HNHacker News
TopNewBestAskShowJobs

Nemo157

227 karma · joined October 7, 2014

[ my public key: https://keybase.io/nemo157; my proof: https://keybase.io/nemo157/sigs/sUOtwAq1X-e0VqKotIWLdIy0GzObRqGqjWU6tmK4EkU ]
submissionscomments
Nemo157··on What HashiCorp’s license change means for our customers
But you are the second party, there is no third party involved when you use the software for yourself.
Nemo157··on GitHub merge queue is generally available
You don't need to pay to have an organization, I just created a personal organization to hold my non-experimental source repos.
Nemo157··on Safety and Soundness in Rust
Since unsoundness is a property of an interface, that private safe function would be unsound but could be used as part of the implementation details of a sound public API.

It's not something I would do personally, and would be something I'd put down as a black mark against using a library as a dependency, but it's nowhere near as bad as doing the same thing on a public API.

Nemo157··on Safety and Soundness in Rust
Then your code calling `pre_exec` is unsound, it is calling into `foo1` which is not documented to be async-signal-safe. Without any documentation saying otherwise you can't assume a function can be called within weird contexts with non-standard restrictions, and if they update to do something like add an allocation that causes your code to be UB, that's allowed by their documented API.
Nemo157··on We Just Gave $260k to Open Source Maintainers
If you're improving the UI around here it would also be good to see how the list was determined. For automated detection in particular it seems like the tooling used also should be made public to allow testing. I know of at least one dependency that I would expect to turn up on sentry's list that doesn't. (A first guess: a bug in how you handle Rust workspaces, using the root to calculate dependency depth; alternatively a bug in your handling of non-lowercase github usernames, I notice there are only lowercase usernames in the list, but that might just be an artifact of your UI design).
Nemo157··on IPFS and Their Gateways
The hash you have is computed from the hash of the content and other data. You would need to send that additional data out-of-band to allow the client to compute the overall hash and verify it. (Not to mention with urls like ipfs://<hash>/some/path you only have the hash of some arbitrary parent node, so there's even more additional data necessary to be able to verify that the content at that path under the hash you have is valid).
Nemo157··on IPFS and Their Gateways
A long time ago Cloudflare was experimenting with support for E2E integrity via their public gateway:

https://blog.cloudflare.com/e2e-integrity/

It looks like they've taken the FF addon down and archived the source repo though.

Nemo157··on Give up GitHub: The time has come
JS being required for the interactive features would be fine. My personal problem is that I end up on some random gitlab instance to just take a look at the source or issues for some library, and get a blank white page. For the read-only public view there should be no need for any JS.
Nemo157··on Firefox rolls out Total Cookie Protection by default to all users
Though IIRC from some bugginess I was noticing a while ago, only to the JS API, it will still obey the dark color scheme media query (but sometimes inconsistently, I would load the same page in multiple tabs and sometimes get dark or light schemes).
Nemo157··on Cookie Consent Speed Running Game
> In most cases, it just blocks or hides cookie related pop-ups.

This bit is actually the opposite. All tracking _must_ be opt-in, therefore by blocking the pop-up and not opting-in the website cannot track you.

It's only for the websites which are broken when not opting-in that it accepts the policy (which AIUI is itself a violation of the GDPR).

