RayDonnelly's comments

RayDonnelly | 7 years ago | on: Java's Magic Sauce

And the notion that a garbage collector should ever be part of a game engine (or anywhere near it) is frankly baffling to me.

.. unless you're making some turn based thing.

RayDonnelly | 7 years ago | on: Freezing Python’s Dependency Hell

I don't understand the nature of your discourse. You agreed that maintaining software distros is not easy, some recommended conda and you seem dismissive again?

RayDonnelly | 7 years ago | on: Freezing Python’s Dependency Hell

We are a rolling Software Distribution and providing up to date software is one of our main goals.

Another is building that software with good security flags, see: https://www.anaconda.com/blog/developer-blog/improved-securi...

We also keep track of CVEs in our software and actively look for patches (e.g. pycrypto is dead now but Debian maintains patches to fix reported CVEs) or write our own (though usually to fix build-system bugs rather than security issues).

But yes, static linking and leaving software building to non-experts using whatever tools they like (without studying anything to do with low-level binary security or how to achieve that), statically linking insecure (some time to become old) libraries is far from ideal.

Anaconda Distribution strongly prefers dynamic linking and shared package dependencies so we can update to address critical security issues without needing to rebuild significant portions of our stack.

RayDonnelly | 7 years ago | on: Malware Found in the Ubuntu Snap Store

And what is to stop someone from pushing malicious code to GitHub and you guys distributing malicious packages to end-users via your 'stable' channel?

And who's liable here?

RayDonnelly | 7 years ago | on: Malware Found in the Ubuntu Snap Store

> I'm not really familiar with the latest trends in (bloatware?) development, but a simple game like that taking >100MB would make me suspicious

This is very much the idea of these awful (IMHO) ways of distributing software. Bundle all of your dependencies, share nothing, expose users to the risks of exploits in the libraries you've bundled (and maybe statically so no one can even figure out you have done that).

Please stop this madness.

RayDonnelly | 8 years ago | on: Hello Qt for Python

Did you miss that I was replying to simonh, and to be specific, to this part?

> I’ve tried many times over many years, but never got a satisfactory working Python + Qt development environment working on the Mac.

page 2