HNHacker News
TopNewBestAskShowJobs

FiddlyPack

140 karma · joined November 1, 2018

submissionscomments
FiddlyPack··on Don’t trust the locals: investigating prevalence of persistent client-side XSS
Highlights, to me:

- do not trust localStorage

- quote: The most challenging pattern in our dataset consists of scenarios in which applications use the persistence mechanisms to deliberately store HTML or JavaScript code, e.g., for client-side caching purposes. In this setting, the attacker is able to completely overwrite the contents of the corresponding storage entry with their own code. We could identify in several cases these flaws are actually introduced by third-party libraries, among them CloudFlare and Criteo.

FiddlyPack··on Building a front end with no JavaScript
Yes! I am so excited by this. For those that don’t know, Phoenix is a UI framework for Elixir, which is a more productive flavor of Erlang (citation needed).

If you think high reliability and a superb concurrency model is something that might be valuable in a web UI...check out this project! I am desperately seeking a good excuse to build something with this.

FiddlyPack··on Why airlines make flights longer on purpose
...this is exactly what the commenter you’re replying to said, except also with nice charts/graphs showing the sweet-spot for various aircraft...
FiddlyPack··on A majority of consumers do not expect Google to track their activities
There is behavior that I expect of a 14 year old, even if they seldom exhibit that behavior.
FiddlyPack··on A majority of consumers do not expect Google to track their activities
I might answer “do you think Google does X” with ‘yes’ because I believe they do, and “do you expect Google to do X” with ‘no’ because I do not believe it would be right to do so.

“Expect of” is often used to connote a kind of standard setting.

I expect power multinational companies to behave ethically to the best of their ability. I believe they behave ethically only to the degree that it allows them the political leeway to behave without scrutiny.

FiddlyPack··on Google’s constant product shutdowns are damaging its brand
I went to buy one last week. Apparently discontinued Jan 2019. I just missed the boat, and I am sad.
FiddlyPack··on Students don't seem to be getting much out of higher education (2018)
Did you miss the part where I said it has a negative economic impact on individuals, even though it may net more good to the collective as a whole? It’s a sort of free-rider problem, and I don’t fault any individual for playing the game.
FiddlyPack··on Students don't seem to be getting much out of higher education (2018)
Studying history seems like it would have immense value to society, but negative value to short-term corporate interests, and, by extension, may not be in the best interests of the individual. The same could be said of the study of ethics.

I must say “seems like” because there’s really no scientific way to prove this (most of the time...although there are some interesting micro-studies in behavioral economics). But if you think about it even a little bit, I think you would agree that having a “collective memory” about causality in society is incredibly valuable to the interests of the citizens of that society, even if it has negative economic value to individuals.

FiddlyPack··on The difference between ‘broke’ and ‘poor’
But why?
FiddlyPack··on The difference between ‘broke’ and ‘poor’
Easier to go down than up, and the people on your level will often try to make you feel bad for trying to move up and out. Good on you for escaping the trap. Props to your uncle for giving you tools to do it, hardass though he was.
FiddlyPack··on Why Operators Are Useful
Penny piles can’t be merged together and remain pennies. If you merge a pile of 6 and a pile of 3, you get one metal lump. I actually really like the point you are making, just feel like your illustration works against you.
FiddlyPack··on My Salary Progression in Tech
Fired =/= Laid-off
FiddlyPack··on My Salary Progression in Tech
Dollars are a social construction of disassociated trust of value, wherein your ability to establish rent grants you power over rentees. Votes are another way of expressing power, wherein your ability to establish a majority opinion grants you power over the minority. Seems like the equilibrium would be at the point where power expressed by the renting class is only just not quite able to override the power expressed by the majority opinion.
FiddlyPack··on How the Maker of TurboTax Fought Free, Simple Tax Filing (2013)
The IRS already knows how much you should owe in most cases. They could send you a filled in tax form with spaces for corrections, and if looks right, you’d just send it back. This would require no changes to the tax code.
FiddlyPack··on Quotes from 1992
Oh please. He sounded quite grateful to archive.org. He sounds frustrated because the mobile application developers didn’t think that maybe double tapping a single pixel is extremely difficult to register on a touchscreen. The app dangles content in front of you, tells you that you can have it, but then it seems impossible to actually get to it. That’s the epitome of frustrating software. That software has nothing to do with gratitude to archive.org.
FiddlyPack··on Google Moves to Address Wage Equity, and Finds It’s Underpaying Many Men
Hey so I know this is n of 1 and off-topic, but as a liberal arts student, I went from music to signal processing to music theory to music analytics to generative music to software engineer. There can be a lot of STEM in non-STEM degrees. I did take a number of CS, acoustics, and electrical courses as a music major, but my degree still says music.

