

I’ve been so on the fence about attempting to solder, but it frightens me the idea of causing a little sparky fire.
So, good on you!


I’ve been so on the fence about attempting to solder, but it frightens me the idea of causing a little sparky fire.
So, good on you!

I’ll take
puts on sunglasses
The whole enchilada
YEEEAAAAHHHH


Not that it makes it "good’, but the issues found seem (to me) more incompetent than nefarious, at least.


Saw these guys back around, ~2010 opening for Psycroptic IIRC. Absolute madness. This and their final album are great.


I recognize that it’s a workaround for a problem foisted on us by idiots and we shouldn’t have to deal with it, but I like the absurd notion of a “Spam folder” of websites


Yes and no. The truth of the matter is supply-chain attacks in any repository are almost impossible to fully mitigate. The attack you linked sounds like a big and successful attack, but there are more minor attack attempts all the time. It’s the blessing and curse of every package manager that anyone can upload almost anything.
The upshot is that the most active repos have the most eyes. Not to say an attack won’t fly under the radar, but if the React or Angular packages (or their dependencies) start acting weird, it’s more likely that someone will notice, as there are people dedicated to auditing such things.
Furthermore, a lot of the smaller packages do “one thing” (see the infamous is-even package), so they are small and easy to self-audit if you are paranoid enough.
It’s not perfect, and there will always be more headlines about the next big attack, but it’s still a boon overall IMO.


Honestly, quite fun. The instrumentation is nothing to write home about, but it’s a pretty decent canvas for each of their styles to come through.


I am almost done with Legend of Zelda: Echoes of Wisdom. It’s weird, but I’m enjoying it.


I’m a big fan of tig for visualizing the graph and looking over history (then I don’t need to leave the terminal, and it’s snappier, in my experience, than most full-GUI programs like Sourcetree), but for actual Git commands, I like the CLI
Do you like Pokemon or Digimon more? Who’s your favourite 'mon?