HNHacker News
TopNewBestAskShowJobs

Lx1oG-AWb6h_ZG0

841 karma · joined April 16, 2014

submissionscomments
Lx1oG-AWb6h_ZG0··on Hundreds of Facebook employees walk out as Zuckerberg plans town hall tomorrow
Just to drive the point home, what would have happened if a facebook moderator had decided to remove the initial video of Floyd's murder because, hey, the official reports said he was doing something wrong and the video had the potential to incite violence? I'm fairly sure we would not be having the discussion we're having today, and we would have lost the opportunity to improve our democracy.
Lx1oG-AWb6h_ZG0··on Hundreds of Facebook employees walk out as Zuckerberg plans town hall tomorrow
What is their end goal here? I certainly don’t want Mark Zuckerberg or any of his employees making decisions on what is considered newsworthy, especially on really important stuff like this. Even if you don’t personally like what is being said, the fact that it _is_ being said - and who is saying it - is an important point for people to know.

The next time, it may be your own opinions that they’ll censor: Facebook has far more reach, and has much less journalistic pretensions than any of Murdoch’s properties... you really really don’t want them to start getting involved in politics.

Lx1oG-AWb6h_ZG0··on History of SQLite in the Browser (2014)
I feel like there’s some missing context here: the late 2000s/early 2010s were also when the nosql craze was really taking off: Cassandra was open sourced in 2008, MongoDB came out in 2009 and spawned the “MEAN stack” (remember that?)

Using SQL was extremely unfashionable then, so it’s no surprise that developers at Mozilla/Oracle (and even Google and Microsoft) were not keen on adding a sql stack.

Lx1oG-AWb6h_ZG0··on Close Look at CSRF Tokens
Is any of this actually needed anymore? Setting the SameSite attribute on the cookie will ensure the browser will not send it for cross-site requests, so... problem solved?
Lx1oG-AWb6h_ZG0··on SQL is a better API language than GraphQL – Convince me otherwise
Or having multiple frontends, each with different API requirements. Yes, you can still write multiple SQL queries, but the “carefully written SQL views” are not that useful anymore.
Lx1oG-AWb6h_ZG0··on China’s controversial mission to reinvent the internet
Some excerpts:

> The New IP presentation paints a picture of a digital world in 2030 where virtual reality, holographic communication and remote surgery are ubiquitous — and for which our current network is unfit. Traditional IP protocol is described as “unstable” and “vastly insufficient”, with “lots of security, reliability and configuration problems”.

> The documents suggest a new network should instead have a “top-to-bottom design” and promote data-sharing schemes across governments “thereby serving AI, Big Data and all kinds of other applications”. Many experts fear that under New IP, internet service providers, usually state-owned, would have control and oversight of every device connected to the network and be able to monitor and gate individual access.

Lx1oG-AWb6h_ZG0··on GraphQL Tooling, Today and Tomorrow [video]
I’ve found graphql-codegen (https://graphql-code-generator.com/) to be very robust and easy to use. It takes in your schemas and can generate typings for your resolvers, queries, fragments etc. it can even generate helper hooks and HOCs for Apollo client or Relay.
Lx1oG-AWb6h_ZG0··on Google has finally killed TinyTask
Wow, this is fascinating, and extremely disturbing:

“Nobody programs in low-level C anymore, and nobody creates new PC automation apps. TinyTask is both....so it must be malicious, apparently? To confirm this theory, here's a simple "Hello World" app written in C, all optimizations deactivated and zero functionality, and definitely not malware, evaluated by Google-owned VirusTotal. Yup, multiple warnings”

I can definitely see how heuristics would target programs that weren’t written on well-known frameworks, so in the goal of protecting people, we’ve effectively denied ourselves the ability to write programs on the entire substrate.

I wonder if eventually Explorer.exe and all the other windows core programs would be considered malware since hey, they’re all written in C/C++ and only nasty hackers use that, right?

Lx1oG-AWb6h_ZG0··on SoftBank’s $375M bet on pizza went bad fast
The quote really understates the sheer insanity of this all... Alex Garden cynically constructed a narrative for Masa Son that he [Garden] would change the world, and at the end of the meeting, _Son_ was the one convincing Garden that he’d change the world??!
Lx1oG-AWb6h_ZG0··on Chrome 80 stable has a regression with Array.reduce that affects Angular
I used to love using array.reduce when I was first learning JavaScript, but over the years, my opinion has firmly shifted to Jake Archibald’s:

“All code using array.reduce should be rewritten without array.reduce so it's readable by humans.

