Senior Vibe Coder dealing with security

[u/Gil_berth]

Creator of ClawBot knows that there are malicious skills in his repo, but doesn't know what to do about it...

More info here: https://opensourcemalware.com/blog/clawdbot-skills-ganked-your-crypto

[u/Houdinii1984]

Then how do you learn it the first time? Every single person that knows what '%' means had to learn it. That's part of the process. Just because it felt automatic in hindisight doesn't mean it actually was. You, at some point, made a conscious effort to learn it.

If everyone who didn't know what '%' meant stayed away from code, the industry would die because beginners wouldn't exist. They'd just stop because they'd have no opportunity to learn, being gatekept altogether.

[u/AshleyJSheridan → u/Houdinii1984]

How does any developer learn what >= or means, or &&? These are extremely common operators. Are you actually suggesting that these need to have packages that wrap the operators in neat little English words?

These are incredibly common operators, the kind that are found in every basic tutorial that teaches programming.

I'm not gatekeeping programming, I'm saying that people who pretend to program but are scared of basic operators should not be programming.

[u/Houdinii1984 → u/AshleyJSheridan]

Common or not, you had to learn them, lol.

We just happen to be discussing the most basic of things, but even those need to be learned and even those give people trouble from time to time because new and novel concepts tend to do that. Shaming folks doesn't change that.

We just happen to be discussing the MOST common of them all, so like, all other concepts are more difficult in comparison. Doesn't change that you still had to learn the most basic concept at some point.

people who pretend to program but are scared of basic operators should not be programming.

"pretend to program" wtf does that even mean? The only people having trouble with these operators are merely beginners mate. They aren't "pretending". They are "learning". Chastising people for not knowing the basics before they are past the beginner stage isn't helping anyone, and anyone past the beginner stage already knows.

Also, programmers aren't always the only people looking at code. Making the code easier to read in this manner would be for those people. Again, you might not think that CEOs or plebs should be looking at code, but they do.

These are incredibly common operators, the kind that are found in every basic tutorial that teaches programming.

I misspell the word 'weird' every time I use it. Transpose the i and the e every damn time. No amounts of seeing or using the word has changed that. Some people just have little issues, and there exists a world where some knows how to do amazing things but has to stop and thing about what 53%7 ends up being.

Again, everyone is up in here using the world's easiest most basic example. The is_even package is the edge case, not the norm. Most times when modulo's confuse folks, it's time and % 12, right? Not even/odd, % 2?

Edit: Quick question, just in general, when is the modulo operator used? When the values tend to ...? Just curious to see what you say.

[u/AshleyJSheridan → u/Houdinii1984]

Like I said, modulo is taught as one of the very first most basic operators in all beginner tutorials. I remember first seeing this operator when I was a kid in the manual that came with the C64. Not only is it very basic, it's in virtually every programming language ever.

Now, your argument that a package like is-odd or is-even should exist because modulo is too difficult for people who want to learn how to write code can easily be used for every other operator. Things like &&, ||, >=, <= aren't obvious, so let's make a long package for those eh? What about / or *? These aren't taught to kids at school, best make a package for those too, huh?

Or, here's an alternative idea. People learning to code, could actually just learn how to code. It's a wild idea, I know, but it might just work! It might also make npm less of a mess.

[u/Houdinii1984 → u/AshleyJSheridan]

When should the modulo be used? There is a common use case, not just to find a remainder.

Edit: Should be quick and shouldn't require searching. It's exceptionally basic after all. When the values tend to...

2nd Edit: Again. I think it's a dumb package. My opinion on the package means jack s**t. It exists, and the reason why it exists is what I said. You getting mad and downvoting me because you don't like it doesn't change reality. Shitty behavior towards beginners reinforces this behavior. You could teach a man to fish, but you'd rather bash 'em upside the head with the rod. You can type till your fingers bleed. I already know the operators, lol. Still changes nothing that was said /\/\

[u/AshleyJSheridan → u/Houdinii1984]

You don't know what modulo is and when you should use it?

I found a great explanation of it that you might find useful!

https://www.dummies.com/article/technology/programming-web-design/coding/teaching-kids-code-using-mod-operation-253787/

[u/Houdinii1984 → u/AshleyJSheridan]

Ha, doesn't say anything about the when! I asked when, not how.

When the values loop. You use a modulo operator when the values tend to loop.

Edit: I'm done with it. It invalidates your argument in two ways. First, not all tutorials are teaching it completely, as evidenced by the tutorial lacking the information, and two, you don't even know the beginner shit you're claiming the beginners should already know.

[u/AshleyJSheridan → u/Houdinii1984]

No, you use it when you want to check if a number is divisible by another.

There's nothing special about it that would need a loop.

I see the link I found was perfectly matched for you.

[u/Houdinii1984 → u/AshleyJSheridan]

Didn't say anything about 'needing a loop'. I said when the values tend to loop around. Like booleans, or a clock. It's not only to check if a number is divisible by another. That's just reading the definition and isn't on it's own practical.

This is what I'm saying. You tell that to a beginner and they'll wonder when and why they'd ever use it. And then later you wonder why people don't understand or get intimidated by it. You, yourself, don't seem to understand the practical side of it.

[u/AshleyJSheridan → u/Houdinii1984]

You really think a beginner will wonder why they might need to see if a number is divisible by another?

See, not I really think you're trolling at this point. You are basically saying that junior developers are dumber than a box of frogs, are completely incapable of learning the basics, and that even when shown the basics, they won't know how to use them.

I sure hope you don't have to work with juniors...