Agree. But the first build you do after that clone/checkout is risky too. Maybe not as wide open, as the build-tool makers are a line of defence if they're acting on classes of vuln.
He he, I might now be retiring my Ubuntu25 passwordless-sudoer NUC that's only for yolo mode projects. Or giving it more duties. Also - hello from Edinburgh!
Brit here. UK Government's position "we will hold ourselves to equivalent standards via the Cyber Action Plan, just without legal obligations" -is institutionally equivalent to "trust the PDF." Fast forward to the non-repudiable era, please.
isolated-vm (https://www.npmjs.com/package/isolated-vm) here we come for increased sandboxing of node bits and pieces? And we are a year after Java took out the security manager that could sandbox jars in separate classloaders - a standout feature since 1995.
Diverged as well as standardized. I did some research into "out of pocket" and how it differs in meaning in UK-English (paying from one's own funds) and American-English (uncontactable) and I recall 1908 being the current thought as to when the divergence happened: 1908 short story by O. Henry titled "Buried Treasure."
My sister in law has a stem cell transplant under this team https://sheffield.ac.uk/neuroscience-institute/research/brea... for Multiple Sclerosis. It was a small multi-country trial of about 100 people, I recall. This was nine years ago and she counts herself as cured, though to has a follow up once a year with the same team. The treatment is expensive, and though this was all UK National-Health-Service linked, the NHS is seeking cheaper MS treatments now: https://www.mssociety.org.uk/research/latest-research/latest... (Metformin, ALA, ?) There was a trial before this trial - some 20 people in Canada (?) and a couple died. In the 100 person trial they changed the selection criteria for patients, and I'd like to think nobody died cos of the treatment, but I've not heard anything to be able to add a figure. Its Mexico only now perhaps, people did self-fund to go to Moscow for the same treatment: https://www.bbc.co.uk/news/uk-scotland-54560236. These two ladies are not updating how it went for them, years later, but one is on Instagram living a normal life, and the other Facebook
Agree. I'm having lots of fun with Gen-AI and I still have insights it does not. Test-at-the-same-time-as-prod-code is also doable with gen-AI. All the ones I tried are shit at testability by default in my experience. And every now and again they forget about tests being important.
Ask AI number 2 to summarize the intention (look at the .patch) to markdown. Reset. Ask you AI to read the intention as of the orig author had written it, and say you've grave doubts about the contrib's functionally and non-functionally and for it to help you put that into words to feel back to the contributor. Basically the playbook from https://paulhammant.com/images/SimonSinghsFermatExcerpt.jpg
reply