kixxauth

Yeah, pinning dependencies is very similar to vendoring or cloning them. By cloning, you get to know the code better and how it is structured, plus you cherry pick only the features you want.

But, like you said, you are at risk of introducing new vulnerabilities.

I'd just prefer making that bet on myself than someone I don't know

It makes me wonder if large engineering organizations are going to splinter. The coordination costs are getting, proportionally, much larger than they used to.

When I left my corporate engineering job wayyyyy back in March, there were engineers and engineering leaders going off and getting a lot done, individually or in small teams. But project management and QA couldn't keep up with it. Managers resorted to turning their tokens loose on Jira just to try to make sense of it all (which, ironically made them the first to hit their token goals on the dashboard every week, and brought Jira to it's knees).

And, even worse, the junior engineers had no idea what was going on or how to get involved in anything.

The result was an increasingly chaotic mess.

I really don't like how the payment plans work with the providers right now. I feel this pressure to use all my tokens for the week, often just "wasting" them. But also, I want to take advantaged of the subsidized tokens in Claude Code and Codex for as long as I can.

There is this real danger that our thinking, and the things we make, become bloated without constraints.

IMO software has gone to shit since both mobile phones and laptops mostly have massive amounts of compute. We always seem to use it to the limit, just because it's there.

Vendor your dependencies, clone or port them where needed, and freeze them. Most good packages these days do not have a deep dependency tree, and we should stop using the ones that do.

I spent a week with claude and codex re-implementing several packages which had dependency trees deeper than I would like.

Most of these packages are trivial to clone.

"But now you're not getting the upstream fixes" they will say.

"So what?" I reply

I heard from someone, somewhere, that coffee and free wifi may be the biggest economic value driver of all.

What aspects or use cases of crypto do you find important?

Yeah, it's appropriately ironic that these things were supposed to give power to the people (excluding the private jets), but power has become consolidated to those who have the means to consolidate it ... and the climate pays.

It's no longer a boom (and yes, AI is probably far worse at this point)

And proof of stake consumes less energy, but still significant.

Additionally, a question for you: I don't have experience in finance. Do you think this idea of having a settlement period for crypto transactions could work?

Ha. That's cynically hilarious.

The carbon emission problem with crypto currency and AI is analogous to the oil and gas industry. When you boil it down to first principles, we are extracting resources from the Earth, and destroying our climate, in the hope of some sort of economic gain.

And the economic gain is tenuous at best.

I wrote an opinion on HN about the carbon problem in crypto as well.

Ha, yeah. So, maybe a stretch here.

I'm thinking of use cases like distributed domain name lookup systems, identification systems, social networks.

I'd be really curious to know if this could be use case for AI code generation tools using speech recognition. I don't know of any, but this could be very interesting.