Notices by kaniini (kaniini@mastodon.dereferenced.org), page 5

had the author shown intellectual rigor by demonstrating projects written in a spectrum of programming languages, some Go, C, C++, Python and Ruby, then they could have transferred out to a different team and gotten off the "grunt track."

accordingly, they would have been on projects that weren't dead on arrival and he would have gotten the promotion he felt he deserved.

in this case the system actually worked as designed: somebody who did not bother to apply themselves and demonstrate a wide spectrum of skills (which would make them far more valuable) got put in the grunt track and was kept in the grunt track

back to mediocrity: the author's github has all of the clues you need. what do i mean by that? well, his projects are:

- largely written in Go
- largely deployed by Ansible

there is no evidence of any other programming language use

Go and Ansible are good tools, but usage of only those tools does not show a well-rounded, multi-disciplined software developer.

in fact, Go and Ansible are tools that were explicitly designed for junior-grade software developers from day 1

much like the orcs in warcraft 3 happily going back and forth, carrying bags of gold between the gold mine and the stronghold, the grunt track is essentially a track where you do boring maintenance work for the company

these engagements last for a few months until the company realizes "oh wait, we can outsource this to our India team and save money"

then the India team gives you something they screwed up and you get to untangle it

the punchline, of course, is that untangling it doesn't bring new tangible value to the company, so they don't care when it comes time for asking for promotions

reading through the blog post, I quickly realised what the problem was: the author was mediocre, in every way

unfortunately, this meant the recruiter who got him placed, got him placed on what I affectionately call the "grunt track"

a mediocre developer quits his grunt track job at google because he couldn't get a promotion:

https://mtlynch.io/why-i-quit-google/

@argentinoXcat @Elizafox

you seem polite

@Elizafox

make SNAP only redeemable at farmers' markets. done.

@elomatreb

in TLS, a separate MAC is typically used, which is really the way to go

@elomatreb

in TLS the authentication of each message is guaranteed by use of a negotiated session key

if the packets are malformed, the decryption will fail and a TLS alert will be sent (usually followed by dropping the connection)

@elomatreb

ugh, not the Camellia-GCM proponents

there is literally no value in using Camellia in GCM mode

@elomatreb

no idea honestly considering the actual software itself spells Camellia correctly

(and Camellia is a pretty decent cipher to use for TLS, Pale Moon supporting it is certainly no problem, but NSS already supported it which makes me wonder if he played with it somehow, which seems scary)

I mean, the intentionally unpatched CVEs should be enough to demonstrate that the maintainer doesn't make good decisions, right?

But on top of that, the maintainer wrote the docs himself, so it proves he doesn't know anything about encryption and therefore has no business forking an SSL library (yes Pale Moon forks NSS).

And remember, if you try to fix any of this unmitigated disaster, you get treated to harassment from the maintainer and his social circle.

Which is exactly why Pale Moon is blocked from ever entering Alpine.

I noticed that the Pale Moon idiots refer to the Camellia family of ciphers in their documentation as "camilla cyphers".

We can add that to the list of reasons not to use their software if you want security.

@kiilas I mean, you're not wrong

NOT THE SAME THING AT ALL

you know, I was reading about some bondage stuff and they discussed CBT

now, coming from a psych background, I was like "what does cognitive behavioral therapy have to do with bondage? this sounds interesting"

let me tell you, what *they* call CBT is an entirely different concept entirely than cognitive behavioral therapy

@loke @Elizafox

it is possible to disable the cancel button, actually (as the gif shows)

@Elizafox

i used to own an HP DeskJet 710C printer, so how about THAT

@Elizafox

I GET WALLET, PURCHASE CAMERA