HNHacker News
TopNewBestAskShowJobs

bfrog

2,176 karma · joined April 25, 2011

submissionscomments
bfrog··on The empire of C++ strikes back with Safe C++ blueprint
Those are all features of rust not bugs.

Function overloads are evil evil evil. Requiring some mental gymnastics by the reader to pretend to be the compiler what function is actually called. That sucks.

bfrog··on US weighs Google break-up in landmark antitrust case
Imagine an ad company locking up talent for decades. Zzzzzzzz
bfrog··on Guiding principles: How US dietary guidelines contribute to obesity
It's hard not to be fat in the US when 90% of the time people are sitting down doing nothing. Car centric culture and infrastructure, along with unregulated highly addictive packaged food. What could possibly go wrong?

Good thing the medical care is affordable and excellent /s

bfrog··on Qualcomm Wants to Buy Intel
Meanwhile x86 has maintained backwards compat for (checks calendar) yeah decades. Literally decades. With standards up the wazoo to avoid the disaster that is the Arm ecosystem without UEFI or something like it.

Every Arm SoC being a snowflake needing special attention by the OS is a huge hassle. There's a reason there's no simplified Arm installer for operating systems.

bfrog··on Three Mile Island nuclear plant restart in Microsoft AI power deal
Presumably all the things that have gone wrong have been fixed? I can honestly say the micro reactors and pebble beds look far more fail safe than the typical PWR/BWR that must have power and a pump running as I understand things to prevent catastrophe.
bfrog··on Ruby-SAML pwned by XML signature wrapping attacks
Exactly, I had worked on creating a implementation of saml in go, initially I wanted to use the builtin xml library but quickly found it to be overwhelmingly difficult and ended up creating a binding to xmlsec.
bfrog··on Ruby-SAML pwned by XML signature wrapping attacks
To clarify, in signing you have to convert xml to bytes you can get back in the other side, while modifying the same bytes injecting signatures. The whole custom canonical xml serializer is actually complex with escape rules and a bunch of other insanity. On the other side you have to do the opposite by dropping the signature element and serializing the same way.

Worse this is done at an element level not a document level as noted in the linked article.

Really, it’s not that simple. It typically requires a while xml library for dealing with it that is error prone. Check the number of errors and cves for libxmlsec for example. Or even the versions in C# or Java.

bfrog··on Ruby-SAML pwned by XML signature wrapping attacks
Signed xml alone is a wildly confusing idea, as the signatures get embedded as elements in the document being signed. There’s a wild set of rules on how to make xml canonical, sign, add the signature, etc. It’s nontrivial.
bfrog··on How to Lead Your Team When the House Is on Fire
No thanks? If the company is downtrending, and I as an engineer see options available... without a clear path of moving up and forward in the current company, I'll be looking. That's it. Objectively its the best thing to do as an individual, and we all know no company shows loyalty anymore. Your job is always one penny pincher away from being cut or shipped off to a low cost employment center, e.g. India.
bfrog··on Filipinos are embracing electric 3-wheelers faster than officials can regulate
The Philippines are really ripe for fast e-bikes and trikes. Not going much faster than a 30mph e-bike can go anyways most of the time.
bfrog··on Why Scrum is stressing you out
Pizza sized teams that can directly interact with customers don't need management. Management is playing telephone with someone in the middle with their own interpretation of everything which is 99% wrong.
bfrog··on Everyone says Chrome devastates Mac battery life, but does it? 36 hour test
Why wouldn’t it? Has to capture and send all that spyware data for better ad matching.
bfrog··on New Rust RFC Proposes Adding Support for Trusted Publishing to Crates.io
yes but its hard to argue that if you've verified that you own say... somecompany.com that you shouldn't have control over the crates.io org for the same name.
bfrog··on New Rust RFC Proposes Adding Support for Trusted Publishing to Crates.io
Not if it requires dns verification… which would be great.
bfrog··on Nix 2.24 is vulnerable to (remote) privilege escalation
Because apparently nix isn’t enough despite being the project name, executable name, and the name of the language it implements. No one calls rust “rustrust”
bfrog··on Nix 2.24 is vulnerable to (remote) privilege escalation
Didn't get along is an understatement. They gaslit and destroyed the little bit of leadership structure of NixOS had through harassment and bullying.
bfrog··on Nix 2.24 is vulnerable to (remote) privilege escalation
More welcoming how, by stabbing the heart of Eelco with shitty demands? Very welcoming.
bfrog··on LwIP – Lightweight IP Stack
It'd be interesting to see a breakdown of IP stacks for MCUs, their performance, how many security issues, etc.

