[hackerspaces] Mastodon?

[Matt Joyce]

I remember the days when hackers gave a shit about what they put on their
systems.

Shit like this:
https://www.theregister.co.uk/2016/03/23/npm_left_pad_chaos/

would have gotten node listed as a pariah in the open source community.
 but these days the average dev is oblivious to their own hellish
contributions to the kafka-esque maze of asynchronous hell that is both
pointless and unnecessary.

Find me a single security person who would sign off on npm being deployed
in a production environment that actually gives a shit about that
environment.  Or better yet, find me a CI/CD env maintainer who hasn't
discovered new and bizarre low level ways to clean up after npm's inherent
and often times insane lack of stability.

I for one recall setting up a 10GB tmpfs on a box and mounting it to /tmp
just so I could feed into inotify the creation of npm build dirs and delete
them as fast as I could.  Hopefully before the jenkins env could use npm as
a reflector attack to contend with i/o on that volume and crash the node.

You pretend this is funny, that I'm just nuts.  But some day some poor
bastard is going to get killed because some fuckwit used node.js to design
the breaking algorithm on their drive by wire sedan.

Ryan Dahl was not wrong about node when he berated it.  In fact, he was
bang on.  But here we sit in the aftermath awaiting some new fresh hell
from that project and the legion of idiots that write code in it.

-matt


On Mon, Apr 17, 2017 at 11:27 PM, \0xDynamite <dreamingforward at gmail.com>
wrote:

> Oh, shit, I remember:  JS is so fxd that browsers have to update like
> every week.  What's firefox at now: v52.0.2?  YES IT IS.
>
> marxos
>
> On 4/17/17, \0xDynamite <dreamingforward at gmail.com> wrote:
> >>> mastodon is basically written in malware.
> >>
> >> /me rolls eyes at Matt
> >
> > It's true.  Whenever I load up a heavily JS site, my system just
> > starts screwing up in demonic ways.  And, there's no denying that it
> > pretty much rips twitter's UX out of itself.  Give me an RSS feed with
> > multiple levels of publication: lovers, friends, community, public.
> >
> > JS infects by its very ease of use, it's like a gateway drug.  Pretty
> > soon every site locks you in to registration and in-bound only links.
> > It's fuckd up the whole internet.  Most JS coders don't even know what
> > a binary digit for 1 is -- I swear to you, they are scrixtkidz.
> >
> > And that's not even all, but I can't even get it out.
> >
> > marxos
> >
> _______________________________________________
> Discuss mailing list
> Discuss at lists.hackerspaces.org
> http://lists.hackerspaces.org/mailman/listinfo/discuss
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.hackerspaces.org/pipermail/discuss/attachments/20170418/e492f57d/attachment.html>