CodexArcanum

Incorrect! Some of them are CIA ops who do it for love of the game!

“Science” doesn’t do or advocate anything, it’s just a method. It’s like pitting Religion against Object Oriented Programming (They’re the same picture)

Anyway, great shitpost

You’re understanding of “gig work” is comically outdated. You sound naive or trollish. “Jobs for teens” like fast food work, grocery clerking, and working at movie theaters have always been taken by people who need “real jobs” and not just teens looking for extra money. So you’re wrong that these careers exclusively for kids to get pocket money ever existed, certainly not in living memory.

Secondly, OP isn’t talking about working the carwash for the summer. He’s talking about Uber and AirBNB. Maybe you heard of them? Over the last decade, they’ve caused massive disruption of the hotel and taxi industries by allowing thousands of unlicensed and unregulated “micro entrepreneurs” 🤮 to create a new economy of pay-per-task workers who end up owning all the physical assets (which rapidly deprecate in value) but none of the infrastructure or investments (which do not, or do so on much different schedules).

Houses being bought up for short term rentals has contributed to the housing crisis. Its caused economic harm to inner cities. It’s a looking part of the polycrisis destroying the practical economy and the planet’s livability. But yeah man, the real problem is lazy people just don’t want real adult jobs, give me a fucking break.

I’m kind of weirdly horny for Torvalds making unilateral decisions about long running controversies? Tell me what standards are best kernel daddy.

Maybe next he can ban tabs and ‘\t’ from Linux? Everyone indents with spaces now, debate over.

I feel like its a mixed bag. Certainly there’s an infinitely higher chance of someone randomly noticing a backdoor in OSS than in closed source simply because any OSS project in use has someone looking at it. Many closed systems have dusty corners that haven’t had programmer eyes on them in years.

But also, modern dev requires either more vigilance than most of us have to give or more trust than most of us would ideally be comfortable offering. Forget leftpad, I’ve had npm dependencies run a full python script to compile and build sub dependencies. Every time I run npm update, it could be mining a couple of bitcoins for all I know in addition to installing gigs and gigs of other people’s code.

The whole industry had deep talks after leftpadgate about what needed to be done and ultimately, not much changed. NPM changed policy so that people couldn’t just dissapear their packages. But we didn’t come up with some better way.

Pretty much every language has its own NPM now, the problem is more widespread than ever. With Rust, it can run arbitrary macros and rust code in the build files, it can embed C dependencies. I’m not saying it would be super easy to hide something in cargo, i haven’t tried so I don’t know, but i do think the build system is incredibly vulnerable to supply chain attacks. A dependency chain could easily pull in some backdoor native code, embed it deep into your app, and you might never realize it’s even there.