#development

1 messages · Page 303 of 1

sharp geyser
#

Ima be so fuckin for real

#

I pronounce it how I want

#

Down with the normies

high gale
#

can i know how ppl got colored text and the different animations on thier bot page of top gg?

deft wolf
#

Custom html/css

high gale
#

😭

#

i really liked the animation one in someone bot page icl

lament rock
#

Perhaps you should try learning some front end instead of having someone else do it for you every time you need a change or something new

frosty gale
#

americans pronounce it car

teal kelp
#

Yay I love Discord bugs They're fun to fix

There is a reading this I meant to say discord bot not discord

stark kestrel
#

since you fix discord bugs, can you fix its memory usage without an automated restart KEKW

high gale
#

its ight tho

#

ty

deft wolf
lament rock
#

I mean like. It's there on the bot edit page so that's how

#

but unless you never looked or overlooked it, I took it as you want someone to give you html to put on your page which is why I put my suggestion as it'd be the most beneficial in the long run

teal kelp
#

Maybe buy more memory

deft wolf
stark kestrel
#

Don't need more than what I have

teal kelp
#

Your bot obviously are using up too much ram

stark kestrel
#

Electron's just horrible

deft wolf
#

XD

#

I love miscommunication

stark kestrel
teal kelp
stark kestrel
#

I mean Discord is

teal kelp
#

It shouldn’t

#

No, I just got bots

#

I also miscommunicated

#

Especially when you don’t get much sleep when you work

stark kestrel
teal kelp
#

I meant discord bot not discord

stark kestrel
teal kelp
#

My brain’s been having a fart

#

Haven’t had much sleep for the last three days

#

So brain is currently not functioning

#

lol

#

I’ve been trying to take a few days off this week to reset my brain

#

There’s one thing I do miss about old discord bots when you should be able to do ! even though you can still do it I prefer the/commands now

cedar crescent
#

@harsh nova Bro, it's been 14 days and my application hasn't been reviewed yet.

grave zealotBOT
#

@cedar crescent

Bot Reviewal Time

Our current average review time is <1 week.

Some bots may take longer to review than others depending on their features. Because of this, we can't guarantee your bot will be reviewed as quickly as someone else's, and there's no exact timeframe for approval. There's also no way to check your position in the queue - but remember, you're not first or last!

You're free to edit your bot's page anytime, both before and after review. This won't affect your place in the queue.

💡 In the meantime, please make sure your bot follows all of our Bot Guidelines for a quick and smooth approval!

harsh nova
#

our review times are 1-2+ weeks

cedar crescent
low marten
#

i had no idea Discord dms you when your bot hits 75 servers

#

i got notified and thought i got termed or somethingn 😭

radiant kraken
lament rock
low marten
#

omg

#

😭

deft wolf
#

I remember when there was a rumor about some app that it was better to ban it from your server because it was spying or something kappalul

lament rock
#

Discord spies on you, so you should ban it!

#

I literally talk about something in a vc and then get served ads about it 5min later when I watch yt while eating

prime cliff
# lament rock Discord spies on you, so you should ban it!

🔁 foxglovecove

moondane-lovers

Saw this going around and tested it myself, and I can confirm that this is unfortunately legit. Four hidden bots have been placed in any existing or newly created Discord server that are harvesting data, images, and most concerningly, one seems to be a face swap bot.

Due to them being invisible, banning them from your servers isn't possible without their ID's, which I've typed out for easy access.

1153984868804468756
1288638725869535283
1090660574196674713
1104973139257081909

Banning is done with the /ban command with each string pasted in one at a time. Four ban commands in total.

Image proof below and further information. This was in my PERSONAL server that has existed for +5 years. Discord is harvesting your shit without your consent, fight back.

unluckyxse7en...

-# #discord

#

User apps are called spyware kekw partially true though imo

deft wolf
#

Yes, this one xd

#

Just because you can ban any application/user by ID, people believed it

lament rock
#

Lmao. Them being banned from the server doesn't "prove" they were in it in the first place. User apps are a little sussy, but you don't get any gw events for a guild you are not installed on

neon leaf
#

copilot moment

prime cliff
#

👀 doing some hytale modding

deft wolf
#

Good luck

frosty gale
neon leaf
#

dude it literally suggests typos

#

tf u mean is it the most ahh

frosty gale
#

im always using cursor because copilot never does well for me

neon leaf
#

i absolutely hate it

#

it does sometimes suggest something good

#

but take too long to care

frosty gale
#

in visual studio it gave me suggestions with random indentations every line and nonsensical code 💀

neon leaf
#

better than hallucinating variable names

#

and then even having typos in them

#

i cant count the number of times it suggested "recieved" instead of "received"

frosty gale
#

probably commonly seen typo in their training data lmao

#

though you dont see that mistake with other llms, which is confusing because copilot uses the openai models (at least i think so, anthropic as well)

neon leaf
#

i think they lobotomize their models quite a bit

#

unironically I got better suggestions in their free tier

#

I think this isnt a coincidence

#

so you buy their paid plan and think "eh its having a bad day" or something

neon leaf
hazy heron
#

WHAA

neon leaf
stark kestrel
#

Yeah, used it and it's pretty cool

radiant kraken
#

yeah like the one in C++

#

i prefer using mpsc::sync_channel(1) or oneshot::channel() tho because they let me pass messages

#

like Results

neon leaf
#

yeah, thats what im currently using too

#

im not quite sure what usecase id have for Condvar

stark kestrel
#

semaphore

neon leaf
#

ah I use the tokio one

stark kestrel
#

only reason i've used it so far

radiant kraken
#

my multithreading app pretty much depends on mpsc channels lol

#

there's only one rwmutex i think but the rest is channels

neon leaf
#

yeah im guilty of channel abuse

#

one of the worse examples

radiant kraken
#

i love them for this thing, i dunno what it's called

neon leaf
#

I should maybe follow your tracks and actually write comments in my code

radiant kraken
#

yeah, did it with my newest project, makes it look super clean

#

wish i did the same with my most popular project, it would take weeks to properly document everything

frosty gale
#

get an llm to write some

frosty gale
neon leaf
#

it already existed for a good time know via cranelift

#

but it may be coming "officially"

#

its not quite real jit yet but its faster than compiling regular debug builds

radiant kraken
sharp geyser
#

Whatcha guys think of this. Mock data in the listings grid but yeah

#

You have to login to see the name of the seller and their contact information. Later when I implement messaging that will also be a thing required to be logged in to see a prompt for

#

Not sure what else I should display on their page, like maybe reviews or something? hmm

regal bison
#

hmm

#

kinda sus that store

#

not gonna lie

sharp geyser
#

What?

regal bison
#

kinda clean

#

that page

#

for real

sharp geyser
#

Why'd you say sus

regal bison
#

"test product"

