This was, without any doubt, a prophetic dream. The apocalypse will soon be upon us! Be wary of the four horsemen: Ronald, King, Wendy, and… Chihuahua

It’s always a treat to see the wheels of open source & community funding meshing together to bring about a better internet. You and @nutomic@lemmy.ml have already done the honors of thanking the open source contributors, so I think it’s now my turn as an ordinary user to thank you both for your continued hard work and leadership – I have my quibbles, but these do not preclude the giving of a well-deserved and hearty thanks: Thank you! It continues to please me greatly to have the privilege (in both senses of the word) to contribute to the financial sustainability of the project as one of its many small recurring donators.

And, while I’m at it… since the opportunity doesn’t come up often: I also want to specifically express gratitude to dessalines for their (unrelated) work on the thumb-key project. As a long-time user of MessagEase (10+ years!), I’ve become a happy convert to your more well-maintained and open source replacement. So, thanks for that too! Please continue to suffer my past & future criticisms with the knowledge that it always originates from a place of equal parts respect & gratitude.

Except you can define a value with undefined and accessing that value will have different behavior than attempting to access an undefined value.

Oh, in that case it’s not horrifying at all. Who doesn’t keep 3 years of past salary in their checking account for the occasional rainy day?

For everyday writing I like to use MessagEase. It’s highly ergonomic thanks to the 3x3 grid and deeply customizable. I’ve been happily using it for over a decade now (it continues to receive updates) and for the past 8 years I’ve been able to touch-type on it without looking at my fingers

The documentation is all in-app, so I’ve taken the liberty of screenshotting the relevant pages for illustrative purposes:

Note that I’m specifically including “in an an instance-local post” because I am assuming admins don’t want to provide free cloud image hosting to random internet people for arbitrary non-lemmy use.

Note that I at no point allude to hotlinking from outside of the instance. Unless you want it to be possible to create an image post, delete the post, and then have an orphaned image forever (thereby creating an attack vector), you do need to solve that problem. If you solve that problem without considering crossposts and comment hotlinks within the scope of your own instance, you’re going to cause breakage. If you’re forced to consider these things before triggering the deletion regardless, then you’re not saving much on performance.

What’s the practical difference? In both cases you’re culling images based on whether they’re orphaned or not.

If you’re suggesting that the implementation be based on setting individual timers instead of simply validating the whole database at regular intervals, consider whether or not the complexity of such a system is actually worth the tradeoff.

“Complexity comshmexity”, you might say. “Surely it’s not a big deal!”. Well… what about an image that used to belong to a valid post that later got deleted? Guess you have to take that edge case into account and add a deletion trigger there as well! But what if there were other comments/posts on the same instance hotlinking the same image? Guess you have to scan the whole DB every time before running the deletion trigger to be safe! Wait… wasn’t the whole purpose of setting this up with individual jobs to avoid doing a scripted DB scan?

Should the NVD be deeply involved in all of them just to provide the most accurate security score? That’s an impossible ask.

This is a false dilemma. If the task is truly impossible, that’s not a valid excuse to try anyway and fail repeatedly, especially if doing so causes negative externalities. Numbered scores with decimal precision are not necessary to the core functionality of a CVE database and there are plenty of alternative solutions which would minimize harm and scale more economically.

Oh, bother…

You’re of course within your rights to remain unconvinced, but I fail to understand the mindset that would lead a reasonable bystander to look at what Ms. Reeves has said thus far and think “there’s a significant chance that this is untrue”. Why? For what purpose? She stands to gain nothing by lying unless you start imagining that a much broader conspiracy is somehow at play.

If you’re willing to entertain the idea of a hitherto unsubstantiated conspiracy from one side, then why not also suspect that LMG will conspire to hire a crooked auditor or otherwise hide unflattering findings? Why take anyone’s word for anything?

The fact she is a woman is different than the majority, however there are other women at LMG

I don’t know how to respond to this without speaking condescendingly. I’m sorry, but you’ll just have to trust me when I say that women can still be subjected to workplace harassment in situations where they aren’t literally the only girl in the building. I’ll leave it at that unless an actual woman wants to step in and expand on this subject further.

not all the men at LMG are sexist so most likely at least one person from one of those camps would object/want to do/say something

That’s just how power works. If you’re in the minority, your needs and concerns get less attention. If you’re in a very small minority, they become practically invisible. Organizations aren’t immune to this. Sexist outcomes can and will readily emerge from systems where none of the individuals directly intend to do a sexism.

As evidence, I’ll point to the statistic itself. A gender gap as steep as this one doesn’t happen by random chance. The only way you get this far skewed is with a feedback loop.

My question is if she had such a bad experience, why hasn’t anyone else said anything, or at least put an anonymous negative review on Glassdoor or something? […] (and the turnover is pretty low for LMG if I’m not mistaken, so that also doesn’t make sense)

Indeed, why is that? Why would she have such an abnormaly bad experience at this particular company? I can’t seem to think of any particular traits that she might have which would have caused her to be treated differently. If sexist comments and sexual harassment are such a problem, then why do people like Gary, James, Ed, Nick, Colton, or Luke apparently seem blind to it? I have no idea what disparity in the distribution of power could possibly account for this phenomenon!

I’m disappointed. Jesus of all people should know how dangerous it is to ride without proper gear. Where’s the helmet? Where’s the armor? And, Christ… are those Sandals?? ATGATT!

Very correct. You can solve bad culture by throwing more money at the problem. Preferably all at once with zero maintenance budget or governance so that the amenities in question can become non-functional monuments to your superior culture. Future generations will find these and marvel at your ingenuity from the safety of the water cooler.

Reasonable people will disagree… but no, probably not. This is a feature which websites can choose to use in the same way that websites can choose to use notifications. Even if you dislike the fact that web browsers provide the option, it’s the website itself that’s actively choosing to impose on you.

Now, the counterpoint to this argument is that the feature in question will most likely further strengthen Google’s position as the market leader and lock out new independent browsers. This is certainly true and similar logic has indeed been employed in cases like the Microsoft antitrust case. With that being said, Google still has that extra layer of abstraction sitting between it and the actual mechanism of action (i.e.: independent website owners who want DRM). Think of it like the Uber of anti-trust law.

Be Evil, Do Ads

An IDE written in Electron?? What a terrible idea! Nobody would ever be stupid enough to let something like that take off…

I’m a plaintext git patch sent via email and lost in the maintainer’s spam folder

Bold of you to assume that an Emacs user will have anything remotely resembling the default keymap by the time they’re proud enough to brag about it

That’s why my terminal is emacs