• 0 Posts
  • 487 Comments
Joined 3 years ago
cake
Cake day: August 3rd, 2023

help-circle






  • The real answer is that user-agents can be used to show you one version in your browser and then serve you another one with curl.

    I say “real” because all the idiots talking about “don’t run scripts from the internet!!!” probably forget they don’t decompile every binary they run. E.g. the rustup installer (the tool for managing Rust toolchains) is by default a curl+bash one liner. Why would I worry about them serving me a wrong script when I’m any way about to run their binary blob?

    If you have any doubt about the hosting service (which might or not be the same as the software author!) then avoid piping into bash, but then why would you run their code at all if you distrust them so much? Do you expect github to install a keylogger? Probably not. Some telemetry hook to know whose running the requested script? Possibly someday







  • That doesn’t make sense. There’s a world between “garbage commit” and “fancy new feature” and most of it is irrelevant to anything.

    I don’t want git bisect to make me check if “run clang-format” broke anything. I don’t want to revert a feature but leave in unit tests that will fail (or worse, the opposite). I don’t care when git blame tells me “rename X to Y”, I want to see the context that motivated this change.

    Squashed commits are atomic, built and tested. Anything in between is whatever reviewers let slip in. It’s easier to check a MR description is well written than 5 commit messages (that might get rebased without you noticing)






  • I tried to setup Forgejo CI but was turned off by the need to have nodejs installed to do anything, even cloning the repository. Does everyone just maintain their own images?

    Gitlab CI by comparison will let me you any image (e.g. basic rustc imagé) and do the orchestration by itself. So much nicer to use imo