Matt Rickard

Yeah, I want to write it in Ether, honestly. It's going to be fun.

Yeah, I want to write it in Ether, honestly. It's going to be fun.

almost like the process of iteration is necessary, right? Like the, you almost learn something. You said that as the surface area of the program evolves, it's almost like this iteration through the flow, this heptagon is necessary to sort of like flesh out the brittleness or the flexibility, then the eventual brittleness again of an application. Cause you sort of learn something about it.

almost like the process of iteration is necessary, right? Like the, you almost learn something. You said that as the surface area of the program evolves, it's almost like this iteration through the flow, this heptagon is necessary to sort of like flesh out the brittleness or the flexibility, then the eventual brittleness again of an application. Cause you sort of learn something about it.

You provide configuration to the user base so that they can use it more different, you know, in a more flexible manner.

You provide configuration to the user base so that they can use it more different, you know, in a more flexible manner.

then those flexibilities turn into like well this is now a best practice so all those things solidify to now you want to just hard code them so almost everybody uses the same flexible configuration in some cases i mean there's a thousand different ways you can slice how this is used in the real world but that seems to be a necessary iteration process yeah yeah i really like that point i think it's a lot about discovering what those best practices are and starting to codify them and in different sorts of ways

then those flexibilities turn into like well this is now a best practice so all those things solidify to now you want to just hard code them so almost everybody uses the same flexible configuration in some cases i mean there's a thousand different ways you can slice how this is used in the real world but that seems to be a necessary iteration process yeah yeah i really like that point i think it's a lot about discovering what those best practices are and starting to codify them and in different sorts of ways

What do you think comes out of the falling prey to it again and again? Do you think that it's a necessary thing that you just...

What do you think comes out of the falling prey to it again and again? Do you think that it's a necessary thing that you just...

learn from and grow from as a result of like just this awareness that it's not efficient to repeat yourself instead of saying don't let's say maybe not repeat yourself or should not versus don't and it's kind of a little softer on the it's maybe just being more aware of the times when there are the patterns you should said jared like the pattern matching to just be aware that these can lead down bad roads if you repeat yourself too often it makes sense to dry up things

learn from and grow from as a result of like just this awareness that it's not efficient to repeat yourself instead of saying don't let's say maybe not repeat yourself or should not versus don't and it's kind of a little softer on the it's maybe just being more aware of the times when there are the patterns you should said jared like the pattern matching to just be aware that these can lead down bad roads if you repeat yourself too often it makes sense to dry up things

You know what I mean? To treat it more loosely? It's like an awareness thing.

You know what I mean? To treat it more loosely? It's like an awareness thing.

Is there a best practice for commenting then? Are you commenting every function? How to get to the point where you need to explain every single thing? If you're going to explain...

Is there a best practice for commenting then? Are you commenting every function? How to get to the point where you need to explain every single thing? If you're going to explain...

Okay, we're here in the breaks. I'm here with Faraz Bukhdiye, founder and CEO of Socket.dev. So Faraz, you put out this fire post recently on X. And I'm going to paraphrase. You say the XZ package backdoor was just the tip of the iceberg. Give me just a peek behind the scenes of this incident and what you mean by it's just the tip of the iceberg.

Okay, we're here in the breaks. I'm here with Faraz Bukhdiye, founder and CEO of Socket.dev. So Faraz, you put out this fire post recently on X. And I'm going to paraphrase. You say the XZ package backdoor was just the tip of the iceberg. Give me just a peek behind the scenes of this incident and what you mean by it's just the tip of the iceberg.

Okay, friends, go to socket.dev. Security dependencies. Socket is on the front lines of securing the open source ecosystem. They're a developer-first security platform that protects your code from both vulnerable and malicious dependencies. Install the GitHub app or book a demo. Again, socket.dev. That's S-O-C-K-E-T dot dev.

Okay, friends, go to socket.dev. Security dependencies. Socket is on the front lines of securing the open source ecosystem. They're a developer-first security platform that protects your code from both vulnerable and malicious dependencies. Install the GitHub app or book a demo. Again, socket.dev. That's S-O-C-K-E-T dot dev.