Nemo157··on UK to depart from GDPR
Just block them in your ad blocker, because they must be opt-in, by not interacting with them you are asserting your right to not be tracked.
Nemo157··on Ask HN: Why aren't one-time sign in links more popular for authentication?
A good one-time-sign-in-link implementation will send a link to authenticate a session elsewhere, so you can click the link on your phone to complete login on the computer.
Nemo157··on Better Than JSON?
JSON has the equivalent JSON Pointer described in RFC 6901 (https://tools.ietf.org/html/rfc6901).
Nemo157··on Tell HN: FB tracked my sensitive buy outside FB, cant delete a suggestion in app
IPv6 != static addresses. My IPv6 prefix changes at least once a day too.
Nemo157··on Keeping your Go modules compatible
It would if it worked, but every time I've tried using it I've hit some combination of crashes and weird false positives.
Nemo157··on State Machines in Rust
Yes, this is basically erasing type invariants by moving them into runtime code. Similar things have been done with things like GPIO pins in embedded code, having the pin numbers carried in the type (`struct Pin1;`) and being able to erase those for collections by moving them to runtime (`struct Pin { id: u8 }`). Unfortunately it comes with a bunch of extra implementation overhead currently, maybe in the future with const-generics it would be possible to reduce this overhead (that would end up being closer to some sort of merge between the first example and the "future directions") .
Nemo157··on Show HN: Sorcia – Self-hosted web front end for Git repositories, written in Go
Wow, did not expect to see grarr mentioned on HN. I should mention that it's basically dead at this point, and IMO would need a full rewrite to resurrect (the web framework it's built on is unmaintained and has been superseded by much nicer ones, the templating it uses is based on a compiler plugin that only works with a few years old nightly compiler).
Nemo157··on Rust 1.42
The long term plan is to make assert! smart enough to recognise the assertion and provide good error messages based on its shape, maybe eventually deprecating assert_eq! etc.
Nemo157··on iOS 13 app tracking alert has dramatically cut location data flow to ad industry
I have a feeling that's a bug. I have an app that I want to have background location and was asked twice soon after upgrading to iOS 13, then iOS was silent for about a month, then started popping up a prompt for it 2 or 3 times a day for half a week. After restarting it stopped popping up again, so it seems likely that something was broken about saving whether it had prompted for that app.
Nemo157··on Rust 1.40
non_exhaustive only affects downstream code, within the crate you can still treat it exhaustively. For example in this playground[0] if you build in test mode the match works inside the crate, but fails in the doc-test because that is treated as external code.

[0]: https://play.rust-lang.org/?version=stable&mode=debug&editio...

Nemo157··on Async-await on stable Rust
It's impossible to use the guarantees provided by the `Pin` type without `unsafe` code, except in `async fn`.
Nemo157··on What an attacker gets from Apple devices if they sniff Bluetooth traffic
The email address I use for Apple ID is not the same one my contacts would have.
Nemo157··on Fukushima 8 years on – photo essay
In your link there is a photo of what looks to me like a school hall that could very easily be a cropped and color changed version of a photo included in the OP (/vice-versa).
Nemo157··on Storing UTC is not a silver bullet
And yet iOS calendar is also more powerful in that you can set different time zones on the start and end of a single event, which macOS calendar will show but not let you edit.
Nemo157··on 800M Email Addresses Leaked Online by Email Verification Service
It also supports a catch-all alias though.
Nemo157··on What's next for SemVer
The standard separator for build metadata fields is a period, since the section is ignored for version comparison it doesn’t really matter, but the spec does specify it (and some tools may display separate fields differently).
Nemo157··on Inside Rust's Async Transform
What cokml19 said, it’s all about minimising the work. This is just a normal Jekyll site hosted on github pages, but with just minimal css and js inlined into the page. There are actually a few more lines of js hidden around the place, e.g. for adding the “play” buttons onto the code snippets, but it’s all simple library-less code.
Nemo157··on Inside Rust's Async Transform
The actual Future implementation comes from std, std::future::from_generator takes a generator with the right associated types and turns it into a future.

Yep, the generator created by quote_encrypt_unquote is creating internal self-references from the future created by read_to_end into the AsyncRead it's storing in its environment, while this is happening the AsyncRead must not move and therefore the generator must not move, which is what pinning represents.

Nemo157··on Inside Rust's Async Transform
Tried to clarify this, it's not that C# and JS are implemented as CPS-like, rather that that's how they're commonly explained; and because of the GC this difference is not really externally visible, whereas with borrowing in Rust it would be.
Nemo157··on Async and Await in Rust: a full proposal
Definitely. We’re currently blocked with the builtin await using thread local storage, but that’s planned to be removed and replaced with something that will work without an OS before stabilisation.

I have had the old macro based async code in Rust running on a Cortex M device, completely runtime free. Once the TLS stuff is sorted I plan to port this forward to work with the builtin syntax.

Page 1 of 2Next →