• 0 Posts
  • 395 Comments
Joined 3 years ago
cake
Cake day: September 2nd, 2023

help-circle










  • You don’t need to declare independence to be independent. Only if you were dependent in the first place you claim independence.

    ROC was never dependent on PRC. They just both claim the same territory. They are 2 independent countries that claim the same territory, just like both Israel and Palestine are 2 independent countries that claim the same territory.




  • At some point you have to assume some kind of knowledge though. If you have to explain everything from the basics, the moment a concept is slightly complicated, the blog gets thousands of pages long.

    You don’t need to explain how an integer is represented in binary in memory in a blog post about atomic integers. Most people that read about atomic integers already know how integers are represented in memory.



  • I once found a full pack of cigarettes on the ground at age ~10. I quickly figured out that lighting it on fire and using the cigarette to set off fireworks was so much easier than using a lighter. I didn’t even think of smoking it, I just left it lit on the ground and used it as a lighter.

    I didn’t understand why my parents were so worried when they found out lol.




  • Good practice != Something that ensures security. As I said, it’s an even better practice to just host your own fork if what you want is security. The reason to use git hashes is mostly so you don’t have to trust the author following semver in there version number. It’s a matter of ensuring that your code will always compile, not a security feature.

    Have you read the article? Your arguments derive from an assumption of “sha1 is mutable, sha256 is immutable”. First of all, every hashing algorithm is going to have collisions, that’s an unavoidable “feature” of hashes. And sha1 is in no way “mutable”, it takes a great amount of effort (and money) to generate a collision. Furthermore, those collisions are not arbitrary. You have to calculate them beforehand. As the article says: what is more likely? Paying 40k€ in compute time to generate a single collision? Or just paying an open source maintainer 40k€ to let you do 1 new commit that most people are going to download anyway?