__ryan__

Accept that your understanding of JavaScript is outdated. Appreciate you have at least some experience though.

If you care to learn modern JavaScript, which you should, check out Eloquent JavaScript [0]. It’s a free web-based ebook providing an introduction to modern JavaScript.

Also, stop with the negative narrative. You are overwhelmed, not helpless. Instead of telling yourself you don’t understand code and giving up, just Google said code. It’s easier than ever. In a few weeks, you won’t need to reach for Google. If you encounter a dependency you don’t understand, try to find some documentation.

Accept that there are black boxes that “just work” despite being deprecated or lacking documentation.

Your job is not to learn the history of JavaScript and how it evolved from your understanding. Your job is to get up to speed with modern JavaScript enough to make functional programs to solve the business’ needs.

0: https://eloquentjavascript.net/

> Even if two choices are equal, one might bring you more luck.

> If two gyms are equidistant from your house and you’re single and looking to meet someone, perhaps it would be wiser to join the gym that is next to a cafe or a grocery store.

If two gyms have nearly equal luck distributed across different categories, one might have more opportunity potential. If both gyms are next to a cafe or grocery store, perhaps it would be wiser to join the gym whose reviews and other online commentary, according to a semantic analysis, suggest people encounter new experiences there.

  In every universe where you survive (which, for sake of argument, are the only ones you care about) you find a factor on the first try.

What’s more likely, randomly guessing a prime factor of a giant number, or miraculously surviving and being permanently incapacitated? Or being interrupted, saved by modern medicine, bitten by a black widow immediately after getting it right…

You have to think that the odds really aren’t in your favor there.

How much of that money was based on capitalizing on an unregulated speculative investment market? Just because a lot of resources flow in the general direction of a technology doesn’t mean it wasn’t put to misguided use.

I suspect it's because people aren't reading the guidelines: https://news.ycombinator.com/newsguidelines.html#:~:text=Ple...

  decrease volume of calories

By, say, replacing 24 cans of “regular” soda (24 * ~100cal) with 24 cans of diet soda (24 * ~0cal).

I calculate about 2400cal savings, and if CICO is legit, I think that would get them there.

…Vue in this case?

Twitter should be encouraging my grandma to leave twitter and go to random websites to view long tweets?

This is neat, but it's only an alternative to Electron in the sense that it's an alternative to building a desktop app.

…have you used Google lately? I’m blocking junk results daily.

Mobile browser or desktop browser?

It’s open source too: https://github.com/SelfControlApp/selfcontrol/

Well, anyone can post a link to HN but only the project author can adjust the project’s README. Perhaps a better URL exists, but also perhaps not everything on HN has to be for everyone on HN. This is obviously news for people who know what 4Coder is, not necessarily meant to onboard people who don’t want to look up what 4Coder is.

Edit: grammar

I relate to the parent commenter (including their reply) so profoundly, it’s scary. The only difference is that I focus hard on finding the “right thing”; some missing piece of information, or a strategy, that will suddenly make everything “click” into place.

I’ve had periods of clarity and many more periods of extreme fog. My focus is so poor sometimes I barely feel like I’m present to experience life. But not being in control of my productivity is somehow the worst part. So much passion and so many ideas, but actually doing anything feels impossible.

I tend to have success with momentum. I am currently working at a new strategy from several angles. I’m setting myself up to have better habits for my health (sleeping, eating, moving) and hatching a non-mentally-ill alter ego who just does things and has the qualities I desire. Faking it until I make it, hopefully.

This post is frustrating because you aren’t really saying anything.

  My sample size is not huge, but from what I have observed, the hype isn't the same as it was in 2020/2021. 

Your sample size for what? How do you measure hype?

I meant that the logic implies that https://github.io is shady because it uses the ccTLD of British Indian Ocean Territory despite being unrelated.

Of course you should cross reference the authenticity of any URL you are about to execute as a shell script. No one is saying not to.

But your point seems to agree with mine: it’s only as shady as it is unfamiliar. The answer shouldn’t be to come up with a URL that lowers your guard. Instead, users should get familiar.

By that logic https://github.io is shady.

Also, a bad actor could just as well register https://rustup.dev. Rather than judging a URL in a vacuum based on the TLD, you should instead cross reference the official docs and confirm that the URL is correct.

Any tool can be dangerous in inexperienced or careless hands. The issues you described could just as likely be caused by logic errors or typos in any other language.

You’re talking as if all bash scripts are hacked together carelessly and work by accident. You can actually learn bash. Thankfully the script we’re discussing is written with care and vetted by the community.

  Problems like removing a large directory instead of a file

The rm command doesn’t even remove directories by default, you have to specify a flag. Not knowing a tool is not a good reason to bash it.

Any software you choose to run could not respect your desires and leave a mess. This is not a random shell script. It's the officially recommended way to install Rust [0], vetted and maintained by the community. You're free to audit the script before running it, or even check out the source [1]. If this doesn't satisfy you, check out the other installation methods [2].

Edit: I realize you're not speaking specifically about rustup, but what I said can and should apply to anything you choose to install this way.

0: https://www.rust-lang.org/tools/install#rustup

1: https://github.com/rust-lang/rustup

2: https://forge.rust-lang.org/infra/other-installation-methods...

  - the domain in the curlbashware URL could be less shady than sh.rustup.rs

The domain is only as shady as it is unfamiliar. It's not shady to me since I recognize it as the canonical domain of the recommended installer for Rust, "rustup".

  - the "rustup is an official Rust project" claim on https://rustup.rs/ could be a link to a page somewhere on rust-lang.org that confirms that rustup.rs is the site to use

It links to rust-lang.org, whose installation page then describes rustup as the recommended way to install [0]. I suppose it could link directly to the page, but what really does that gain?

0: https://www.rust-lang.org/tools/install#rustup

This doesn’t even include the rent, mortgage, or other payment to house you, or how much it costs to feed or clothe you and otherwise keep the piracy operation running.

Why not just debug on component creation? Or maybe on DOM subtree modification [0]? Or maybe modify the compiled JS to add log or trace statements?

It’s all in your browser. You have a debugger at your fingertips.

Why doesn’t Vue stop this from happening? Because it assumes whatever you’re telling it to do is what you want it to do.

0: https://developer.chrome.com/docs/devtools/javascript/breakp...

Why can’t you debug?

I’m not a big crypto fan, but, the purpose it serves is to keep your money in crypto (avoid fees/paperwork when transferring to fiat) but not risk the value due to the volatility of non-stable coins.

> “The approach deno is taking is very interesting where all packages are sandboxed.”

Can anyone clarify this?

My understanding is that packages are not sandboxed, but your entire Deno process is. Meaning that if one part of my app requires full read/write access then any package included in my app also gets it. Is that correct?

Such sandboxing is a secure default, and can help to limit the scope of a supply chain attack, sure, but this doesn’t make packages inherently more secure.

Per-package sandboxing would be cool, although I’m not sure how that would work.

This makes sense. But how do I as a basic user make sure the signature is correct and definitely from Deno? Couldn’t a hacker sign it with their own signature?

You're about to run their software on your computer-- what's the difference with that and running their install script?

That narrative might work for you, but the bio-hack narrative might work for others.

Maybe the takeaway is to go into things with a positive attitude but also take a personal inventory and adapt if something that is supposed to work doesn’t work for you.

"Sarcasm" unfortunately has a negative connotation. It makes it sound like you were being spiteful.

In practice, I interpreted the text as "There's a simple solution... but we cannot use it", which is a perfectly fine thing to say, in my opinion.