I know once-English majors with a similar story of a passion for what computing can reveal/create around a discipline that resulted in rich software careers. I am over a decade out of college, and in my personal experience passion for computing is more relevant than having a STEM background in software development. All this to say, I’m not sure % STEM focused is necessarily a reliable indicator of “future software engineer.”

FiddlyPack··on Show HN: An Easy Programming Language – Built with WebAssembly
Highly recommend you check out PICO-8
FiddlyPack··on Nobody Likes the “Idea Guy”
Well articulated. I’m sold. I retract my prior argument. “Guy” is not gender neutral. My apologies for encultured shallow thinking.
FiddlyPack··on A listing of companies that don't do whiteboard job interviews
It’s a place you want to work? I’ve never done more than 3 interviews in a go, but I also only apply to jobs I really want.
FiddlyPack··on A listing of companies that don't do whiteboard job interviews
Last time I went interviewing, that’s exactly what I did for the take home projects: hire a sitter.
FiddlyPack··on Nobody Likes the “Idea Guy”
“Guy” is also gender-neutral for me. When approaching other girls, my normal greeting is “hey guys!” Saying “hey gals!” is...an off-putting notion.

“Gal” instantly conveys a long-gone era of disempowered women to me. In an era of non-binary genders, I think reclaiming it would only serve to further exclude. Rather than try and force the world to use a new gender-neutral word (“zer”?) just let “guy” be the gender-neutral word it has been used as for decades. It doesn’t have the gender connotations of he/she/him/her and needs no correcting.

FiddlyPack··on Nobody Likes the “Idea Guy”
I have wanted this app since I first start preferring using mobile devices as audio-only rather than screen-first. Unfortunately, iOS and Android both seem to be further away from supporting that use-case OOTB than they were in 2013. Anyway, thanks for making this.
FiddlyPack··on America’s Cities Are Running on Software from the ’80s
I think all of things you mention have value, but all of that information is (and in my setup, displayed inline) located in git. We keep ticketing, author, rational, and version changes, and you can walk through the changes with the tracked intentionality by stepping back through the version control.
FiddlyPack··on Toxic Workers Are More Productive, But the Price Is High
Its like we’ve forgotten the lessons of Standard Oil.
FiddlyPack··on I Deleted All of My Social Media and 60,000 Followers
Your executive brain can only track so many things. It’s primary purpose is to filter out the noise of all the many inputs from the rest of your brain and allow you to focus on the one most important thing happening right now.

By contrast, your subconscious produces vast quantities of predictions, most of which are necessarily discarded as junk or inactionable long before they reach your conscious brain.

It sounded to me like the author had gained over a decade of experience of the business expense/benefit associated with social media, and in conversation with others, was able to reveal to themselves what they already knew to be true: they were not benefiting from their social media presence, and that it was actively subverting their dopamine circuits towards “likes” over “purchases.” Instead, they benefited primarily from personal relationships formed in other mediums, and spending time on social media was a distraction to, not a building block of, their business.

FiddlyPack··on Why I Write CSS in JavaScript
Angular also does this, fwiw. Also allows you to manipulate the styles from DevTools which I hear is a problem in CSS-in-JS
FiddlyPack··on I Bought a House with Solar Panels
At least from my perspective, the ROI is often negative. Lipstick looks varying degrees of clownish to me, and if I can’t see your pores you look like a robot. I don’t blame anyone for doing whatever makes them feel beautiful; I’m sure my choices look distasteful to some. But a look enabled by product works because it has been sold to us, men and women alike.
FiddlyPack··on Reddit Transparency Report 2018
Wow, people don’t like Finn? This is not sarcasm, I am truly surprised. I thought he was a fantastic rebirth of the Han Solo ethos. I love him.
FiddlyPack··on On higher education, programmers and blue-collar jobs
> I think an appropriate name might convey a mix of the concepts: problem solving, design, creative, abstract, structure

Hmm, something like (now hear me out), I dunno, “developer?”

FiddlyPack··on Show HN: DeskGap – Like Electron, but uses the system webview
Electron has a leg up in this regard long term, insomuch as the web is a platform that folks using assistive tech often use, Chromium is a reasonable target for assistive web technologies, and Electron apps have a higher chance of using accessible semantic building blocks by default.

Now, in practice? Yeah, not so good right now.

← PreviousPage 2 of 3Next →