<p>@<span class="h-card" translate="no"><a href="https://mastodon.social/@whitequark" class="u-url mention">@<span>whitequark</span></a></span> I did once have an unresolvable problem where a package manager did not do what everybody thought, and kept an ancient version of a package long after it was assumed to have been updated. Meanwhile the package drifted out of compatibility with our code, and the maintainers dropped the last version we were compatible with.</p><p>So when we trashed that build machine (VM) and made a new one, the package manager found no package, fetched the latest, and suddenly the project didn&#39;t build, the version we were compatible with no longer existed, and nobody left at the company knew how that part was supposed to work - fun days!</p><p>Not 100% sure if this relates to your post, but I was reminded of it... It did take over a decade of only ever building that subsystem on the same VM for this to happen, which is unusual, I&#39;ll admit.</p>

<p>(there were no consequences, the token had barely any privileges to start with and all meaningful activity in the repositories is logged anyway)</p>

<p>the Glasgow Interface Explorer GitHub organization was affected by GHSA-mrrh-fwg8-r2c3, a crude credentials stealer in one of the github actions used as a dependency that also happened to print them unencrypted in the public build logs</p><p>ironically, i&#39;ve used that github action to prevent someone to tampering with the firmware as a part of a system ensuring that the checked-in blob is reproducibly built</p>

<p><span class="h-card" translate="no"><a href="https://unfug.social/@4censord" class="u-url mention">@<span>4censord</span></a></span> thanks. i&#39;m on ext4 which does not</p>

<p><span class="h-card" translate="no"><a href="https://fosstodon.org/@sushee" class="u-url mention">@<span>sushee</span></a></span> Isn&#39;t it ICL by now? ;-)</p>

<p><span class="h-card" translate="no"><a href="https://mastodon.social/@whitequark" class="u-url mention">@<span>whitequark</span></a></span> on some file systems, you can &quot;shallow copy&quot; a file, basically &quot;that one over there but with copy on write please&quot;. This is called reflinking. With cp, you can make it do that by specifying &quot;--reflink=always&quot;</p><p>If your file system supports that, does wine use this?</p>

<p><span class="h-card" translate="no"><a href="https://mastodon.social/@whitequark" class="u-url mention">@<span>whitequark</span></a></span> AAAAAAAAAAaaaaaaahhhh!!!!!</p>

<p><span class="h-card" translate="no"><a href="https://mastodon.social/@whitequark" class="u-url mention">@<span>whitequark</span></a></span> It’s when someone not called Richard abuses their power, gets discovered, and has to resign.</p>

<p><span class="h-card" translate="no"><a href="https://mastodon.social/@whitequark" class="u-url mention">@<span>whitequark</span></a></span> ohhhhhh fffffuuuuuuuuck</p>