS9 redeemed them.

Windows -> RedHat -> Windows -> Gentoo -> Ubuntu -> RHEL -> Ubuntu -> Debian -> Arch

I hate the smell of some ground coffee. Others smell good.

Five minutes of googling says some folks thing stone mason. Some copy and paste response says unskilled tradesman. Other response says translation is just “learned” so maybe they could read.

I’d never heard of this before so seeing that there is disagreement is a fun new thing for me. Especially interesting to see this “learned” response.

I spent a few minutes looking to see if a name I trust said any of this. Ultimately I don’t have the background to evaluate it and lots of folks spend their lives about historical Jesus. I didn’t see anything from anyone I recognized but, like I said, I don’t know much about this area.

Do folks still use logstash here? Filebeat and ES gets you pretty far. I’ve never been deep in ops land though.