Huh, it’s that buffer thing that I didn’t know about and isn’t mentioned in your link (maybe it’s Forth specific?), I use an RPN calculator app, but everything goes on the stack, so “This” would be on the bottom and be popped off last.

Thisgreatisone! ?

If the operands go the other way, I suppose:

oneisgreatThis!

My understanding is that this really does hurt the dev, reduces visibility to new users, etc.

Because in general, making things more difficult for an adverse party has great potential for also having side effects for proper users. And conversely, making things easier for proper users very often also makes it easier for adversaries.

You’re right that it’s not a strict 100% rule, but it’s so common a pattern that keeping it in mind when making security decisions (to avoid fulfilling it or at least weigh risks) is a good practice.

Yup. It’s a thing.

That’s the joke.

Best case, it’s available for barter.

Would you be up for explaining it please?

Oh, that’s good to hear.

My understanding is that for most package managers the signing keys are held by a smallish number of maintainers responsible for entire sections, who presumably keep those accounts pretty tightly secured. Not impossible to take over, but it’s a smaller attack surface.

While for NPM as far as I know every uploader keeps their own account and there’s not even signing keys to lose control of.

I’m beginning to think this “NPM” thing isn’t a great idea.

My luck has been so bad lately that it gave me the super-pity this time (Capturing Radiance)

Because of that mechanic, I’ll never again be able to lose as hard as when I first started: of the first 14 times I faced 50/50 I won 3 of them.

Nice!

It’s more likely than you think

I’m on the edge of that, it started existing while I was in college, but was called Phoenix, and then Firebird. It didn’t have the name Firefox until I had graduated.

Works for Apple, but I don’t expect much overlap with Linux users.

There’s the option to login with caution, but what if I want to login with reckless abandon?

Still not as frustrating as Timaeus.

That cancer support line should buy this one also

Exactly that. Drivers don’t generally have much UI (I guess module load parameters count) so getting it working is most of the job.

It’s the user facing applications which sometimes feel a bit unpolished. That has definitely improved over the years though.