easterncalculus

> Is there such thing as "community" at all? As I know, the majority of open-source projects are developed by a single person, where others only contribute bug reports (in best case). It's not a community, if there is such imbalance in contribution and power.

Every single time this comes up it turns out that 'community' is just a trojan horse for 'group of people that sign off on whatever I want and enforce my personal opinions on others'

Honestly, no. Communities are great, the best projects have them, but a BIG part of the reason why webdev and gamedev completely went south (and why most other areas went the same way) is because they focused on vague gesturing towards the 'community' over the software. This is why webdev for so long had thrown out security and performance in favor of 'developer comfort' (or 'productivity', or some other weasel word) and why gamedev artificially retooled entirely around virality within its community - the gamedev subreddit, twitter, instagram. Everything is about what you can show and do in a weekend jam and it's why almost everything that comes out is derivative and frankly bad.

It's not really about 'community' as much as it is about relationships between individuals. Those sound similar but you can gesture vaguely towards the 'health' of the former to justify anything in the way that you can't with the latter.

That's impressive! Would certainly read it when it comes out.

Did not know this, thanks for sharing.

I actually forgot DOGE was a cryptocurrency and was really confused for a moment.

I'm not sure but I wish you the best, OP.

I feel like it is generally a flippant but serious comment. A lot of social problems right now are caused by the fact that rather than having to travel to some large city for a meetup with people that have your particular neuroses, against the friction of well-adjusted people in the real world, now there is a fan club one click away that will ratify whatever fake illness/condition/problem that you have with no serious pushback. A LOT of personal, social, and political problems right now basically boil down to this.

Does this exist already? Meshtastic doesn't do IP.

The Rust moderators were overreacting. Most of their front page was not slop. Now their front page is blog posts and language details. It used to be a place where you could talk about the language's actual impact.

What's yours? I'm not defending it, that's just what occurred. The parent comment makes it seem like DOGE cuts were aimed at the CVE program specifically when they were not.

That is straight up not what happened, and what’s impressive is that this comment is already being cited in AI summaries about it.

The contract with MITRE was set to expire under budget cuts from DOGE, along with basically everything else. That is not them “removing the CVE reporting system” like it was done specifically. It was not saved by ‘several’ agencies or the military (???), CISA restored funding last minute.

There were literal genocides conducted on the platform unobstructed at the same time. They banned him because they wanted to. Be serious.

It's really disappointing that this became a front page post with 600 points. HN is worse at security than I thought.

> There is more nuance to this as well, it might work, but only in certain circumstances which seems to be where this is going at the moment.

It's memory corruption. That requires some guesswork or understanding of the underlying system (platform + ABI) and heap grooming to actually exploit but that's not a security boundary. Any vulnerable version is just going to get hammered with requests until it either crashes without an exploit or actually gets popped.