close

The Register Home Page Image Image

* Posts by JLV

2853 publicly visible posts • joined 4 Mar 2013

Homebrew 6.0 released with new security mechanism, Linux sandbox and more

JLV Silver badge

Re: Homebrew is a disaster

I am surprised at so much anti-Brew sentiment here. Anyone care to explain?

Honest question. Not defending Brew, my goto is MacPorts.

The reason I am asking is that Brew-love is pervasive on macs. Go to github and, 90% of the time, you’ll only see `brew install` as instructions. Nothing about `ports`. Devs typically only talk if brew as well. I’ve learned to just auto translate brew -> ports mentally myself.

Hence my surprise and question. Why is this community more skeptical?

JLV Silver badge

Is there such a thing as ports-on-Linux though? I was surprised enough to find Brew on it.

I was half thinking of trying Nix as a package manager but an install of its package manager - not as a full distro via NixOS - left me scratching my head. It seemed to perform some major surgery on my system installing itself and didn’t seem to work at the end. I didn’t spend much time on it but was not impressed. Especially not when there seemed no obvious way to remove it afterwards.

JLV Silver badge

Re: Homebrew is a disaster

You can use both at the same time. They each have their little slot in $PATH. Of course, you may have some duplication in dependencies, but in practice it works out well enough. I am 90% MacPorts, 10% Homebrew. What might be helping me is that I typically only have very specific, standalone, utilities in brew.

JLV Silver badge

Anyone have any details they care to share on their experience using Homebrew on Linux? I use MacPorts for the most part and Homebrew only for things I can't find there.

But on Linux - Ubuntu - I find it very difficult to understand how we are supposed to get the latest and greatest of application packages. Say for example Postgres. On an LTS, you could be year behind in what Postgres version you can get without using a PPA. But using multiple PPAs, besides being a pain, seems like exactly the kind of thing to avoid in these days of ever-increasing supply chain attacks.

So, a curated gatekeeper like Homebrew sounds good, if it had the same outcomes as on MacOS, where you can track recent versions of Postgres, while being on an older OS release.

In your experience, how well does Homebrew work out, in practice, on Ubuntu based distros?

p.s. if anyone has better pointers to tracking recent releases of quick moving applications like postgres or python yearly releases on Linux without upgrading the OS to new versions, just tracking security patches, please share !

Apple's WebKit performance tax leaves iOS browsers stuck in the slow lane, says Microsoft

JLV Silver badge

Re: More importantly: is speed what really matters?

This seems to make 3 assumptions:

First that Safari is the greatest rendering engine in terms of safety, better than anything else that could be deployed on iOS. What makes anyone think so, other than MS acting as an anti-expert of sorts here? I happen to think glitches and JS and CSS standards non-compliance are an indicator of browser immaturity, unless those bits of the standards themselves are security-risky.

Second that I would use Edge. Or Chrome. Most certainly not. Firefox with its own rendering backend is what I’d prefer. Once it had proven robust - see next point.

Third, that I would not privilege safety. I would, but I’d much rather base my choices in that regard on industry experts’ say-so (hint: not MS) than a blanket fiat Apple nyet that ensures they don’t really have competition to challenge them.

Last, iOS itself is pretty robust safety wise. Any _actual_, _demonstrated_, risk to the OS itself should indeed result in a browser’s ban.

JLV Silver badge

Re: How slow is slower?

Well, I can say that, in the past at least, Safari was notoriously bad at following standards. For example, it was years behind in implementing http verbs other than `GET` and `POST`: `PUT`, as an example. I get the sense that some web devs see it as backward when it comes to JS and CSS features as well.

Also, while speed to load content is one thing, battery use is another. Browsing on iOS seems to guzzle batteries far beyond other activities like YouTube.

I can certainly see the risk in a half-baked browser engine being exploited, but methink Apple doth protest too much on our behalf.

The new Siri makes one of Apple's most convenient OS features a cumbersome mess

JLV Silver badge

terminal?

How is mdfind, its command line counterpart, affected?

Graviton 5 impresses, but please, for the love of all that's holy, stop calling them 'AI chips'

JLV Silver badge

I, for one, would have indeed liked to read more about the chips themselves, and what makes them stand out from their ARM siblings. Chip geekery, you know.