#

10 bucks

#

not worth it

#

@real rose

sharp geyser
#

It's...mock data?

regal bison
sharp geyser
#

sigh dont fall for it Aaron its just a troll / rage baiter

#

Anyways

#

fuck outta here if you going to say some stupid shit

regal bison
#

its really good man

#

i like it

#

clean page

civic sundial
#

guys is there smth like one time bot invite link that should expire after the person invite the bot

deft wolf
#

I don't think so, anyone can add your bot if they know its ID. Depending on what you want to do it might be possible to use a redirect URL(?)

stark kestrel
#

you could add state and redirect uri to handle that

#

you can also use the state to handle the sort of one time invite link

#

either way you gotta have a web server to handle the redirect and the bot to leave servers that joined without the web server "saying" it's ok

neon leaf
#

im so stupid

#

i forgot you can do function pointers without boxes

radiant kraken
#

what boxes do to a mf

neon leaf
#

facts

real rose
hazy heron
frosty gale
neon leaf
#

ye but u cant make them point to closures with outside data

#

very bad

frosty gale
#

i rarely ever use closures unless i have to which simplifies a lot of my code (the inner C in me never really went away)

frosty gale
neon leaf
#

i love closures

#

but they are a bit misleading

radiant kraken
#

probably almost never

#

i only use closures as a last resort

radiant kraken
#

@pearl trail !!!!! (he made a bun version of your kazagumo)

deft wolf
#

Oh, the same guy who advertised on ddevs today Weirdge

radiant kraken
#

@knotty night boop

knotty night
#

@cloud temple please refrain from advertising

prime cliff
#

Why is intelij ui so horrible 🙃

wheat mesa
#

more popups please

radiant kraken
#

hai waffle!!!

lyric mountain
prime cliff
pearl trail
lyric mountain
frosty gale
#

@neon leaf bruhhh all this time with axum + serde + serde_json i thought that all my data in the struct had to be owned before serializing because the data i was pulling from was in an arc and thought in rust there was no easy-ish way to prove to the compiler that the borrowed data from the arc is guaranteed to still be there while serializing
turns out explicit lifetimes were all i needed, that is going to save a TON of heap allocations and get me back some extra performance since this is used for api response bodies
learning rust day by day

#

i usually try to avoid explicit lifetimes because i always seem to run into cases where i need to track the lifetime everywhere where its used but here it doesnt seem to be the case whcih is great

neon leaf
#

yes yes, you can even do this for deserialization (Cows with json deser is peak, no need to allocate if unescaped string)

#

but quite a bit more complex

#

are you using compact strings btw or regular strings?

#

Ive found my memory fragmentation issues to completely vanish ever since switching

frosty gale
#

but its on the todo list

radiant kraken
#

all my homies hate heap allocations

radiant kraken
#

though sadly my use case atm still demands a String soo

neon leaf
#

im wondering if theres a proper way to "stream" json files with a top-level array using serde

tulip iron
#

I want to make my bot work in dm and I don’t know how can someone help me? Please

pearl trail
#

if you are using slash command, it works on dms too by default iirc

knotty night
#

yes it should

radiant kraken
#

mhm

tulip iron
#

Et me see

#

Let*

#

It doesnt appears

frosty gale
#

although yeah annoying thing is you cant do it completely if you have strings that need to be escaped

#

otherwise you can just reference a slice to the original buffer

radiant kraken
#

yup

frosty gale
#

i would be ok doing that though if it means i can selectively escape certain string members (even in the code) that i know might need to be escaped (which wont be many)

#

this is why real programmers use protobuf or use some kind of binary protocol instead of silly json to avoid these silly high level programming problems

#

transferring data via utf-8/ascii feels like 1981 smtp style aah

neon leaf
#

im prob gonna make my api support multiple return content types

#

since I use my own http response wrapper everywhere already anyway

#

and requires serde

#

so perfect conditions

#

but in my case a more dynamic response type would still be needed (by that I mean one that includes field names)

radiant kraken
#

my uni hw required me to use heroku and mongodb

#

felt like stepping back to the past 😭

#

...nevermind fuck heroku

warm surge
radiant kraken
#

aint no way im specifying my billing info during signup

warm surge
#

like 66666666666666666666666666666

radiant kraken
#

nah

#

im redeleting my account and switching to Render

radiant kraken
#

so i have to pay $7 to properly do my homework 😭

#

nevermind, spinning down is not the same as shutting down

#

please use a less threatening word topggSob

civic sundial
#

can someone guide me a lil how can i setup the topgg api

frosty gale
#

i can only imagine its massive companies that are locked into their ecosystem due to a poor decision by one of their lead developers 10 years ago

radiant kraken
#

my uni for their react course 😃

stack used: react, react router, express, mongoose, heroku/render, google analytics/logrocket

frosty gale
radiant kraken
#

that's render, not heroku

frosty gale
#

ah

radiant kraken
#

i deleted my heroku account

#

never again

#

this is much much better

#

(for this use case)

#

YOU GOTTA BE FUCKING KIDDING ME

frosty gale
#

too much abuse

radiant kraken
#

fair enough

frosty gale
#

i just make a virtual card which i set a limit on in case they try to do something sus lol

radiant kraken
#

all of my cards are declined 😃

warm surge
neon leaf
#

its prob an old guide

#

(heroku used to be free without cc)

radiant kraken
#

no

#

im using render

#

heroku is no longer free

#

i tried 3 cards and they all got declined

neon leaf
#

ok im going back to sleep my brain hasnt woken up

radiant kraken
#

beautiful

vivid fulcrum
#

google cloud used to offer $300 credit for first sign up. they still might do, worth checking that out

#

I used to shuffle 4 revolut cards in a circle. by the time I used up credits on the 4th one, the 1st card got deleted from the system and I could do it again lol

stark kestrel
#

and that's why one-time cards are useful

neon leaf
radiant kraken
#

the ultimate react experience

frosty gale
radiant kraken
#

i got 9 of them

#

fabulous

neon leaf
#

why is this legal

#

it feels cursed

radiant kraken
#

traits being traits

radiant kraken
#

man gotta love to see a deployment fail because of a single trailing slash in a URL 😃

crimson vapor
#

hey @scenic kelp wyd around these parts

scenic kelp
#

was i typing or smth

#

i was lurking

crimson vapor
#

yes

warm surge
#

nerd

#

@crimson vapor

warm surge
#

gif is so big it has to be long

crimson vapor
#

yeah thats a funny one

#

idek why its kullu and not guha

neon leaf
stark kestrel
#

simdeez

radiant kraken
#

thanks!

