HNHacker News
TopNewBestAskShowJobs

altfredd

357 karma · joined March 26, 2018

submissionscomments
altfredd··on GM's Cruise alleged to rely on human operators to achieve "autonomous" driving
By this logic Tesla does not have "autonomous vehicles" either. They just do adjustments after the car crashes and kills someone instead of doing it online.
altfredd··on Why banks are suddenly closing down customer accounts
Must be nice when your sole customers are nation-states and 3-letter agencies. Better B2B than B2B (or should it be called something else... N2B — nation-to-business?)
altfredd··on Android 14's user-profile data bug
What "suspicious spouse"? If someone has personal computer and can sift data off phone via something like usb connection, they are probably either state level adversary or professional black hat.

At this point you may as well give up, because those people have access to (years old) 0-day exploits, which work flawlessly regardless of "security measures" used by phone manufacturer.

altfredd··on SpaceX Starship Super Heavy Project at the Boca Chica Launch Site
What about total amount of viable farmland? How much of that amount do those 6% constitute?

How much of farmland is situated close to cities (main cause of aquifer deterioration)? Would that farmland still have enough water after aquifers are caput?

altfredd··on Requiem for a stringref
Unless you enjoy getting hacked, all strings received from outside sources are bytes.
altfredd··on Jitsi Meet Flutter SDK
Flutter is nice, but "typical 90% apps" can be written with literally anything.

The real problem with Flutter is it's tendency to attract bottom-of-the-barrel cheapskate customers. I don't want to double down on my earlier mistakes and box myself into lower-paid 10% of already lower-paid (compared to iOS) Android development market.

altfredd··on Unsafe deserialization vulnerability in many Minecraft mods
There is nothing inherently wrong with Java serialization. It is effectiverly a convoluted way to call eval().

Is eval() a mistake?

altfredd··on Google’s nightmare “Web Integrity API” wants a DRM gatekeeper for the web
HTML "APIs" weren't meant for public either.

In practice, if there is a mobile app, there is an API. Whether it's creators object to your usage is mostly their own problem.

altfredd··on Google’s nightmare “Web Integrity API” wants a DRM gatekeeper for the web
> The market is trying really hard to price out web scraping... scraping is becoming non-existent in user-space apps

Uhh... Those two matters are pretty much unrelated to each other. Scraping is becoming non-existing because the era of static web pages has ended. No need to "scrap" when you have a nice, performant JSON REST API provided for you.

altfredd··on Geddit: Open-source, Reddit client for Android without using API
The difference between YouTube and Reddit is so drastic they are basically incomparable.

YouTube is a humongous monster with their own network backbone and video storage boxes co-hosted by countless ISPs. Multiple major governments would like to unseat YouTube, but they simply can't. YouTube's competitors are Netflix and (to lesser extent) classic TV networks.

Reddit is a web forum hosting platform, that can be wholly bankrolled by a single upper-class US citizen (assuming that your drop their awful video-hosting). Reddit's competitors are WordPress and phpBB.

One of them is somewhat of necessary evil. Another hardly deserves to have it's own custom clients to begin with.

altfredd··on Git archive generation meets Hyrum's law
What about people who don't have Git and want to build it from source?
altfredd··on Samsung’s Android app-signing key has leaked, is being used to sign malware
They can but don't want to. There is no multi-billion profit in that.
altfredd··on We became experts on Google Play Store policy violations
It looks like some types of reviews might be lazy: the app is accepted after an automated scan, then placed in queue to let human reviewers check it at later date.

This is actually my biggest takeaway from the article.

altfredd··on Do central banks’ mounting losses actually matter?
> regaining control of former colony

This is an oversimplification... How many countries have built nuclear power plants and missile assembly lines in their colonies?

altfredd··on Reference count, don't garbage collect
> all memory could be handed off to a separate dedicated thread that actually calls free()

That only works when you have infinite memory (or infinite CPU resources).

> It's very easy to make a reference counting scheme not stop the world. It's a bit more difficult to make a GC implementation so.

Only if by "not stopping the world" you mean your previous suggestion (leaking unbounded amount of memory to free() everything at some later point). When your memory is bounded, you will eventually have to stop/crash once you have run out of it.

AFAIK, the best modern state of art garbage collectors have stop-the-world pauses, proportional to size of root set and/or thread count. I'd love to see an RC implementation, that does not have stop-the-world pauses at all, but that sounds as audacious as claims of perpetual motion machine.

altfredd··on Android removes much of Fuchsia-related code as Starnix project progresses
The statistics are as following: Huawei made a few 1000 usd smartphones, but nearly went bankrupt and had to sell their mobile division.
altfredd··on Lenovo shipping new laptops that only boot Windows by default
Lenovo and other laptop manufacturers don't really make such decisions.

They do whatever Microsoft tells them to do, because the alternative is being forced to pay extra $200 per laptop sold.

altfredd··on Modern city dwellers have lost about half their gut microbes
> effect of chlorinated town water on gut microbes

Unless you are drinking a tap water (pretty extreme thing to do!), the effect is probably non-existing:

https://cooking.stackexchange.com/q/67027

altfredd··on Whatever happened to SHA-256 support in Git?
On Github, Gitlab and in the command line.