Ok ok, fair enough, there are cases where array.reduce is the best thing to use.

Specifically, cases where you want to look really smart and don't care about readability.”

https://mobile.twitter.com/jaffathecake/status/1213077702300...

Seriously, even the simplified repro example in the bug is not immediately obvious - I can only imagine how bad the actual code is.

Lx1oG-AWb6h_ZG0··on Microsoft urged: Open-source Windows 7 to 'undo past wrongs'
It’s actually 35+ years, Windows 1.0 was released in 1985, and I don’t doubt that some (much) older DOS code still exists in one form or the other in their repo.

The other problem is open sourcing the Windows code would be also involve open sourcing its crazy huge build system and tooling — it’s not a simple makefile — which is probably another level of impractical.

Lx1oG-AWb6h_ZG0··on Blink-Dev – Intent to Deprecate and Freeze: The User-Agent string
But this is only accessible on the client side, what about all the other backcompat code on the server side (like the SameSite issue mentioned elsewhere in the thread?) Or server-side rendering? Are we not supposed to care about progressive enhancement anymore?
Lx1oG-AWb6h_ZG0··on Blink-Dev – Intent to Deprecate and Freeze: The User-Agent string
Meanwhile, Google is forcing this massive change across the web right now by defaulting cookies to SameSite=Lax, something that breaks a lot of login scenarios. The only way to fix it is to start emitting SameSite=None. BUT WAIT, a lot of fairly recent browsers (e.g., iOS < 13, Chrome 51-66) don't support it, so you actually need to do this crazy user agent sniffing to not break things: https://www.chromium.org/updates/same-site/incompatible-clie....

I find it ridiculous that one part of Chrome is forcing me to add user agent sniffing while another part is trying to deprecate it. They need to get their act together: their decisions have massive consequences across the ecosystem and they need to be more responsible.

Lx1oG-AWb6h_ZG0··on WebAssembly becomes a W3C Recommendation
> Also, JS is at a pretty good level of abstraction to manipulate the DOM

I agree with your point in general, but surely the fact that there are 10 million js frameworks invented every week is proof that the native DOM APIs are not a good abstraction? As a mostly front end dev, most of my UI logic these days target _React_, not the dom APIs. To the extent that I write JavaScript, it’s pure data manipulation, which can be written in any language.

Lx1oG-AWb6h_ZG0··on China's Crackdown on Crypto Exchanges
> Additional services charges such as membership fees, villa-purchasing discount—yes, some exchanges offer deals on real estate!—and “pretty girl customer service,” which means personal service from an attractive rep.

Every time you think they can’t go any lower...

Lx1oG-AWb6h_ZG0··on Moto Razr 2019: A foldable smartphone with no display crease
The verge review said it’s no thicker than the original razr, and that was considered pretty thin when it came out.
Lx1oG-AWb6h_ZG0··on W3C Distributed Tracing Working Group
Just curious, what was the rationale for randomizing the spanId at each hop? (As opposed to a more structured format that could let you track the request tree without relying on another field like timestamp)
Lx1oG-AWb6h_ZG0··on Edge Chromium Release on January 2020
From the first paragraph:

> On January 15th, we expect to release the “Stable” channel, at which point Microsoft Edge will be generally available to download on Windows and macOS.

Lx1oG-AWb6h_ZG0··on Evolution of the Scrollbar
Don’t forget cohesive. I still remember how almost all my applications changed to match the OS styling when I upgraded from 98->XP, it felt like a brand new computer. It’s difficult to imagine that these days, with most everything implementing custom versions of the OS controls.

I think the only ecosystem still trying to match the system’s design is iOS, but given how each version is regressing in its usability, I’m not sure that’s going to last.

Lx1oG-AWb6h_ZG0··on Alex Russell – The Mobile Web: MIA
I found this recent talk by Chrome's Standards Tech Lead very eye-opening. He talks about some shocking trends in the ecosystem that’s causing the web to essentially disappear from the vast majority of mobile devices being sold across the world. His main points are:

1. Most of the new devices coming online are using cheap low-powered chips that are not very well suited for running single-core JavaScript

2. The web ecosystem is not helping things by bundling megabytes of code on each page

3. Network speeds are not helping either: the average LTE speed is decreasing because the bandwidth is now being shared across more people.

4. Apple is deliberately restricting the mobile web by (a) not investing in safari and keep it lagging behind other engines, and (b) not allowing other browsers to compete.