We already know to expect that everything comes drenched in “special AI magic sauce”.

Python JIT compiler project under threat after steering council says proper process wasn't followed

JLV Silver badge

Re: Waterfall process much?

> PEP politics and process

Well, PEPs can be fairly anal at several levels. First goal is to keep the syntax clean. There was for example a big old discussion of how to represent C’s ternary operator. Everyone agreed on the idea itself but there was split between “use the C syntax” and “make it more obvious”. The pattern-matching match statement, more or less lifted from Rust, took a long time to gel.

On the tech side, the GIL-ectomy proposal, to remove the Global Interpreter Lock (which holds back thread concurrency) was long in gestation. The concern was: don’t break existing code, including on code that relies on C modules. And don’t screw single thread speed or blow up mem use to enable multithreading.

These things take a long time to get right. Git branching and merging may not be as helpful as you think if the JIT code is embedded finely in critical, and changing, blocks of the main execution engine. Which, IIRC, is “just” a big ol’ C case looking at all the incoming Python operators.

This is mentioned in the article:

> Asked whether development could continue in a fork, Shannon said it was not easy due to the way optimizations are generated, leading to very large code differences that are hard to manage.

Past forays into big structural code changes have been very carefully weighted, and planned, after the execution teams had done lots of initial prrof-of-concept work.

And if you feel you need to diss “waterfall” i.e. planning in this case, I guess that means you’d want “agile”, hmmm?

JLV Silver badge

Totally agree. The language still gets a bit of flak for the breaking changes that came with Python 3 and that was with a robust migration path.

Having a deeply-embedded JIT somehow repeatedly crap in the nest under edge conditions would not to be good at all. Performance enhancement is seeing a number of somewhat-independent initiatives in Python now, and in the past few releases, so that’s not an entirely outlandish possibility.

But note that the article also warns that this JIT initiative could wither if it has to wait for 3.16+.

NHS prescribes half a million Copilot licenses for its paperwork headache

JLV Silver badge
Trollface

Tokenmaxxing?

April 2nd, 2027

“ Regrettably, NHS has burned through its IT and token allotment for this budget year. All staff are henceforth directed to pencil and paper, supplemented by abaci”.

Yes! It's true! Windows 11 is an agentic platform

JLV Silver badge
Devil

Re: "Autopilot, an omniscient, omnipresent trickster god of an agent"

Yeah so take “mordant wit” a la Pratchett, add a good dash of malice a la Gibson and strip away Banks-style innate benignity, and, especially infallibility. Give it a good shake.

Wanna bet your soul the result will work out for you?

JLV Silver badge

Re: Um....

Hmmmm, methinks you missed the point: Homebrew’s origin is as the users’ FOSS package manager of choice in macOS, ahead of macports, which I gather is itself originated from BSD ports.

Grep this: Microsoft grafts (most) Linux commands onto Windows

JLV Silver badge

Re: clarification requested

To be fair the number of websites that can’t be arsed to strip out spaces in a credit card number is even more impressive.

JLV Silver badge

clarification requested

So, should I understand that, in a powershell shell, those coreutils commands will just output a stream of text? No more, no less? With all the limitations, and advantages, of that format?

(After some quick use, I could easily see the advantages of Powershell for configuring systems due to its precise typing/object orientation, if you're wearing a sysadmin. For casual developer scripts and workflows on the other hand, this seems, to me, is an unwanted complication).

UK's top crime agency hamstrung by legacy IT, watchdog warns

JLV Silver badge

Re: Be careful what you wish for.

adding weird pointless small requirements in public sector often happened from mid level managers or biz analysts, from what I saw:

- higher ups don’t really know or care, as long as the buzzwords are ticked off

- the worker bees are rarely asked anything in depth. If the preceding system isn’t too catastrophic, they’ll say “more of the same”. Generally, they’re like mushrooms and programmers: keep them in the dark and feed them shit. Mostly they want it to just work and minimize change. Many projects flounder because the mgrs and techs are all circle jerking and don’t involve them.

