Discussion
Loading...

Post

Log in
  • About
  • Code of conduct
  • Privacy
  • Users
  • Instances
  • About Bonfire
gram
gram
@orsinium@fosstodon.org  路  activity timestamp yesterday

@mike @HerraBRE

oh yeah, i'm not updating Expo in React Native apps ever again. every Expo app really feels like a very fragile and delicate balance and any patch update will break it in all kinds of unpredictable ways.

  • Copy link
  • Flag this post
  • Block
BjarniBjarniBjarni  馃檴 馃嚠馃嚫 馃崗
BjarniBjarniBjarni 馃檴 馃嚠馃嚫 馃崗
@HerraBRE@mastodon.xyz replied  路  activity timestamp 2 days ago

... and no, this isn't me overreacting because I had a crappy day. This frustration has been building for years.

I read a really great article years ago about culture and motivation in open source projects and how perverse incentives - attracting new community members with new shiny trendy things - not really caring about the existing user-base - causes exactly this kind of pointless upgrade treadmills and wasted engineering effort.

I wish I could find that article again. It was so right.

  • Copy link
  • Flag this comment
  • Block
BjarniBjarniBjarni  馃檴 馃嚠馃嚫 馃崗
BjarniBjarniBjarni 馃檴 馃嚠馃嚫 馃崗
@HerraBRE@mastodon.xyz replied  路  activity timestamp 2 days ago

What I *should* do, is figure out how to wean myself off Python.

I think #golang is probably where I should go.

A modern C-like language with high level features. Written by old curmudgeons who haven't got time left for busywork. Who value the promises made by their APIs and design choices.

Evidence: the security community lambasts them for refusing to change an API which was deemed "not secure enough." https://www.bleepingcomputer.com/news/security/critical-golang-xml-parser-bugs-can-cause-saml-authentication-bypass/

That, kids, is a feature. Not a bug.

My kind of people!

BleepingComputer

Critical Golang XML parser bugs can cause SAML authentication bypass

This week, Mattermost, in coordination with Golang has disclosed 3 critical vulnerabilities within聽Go language's XML parser. If exploited, these vulnerabilities, also impacting multiple Go-based SAML implementations, can lead to a complete bypass of SAML authentication which powers prominent web applications today.
  • Copy link
  • Flag this comment
  • Block
gram
gram
@orsinium@fosstodon.org replied  路  activity timestamp 2 days ago

@HerraBRE

in 2017, Russ Cox wrote in #golang a 2fa tool that i use daily. since then, he touched it 3 times:

https://github.com/rsc/2fa/commits/master/

meanwhile, all of my Python projects break in every new Python release.

GitHub

Commits 路 rsc/2fa

Two-factor authentication on the command line. Contribute to rsc/2fa development by creating an account on GitHub.
  • Copy link
  • Flag this comment
  • Block
Mike Taylor 馃
Mike Taylor 馃
@mike@sauropods.win replied  路  activity timestamp yesterday

@orsinium @HerraBRE If you think you have problems in Python, try working in Node. New major version of some dependency every single working day, guaranteed.

It takes longer to write a program in Go. But, dammit, once it's written it STAYS written!

  • Copy link
  • Flag this comment
  • Block
gram
gram
@orsinium@fosstodon.org replied  路  activity timestamp yesterday

@mike @HerraBRE

oh yeah, i'm not updating Expo in React Native apps ever again. every Expo app really feels like a very fragile and delicate balance and any patch update will break it in all kinds of unpredictable ways.

  • Copy link
  • Flag this comment
  • Block
Mike Taylor 馃
Mike Taylor 馃
@mike@sauropods.win replied  路  activity timestamp yesterday

@orsinium @HerraBRE Exactly. I don't think Go has a big technical advantage over Node in terms of stability, but the cultural gulf is vast.

  • Copy link
  • Flag this comment
  • Block
Seshat
Seshat
@stjarna@social.vivaldi.net replied  路  activity timestamp 2 days ago

@HerraBRE I think you will like it! It鈥檚 pragmatic first and foremost.

  • Copy link
  • Flag this comment
  • Block
jaseg
jaseg
@jaseg@chaos.social replied  路  activity timestamp 2 days ago

@HerraBRE try uv, I鈥檝e hat luck using it to stabilize that exact problem.

  • Copy link
  • Flag this comment
  • Block
BjarniBjarniBjarni  馃檴 馃嚠馃嚫 馃崗
BjarniBjarniBjarni 馃檴 馃嚠馃嚫 馃崗
@HerraBRE@mastodon.xyz replied  路  activity timestamp 2 days ago

@jaseg Really, no.

Unless uv has a feature that magically makes the CPython community stop deprecating things.

But it is exactly this mentality, thinking that people can just tool their way out of a culture of instability, which is why I should have walked years ago.

  • Copy link
  • Flag this comment
  • Block
Hey Gus
Hey Gus
@elebertus@mastodon.social replied  路  activity timestamp 2 days ago

@HerraBRE can鈥檛 have a #python thread without someone mentioning UV as a solution to nearly any issue.

But seriously, locking the version of python does go quite far. We just updated from 3.9 once it was deprecated for a large internal project partially to avoid compatibility issues.

  • Copy link
  • Flag this comment
  • Block

bonfire.cafe

A space for Bonfire maintainers and contributors to communicate

bonfire.cafe: About 路 Code of conduct 路 Privacy 路 Users 路 Instances
Bonfire social 路 1.0.1-beta.23 no JS en
Automatic federation enabled
Log in
  • Explore
  • About
  • Members
  • Code of Conduct