RayDonnelly | 7 years ago | on: GitHub: sysget – A front-end for every package manager
RayDonnelly's comments
RayDonnelly | 7 years ago | on: Show HN: Cliapp.store – An App Store for CLI Apps
[1] https://github.com/feramhq/cli-apps/blob/master/git/main.yam... [2] https://github.com/feramhq/cli-apps/blob/master/git/main.yam...
RayDonnelly | 7 years ago | on: Lenovo’s ThinkPad X1 Extreme: Hex-Core, GTX 1050 Ti, 64GB RAM, Under 4 Pounds
RayDonnelly | 7 years ago | on: Launch HN: The Buttermilk Company (YC S18) – Homemade Indian Food in 5 Minutes
There are 7 days in each week.
RayDonnelly | 7 years ago | on: Launch HN: The Buttermilk Company (YC S18) – Homemade Indian Food in 5 Minutes
RayDonnelly | 7 years ago | on: Windows 10 vs. Linux Performance On AMD Threadripper 2990WX
RayDonnelly | 7 years ago | on: Cancer Progress: Much More Than You Wanted to Know
RayDonnelly | 7 years ago | on: Java's Magic Sauce
RayDonnelly | 7 years ago | on: Java's Magic Sauce
.. unless you're making some turn based thing.
RayDonnelly | 7 years ago | on: iTerm2 has a new drawing engine that uses Metal 2
RayDonnelly | 7 years ago | on: Freezing Python’s Dependency Hell
RayDonnelly | 7 years ago | on: Ryū: Fast Float-To-String Conversion
RayDonnelly | 7 years ago | on: Freezing Python’s Dependency Hell
Another is building that software with good security flags, see: https://www.anaconda.com/blog/developer-blog/improved-securi...
We also keep track of CVEs in our software and actively look for patches (e.g. pycrypto is dead now but Debian maintains patches to fix reported CVEs) or write our own (though usually to fix build-system bugs rather than security issues).
But yes, static linking and leaving software building to non-experts using whatever tools they like (without studying anything to do with low-level binary security or how to achieve that), statically linking insecure (some time to become old) libraries is far from ideal.
Anaconda Distribution strongly prefers dynamic linking and shared package dependencies so we can update to address critical security issues without needing to rebuild significant portions of our stack.
RayDonnelly | 7 years ago | on: Freezing Python’s Dependency Hell
RayDonnelly | 7 years ago | on: Bolt: A Practical Binary Optimizer for Data Centers and Beyond
RayDonnelly | 7 years ago | on: Bolt: A Practical Binary Optimizer for Data Centers and Beyond
RayDonnelly | 7 years ago | on: Malware Found in the Ubuntu Snap Store
And who's liable here?
RayDonnelly | 7 years ago | on: Malware Found in the Ubuntu Snap Store
This is very much the idea of these awful (IMHO) ways of distributing software. Bundle all of your dependencies, share nothing, expose users to the risks of exploits in the libraries you've bundled (and maybe statically so no one can even figure out you have done that).
Please stop this madness.
RayDonnelly | 7 years ago | on: Malware Found in the Ubuntu Snap Store
RayDonnelly | 8 years ago | on: Hello Qt for Python
> I’ve tried many times over many years, but never got a satisfactory working Python + Qt development environment working on the Mac.