Upstream Git client says "Binary files a/filename and b/filename differ" whenever it detects changes a binary file. This is mentioned in output of 'git diff', 'git status', 'git show' and other commands.

altfredd··on Whatever happened to SHA-256 support in Git?
> binary files aren't displayed in git diffs

They are (albeit not as prominently as they should). And you can add your own diff engines to show full diffs for different binary formats.

altfredd··on Why do antibiotics exist?
I like how you don't even contemplate reducing profits as solution (as opposite to mass deaths or mass starvation).
altfredd··on Go does not need a Java-style GC
Graal effort is over 10 years old.

Jaotc, — Graal's sole mainstreamed part, — has been recently removed from OpenJDK in 17th release, and Oracle says [1], that they are "considering the possibility of using C2 for ahead-of-time"

1: https://mail.openjdk.java.net/pipermail/discuss/2020-Novembe...

altfredd··on Go does not need a Java-style GC
Scalar replacements (as currently implemented in Java) does not work in real-world programs.

Well-written code does not need it. Poorly written code can not trigger it, because the JIT is too dumb and isn't getting better.

There is no sane test to determine whether a piece of code will be inlined in Java. In practice anything more complex than byte array is unlikely to be inlined. Even built-in ByteBuffers aren't! Meanwhile Go compiler treats Go slices just as nicely or better than arrays.

altfredd··on Hoax email blast abused poor coding in FBI website
There is no "one size fits all" solution.

If the database fits onto client hard drive and the modifications are rare, preloading everything is almost always better.

If you have a dynamically changing system such as bug tracker, it is still possible to go fully local, but that would require considerable cooperation from server side. When the back-end does not have a fast, efficient API for sending diffs, you may get stuck waiting for it to be implemented. But that's a purely organizational problem.

Of course, all of above applies to actually saving data to permanent storage. Storing everything in memory is a sin by itself.

altfredd··on Comparing Nginx performance in bare metal and virtual environments
IIRC, hypervisors have to preserve CPU registers and other processor-related state when switching between "worlds". This is why mitigations for CPU vulnerabilities affects hypervisors too.

Most compilers assume that emitting the code in certain modes (SSE/AVX etc.) have particular cost. That cost may drastically change depending on how the implementation of the hypervisors handles the registers in question.

altfredd··on Blue light from monitors no danger to eyes or sleep
And when I saw that article I immediately recalled all bogus "research", that indicated that ionized radiation is harmless (sure thing, buddy) or that various carcinogens (currently proven to be carcinogenic) are actually good for one's health.

Billions of people have been using computers for decades. They are not going blind. There is no epidemic of insomnia. At the same time, there are thousands, who claim, that looking at monitor with adjusted gamma feels more pleasing and helps their sleep. Why are they saying so?

Instead of studying the actual phenomena (different monitor gamma acting as signal to sleep) the "researchers" went out of they way to confirm something, their sponsors wanted them to confirm. Circadian rhythms? Nah, never heard about those — let's just check for retina damage and eye strain after brief 2hr period.

altfredd··on Lithuania says throw away Chinese phones due to censorship concerns
> The reality is, the mobile app development is outsourced to incompetent teams for presumably the lowest price who "ensure security" by just saying, "lets chuck a library in that prevents running if the device is detected as being rooted, and call it a day".

I don't understand, why people think so. Banks hire good developers. They don't pay them well (by banks' own standards), but they still pay enough to hire competent programmers.

Unfortunately, working in bank is highly competitive environment, that fosters sycophants and rewards socially adept people, good at obeying orders to letter. Who cares, what the programmers think, they are at the bottom of command chain anyway.

The fraud prevention is often split into it's own department. As for "computer security" department, it is a fang-less security circus, that exists to satisfy PCI DSS. In some banks it outright pretends, that web sites and mobile apps don't exist. All your data will be processed in "secure server enclave", managed by "certified professionals", while sending hashes of credit card numbers to Google Analytics.

altfredd··on Canada to make online hate speech a crime punishable by fine
Some societies used to have caste system and did human sacrifices, yet it took thousands of years for them to collapse. When they did collapse, it was due to outside invasion rather than their ideologies.

Good news: your society isn't collapsing. Bad news: it looks like it is going to shit.

altfredd··on Go 1.17 is deprecating the traditional use of 'go get'
Indeed, — GOPATH does not imply using Github, and Github does not imply open-source (even if it is one of the most widely used ways to host open-source).

The logic of GOPATH and "go get" just so happen to revolve around building packages, fetched from source code repository. This logic used to be a stop-gap, written during early stages of Golang development, and makes it awkward (at best) to distribute proprietary Go libraries. I assume, that Google is introducing module system (and aggressively deprecating GOPATH) to work around this issue (among others).

altfredd··on Go 1.17 is deprecating the traditional use of 'go get'
Just checked, and looks like you are right — modules don't offer more facilities to distribute proprietary code than GOPATH already did.

I stand corrected.

← PreviousPage 2 of 6Next →