5. Usage of web (as opposed to native apps) in mobile devices has fallen below 7%, and unless things change soon, nobody will have any incentive to target the web and it will go the way of COBOL and mainframes.

Lx1oG-AWb6h_ZG0··on Some WeWork Board Members Seek to Remove Adam Neumann as CEO
Financial Times is just reporting that _Softbank_ is the one asking him to step down, so that clearly complicates things: https://www.ft.com/content/ee652036-dd64-11e9-9743-db5a37048...
Lx1oG-AWb6h_ZG0··on NSO spyware ‘targets Big Tech cloud services’
> The Israeli company whose spyware hacked WhatsApp has told buyers its technology can surreptitiously scrape all of an individual’s data from the servers of Apple, Google, Facebook, Amazon and Microsoft, according to people familiar with its sales pitch.

They’re talking about NSO, which makes the Pegasus smartphone hacking tool.

Lx1oG-AWb6h_ZG0··on What Facebook’s new currency means for the banking system
And it’s not really managed by code anyway. Look at the DAO debacle: they started out saying the code is the law, and when someone found a bug in the code and exploited it, they changed the code by fiat. What is the point if you’re going to end up human arbitrators anyway?
Lx1oG-AWb6h_ZG0··on Simple Dockerfile examples are often broken by default
this assumes your build agent is running the same environment as the docker image. What happens when you’re running ubuntu and pull in packages that won’t work in alpine? (Or worse, if it’s windows/OSX and Linux)
Lx1oG-AWb6h_ZG0··on Virtual DOM is pure overhead (2018)
Dan Abramov has a great thread about this here: https://mobile.twitter.com/dan_abramov/status/11209717954258.... In particular, I find this argument really persuasive:

> Time slicing keeps React responsive while it runs your code. Your code isn’t just DOM updates or “diffing”. It’s any JS logic you do in your components! Sometimes you gotta calculate things. No framework can magically speed up arbitrary code.

In my experience, as your app grows, the amount of time you spend on dom reconciliation becomes negligible compared to your own business logic. In this case, having a framework like React (especially with concurrent mode) will really help improve perceived user experience over a naive compiled implementation.

Lx1oG-AWb6h_ZG0··on Grocery Outlet S-1
There were a bunch of reports last year about a global shortage of vanilla because bad weather in Madagascar wiped out most of the crop. Apparently at some point, it was more expensive than silver. At the same time, a bunch of big ice cream manufacturers switched to using natural vanilla instead of vanillin, which put even more pressure on the supply chain.

https://www.purewow.com/news/vanilla-shortage-prices-increas...

Lx1oG-AWb6h_ZG0··on Web Share API, Browser Inconsistencies (Issue Affects WSJ)
Ugh, I’m not surprised, safari really is the ie6 of the future.

From an outsider’s perspective, they really seem to go out of their way to implement specs differently from everybody else, and they don’t bother cross-checking until users file bugs - which is largely too late because fixes are tied to iOS releases most of the time and won’t get released till the next year

(I ran into a similar issue a few months back with samesite cookies, which works for all other browsers - even edge - but not safari)

Lx1oG-AWb6h_ZG0··on Improving privacy and security on the web
Before you start emitting samesite=lax, be warned that webkit/safari iOS12 has a weird implementation: if you set the cookie in a POST method and redirect to a GET (like most default oauth explicit grant login flows), the cookie will not be sent: they consider POST pages as "unsafe". See https://bugs.webkit.org/show_bug.cgi?id=188165#c12 for more details.

Edit: it looks like people have found other issues since I last looked at this bug:

> It's a serious issue affecting many common user flows, including the flow of visiting a website coming from a GMail link. If the user comes from GMail, it reaches the destination website without any cookies, thereby breaking functionalities that depend on session/login cookie and CSRF cookie. Only fix for now seems to be removing the Lax flag from cookies. (https://bugs.webkit.org/show_bug.cgi?id=188165#c47)

At this point, it looks like the safest approach is to only emit sameSite if the browser isn't safari.

Lx1oG-AWb6h_ZG0··on IPFS Project Roadmap
Don’t magnet links solve that for torrents?
Lx1oG-AWb6h_ZG0··on Ask HN: Great books you read in 2018?
Obama’s yearly book list (https://m.facebook.com/barackobama/posts/10156093753316749) usually has good gems, as does Bill Gates’ one (https://www.gatesnotes.com/About-Bill-Gates/Best-Books-2018)

The book that made the most impact on me is Tara Westwood’s Educated: it is insane how different people’s worldview is.

← PreviousPage 2 of 5Next →