rustic nova
#

simon deez

frosty gale
radiant kraken
#

yeah SIMD things are usually peak

frosty gale
#

only sad thing is it you cant serialize with it, the library doesnt support it

#

i did talk to the maintainers about it but they said they dont have enough people working on it to implement serialization

radiant kraken
#

bummer

frosty gale
#

there is some very infrequent talks about it though

#

so atm you need 2 different libraries to do both serialization and deserialization

neon leaf
#

I will not even attempt to guess how cursed this must be under the hood

frosty gale
neon leaf
#

well im not gonna complain because it somehow works

#

nvm I see

#

when the scoped future is polled, it sets a thread-local var to point to itselfs task_local context

#

then any subfutures that get polled can read the thread-local var

#

and when the poll is done, it gets reverted

#

quite genius solution

neon leaf
#

no way guys

#

finally a yaml crate without 10000 cves

radiant kraken
#

LMFAO

lament rock
#

The last recorded record. We could not hit 2000 before our ISPs shat themselves at the worst possible timing

#

How upsetting

#

We hit 1950 hours at least just didn't screenshot

neon leaf
radiant kraken
#

😭

frosty gale
#

lol

frosty gale
errant flax
#

wait nvm, index.html was somehow moved

radiant kraken
#

github has a stroke

neon leaf
#

why is caching so hard

swift barn
neon leaf
#

no way

#

this literally released 3 days ago

#

(still has cves but less so thats progress)

stark kestrel
#

toml for rust
json/yaml for go

neon leaf
#

ye but what if I need yaml

#

do I need to turn go code into a c lib to use it in rust

stark kestrel
#

you go for go KEKW

#

gogogo everywhere go

neon leaf
#

what am I even looking at

grave patio
deft wolf
low marten
#

i think i'm making progress

#

color pallette is still a maybe, i decided to phase out some of the flashy visual charts and opt for more data focused alternatives

#

these were taken on the latest public build. Charts use the rechart library, although some may be swapped out soon

clever tundra
#

wow, another rebrand

low marten
clever tundra
low marten
clever tundra
split bane
#

looking ight

spring hemlock
#

im fw it

split bane
neon leaf
#

how to increase your rust vtable data by 10mb:

pub trait AsAny: std::any::Any + Send + Sync {
    fn as_any_boxed(self: Box<Self>) -> Box<dyn std::any::Any + Send + Sync>;

    fn as_any_ref(&self) -> &dyn std::any::Any;
    fn as_any_mut_ref(&mut self) -> &mut dyn std::any::Any;
}

impl<T: std::any::Any + Send + Sync> AsAny for T {
    fn as_any_boxed(self: Box<Self>) -> Box<dyn std::any::Any + Send + Sync> {
        self
    }

    fn as_any_ref(&self) -> &dyn std::any::Any {
        self
    }

    fn as_any_mut_ref(&mut self) -> &mut dyn std::any::Any {
        self
    }
}
low marten
#

may i gain this server count one day ❤️‍🩹

quartz kindle
#

gemini what the fuck

#

see this is how they make you waste tokens without you noticing, no wonder you run out of usage so fast

lament rock
prime cliff
#

I forgot what that term is called for ai loops

lyric mountain
# quartz kindle

*clears throat*
"Pardon my manners, it appears that I've glitched"

#

Lmao

pearl trail
frosty gale
# quartz kindle

surprising it did that because basically all serious LLMs have a parameter called a "repeat penalty" which basically discourages the LLM from using a specific token if it already appeared in the response (discouraged more if seen multiple times) which basically eliminates these kinda loops

#

gemini must have it be a little less aggressive

split bane
split bane
frosty gale
#

me when i lie to icann about my domain registration information

quartz kindle
frosty gale
#

im buying a domain not applying for a mortgage 😭 why they need so much info

deft wolf
#

Probably in the case of abuse it's extremely useful to track you down or something

sharp saddle
#

anyone know what's wrong?

#

😭

#
# Simple workflow for deploying static content to GitHub Pages
name: TSDoc Actions

on:
  push:
    branches:
      - master
  release:
  # Allows you to run this workflow manually from the Actions tab
  workflow_dispatch:

# Sets permissions of the GITHUB_TOKEN to allow deployment to GitHub Pages
permissions:
  contents: read
  pages: write
  id-token: write

jobs:
  # Single deploy job since we're just deploying
  deploy:
    name: Deploy Documentation

    # Deploy to the github-pages environment
    environment:
      name: github-pages
      url: ${{ steps.deployment.outputs.page_url }}

    # Specify runner + deployment step
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@v3

      - name: Setup Node
        uses: actions/setup-node@v3
        with:
          node-version: 20
          cache: "npm"
      
      - name: TSDoc Action
        uses: erikyo/tsdoc-action@v1
        with:
          source_dir: ./src/*
          output_dir: ./docs
          front_page: README.md

      - name: Setup Pages
        uses: actions/configure-pages@v3

      - name: Upload artifact
        uses: actions/upload-pages-artifact@v3
        with:
          # Upload entire repository
          path: "./docs"

      - name: Deploy to GitHub Pages
        id: deployment
        uses: actions/deploy-pages@v2```
stark kestrel
#

Actually 2, one to install it - one to generate

sharp saddle
#

but ty, i'll fix it

stark kestrel
#

It may still be working but yeah, things change

frosty gale
#

golang is officially one of my fav languages

#

it is everything i wanted javascript to be

#

simple, low-level ish and flexible

hushed patrol
radiant kraken
#

golang is pretty cool

#

almost on par with rust

neon leaf
#

but can go do this

use std::ops::Deref;

type BBox<'a> = Box<dyn Deref<Target = Box<dyn Deref<Target = Box<u8>> + 'a>> + 'a>;

fn main() {
    let bbox: BBox = Box::new(Box::new(
        Box::new(Box::new(Box::new(9u8))) as Box<dyn Deref<Target = Box<u8>>>
    ));

    println!("Hello, world! {}", *****bbox);
}
radiant kraken
#

please get this out of my face

neon leaf
#

no

radiant kraken
#

im gonna put you in a box

#

so youll stop

neon leaf
#

I prefer being in an Arc

radiant kraken
#

no

#

😠

neon leaf
#

😡

prime cliff
#

Hey all for anyone doing hytale modding working on a website to show a collection of resources, guides and tutorials for modding 🙂

sharp saddle
#

sending spam

acoustic bough
steel oxide
#

i think two things that jump out at me are the "App" label (seems a bit out of place given that styling) and the slanted "Get started here in seconds"

#

-# idk what suggestion for improvement to make tho lol

steel oxide
acoustic bough
stark kestrel
#

By seeing the screenshot pretty much the same opinion, I will look at the website itself later

The app badge stands out because it doesn't really follow along with the theme

acoustic bough
steel oxide
#

i don't have a great eye for design tbh ;P

acoustic bough
#

im a backend dev lmao idk what I am doing

#

for mobile I will prob place the buttons beneath the showcase or smth, honestly no idea

