The Watercooler Squad is an important place for all things unimportant and nonsense at daily.dev. It’s designed to waste your time and distract you, buckle up 😻 🤹🏽‍♀️

Watercooler

The xz backdoor exploit has been discovered by a developer.

Props to the dev who discovered the xz backdoor exploit

Never underestimate the annoyance of slight increase in timings, especially when it affects power users.
I once found a bug in a zsh plugin because it added a few hundred ms more whenever I opened a new terminal session. And as someone who basically lives in the terminal, that delay increase was super noticeable.

I haven’t done native programming in C for years, but i still don’t understand how or why they have compressed binary blobs in their test suites, it sounds bizarre to me, apparently it’s mock data that would be difficult to generate otherwise?
But it’s such a massive gateway for malicious code to get injected into your project that i cannot accept it as a necessity, there must be another way to do it. If it’s not human readable it shouldn’t be in your codebase imo.