- mid level managers and biz analysts however see it as a unique chance to prove their importance. Out-of-the-box application behaviour always needs “customizing”. Sometimes radical surgery that breaks the app because of some nitwit idea that the sales guy agreed could be done.

Gigabyte packs 40 Intel Lunar Lake PCs in a pizza box

JLV Silver badge

Re: Memory

Guys these are ECCeptional circumstances.

For the greats’ good, 6.40GB ought to be enough for the hoi polloi.

Angry devs vow to flee GitHub Copilot as metered billing takes hold

JLV Silver badge

A lot of AI issues…

… will go away once it’s properly priced.

Less AI slop content. Less malware. Less vibe coding BS. Less Doctor Jesuses (I wish). Less AI tai chi ads (I wish). Less layoffs when folks consider the alternative of getting a $500M bill :-(

What’s uncertain is whether there’ll be a hard landing for investors as people realize just how expensive it is.

I suspect many will look into running models locally via Ollama or the like, putting more pressure on hopes for golden geese.

FCC warns US broadcasters their licenses are a privilege, not a right

JLV Silver badge

Pretty Orwellian all around. Think about it: when your group does it, good speech. When your opponents do it: bad speech.

Next election, Americans really need to put the kibosh on the minority of citizens who believe Kings, Doctor Jesuses, censorship and taxpayer-funded accolades to felons are acceptable interpretations of their own constitution.

It's not just that Democrats need to win in November and in 2028. Longer term, the Republican party need to get its soul back (including on budget deficits!). It's unhealthy to have one party rule because the opposition can't be trusted to run a dogpound competently.

Iran slowly reconnects to the global internet

JLV Silver badge
Trollface

Probably feel a lot more secure about internal dissent, what with an external enemy to distract citizen protesters.

They’d been on and offing it during protests.

Thanks, Trump.

( oh for those who need a reminder, Saddam made the same goof in 1980 - uniting the country against foreign foe).

Deus ex machina: Half of US Christians trust AI's spiritual advice

JLV Silver badge

Re: What AI did next

... and it will use a lot less makeup in doing so.

JLV Silver badge

about 75-80% of White Evangelicals voted Trump in all 3 elections. Easy to check.

JLV Silver badge

Re: Christians

I find a chicken sacrifice sometimes assuages the Compiler Gods.

Plus, if no Noodly Appendages come out to snatch it, it’s a good start to a paella or coq au vin.

Cthulhu is likely as not to cast a Thousand Goats upon you, wouldn’t be my first choice.

Npm registry sets stage for more secure package publishing

JLV Silver badge

Re: Horse

We rely on external libraries to do stuff nowadays. So might as well secure dependencies. Will this work? Won’t speculate, further than some smart folk are trying to lock a door other clevers are doing their best to force. Worth trying to fix however.

If you disapprove so much of 3rd party dependencies, let’s see you trying to roll out your own crypto ;-)

Frustrated franchisee sues Pizza Hut over crappy kitchen AI

JLV Silver badge

Re: Proud Luddite

The economic and environmental efficiency of driving a $15 burrito in its own taxi to your place so you can pay extra for it are baffling. At minimum wage in most places, the driver’s fees plus Doordash are going to bite hard on such a low base, once past the delivery startup’s loss phase.

As you go up the food value, the economics get somewhat better, but the food deserves better and you could have sat down at what’s perhaps a nice place and been out and about.

Even Snowcrash didn’t quite foresee this:

> "When it gets down to it–we're talking trade balances here–once we've brain-drained all our technology into other countries... There's only four things we do better than anyone else: music. movies. microcode (software). high-speed pizza delivery."

p.s. not in any way to diss on the real poor, but I wonder how many paycheck-to-paychecks are big on using Doordash and making big payments on the oversized SUV they think is cooler/safer to drive to the mall with. Even when it was new - it’s an ‘09 - my Civic is usually one of the humblest vehicles in any parking lot.

JLV Silver badge

Re: Works as designed. The design sucks.

OK but if AI made things ever so more productive, then even that risk could be mitigated.

Run it as a cheap experiment, with limited investment and limited commitment. Turn it loose on a few restaurants and see how it works. Improve iteratively, pull the plug if necessary, compensate the franchisee for their role and exposure. After all, vibe coding and all that, no need for a lot of IT gurus, right?