#

looks odd rn

steel oxide
steel oxide
frosty gale
neon leaf
#

nooooo

frosty gale
#

these AI memes are getting out of hand

neon leaf
#

im stealing this

prime cliff
frosty gale
#

i cant believe github still doesnt support sha256 repositories

#

github should in theory only have one job which is be somewhat compliant with Git so that it can effectively act as a web dashboard for Git repositories

#

instead we are getting AI features on the home page nobody asked for

stark kestrel
#

they'll likely move their asses off when git 3.0 gets released with sha256 as default

radiant kraken
frosty gale
#

i have a repo that i keep on my private gitea instance that i want to sync to my github but i cant because i created it under sha256 lmao

stark kestrel
#

so they added a guard to prevent collisions, even if git doesn't do it on pure content

#

so they don't have much reason to move use sha256 (for now)

#

compability yeah sure but like they can postpone kinda forever

#

until git 3.0 releases at least

modern wind
#

Uh

neon leaf
#

are we just reinventing xml

queen needle
#

yes

sharp geyser
#

then again never used terraform

frosty gale
#

so many companies start to wet themselves with excitement whenever they hear terraform

#

if you see a job ad for an infrastructure/devops job 9 times out of 10 they will mention terraform

#

so i think its very common in companies

#

i suppose its helpful if you operate something like k8s and want to dynamically spin up more compute instances in the cloud maybe?!

#

maybe replicating a live environment in a test env too

jaunty cypress
acoustic bough
#

please wait 5 minutes

jaunty cypress
warm surge
acoustic bough
#

partially

jaunty cypress
warm surge
#

bro got api banned

acoustic bough
#

first time in five years

#

I cannot see any spam in my logs

warm surge
#

lmfao

#

thats funny

warm surge
#

yk its my job to break your shit sometimes

jaunty cypress
#

I'm so confused rn about my bot

warm surge
#

im fixing my spotify rn

jaunty cypress
#

I did fixed thsi sh###t 5 times

warm surge
jaunty cypress
#

it say failed

frosty gale
# warm surge

spicetify user detected opinion rejected spotx is on top

jaunty cypress
#

guys do you have got any good custom emjis 🙂

warm surge
#

@acoustic bough hey i broke it

jaunty cypress
#

yo guys I'm also a Ui designer, I want do rated something that I made for my bot

#

thats the logo

sharp geyser
#

Seems like a typo

#

Swirft

deft wolf
#

I think they are just wrong, right?

sharp geyser
#

Was the typo not enough

deft wolf
#

People make weird names kapp

acoustic bough
jaunty cypress
#

ye it does work now

jaunty cypress
# deft wolf

lo not every website you shoudl trust, If I put it anywhere else it says its Ki

deft wolf
#

So you didn't use AI to generate this image?

jaunty cypress
sharp geyser
#

Nothing wrong with using AI tbf, just know that it doesn't make you look good

jaunty cypress
acoustic bough
jaunty cypress
acoustic bough
#

i mean ye the entire bot was api banned for like half an hour or more

jaunty cypress
#

I got rn some problem with charts too, It dosen't work

deft wolf
sharp saddle
swift barn
# acoustic bough please wait 5 minutes

KEKW same thing happened to me, like a year ago😭 😭 temp work around i did was to proxy outbound requests just until the ban was overakward (stil didnt find what caused the ban up till now but ive added a few mitigations to help anyways )

acoustic bough
#

I got api banned 5-6 times this night

#

I just got token reset for too many connections

swift barn
acoustic bough
#

like wtf? I am not spamming shit

#

I literally only have 4 gateway connections, which are not spamming or reconnecting

swift barn
acoustic bough
#

you can see all my api bans

#

that last graph is very broken due to missing data but thats expected

swift barn
#

i think the users endpoint is being fetched wayy too much ?
/users/:id
this
i mean yeahh i see the ratelimit added, but still looks like it may be getting spammed ?

acoustic bough
#

5 requests isn't really anything

#

and I have a cache with like over 100k users in it

#

global api ban is way beyond 5 requests

swift barn
#

yeahh its a weird one, you can try potential workarounds though, till you can find whats wrong, cos im still sure its a certain endpoint being "abused" (which discord thinks )

#

discord support wont even be of much help, cos this is what they said when it happened to me

acoustic bough
#

I literally log EVERY SINGLE REQUEST that has a ratelimit header attached

#

and I only have five logged

#

and I haven't deployed anything in the last week

#

and it's just now

swift barn
acoustic bough
swift barn
#

yeahh weird pain

digital swan
acoustic bough
#

the user endpoints could be my leaderboard pages though

frosty gale
#

they dont charge per ip but per network interface so you can rotate ips as rapidly as you want

crystal wigeon
#
Unable to spawn shard:  Error [SHARDING_READY_TIMEOUT]: Shard 0's Client took too long to become ready.
    at Timeout.onTimeout (/home/izzi-ts/node_modules/discord.js/src/sharding/Shard.js:166:16)
    at listOnTimeout (node:internal/timers:569:17)
    at process.processTimers (node:internal/timers:512:7) {
  [Symbol(code)]: 'SHARDING_READY_TIMEOUT'
}```
#

what does this mean?? did discord timeout my bot?

#
    at ClientRequest.<anonymous> (/home/izzi-ts/node_modules/node-fetch/lib/index.js:1501:11)
    at ClientRequest.emit (node:events:517:28)
    at TLSSocket.socketOnEnd (node:_http_client:525:9)
    at TLSSocket.emit (node:events:529:35)
    at endReadableNT (node:internal/streams/readable:1400:12)
    at process.processTicksAndRejections (node:internal/process/task_queues:82:21) {
  type: 'system',
  errno: 'ECONNRESET',
  code: 'ECONNRESET'
}```
stark kestrel
#

Connection got terminated/closed 🤷‍♂️

#

Could be a discord issue just like it could be a network issue on your side

crystal wigeon
#
debugger [WS => Manager] Fetched Gateway Information
    URL: wss://gateway.discord.gg
    Recommended Shards: 6
debugger [WS => Manager] Session Limit Information
    Total: 1000
    Remaining: 982
debugger [WS => Manager] Spawning shards: 0
debugger [WS => Shard 0] [CONNECT]
    Gateway    : wss://gateway.discord.gg/
    Version    : 9
    Encoding   : json
    Compression: none
debugger [WS => Shard 0] Setting a HELLO timeout for 20s.
debugger [WS => Shard 0] [CONNECTED] Took 381ms
debugger [WS => Shard 0] Clearing the HELLO timeout.
debugger [WS => Shard 0] Setting a heartbeat interval for 41250ms.
debugger [WS => Shard 0] [IDENTIFY] Shard 0/6 with intents: 513
debugger [WS => Shard 0] [READY] Session ** | Resume url wss://gateway-us-east1-c.discord.gg.
debugger [WS => Shard 0] [ReadyHeartbeat] Sending a heartbeat.
debugger [WS => Shard 0] Heartbeat acknowledged, latency of 2443ms.
Unable to spawn shard:  Error [SHARDING_READY_TIMEOUT]: Shard 0's Client took too long to become ready.
    at Timeout.onTimeout (/Users/hoax/Desktop/izzi/izzi-ts/node_modules/discord.js/src/sharding/Shard.js:166:16)
    at listOnTimeout (node:internal/timers:594:17)
    at processTimers (node:internal/timers:529:7) {
  [Symbol(code)]: 'SHARDING_READY_TIMEOUT'
}```
#

the connection seems fine

#

but why is it failing after

#

looks like discordjs issue?

