Using Trusted Protocols Against You: Gmail as a C2 Mechanism (socket.dev)

I've been trying to figure out how long feature development takes, for years. I'm not a fan of (a priori) estimations of work, which just seem like the wrong measure. I think I've got a better way.

Genuinely interested if some git gurus can improve this. Particularly around the pre-push hook, which is dependent on retained squash commit text. Or if there's an entirely better way to achieve the same thing.

Comments (7)

gerardnico · 30d ago

Instead of creating a tag, you could add the time in your commit message as a footer key following the conventional commit spec.

https://www.conventionalcommits.org/en/v1.0.0/

Ie example of commit message

fix: prevent racing of requests

Desc

Time-spend: Z

thisdougb · 30d ago

I did look at modifying the merge commit message, but I couldn't figure out how to accurately detect a merge commit.

Having re-looked, I just found 'git rev-parse --verify MERGE_HEAD' which may help here. Time to do some testing. It would be good to clean up and standardise the commit msg itself too. Thanks.

thisdougb · 28d ago

cool.

The prepare-commit-msg hook is the one. One of the hook args is the type of commit (merge, squash, etc). And the merge commit msg files exist (SQUASH_MSG, MERGE_MSG) so my original logic all works.

  $ git log -1
  commit 735ce5f9998736c4066d63ab851df2023640dad5 (HEAD -> master)
  Author: Doug Bridgens <thisdougb@users.noreply.github.com>
  Date:   Tue Apr 1 22:31:22 2025 +0100

        test4 does some stuff
    
    Time spent on feat_test4: 0d:0h:7m secs=426

jarbus · 32d ago

Not a git guru, but I love this.

thisdougb · 32d ago

thank you.

I'm trying to workout how it (the idea) can be ported to work with GitHub pull requests. But I don't know enough about what's happening under the hood with GitHub during the PR process.

kinduff · 32d ago

have you explored what you can do combining your info with what you can get with their cli?

thisdougb · 32d ago

ah, I totally forgot there was a cli tool for gh. thanks. I'll have a dig around and see what I can get from it.

Using Trusted Protocols Against You: Gmail as a C2 Mechanism (socket.dev)

Whither Help Scout? (bitsplitting.org)

JetBrains defends removal of negative reviews for unpopular AI Assistant (devclass.com)

Ask HN: Are retro TV/movies depressing but retro music and computing are not?

Nebraska residents call for insecticide regulations after contamination event (thenewlede.org)

Mech 520 Course (Sensors and Actuators) – Dan Gelbart [video] (youtube.com)

Show HN: Waitlist Shopify App with Rules Based Approach (apps.shopify.com)

Show HN: The Azure Key Vault Emulator (github.com)

Creating Beautiful Charts with JRuby and JFreeChart (blog.headius.com)

Unity 6.1, a Supported Update release, is now available (unity.com)

British Baseball (en.wikipedia.org)

What's New in Apache Iceberg V3? (dremio.com)

Ripple Is Said to Have Offered to Buy Stablecoin Rival Circle (news.bloombergtax.com)

Electronic Arts, worth $37B, lays off hundreds for 3rd year in a row (sfgate.com)

Zhaoxin's KX-7000 (chipsandcheese.com)

Hsu's Co-Dfns APL Array Compiler vs. BQN's Implementation (mlochbaum.github.io)

Diet outperforms microbial transplant to drive microbiome recovery in mice (nature.com)

Memory leak proof every C program (flak.tedunangst.com)

Puma's High-Tech New Supershoe Is Here–and It's Already Turning Heads (outsideonline.com)

Plant diversity dynamics over space and time in a warming Arctic (nature.com)

Despelote (nytimes.com)

The U.S. Eliminated Measles in 2000. The Texas Outbreak Could Upend That (wsj.com)

Ask HN: Does this estimate for GPT-4's 128k token window make sense?

AI infrastructure is hot. New power distribution and liquid cooling can help (cloud.google.com)

How to Transcribe a Song with fugue-state.io [video] (youtube.com)

Microsoft Confirms $1.50 Windows Security Update Hotpatch Fee Starts July 1 (forbes.com)

Meta First Quarter 2025 Results [pdf] (s21.q4cdn.com)

One Weight-Loss Approach Fits All? No, Not Even Close (2016) (nytimes.com)

Intuitive Eating Debunked: 5 Issues with Intuitive Eating from a Dietitian (yatesnutrition.com)

Matching DNA to a Diet Does Not Work [2018] (scientificamerican.com)

TikTok Brainrot Is Normalizing Alt-Right Ideologies (pitchfork.com)

Microsoft Earnings Release FY25 Q3 (microsoft.com)

Anime Camera (animecamera.com)

Help I Search Partner (app.revolt.chat)

China Unveils First 'Meltdown Proof' Thorium Reactor (oilprice.com)

Show HN: Auto-crop printed photos from scans using this open-source AI (github.com)

Simian Sympathy: Harnessing Your Inner Ape for Peak Performance (tantaluspath.com)

Show HN: Keyboard Minesweeper – Speedrun the Classic, No Mouse Needed (kb-minesweeper.com)

The Artist–The Great Hall Commission: Tong Yang-Tze, Dialogue [video] (youtube.com)

Visa preps AI-ready credit cards for automated shopping transactions (zdnet.com)

Doge Put a College Student in Charge of Using AI to Rewrite Regulations (wired.com)

Google Chrome 136 automatically upgrades your accounts to use passkeys (lapcatsoftware.com)

Show HN: I built an app that to create T shirts with AI (prompt2swag.com)

Any good new CRMs out there?

Behavioral Sink (en.wikipedia.org)

Alliance Ouvrière Bloque L'entrée D'Amazon Web Services à Varennes (noovo.info)

Creating Rust macros with crabtime for including icons in Leptos (meghprkh.github.io)

Fossil 2.26 Released (fossil-scm.org)

NYC home prices rise 10% in early 2025 (qns.com)

Ask HN: What Makes a Good Datasheet?

Show HN: Personal Time Tracking with Git

Comments (7)