One of the goals here is to make it easy to identify existing code which would benefit from this protection and separate that code from the rest. That code is going to run anyway, it already does so today.
Playstation/Sony always a contender? They were the clear leader. The PS2 is still the best selling console of all time. 160M units to Xbox's 24M. Xbox360 caught up but the PS3 still sold more units. PS4 sold twice as many as Xbox One. The console wars has been mostly Sony vs Nintendo for a long time.
I'm less familiar with it. All I really know is that it was on the list of natural medicines that was decriminalized in Colorado. What is the experience like?
I’ve been taking doses of around 600mg ibogaine TA, every 6 months or so, bought online at the first place that comes up in google. You can experience cardiac arrest from taking it, which will quickly kill you, and I based this (IMO) safe dosage on some papers I read. Don’t consider me an authority! And there’s also certain gene mutations that can raise or lower your risk of heart problems, related to how you metabolize ibogaine/noribogaine.
(I have also tried microdosing, based on another paper I read about a woman with bipolar depression. But I don’t have much to report there.)
It’s tough to describe any altered state. But for someone who’s thinking it’s like acid or mushrooms, note that it’s not really fun or pleasant. Your heart beats slower and softer, your body feels weak and uncoordinated, and there’s little to do besides rest.
But the mind is so, so active. And it’s like an excavator. Just pulling things from wherever and throwing them into your mind’s eye. I don’t like therapy and find it tedious and unhelpful, but this feels like years of therapy squished into a 12+ hour trip. Has helped me a lot with my relationships, especially with my mom.
You see a lot of yourself. What’s ugly, what’s beautiful, what’s neutral. You feel somehow distant from your problems but close to your “self”, which makes it more comfortable to face things.
After it’s over there’s a glow and calm that lasts a while. Days, or weeks, or months sometimes. Sleep feels a little more restorative, laughs come a little easier, the dusty baseboards of the mind feel cleaner.
So these are the effects of the lowish doses I’ve been taking. Some day in a safer environment I’d love to do a real full dose. But even at this “low” dose, it’s by far the most powerful drug I’ve ever taken, in a positive way.
I think a lot of this stems from the code review tools themselves. Especially the "Don't just review the diff" mistake. Especially with GitHub defaulting to just showing a list of diffs and changed files. I'd find it much more useful if a review tool started with a class hierarchy or similar high level view to get a sense of:
1. What/how many classes changed?
2. What/how many methods have been added/removed/modified
3. What method signatures have changed
4. What changes are covered by new tests
"Don't leave too many comments" i think can really be rethought of, don't review style and syntax. Leave that to the robots. If you're relying on other engineers to flag style problems and linting, you're just wasting everybody's time. Set up linting and style checkers and be done with it.
A martial arts instructor does not tell you everything you're doing wrong on the first day. You would quit. And justifiably so. What an asshole.
You know you've progressed in their eyes every time they start bugging you about something new. You didn't suddenly become worse at something. Rather you got good enough on some higher priority thing that they knocked it off the list and replaced it with the next item in the backlog.
You should treat code reviews similarly. It's a journey, and we are in the middle. If you keep making the same comments on reviews, eventually they'll get addressed beforehand and you can point out something else.
I think like most things there is a power law distribution when it comes to these sort of roles. I've worked with a few really good security teams in my career. The good ones work with the teams, possibly embedded on improving security. The better ones also write tools and libraries for service teams to consume. The best ones act like internal white hats, constantly probe and assess, and submit patches as well.
Sadly the vast majority of sec teams are not this and exist solely to run some tool that spits out a list of dubious vulns and then dump said list as a pile of tickets into the dev backlog.
One place i worked, the CISO even came up with some slogan for the info-sec along the lines of "observe and report" after I kept trying to show the info-sec how to run, build, test, and patch our various packages and tools their scanners would complain about.
As someone who runs NixOS on my home machine, I feel this. I have an okay handle on day-to-day operations on my machine but a lot of it still feels like magic to me in both a good a scary sense. I'm still looking for great resources to go deep on Nix and really grok it.
reply