#

everything was working fine a while ago

frosty gale
crystal wigeon
frosty gale
#

i remember in the glitch days when everyones ips kept getting banned they got the same took too long to become ready error

crystal wigeon
#

dont u get like how long you been rate lmited?

crystal wigeon
frosty gale
#

buti could be wrong tho, can you curl the gateway without an error?

crystal wigeon
#

the gateway is fine

#

you can see in the debug logs above

#

also I heard djs caching all members and I've grown a lot could that be a problem?

frosty gale
#

yeah nvm probably not a ratelimit

crystal wigeon
#
/* eslint-disable no-undef */
import { ShardingManager } from "discord.js";
import loggers from "loggers";
import path from "path";
// import * as dotenv from "dotenv";
// dotenv.config({ path: __dirname + "/../../.env" });
import { DISCORD_TEST_BOT, DISCORD_BOT_TOKEN, SHARD_LIST, TOTAL_SHARDS } from "../environment";
import flushBattleCooldowns from "./autoClear";

// eslint-disable-next-line no-unused-vars
process.on("unhandledRejection", (error, promise) => {
    // logger.error("UnhandledRejection: " + error);
});

process.on("uncaughtException", (error) => {
    // logger.error("BOT SHARD CRASHED, FATAL ERROR: " + error);
    // process.exit(1);
});

process.setMaxListeners(100);

// const shardParams = {
//     execArgv: [ "-r", "ts-node/register" ],
//     totalShards: TOTAL_SHARDS || "auto",
//     respawn: true,
//     token: DISCORD_TEST_BOT,
// };

// if (SHARD_LIST) {
//     Object.assign(shardParams, { shardList: SHARD_LIST });
// }

const manager = new ShardingManager(path.join(__dirname, "client.ts"), {
    execArgv: [ "-r", "ts-node/register" ], // This is needed to run dev
    // totalShards: "auto",
    // token: DISCORD_TEST_BOT,
    token: DISCORD_BOT_TOKEN,
    respawn: true
});

manager.spawn().catch((err) => {
    console.log("Unable to spawn shard: ", err);
    loggers.error("Unable to spawn Shard (might be rate limited): ", err);
});
manager.on("shardCreate", (shard) => {
    console.log(`Shard #${shard.id} is Online`);
    shard.on("death", async (process: any) => {
        await flushBattleCooldowns();
        loggers.error(
            "SHARD_CRASHED " +
        shard.id +
        " closed unexpectedly! PID: " +
        process.pid +
        "; Exit code: " +
        process.exitCode +
        ".",
            {}
        );

        if (process.exitCode === null) {
            loggers.error(
                "WARNING: Shard " +
          shard.id +
          ` exited with NULL error code. This may be a result of a lack of available system memory. 
              Ensure that there is enough memory allocated to continue.`,
                {}
            );
        }
    });
});
#

hmm then whats the issue flork_think

#

trying to figure out if its caching problem

frosty gale
# crystal wigeon also I heard djs caching all members and I've grown a lot could that be a proble...

https://www.answeroverflow.com/m/1262496683170988104

maybe its taking too long to receive everything from discord (too much data)?

also seem to get the same error if you try fetch all members which is slow
https://github.com/discordjs/discord.js/issues/5187

GitHub

Please describe the problem you are having in as much detail as possible: when fetchAllMembers enabled the shard will not launched, but when i disable it the shard is logged properly Include a repr...

#

try increasing the timeout?

crystal wigeon
frosty gale
#

not necessarily fetching all members but its the same principle with whatever you could be doing

crystal wigeon
#

where do i config the timeout? there is no option in sharding manager

frosty gale
crystal wigeon
#

let me try

frosty gale
#

i think for each client you can also enable gateway logging where d.js will dump everything it requests/receives from discord which can help you narrow down whats making it take so long, but im not sure what option it is to enable it since i havent touched djs in ages

#

though the timeout issue is most likely more of a symptom but increasing timeout can solve it for the time being

crystal wigeon
#

is there a way to tell it to not cache all users? and only some?

#

looks like I have to move away from djs

crimson vapor
#

Guys is there a way to force caching (discord js or any other library) of large guilds?

frosty gale
digital swan
sharp saddle
#

Is there an alternative to OpenCV? I want to add motion tracking to a 15-second video, and I've been trying to install OpenCV for over 3 hours wawa

neon leaf
radiant kraken
#

interesting

frosty gale
radiant kraken
#

whenever you need datetime info, chrono's got you covered

#

even if it's just a free job maintaining a crate, i'm sure it'll make you standout in your CV

low marten
#

@delicate zephyr does topstats support this 👀

delicate zephyr
#

support what?

low marten
#

sliding vote window

delicate zephyr
#

it just fetches stuff from top.gg every hour

#

there's nothing more that we can do

split bane
crimson vapor
deft wolf
#

Why would you want to cache everything even if you don't use it?

#

Discord.js relies heavily on cache so it caches everything it needs on the fly

frosty gale
frosty gale
neon leaf
frosty gale
#

top tier easter egg

vivid fulcrum
sharp saddle
#

linux

#

trying to install it on npm

vivid fulcrum
#

which package and what's the error

acoustic fern
#

Trying to install opencv via npm? 😭 Is it literally not just one apt install

low marten
#

little update, i'm no longer hosting this project through static hosting, i'm now hosting the entire project myself.
This has been an absolute nightmare to convert, taking around a week and a bit, but it's done.