But maybe that's just not possible if you bring in an external actor - Doordouche - whose goals may not align with yours. An actor who actually themselves wears two divergent hats: the company and their, often unsatisfied, freelance contractors, whose goals don't necessarily align either.

If only pizzerias had a tradition of running their own deliveries... :-(

Microsoft's bad obsession is showing up in shabby services and slipshod software. Here's proof

JLV Silver badge

Re: Well said

Mostly I remember renting a Ford on 2 different occasions with some truly horrendous MS music/entertainment software (Sync). Basically never managed to play my phone‘s music, despite connecting.

One which got canned by Ford years later, but not before noticeably driving down sales on the cars equipped with it.

Anthropic’s Bun Rust rewrite merged at speed of AI

JLV Silver badge

Re: Maintainers throwing in the towel?

Kinda agree. A tool that can be used wisely or foolishly.

Currently teaching myself Rust implementing what’s essentially a CLI line editor. The AI writes the code, but I design it, function by function, while reading the Rust Book and watching copious amounts of YouTube Rust info. From time to I drop down into the code and write some. In fact, I’ve started some new features handwriting them on a brand new mini-program in isolation, then asking the AI to merge in my prototype. Design decisions get done separately, chatting in the browser with a different AI.

This is a program I have long thought about writing but recognized Python was unsuited for.

I am aware it’s a bit of “training wheels”. Yet I am being genuinely productive getting started with a brand new language in a month or so and I do mostly understand what’s written because I diff everything it does, revert it whenever it gets stupid and design the architecture. Very little vibe. If anything, on my own, I feel more comfortable with Rust concepts and coding after a month than I do with Javascript after 20x the time coding it.

I also know that this approach is working only because I have written umpteen 100Ks of lines of code by hand before getting here and have researched Rust in advance. It wouldn’t work near as well as a learning tool if I were a noob. I get that, but I enjoy this process immensely. My biggest regret is my printer not working lest I print it out and review the code line by line.

Now I have 2 more ideas I want to run with, both in the programmer utilities domain.

I’ve also levelled up my bash/zsh quite a lot with it as it has facilitated me taking on new syntax which I then write by hand afterwards.

JLV Silver badge

Re: Yikes

It depends. I know most people test with unit tests. But I got started coding COBOL on a Bull to MVS migration and they did it entirely differently.

Picture a black box BZig. Given input(s) X it spits out output(s) Y. With a large enough sample size of ideally production data you just need BRust to also spit out the same Y, with any divergence aggressively investigated. Now, can Bun be coerced into essentially accepting “recorded batch inputs” and spitting out stuff that can be put into diffable files? Dunno. Quite possibly not.

This works well with regular unit tests. Essentially each time you sign off on a change of output you should add a unittest validating/justifying the new behavior.

Google users fight for refunds as unauthorized API usage bills soar

JLV Silver badge

Re: How to Respond

Lucky for Google, the amounts being talked about here seem to be over small claims court limits in many jurisdictions. That’s one get out of jail card, I guess.

</sarcasm>

JLV Silver badge

I am surprised any of these folk seem to be talking to actual Google staff.

Seriously, with some services, one criteria is the possibility of talking to someone other than a bot if you really, really, have to. So you don’t get stuck in some doom loop.

Google has a strong whiff of “LOL. Never gonna happen.” and consequently they’re at the bottom of companies I’d choose to pay anything to.

Article is only reinforcing that.

US Army goes green-ish, wants soldiers munching on plant proteins

JLV Silver badge

See, in the French army (late 80s) our field rations included a full pack of Gauloises . Good deal if you don't smoke, can always trade them out for something. I bet a lot of lobbying effort went into keeping them included for as long as possible. Don't remember much about rations proper, my unit generally always had a field kitchen going with it, we had our priorities straight.

JLV Silver badge

Re: But what about the emissions?

... "The enemy is somewhere west of us. Lads, you know what to do. Let them rip! They won't have time to NBC."

JLV Silver badge
Trollface

Even a Vulture struggles with MREs? Ouch.

