Love the part where he claims that if your users are authenticated, it's not untrusted input. I mean, surely you trust all of your users to run any code on your server, right?
Impressive and unsurprising. As soon as you start getting complex libraries with multiple dependencies it becomes nearly impossible to review everything. At one time I had an interest in contributing to some AI libraries, but they're a mess as soon as you go looking for points of improvement.
Which is funny because when I first started my CS degree in the late 80s (get off my lawn) we used to make fun of the beginning Java classes because it seems 90% of coding was to import the right library.
It's funny how solvable that problem is now. I remember seeing that comic, I think over a decade ago now, and thinking about how true it was. It really shows you have far we've come in CS.
My best guess is it's a play at the usual "all you do in python is import libraries without knowing how they work lololol" dig but yeah, I don't find it particularly funny either
This is exactly why we love Python (and other languages with rich package ecosystem, even when only on their niche usage cases). You can build upon other people's knowledge and effort to do cool things efficiently and effectively!
You never heard of code Golf before? It's usually programming challenges where the goal is to use the smallest number of source code characters possible.
While yes, the true issue here is that, for some reason, the code only imports the remove method from the package, instead of importing the package and doing rembg.remove().
That reminds me back when some time ago, I was tired of dealing with sketchy, and often broken, websites and programs for downloading videos from Youtube. I figured these sorts of programs must be doing something along the lines of downloading the Youtube page, parsing through the massive pile of HTML and Javascript to find the stream, and then saving that to a video file. That seemed like something I could do myself with Python, so I set out to see if I could figure out how to do it.
A few minutes and a couple of web searches later, I discovered that someone else had figured that all out already and I just needed to do "pip install pytube".
Having a similar moment right now. I'm trying to figure out how to compute the transformation matrix for reflecting a bitmap of any given dimension across the y axis, but all the tutorials that come up in my search just tell me to import some python library. Its like nobody wants to learn how to do anything anymore.
How is this funny? 8 Upvotes at current writing???
It's kind of funny because it looks like it is nonsense dreamt up by a non-programmer. But it actually works.
I thought it was poking fun at the tutorial saying instead of learning to code, import a library from someone who knows how to code.
That's what libraries are for. I'm no security expert and the sensible thing to do is using a library instead of taking a class.
Counterpoint: "not knowing your libraries" + "blind trust in the maintainer" will give you stuff like this: https://bitbucket.org/snakeyaml/snakeyaml/issues/561/cve-2022-1471-vulnerability-in
(the thread itself is worth a read. But also very impressive is the list of big players who fell for exactly this mentality)
Love the part where he claims that if your users are authenticated, it's not untrusted input. I mean, surely you trust all of your users to run any code on your server, right?
Jesus that was one hell of a thread
I dont want to see the words "low quality tooling" ever again.
Impressive and unsurprising. As soon as you start getting complex libraries with multiple dependencies it becomes nearly impossible to review everything. At one time I had an interest in contributing to some AI libraries, but they're a mess as soon as you go looking for points of improvement.
Works as well.
Which is funny because when I first started my CS degree in the late 80s (get off my lawn) we used to make fun of the beginning Java classes because it seems 90% of coding was to import the right library.
That is a large part of coding
It's basically import antigravity
Time travel is a prerequisite but don't worry, you can just
This made me smile.
It's literally this comic, five years and a research team later.
It's funny how solvable that problem is now. I remember seeing that comic, I think over a decade ago now, and thinking about how true it was. It really shows you have far we've come in CS.
More like all the research teams.
And 10 years
From the hovertext: "I wrote 20 short programs in Python yesterday. It was wonderful. Perl, I'm leaving you."
After years of a dozen other languages, I finally tried Perl the other day.
Never again, if I can help it.
or something
Good because I was confused. I’ve written similar code
It's funny because
SyntaxError
: Inconstistent indentation
Because this example isn't really programming, it's just calling an existing library. Which is the big joke about Python.
OK that way I get why it could be considered funny.
My best guess is it's a play at the usual "all you do in python is import libraries without knowing how they work lololol" dig but yeah, I don't find it particularly funny either
This is exactly why we love Python (and other languages with rich package ecosystem, even when only on their niche usage cases). You can build upon other people's knowledge and effort to do cool things efficiently and effectively!
Hahaha now code-golf it. One line FTW!
remove(Image.open(‘cl.jpeg’)).save(‘output.png’)
If I find this in production I'm whipping your ballsack till you change it back.
import("rembg").remove(import("PIL").Image.open(‘cl.jpeg’)).save(‘output.png’)
Can i hire you?
So I'm not going to change it
Code golf! I just learned something new 😂
https://codegolf.stackexchange.com/
Enjoy a new rabbit hole to dive down
You never heard of code Golf before? It's usually programming challenges where the goal is to use the smallest number of source code characters possible.
I haven't either but I like it.
Remove seems like a terrible name for that method.
While yes, the true issue here is that, for some reason, the code only imports the remove method from the package, instead of importing the package and doing rembg.remove().
if you only wanted to import remove you could maybe import as rembg_remove
unless there's some weird taboo against doing that I don't know about, I'm an awful programmer tbh
That reminds me back when some time ago, I was tired of dealing with sketchy, and often broken, websites and programs for downloading videos from Youtube. I figured these sorts of programs must be doing something along the lines of downloading the Youtube page, parsing through the massive pile of HTML and Javascript to find the stream, and then saving that to a video file. That seemed like something I could do myself with Python, so I set out to see if I could figure out how to do it.
A few minutes and a couple of web searches later, I discovered that someone else had figured that all out already and I just needed to do "pip install pytube".
Have you ever heard about yt-dl?
yt-dlp
I did switch over to yt-dlp some time later as development seems to have slowed on Pytube and yt-dlp seems to be where all the activity is.
Goddamn i love python
*the libraries that are made for python
There's a python library for everything
No work in micropython on uno? pls help. Need thesis in Rust do tomorgh. Removed French bloat
rm -frcatz tut. WhyWaiting for the “in one line” tutorial
Python is an illusion
All the best things in life are intangible.
Having a similar moment right now. I'm trying to figure out how to compute the transformation matrix for reflecting a bitmap of any given dimension across the y axis, but all the tutorials that come up in my search just tell me to import some python library. Its like nobody wants to learn how to do anything anymore.
I know this is a joke, but I totally wanna run the code and see what happens or what errors I get just for fun.
According to PyPI, the library is genuine.