When benchmarking the results, fetching server info went from an average of around 7.5 seconds, to 0.5 seconds.
There's many other benefits i won't cover here, but overall, it's a cool learning experience

#

i'm using cloudflared, Quart and hypercorn to tunnel this, although the hardware i'm running it on.. could be better, but im broke.

clever tundra
low marten
#

don't laugh

#

intel core i3 3rd gen ivy bridge, 16GB DDR3, and them some jank SSD i found lying around

#

it's a dell optiplex

clever tundra
#

better than me

low marten
#

nothing special

clever tundra
#

pi 3b
1gb ram

#

16gb sd card

low marten
#

oh jeez

clever tundra
#

109 servers so Shrug0

low marten
#

i keep randomly getting these 502's that vanish when i hard refresh, it sucks because i've spent 2 days trying to isolate the cause but i'm struggling lmao

#

it's not cloudlfare based, their from my web server

clever tundra
#

i need smth that draws basically zero power

clever tundra
low marten
#

ah, to be fair, the cloudflare setup is quite new, started it around 18 hours ago

clever tundra
#

did you use the single command to install it all or did you individually install each bit

low marten
#

huh?

clever tundra
#

nvm

wheat mesa
#

If not, I highly recommend it. Makes your life a lot easier if you decide to move to cloud hosting later, or even if you want to make a CI/CD pipeline to deploy on your own hardware

vivid fulcrum
#

almost all bindings tell you to install the binary first

#

skill issue 🤷‍♂️

acoustic fern
#

Fr 😭 I use opencv so much

clever tundra
#

[discord.py] can someone here who knows components v2 give me a hand? I have an issue which quite frankly I have no idea how to fix and no idea how it started
Its hard to describe but I have an entire system thing and theres a modal with a select and basically its not appearing but theres a button and smth else
for code pls lmk since its kinda hard to share

knotty night
#

Or any errors

clever tundra
#

No errors but its not doing what its supposed to

#

It used to have an error but I tried to fix it and now its arguably worse than an error

knotty night
#

Is the entire thing not appealing just the select of what?

clever tundra
#

I tried to fix it with debatable methods and for debugging it changed it slightly and now the dropdown and stuff is there but its not showing it or anything

clever tundra
#

Yeah

#

AI

rustic nova
frosty gale
crisp trout
#

this has been old as the time itself imo

neon leaf
#

im sorry for doing this to drizzle

#

but I have to

crisp trout
#

anyone using proxmox or such to host your bots?

vivid fulcrum
#

not me, but I am just wondering why proxmox

#

they're on the pricey side, you can get cheaper VMs if your only goal is a discord bot

crisp trout
vivid fulcrum
#

ah you're hosting it

#

got it

crisp trout
#

yeah

covert nymph
#

hey so my bot was declined due to no "working help command" or point of entry. My bot is using the discords help command that was built in when I import commands. Do I need to create my own help command? Also what does "point of entry" mean?

covert nymph
finite tendon
deft wolf
crisp trout
covert nymph
#

awesome thank you! I'll open a ticket when I do fix the issues just to be sure I have everything proper before I resubmit. Thank you for the help!!!!

covert nymph
crisp trout
#

but fair enough.

#

Also, it's a long shot (mods I apologize if this is against' is anyone available to go through the flow just to give a quick eye for my bot all my friends are yeah, boomers

low marten
#

no more 502's

#

😎

frosty gale
low marten
#

spotty connection = intermittent 502's

delicate pagoda
#

Hai

neon leaf
#

⁨```rs
pub struct Settings {
cached: [RwLock<SettingsBuffer>; 2],
cached_index: AtomicUsize,
cached_revalidating: Mutex<()>,

database: Arc<crate::database::Database>,

}

what am I even doing at this point
frosty gale
neon leaf
#

this is basically my main bottleneck currently

#

one cache expiry and its over for every request

#

until all read locks have vanished

#

and cant use Clone because I need dyn

#

and cant use Arc because settings need to be directly mutable

#

I dont @harsh nova

harsh nova
#

no

crimson vapor
frosty gale
neon leaf
#

ye but like I said cant use Arc because I need the original data to be mutable

#

the main issue with 1 rwlock is that writes are fair

#

so if any write starts while 1 reader is drunk, all readers and the writer have to wait

#

with 2 that issue is completely solved

#

i end up with 1 mutex for the writes now

#

if cache is expired and write mutex can be grabbed, use the inactive rwlock to update settings, otherwise return the active one temporarily since another thread is writing already

#

means reads will never yield (or block or whatever the proper terminology is)

#

⁨```rs
struct SettingsBuffer {
settings: AppSettings,
expires: std::time::Instant,
}

pub struct Settings {
cached: [RwLock<SettingsBuffer>; 2],
cached_index: AtomicUsize,
write_serializing: Mutex<()>,

database: Arc<crate::database::Database>,

}

radiant kraken
#

Mutex<()>?

neon leaf
#

yes, that mutex is for ensuring only 1 write operation can take place at any given time

#

since if 2 writes would happen at once without this restriction, the original issue would occurr again

vivid fulcrum
# crimson vapor weird personal project where the scope is one server (even though its a large gu...

for cold start look for a method that wraps this endpoint https://discord.com/developers/docs/resources/guild#list-guild-members
any library should have it since it's REST
you probably want to ensure your cache won't go stale so i recommend also tracking guild member add/remove events

Discord Developer Portal

Build games, experiences, and integrations for millions of users on Discord.

#

and update events depending on what you want to track

#

i think djs has a built in option to cache the response so you don't have to build one yourself, best to confirm yourself though

#

if it's a guild with a lot of members djs is going to eat up memory though

#

i miss when bot development was simple without the interaction shenanigans 😿

radiant kraken
neon leaf
#

protesting (jk, probably would work the same way in the end)

radiant kraken
#

yeah, but it's prob slightly better

#

i used a semaphore for something like this in the Top.gg Rust SDK

neon leaf
#

to be honest not sure if itd be faster

#

Id think its slightly slower

radiant kraken
#

huh?

neon leaf
#

scammers

#

too used to working with std stuff

#

ig ill change it then+

radiant kraken
#

also this can be changed to ⁨fetch_update

#

something like ⁨⁨```rs
let _ = self.parent.cached_index.fetch_update(Ordering::Release, Ordering::Relaxed, |i| Some((i + 1) % 2));

neon leaf
#

thanks

crimson vapor
crisp trout
#

i hate configuring ufw

#

Why did I ever went this route 😂

warm surge
#

i literally do

crimson vapor
warm surge
warm surge
#

YOUR AT MY OLD APT

crisp trout
#

bro im so dumb i swear

#

i ran accidentally 2 instances of the bot somehow and then wondered and spent 30 mins debugging

deft wolf
#

Crazy advertisement

radiant kraken
#

@ivory siren boop

frosty gale
#

i just try make whatever i can atomic and for things i cant do atomically i opt in to full reloads of them so i dont have to write to them, only to whatever is holding them

#

but yeah annoying problem in concurrency

#

atomic strings tho would be cheating and OP if that existed, cpu manufacturers would need to nerd that card

frosty gale
crimson vapor
#

I’m over by science drive 🥀

warm surge
crisp trout
#

psa github has issue status page.

neon leaf
#

even if I could save 67ns per lock, the whole point of this double buffer is that writing is rare and (!!!) most importantly, the code is already way too complex and using a lock with raii structure is a lot easier than an atomic flag

prime cliff
#

Only issue is for github actions

crisp trout
#

who doesn't use github actions lol\

pearl trail
#

all my college friends

#

only 3-5 out of hundreds

crisp trout
#

Hmm, I guess it's a matter of preference.

