• 0 Posts
  • 23 Comments
Joined 11 months ago
cake
Cake day: August 4th, 2023

help-circle







  • But then I decided, I wrote my own solution, a thing of 1,600 lines of code, which is, yeah, it’s like thousands of times less than the competition.

    And it works. It’s very popular. … I got 100 emails from people saying that it’s so nice that someone wrote a small piece of software that is robust, does not have dependencies, you know how it works.

    But the depressing thing is, some of the security people in the field, they thought it was a lovely challenge to audit my 1,600 lines of code. And they were very welcome to do that, of course. And they found three major vulnerabilities in there.

    He makes a ton of excellent points, but the succinct impact of this little example really hit for me. As someone who often rewrites things so that I can both understand and fully trust in what I’m depending on, it’s always good to be reminded that you literally can’t write 500 lines of code without a good chance of introducing a major vulnerability.

    The tech stack is so dizzyingly high today, and with so many interlocking parts, it continually amazes me that anything at all functions even in the absence of hostile actors.





  • Software devs for a long time would discuss “green field” development, which is a metaphor from constructing a building in an empty field: you start from nothing, and build all new. Most software devs prefer to write new code rather than try to learn the quirks and nuances of a large, already-existing pile of code, so “green field” is considered both desirable and often practically unattainable.

    “Blue sky” is a similar concept but loftier. It isn’t just that you have an empty field waiting for you, you’ve got the infitie expanse of the clear blue sky: endless possibilities, unlimited creativity, etc. “Blue sky development” as a metaphor I think comes from designers, product managers, and other software-dev adjacent fields. It means thinking of ideas that are out of the box and unconstrained by historical limits.

    That’s why everything is named that: execs and marketers love that kind of hollow promise. That anything is possible even though actually they’re almost always just clones of existing things whose greatest innovation is to loudly proclaim how new and innovative you are.






  • Yeah, I said it and then got to thinking about it and I’m not sure it’d be that difficult. For PC games anyway, consoles (especially Nintendo) would probably require self reporting.

    But Discord seems to be aware of what I’m playing (steam integration?) so theoretically a “game scrobbler” could work through that too? I think if such a service was created, it could also be neat to add community-driven achievements and stats tracking.

    Ah, maybe a fun side project to dig into sometime…


  • I tend to prefer the Steam version if I have both, mainly as you say for acbievments and keeping my playtime all in one place. But also the community forums and guides are nice sometimes, and easily accessible with the steam ui.

    GoG I’ll pick (and mainly purchase towards) older games and nostalgic favorites where lack of drm feels more important to me. Those often don’t have achievements and such anyway.

    Funny enough, I get pretty annoyed about that playtime tracking thing. I wish there was like a last.fm scrobbler but for games. Before my SteamDeck, I rebought several games on Switch because I liked the portability. So now my playtime on those is split across multiple devices. Ah well, truly first world problems.