HNHacker News
TopNewBestAskShowJobs

afiori

3,748 karma · joined January 23, 2019

This about had been empty long enough; I will use it for a book recommendation: Unsong, by Scott Alexander

http://unsongbook.com/

My guess is it will be the weirdest book you will have ever read.

If it is not, please, I am curious about what is your weirdest book :)

submissionscomments
afiori··on Iran war wreaking havoc on shipping and air cargo, could create global delays
> Why would the US and Israel resort to X?

> That’s how you end up with wide scale civilian deaths.

Has Israel ever shown restraint wrt civilian deaths?

afiori··on RFC 9849. TLS Encrypted Client Hello
Then they would drop the connection with esni
afiori··on TikTok will not introduce end-to-end encryption, saying it makes users less safe
Agree, but a significant point missed in the article is that of data vulnerability. with E2EE the company db is useless to an external attacker.

For some companies (eg facebook, google, tiktok) i would be mostly worried about the company itself being untrustworthy. For others I would be mostly worried about the company being vulnerable.

afiori··on TikTok will not introduce end-to-end encryption, saying it makes users less safe
because most implementations are not going to be like that.
afiori··on Don't use passkeys for encrypting user data
Also a password could be the passkey, the passkey protocol is basically a way to send to a server an authenticated public key. The client could deterministically convert passwords to key-pairs and authenticate with those
afiori··on What Is OAuth?
Imo the need to register an app with an oauth provider is a plus
afiori··on Farewell, Rust for web
not really in-topic but constant-time crypto primitives are considered hard for any compiled language with a lot of optimizations
afiori··on Zero-day CSS: CVE-2026-2441 exists in the wild
I am pretty sure that the issue is that they either admit to being so l stuck as a vassal beholden to Google, or they pretend to be enterprising and forward looking with many promising projects
afiori··on Modern CSS Code Snippets: Stop writing CSS like it's 2015
Without a lot of discipline it is very easy to end up with a css with lots of unclear and hard to guess effects. Eg consider the case of <A type=1><B><A type=2></A></B></A> where A and B are complex templates. Any selector with the " " operator on A risk expanding to the inner A even if it was intended only for the outer. Similarly a :has selector might catch a descendant of the wrong element.

@scope fixes a lot of this, but it is a complex problem. With tailwind you mostly have to worry about inheritance

afiori··on Total surface area required to fuel the world with solar (2009)
Even ignoring all non renewable consumption in growing the corn to be turned into ethanol it is still going towards an incredibly polluting infrastructure.

While each solar panel is a small step towards more and better electrification

afiori··on I write games in C (yes, C) (2016)
I enjoyed the pragmatic historical definition of OOP given in https://www.youtube.com/watch?v=wo84LFzx5nI where essential it can be seen as subtype polymorphism
afiori··on Start all of your commands with a comma (2009)
The premise of the article is the desire to avoid accidental collisions, especially from newly installed system binaries.

In such cases you might get errors like sl being both a version control system and the steam locomotive

afiori··on FORTH? Really!?
Probably prefix notation would work better, but I suspect that there would be a stronger effect from predictable and reasonable declinations/suffixes/prefixes at a grammatical level.
afiori··on Data centers in space makes no sense
IIRC the methane is produced at launch site with considerable pollution
afiori··on Data centers in space makes no sense
Sure but if it was a good idea we could do it on earth too and datacenters could stop gurgling a city worth of water
afiori··on Pretty soon, heat pumps will be able to store and distribute heat as needed
This should depend on the frequency of the switching, if it is every few seconds it should behave sorta the same
afiori··on The Codex App
Neither it means that McDonald's should aspire to be a chef
afiori··on Typechecking is undecidable when 'type' is a type (1989) [pdf]
The paradox is about the set of all sets that do not contain themselves, or a theorem that such a set does not exist.

In the context of the paradox you need to call it a set, otherwise it would not be a paradox

afiori··on US has investigated claims WhatsApp chats aren't private
Vibes are a perfectly solid ground to refuse to engage with something.
afiori··on US has investigated claims WhatsApp chats aren't private
Things like this combined with the countless ways to hide "feature flags" in a giant codebase makes me feel that anything less than "the entire app was verified + there is literally no way to dynamically load code from remote (so even no in app browser) + we checked 5 years of old versions and plan to do this for the next 5 years of update" is particularly meaningful.

Still very important but my issue has never been with zucks inability to produce solid software, rather in its intentions and so them being good engineers just makes them better at hiding bad stuff.

afiori··on Brandon Sanderson just sold his Cosmere universe to Apple TV
The thing that make the formula click to me is that it is written as a thriller.

By the last 10% of the book/serie he has created a problem you are 100% sure is insurmountable but by the last 5% you realise how small hints through the story could be composed to create a solution.

afiori··on France Aiming to Replace Zoom, Google Meet, Microsoft Teams, etc.
in the eu i think this is significantly less common
afiori··on UK House of Lords Votes to Extend Age Verification to VPNs
then you are not using any vpn service marketed or provided in the UK[0]. if you were to sell access to your VPS to others then you would have to do age verifications on them maybe.

[0] maybe it is still illegal, IDK, bu likely due to other laws (eg a generic "it is illegal to use workaround for X")

afiori··on UK House of Lords Votes to Extend Age Verification to VPNs
then you are not using any vpn service marketed or provided in the UK. if you were to sell access to your VPS to others then you would have to do age verifications on them maybe.

maybe it is still illegal, IDK, bu likely due to other laws (eg a generic "it is illegal to use workaround for X")

afiori··on UK House of Lords Votes to Extend Age Verification to VPNs
i don't think so, it is not provided as a service. if you provide vpn service people can connect to from their router then you need to do age verification before giving them a key/password to connect to the server
afiori··on Deutsche Telekom is throttling the internet
The email sent from your own separate server will fail basic dmarc/SPF/dkim validation the email sent by their own servers likely will appear legitimate
afiori··on What came first: the CNAME or the A record?
In my native language the literal translation of possibly has a distinct preferably meaning but I feel that in English it does not.

It might be a victim of polite/ironic/sarcastic influences to language that turns innocuous words into contronyms

afiori··on RISC-V is coming along quite speedily: Milk-V Titan Mini-ITX 8-core board
It is a free non-copyleft licence, it is the expected result that derivatives are not similarly free
afiori··on RISC-V is coming along quite speedily: Milk-V Titan Mini-ITX 8-core board
My superficial understanding is that arm does not prevent from sharing implementation details of your own design but most chips also license a starting implementation that has such limitations. So the end result is often more restricted than the ISA licence some would require
afiori··on Why Object of Arrays beat interleaved arrays: a JavaScript performance issue
48/56 bits numbers would be useful in many circumstances
← PreviousPage 4 of 34Next →