#

Also not sure you are aware e.g you using netlify it goes through actions or somethinh>

pearl trail
#

yeah im aware, such things like vercel and netlify uses them. well fair enough, the github action is not made by them so i count they’re not using gh action ;D

crisp trout
#

Youd be surprised but they do 😂

#

aww they removed the warning on GH

#

ah well

frosty gale
#

imagine the wasted 20 cpu cycles on each lock

neon leaf
#

its async already so wont see that gain anyway

#

well id think atleast

#

I still wish tokio was designed more similarly to go

#

where syscalling "moves" all async tasks to another thread instead of creating a new blocking task and awaiting it

frosty gale
#

i remember using that before for some crypto operations

neon leaf
#

not quite what it does afaik

#

Be aware that although this function avoids starving other independently spawned tasks, any other code running concurrently in the same task will be suspended during the call to block_in_place. This can happen e.g. when using the join! macro. To avoid this issue, use spawn_blocking instead of block_in_place.

#

has bad side effects

frosty gale
#

Scam

neon leaf
#

and go does this on basically everything by default

#

so you get noticable speed gains

#

magic™

frosty gale
#

although is there really a difference in performance when executing a blocking task on a dedicated blocking thread (thats most likely on standby i presume) vs converting the current thread temporarily into a blocking one and move the other tasks onto another async thread?

#

i'd imagine it would be worse if anything?

#

i need to read up more on async

neon leaf
#

something something context switch something something

#

(forgot 99% of what I read about this topic)

#

I got destroyed by using sysinfo in an async task recently

#

to be precise the disk info part of it

frosty gale
# neon leaf to be precise the disk info part of it

in c# its an incredibly common mistake in async because c# provides no async way to query a file/disk info either 💀
so you have to make sure you spawn them in blocking tasks otherwise you will quickly starve your tasks

neon leaf
#

yeah I dont get why rust doesnt have a function attribute for this tbh

#

e.g. #[blocking]

#

or something

#

because I may still have blocking code all over the place and id never know until I get mysterious issues

balmy terrace
#

Hii

#

Hellooooo I just joined 😄

deft wolf
crisp trout
#

eh im happy

frosty gale
#

what the fuck am i going to do now

#

i cant think for myself i need gptchat

deft wolf
#

The world will fall apart

frosty gale
#

@quartz kindle oracle scammed me

#

(i accidentally went over their free tier for block storage)

#

good thing i noticed bc it was like $6 a day

neon leaf
crisp trout
crisp trout
sage bobcat
deft wolf
#

Joking is forbidden in Tim's cave

crisp trout
#

sure but oracle are scum, it wouldn't surprise me 😄

frosty gale
#

too bad they offer a good cloud service 🙁

warm surge
#

I got a question

#

so i am recreating my webhook so other users can use it and i forgot one thing and

#

if role is null is it data.role == null or ==! null

crisp trout
#

isn't ==! not a valid operator?

warm surge
#

it is

crisp trout
#

iirc == null?

warm surge
#

ive useed it before but im trying make it if it is null skip the roles and still push out user voted that bot without getting the roke

frosty gale
warm surge
#

guld.roles.cache.get checkes if the role exist before giving it to the user

#

thats why im trying work around it

#

so i dont kill the bot with discord api errors

crisp trout
#

wait so you need to check the role first in guild before assign

warm surge
#

yes

crisp trout
#

hm

warm surge
#

i had it happen when if roles doesnt exist it will restart the bot for whatever reason

crisp trout
#

if (data.role && guild.roles.cache.has(data.role))?

#

something

warm surge
#

let me try that

crisp trout
#

something like that i can't recall js very well

#

rather been ages*

wheat mesa
#

cache.has should not be throwing if the argument passed is null

#

It’ll just return false

warm surge
wheat mesa
#

cache does not perform API requests, if you have API related errors then it is not from that line

#

In fact cache.get doesn’t throw at all afaik

crisp trout
#

it shouldn't right?

warm surge
#

^

#

shouldnt but idk im using fucking sharding bullshit with this shit

#

so anything can and will happen with sharding bullshit

#

well shit imma test it out real quick

wheat mesa
#

The discord.js Collection class extends the JS native Map class. <Map>.get() never throws

#

The collection class doesn’t appear to override the get functionality

crisp trout
#

@warm surge will be curious of the outcome

warm surge
#

hold on fucking with commands since it got broken

prime cliff
crisp trout
#

ah yes Ubisoft is a classic

swift barn
#

for those using cloudflare IAUM
did ur challenge pages show this dark themed stuff (different wordings perhaps)
the original one or how it used to be is image 2 kinda like light grey or something

crisp trout
warm surge
crisp trout
#

ggs

quartz kindle
#

"No As A Service (NAAS)"

rustic nova
#

cat as a service best

neon leaf
eternal osprey
#

hey, i thought that NPM doesn't do any malware checks

#

but according to their npm docs, they do? Lol since when

#

"Rather than tricking people into using a similarly-named package, attackers also try to add malicious behavior to existing popular packages. In partnership with Microsoft, npm both scans packages for known malicious content, and runs the packages to look for new patterns of behavior that could be malicious. This has led to a substantial reduction in malicious content in npm packages. Furthermore, our Trust and Safety team checks and removes malicious content reported by our users. Similar to dependency confusion attacks, we are constantly updating our detection services with new examples, so if you think a package contains malicious behavior, please let us know!"

frosty gale
#

on npm they probably do some kind of scanning, just not at install time, by the time you install the package wouldve already been verified by their system

#

although i wouldnt know how sophisticated it actually is

#

ive seen npm packages that had malware with basic obfuscation techniques such as converting to base64 then reversing the payload

sharp geyser
#

I got hit with an npm malware a few weeks ago

#

One of the packages I used had a dependency that injected malicious code into my environment and registry

#

Woke up to my computer opening PayPal on its own 💀

crisp trout
#

wait doesn't npm warn you? fairly sure it did whne you are installing?

crisp trout
#

holy if I pull this off embedd manipulation this will be finna goated as young kids say it fr fr no cap young rizz skibidi