Cloudflare to fire 1,100 staff whose jobs just aren’t AI enough

JLV Silver badge

Re: Can't wait for this bubble to burst

I am not sure that’s the answer either. Lots of people derive meaning from their jobs. People on welfare don’t always seem to be very appreciative of it. Or enjoy it very much. And that’s before you consider the outcomes with multi-generational welfare.

It might work for some, but is it likely to work well for the majority?

Taken to an extreme you can get a bit of a Morlock-Eloi result out of it. Not sure the Eloi are role models, with or without Morlocks.

Look too at the problems chip makers have in sourcing staff for onshoring chip fabs in the US. Letting skills atrophy in the workforce puts you at long term disadvantages wrt more vigorous countries.

JLV Silver badge

Re: Can't wait for this bubble to burst

I fear this is not likely to happen. LLMs are the latest and hardest data point on what has been a looming problem for a while.

Look at factory worker employment. It’s gone way down in volume over decades and that has … birthed MAGA. You need even more skilled workers to manage automated factories. But you need less of them.

AI, even ridiculously overhyped, will likewise reduce entry level coder needs. Unlike factory robotics engineers vs line workers however, the seniors are experienced juniors (who will mostly never get a start).

It’s the dream of a Banksian post-scarcity utopia materialized into a Bruce Sterling dystopia, with a strong dash of Idiocracy mixed in.

At some point, people will realize the problem when too few can afford the products and there isn’t enough education to support the high tech pyramid in “rich” countries.

I am not saying there is a finite basket of fixed jobs that needs to be defended as-is, union-style. I am saying we are doing a shit job of managing these transitions.

Royal Navy chief backs drones, autonomous weapons in ‘Hybrid Navy’

JLV Silver badge

We - the West - ought to spend more time figuring out what worked in Ukraine's approach to drone building and defense. And killing ships.

Big exquisite drones - Bayraktar TB2, for example - haven't really performed as expected in Ukraine. That's not to say we need to outsource thinking or manufacturing to Ukraine, but it is to say that really long procurement cycles far from the front line users have generally not delivered much.

The other thing is not overcommitting to building a lot of soon-to-be-obsolete drones, the tech is moving too quickly for that. Bruce Sterling, a cyberpunk writer of the 90s, once proposed building up flexible manufacturing capacity rather than masses of concrete weapons systems. IIRC he was pretty lyrical about it, something along the lines "and we would just unfold the origami of our automated factories and kick ass". And when we do build up concrete systems, the important thing is to be able to swap in new smarts as quickly as feasible: lots of "obsolete" gun tech does quite well against drones, if adapted, like the then already-retired German Gepards, which is now shining there. Suddenly everyone is "discovering" the economics of shooting down numerous $30k drones with sparse $600k air-to-air missiles.

And the other lesson from Ukraine Gulf War 3 is to be very very paranoid about rear area and big assets. American bases, parked aircraft and radars have been slammed repeatedly.

They don't camouflage well enough, they are in fixed positions, they don't have enough point defense and they don't use decoys much. The Ukrainians learned this in '22 and '23 when they had several cases of massive casualties from strikes on barracks where a lot of soldiers were sleeping.

Billion dollar ships will be targeted by swarm attacks of anti-ship missiles and cheap drones.

Inference is giving AI chip startups a second chance to make their mark

JLV Silver badge
Trollface

Re: Big words the author doesn't seem to understand.

Good of you to catch Mr. Cambridge with his pants down as well.

> a time of sudden, noticeable, or important change in an industry, company, market, etc.

Job's a good 'un: Bank of England tech project wins watchdog praise

JLV Silver badge

Re: Plank of England

That's one way to read it.

Another is that public sector unions in many countries insist that everyone is on a level playing field and pay isn't determined overmuch by merit. The way to go up is by seniority and/or by management level.

In other words, if you had techies pulling $150K+ salaries to save tax payers hundreds of millions, the unions would likely scream to high heaven. Not least by other techies' unions.

That's not always true. For example, people have long learned that doctors can easily move to more generous locales, so cough up fairly tidy sums (at least past the internship indentured servitude phase). But it is true more often than not.