NetX, Zephyr, LwIP, and SmolTCP all sort of fit in this realm these days it seems like. Probably others too... but yeah hard to discern the differences at a high level without digging in.

bfrog··on LwIP – Lightweight IP Stack
How does LwIP compare to SmolTCP at this point?
bfrog··on Rust in Linux lead retires rather than deal with more "nontechnical nonsense"
"Trying to get everyone to switch over to the religion..."

Yeah I mean I don't see how you don't hear this person talking and not think they are disdainful and dismissive.

In other news, Redox continues to improve and an amazing pace. May the best kernel win.

bfrog··on A post by Guido van Rossum removed for violating Python community guidelines
This seems to be a repeating theme lately. NixOS went through something incredibly similar lately.
bfrog··on A road safety plan that will lead to cars communicating with each other
Giant trucks are entirely unnecessary. Most work is done with a work van not truck now. Trucks can’t even carry sheet goods sensibly even more. Even if they can the beds are so high as to be impractical loading and unloading.

Modern pick ups are urban tanks meant to out weigh other vehicles protecting the occupants. That’s why people buy them, because they are scared. Of the other scared idiots in the other urban tanks.

bfrog··on A road safety plan that will lead to cars communicating with each other
These countries also presumably enforce stricter licensing laws, charge appropriately for driving urban tanks (American pick ups), and actually enforce some traffic laws with serious consequences not a slap on the wrist with inexpensive tickets.
bfrog··on A road safety plan that will lead to cars communicating with each other
You could wear something brighter than the sun blasting train horn sounds in a 360 and still get nailed by some clown mobile. It’ll be deemed an accident, person will get at most a ticket.

As the addage goes, wanna murder someone? Use a car, it’s an accident don’t you know?

bfrog··on A road safety plan that will lead to cars communicating with each other
I see nothing about the humans outside of the metal clown cars. Meanwhile e-bikes are growing, and pedestrians and other road user die needlessly to oversized vehicles driven by anyone with a pulse due to lax licensing rules.

Fix licensing, make vehicles safe for those walking/biking not just those in other clown cars.

bfrog··on Programming vs. Software Engineering (Rust vs. Go)
State typing is there to enforce rules at build time. This can be an amazing thing to put on a problem where valid states aren’t obvious. Maybe I’m alone but I like stuff that enforces rules at compile time.

What I don’t like is getting phone calls in the middle of vacations or weekends. I like to optimize for that.

bfrog··on Google Pixel 9 Pro
I went through many moto/samsung/google phones. Every single one sucked ass after about a year or two. Wasn't a big deal when the phones came with contract renewals. Became a major deciding factor to abandon them when I had to hand over my own cash.

If I'm paying 500+ for a device it needs to you know... last more than a few years.

bfrog··on Dell lays off 12,500 people
Nothing like getting the boot to help fund the next yacht
bfrog··on SnowflakeOS: Beginner friendly and GUI focused NixOS variant
The second letter saying TL;DR "fuck you Eelco, kind regards". I'll never understand the motives here. Never. Please let me know when you've spent decades creating something and I'll be sure to shit all over you in kind.
bfrog··on Compared to other distros, Vanilla OS 2 'Orchid' is rewriting how Linux works
The immutable root seems like it'd be troublesome. How do you end up with workable little dev environments on this sort of immutable root setup? NixOS has a similar benefit without immutable roots, and even allows for development shells per project which is... absolutely fantastic.
← PreviousPage 9 of 34Next →