#

ah no it's actually easy lol

sharp geyser
crisp trout
#

huh never noticed it actually lol

quartz kindle
#

welcome to npm hell

crisp trout
#

I guess yeah 😂

frosty gale
#

why is golang so good

#

atp im not even coding im having fun

crisp trout
#

I'm scared of Go

frosty gale
#

imagine if python and C had a baby, you get golang

quartz kindle
#

i am so popular i get a ton of friend requests from cute girls from the "DiscordServers" server :^)

deft wolf
quartz kindle
#

i dont even know why im there, its like the most scambot-filled server around

deft wolf
#

In the future I want to be like Tim

quartz kindle
#

i want to be like Tim, but for real, not with scambots xD

frosty gale
#

you just radiate JS optimisation vibes, its irresistible

quartz kindle
#

right now im radiating "fixing ASP.NET bugs with claude code"

#

i have no idea how any of this works, yet claude code keeps telling me "you are absolutely right"

frosty gale
prime cliff
#

Fixing asp.net with ai 😔 how could you

quartz kindle
quartz kindle
crisp trout
quartz kindle
#

i am poor, cant afford max plan

frosty gale
#

i rarely go over the limit but then again i dont vibe code often

crisp trout
#

I use it for tedious things lol

#

but yeah it is cheaper, but cursor sucks.

frosty gale
#

it even has the anthropic claude models which is basically the standard for vibe coding

crisp trout
#

look at snoopy he's smiling and saying no.

#

Windsurf.

#

wait botghost is still active o.O?

deft wolf
#

Yes

#

They made some changes to how they store their tokens or something and now everything is fine

crisp trout
#

Oh nice, good for them I guess.

#

Anyhow, finally close to done, last thing is for mangament to define metrics for support agents and I think I'm done and try to find people for testing lol

lament rock
#

You're the expert!

sharp geyser
#

I get Claude to design the front end and then I just hook shit up

#

💀

#

Front end ass

wheat mesa
#

Gemini 3 Pro seems to be good at frontend using one single prompt, it gets about 80% of the way there, but it’s awful with editing. Claude/GPT 5.2 does the other 15%

#

Inevitably it will never get 100%, but usually good enough for my prototypes

sharp geyser
#

wtf is this

#

ok differnt question ik what it is

#

but is it even useable yet cause afaik it was rather ass

sharp geyser
#

Doesn't get it 100% of my vision but enough for a prototype so I can prove my shit works

#

like this for example

#

frontend all done by claude, it used my existing graphql queries and laid everything out

#

its good enough for a mvp

quasi scroll
#

i have a question, my bot is on 17+ servers, but top.gg only says its on 3 servers? how do i fix that?

deft wolf
#

You must send the actual number of servers via the top.gg API

quasi scroll
#

where can i find where i do that and what i send it to?

#

can only see GET not POST to anything other than commands

deft wolf
quasi scroll
frosty gale
#

tf are the employees doing on their work pcs

neon leaf
#

rip using atera

#

(also using it at the company i work at)

frosty gale
#

i kept battling with another colleague for a seat license when i first joined lol

#

now they laid off 2x tech people in an already tiny tech team

neon leaf
#

yeah we hve 1 license for 4 people

past charm
#

does anyone use antigravity?

quartz kindle
#

i do sometimes

past charm
#

Can you tell me how to make the AI ​​better

digital swan
#

'make no mistakes'

past charm
teal kelp
#

What do you guys think?

past charm
teal kelp
past charm
#

so what is it?

teal kelp
past charm
teal kelp
#

I used to host with hosting providers

past charm
teal kelp
past charm
teal kelp
#

If you type my ID on there, you should be able to find it

gleaming glen
teal kelp
#

Not sure if we’re allowed to post it in here

past charm
#

send your bot id

#

1336067845284565105

teal kelp
#

729303155623460865

past charm
#

i will copy your commands

teal kelp
#

Once the leads done, then we’ll start pushing our commands out

past charm
#

How do you do that for a Minecraft profile? do you scrape?

teal kelp
#

It’s pretty easy to do

#

Ours are scraping from a private API

past charm
#

xbox?

teal kelp
#

Most Java in and the windows Minecraft

past charm
#

how many commands are in your bot

teal kelp
#

Currently 26

past charm
#

I have more

teal kelp
#

We’re currently working on things at the moment on the back end

#

So we’ve paused most of our production

past charm
#

look at this

quartz kindle
#

antigravity's AI autocomplete is pretty cool though

teal kelp
#

The last time we went with a hosting before that they screwed around and deleted 95% of our staff with no answers

teal kelp
#

The last time we went with a hosting before that they screwed around and deleted 95% of our staff with no answers so I don’t really trust hosting providers no more. I’d rather host stuff myself and know what goes into my products.

past charm
#

can i join your team

teal kelp
#

Sorry, we’re full

past charm
#

alright

lime totem
#

@cunning current bro

#

my bot have all in one lol ?

cunning current
eternal osprey
#

For example latest hacks all involved updates and publishes that took like 15m-5h to detect.

#

but my question now is, does NPM not scan at all during publish/installation? As that's what my thesis revolves around

#

i genuinely can't find anything on the internet though, npm is being non-transparent about this shit.

eternal osprey
crisp trout
#

hmm interesting

eternal osprey
#

maybe @quartz kindle knows though

#

cuz if this assertion i make is fake i am cooked

past charm
#

Guys, try Jules, it's really cool.

jaunty cypress
#

I will Test it out Today

#

I wanna see if he can code better than Codex

past charm
jaunty cypress
#

Oh

frosty gale
# eternal osprey but my question now is, does NPM not scan at all during publish/installation? As...

maybe during publish but definitely not during installation because they can just do one scan for everyone on each publish on their backend while keeping their techniques secret
but always possible they ahve some kind of delay window between publish and scan since they probably have lots of people doing scans so they have a "queue" if you will, probably, especially if they plan or are using AI models

teal kelp
#

Built my Home lab today fun

eternal osprey
#

oh my days i am cooked

#

they do

#

my thesis just went out the window

teal kelp
#

My head is hurting from today

crisp trout
teal kelp
#

I’ve been up since 6 o’clock this morning

crisp trout
#

I ain't clicking that

deft wolf
frosty gale
#

thats known and published vulnerabilities for a package in the database, not malware (sometimes malware in code is released as an advisory but its not common)

crisp trout
frosty gale
#

otherwise it'd be kinda pointless

#

thats why audit can flag packages you never even installed because it also checks subdependencies of other packages you installed

#

but it does show you as a tree what package it belongs to

eternal osprey
#

they scan for code signatures and known vulnerabilities?

#

My thesis was about machine learning classification upon installation and publish. A pro-aftive wait

#

i know audit is known issues but aren’t those including known scam signatures etc?

#

Or is it truly pro-active?

lament rock
#

Yerp. Only flagging known vulnerable packages, but doesnt always have to be specifically malware

#

For instance, your definition of prototype pollution may vary from the next guy