utbabya
Joined 11 years ago
Joined 11 years ago
Edit: The context of the question does indeed make it sound more like the animal bat. The other answers sound more like gotchas to me.
Got it running in less than an hour.
Having worked in another FAANG, I realize a large number of criticisms do come from imaginations, since I could see the contrast first hand. Nobody could tell exactly the consequences of all actions, most of the time it's just a buncha folks trying to figure out what to do, experimenting, iterating. Have you tried executing a conspiracy, like a surprise party? Good luck keeping a secret with more than 5 people.
There's also the problem of perspective. To a less technical engineer who don't know what they don't know, having their deliverable rejected time and again could feel like a conspiracy against them. If you read a blog post from them you'd think the culture is very toxic when everyone is doing their best juggling to be considerate while keeping the quality high.
As with others commenting on this, I've no idea how true the book is, in fact I have never read it. OTOH, even without the book, researches saying social media is making teenagers depress look convincing to me, and, although it's a losing battle, privacy matters a lot to me so I've personally stopped using social media for many years.
None of these give me full confidence to trust nor distrust the narrator, for things that you can't observe externally. It's all percentage.
There are good signs AI would eliminate whole classes of costly human errors, whether the new classes of machine only problems would cost more as models iterate is remain to be seen, which I think would be lower. I'm not super optimistic about the social economical future coming from this but from a pure tech standpoint I'm optimistic about building cost.
Edit: also to address reliability, I think a lot of things are net positive to this world without five 9s, heck even two 9s.
Edit 2: s/building cost/tco
Those work not done by specialist, would not have been done by a specialist nicely, it simply won't get done at all, we just don't have the scale. Of course there's a fine line in some cases it produces negative value, but more often than not it's some value discounted by maintenance versus zero.
But yes it's an area that still requires tweaking, which is a cost I don't want to incur. Also just within this year I got a regression (later fixed) because of a bug in nvidia-open driver so it stopped going into low power state giving me a toaster on the go. These are still very obscure to root cause and fix.
Curious how we would solve this class of wealth distribution problem in the future. All these critical libraries supply chain hit the bottom line of tech companies directly, but to extrapolate, all knowledge / work creators who used to live a comfortable living now have all their hard work scrapped by aggregators. Yeah I understand the genie is out of the bottle, all that and there will be (is?) systemic change to viable businesses. But people still have to live during the transition. It's also in the best interest of these aggregators, who's there to feed them new free works if it's no longer viable?
IMO the most common denominator among all these is trust, in order for many of these to work. From policy setting at strategic level, hiring, to tactical process refinement, the invariant must always be building an environment and culture of trust. Which isn't trivial to scale.
Detecting outbound network connection during an npm install is quite cheap to implement in 2025. I think it comes down to tenant and incentives, if security is placed as first priority as it should, for any computing service and in particular for supply chain like package management, this would be built in.
One thing that comes to mind that would make it a months long deabte is the potential breakage of many packages. In that case as a first step just make an eye catching summary post install, with gradual push to totally restriction with something like a strict mode, we've done this before.
Which, reminds me of another long standing issue with node ecosystem toolings, information overload. It's easy to bombard devs with thesis character count then blame them for eventually getting fatigue and not reading the output. It takes effort to summarize what's most important with layered expansion of detail level, show some.
Although from what I've read 8GB of VRAM seems insufficiently near-future proof, so I've always been eyeing 5070ti+ laptops. I wonder if there's any technical blocker that prevents offering 5070ti or the amd equivalent.
I think lots of windows antivirus come with features like this? Perhaps with vast crystalized kno eledge nowadays we can afford to create OSS system level package that offers some level of protection.
I might actually do it, any down side?