That's not to say ERP gigs are guaranteed to go right in the private sector. They are not. But at the end of the day, all these businesses, whether private or public, need to learn how to a) source competent staff and/or consultants b) draw up realistic requirements and c) avoid bloodsucker consultancies. The public sector ought to find it easier to coordinate this by rotating staff amongst different projects, since they are after all the same employer while an individual bank will change ERPs every 20 years or so: practice makes perfect. Or at least, not Crapita.

JLV Silver badge

Re: Plank of England

True, within some possible tuning: you’re talking 22.5 man-years @ say £200k / year x 2x => 9M for the core. 10x whole project? 20x? does it have to be 40x?

Certainly not “prototyped in a weekend” territory.

The corollary however is that, while BoE may have bespoke-ish requirements and deep pockets, not every local council can afford to think of itself as “very special” and start down a path where the “success branch” means spending multiple, multiple, tens of mils to run their payroll and financials for an entirely bespoke and specific solution.

Not when the councils next door are operating within pretty much the exact same legal and biz parameters.

Cough, Birmingham, cough.

JLV Silver badge

Re: Plank of England

I agree that the bar was pretty low £400M+. Still, going back to the old programmer homily: “Make it work. Then make it fast.”

i.e. once you reached the massively impressive milestone of mostly achieving somewhat-successful £100M+ pub sec IT projects, rather than quasi-guaranteed £200M+ absolute fails, improve further.

Baby steps, baby steps.

JLV Silver badge
Trollface

Didn’t Vulture Central cover this particular project before? Might be worth reminding us more prominently lest we believe Trump has become honest, cats lie with dogs and public sector IT successes are multiplying to become as numerous as honest used car salesmen.

“At a PAC hearing in March,” is a link to that Reg article but not identified as such.

Hashicorp co-founder Mitchell Hashimoto says GitHub ‘no longer a place for serious work’

JLV Silver badge

Big respect for Mitchell. Saw him at a small event and he just comes across as a proggies’ proggie. And a nice guy. Used Vagrant, just a well thought out piece of code, from an API/CLI/behavior PoV. Terraform, never used, also looks solid.

Dude picks up zig to code ghostty which is my main terminal these days. Also a solid piece of work from .9x or whenever I picked it up. And I am a very picky terminal user.

If he’s bitching there’s probably some fire behind that smoke.

Friendster rises from the grave to make social media great again

JLV Silver badge

Re: Facebook reportedly acquired or licensed Friendster’s patents

Excellent catch, but that also dates back to 2010 with patents good for 17 year.

Stay tuned…

JLV Silver badge

Re: So...

Well, if you take pinboard.io the solo dude who built it started out selling lifelong subscriptions for a lot less than $1.00. The catch was that the price ramped up continuously as more users joined.

Clearly he didn’t go broke during that phase. I joined, years later, at $11.00 perma-sub. Did get an email about 4 yrs back, sob story about costs and could I “volunteer” for the current $22/yr? Ignored - I made him several referrals - and to be fair never heard back.

Simple compute is cheap. The guy who launched plentyoffish started it out as a tech stack learning project. Most folk never paid.

If he can get over the starting hump, keep costs down, not flunk his site security and “settle” for a few mil, why not? Wait and see, trust hope but verify…

US clarifies mobile hotspots part of foreign router ban despite rarity of American made consumer kit

JLV Silver badge

Re: So are they impounding stuff from tourists on arrival?

When September ends.

AI now gobbling up power and management chips for servers

JLV Silver badge
Trollface

Cool, soon we’ll be taking to our VC-money-dried-up, malfunctioning, AI overlords with abaci and blackboards. Very Dilbert Mad Max.

The spaghettified DBMS chart that shows Oracle's crown is slowly slipping

JLV Silver badge

Re: Strangely

It was Sybase and when I was getting started on RDBMS in the early 90s, it was far ahead of Oracle (6?) with things like stored procedures and triggers.

Oracle marketing delivered a master class in risk containment however and successfully negated that advantage in a number of shops I saw, as management was always quick to point that Oracle 7 (not yet available and which did not come out till about a year later) did have stored procedures and triggers. Even then early Oracle procedures weren't as flexible as they lacked support for SELECTing data back to the client code.

(whether stored procedures and triggers are necessarily a good idea is another question, to me they're a tool in the toolbox, to be used or not).