HNHacker News
TopNewBestAskShowJobs

blablabla123

2,054 karma · joined May 24, 2012

submissionscomments
blablabla123··on OWASP Top 10 2021
That's the idea of the JWT, no DB query or in this case additional network request needed to authenticate.

Depending on your use case it's worth thinking about the expiration time. I assume that's checked in your client but do you also need to invalidate tokens or downgrade permissions before they expire? In that case you might want to work with smaller expiration times or get a denylist.

blablabla123··on GitHub Actions checkspelling community workflow GitHub_TOKEN leakage via symlink
Hard to follow this because I'm mostly on the consuming end of CIs or occasionally do some basic things. Although I've recently tried GHA, setting it up from scratch even for complex setups seems almost trivial. But the security of GHA seems more than shaky.

> I think this is a big design flaw in GitHub Actions. Whenever there is a security patch, you have to make sure to apply them in every branch.

On the other hand I think every action needs to be initialized once on the main branch.

blablabla123··on Back Orifice (1998)
There were some fun tools around at that time :) Also there was this Windows bug where by default network sharing was open and of course everybody used a modem so there was no NAT/FW in between. So you could just connect to a random IP and see what's on the disk. (I think there was a tool to find IPs with just that port open.)
blablabla123··on O.mg Cable
USB has been littered with bugs. I never got why this didn't get more news coverage but at least it was possible to read memory from USB. Personally for me it's also a reason that I switched to USB-C that there are less people around with USB-C cables.

https://security.stackexchange.com/questions/118854/attacks-...

blablabla123··on Tech-savvy audiences block Google Analytics
I stopped watching TV more than 10 years ago because I was worried to turn stupid from it. Not so far fetched after all.

There are some high quality shows and TV stations though. Namely Phoenix (similar to PBS in the U.S.) and some of the news magazines that run in the late evenings. Of course there are also all the other public stations with higher quality programs but I find the program most of the time quite random and sometimes even a bit elitarian.

blablabla123··on Why are hyperlinks blue?
That's really speculation but there are certainly reasons against it. Mostly that red-green blindness is the most common color blindness and that blue is considered a more serious color. For instance banks often choose blue as predominant color. Maybe that's also something worth considering for an experimental technology.
blablabla123··on Ask HN: Has web development become insane or am I stuck in my ways?
Personally I always prefer Microservices and some sort of CI pipeline over a classic Monolith. Yes, it's painful sometimes but when using some best practices (e.g. one DB per service) it works surprisingly well and can offer benefits that monoliths just can't. But I think it's fair to write Monoliths for new projects - many people do.
blablabla123··on 20 Years of Haiku
> Well yes, but why should a company like nVidia or AMD make a driver for an OS with a user base that's a rounding error?

Because 75% of all public servers are UNIX-like and nowadays by default most commodity computing capacity is on the GPU.

Indeed Linux on the Desktop has been a disaster but that's no reason to make OpenCL and similar efforts a disaster too.

blablabla123··on Lawrence Livermore claims a milestone in laser fusion
> These fake fusion energy programs contribute to that; some of the most capable scientists don’t want to work on weapons, so they can kid themselves that they are working on “energy”.

This sounds quite anti-progressive and anti-scientific, I have trouble understanding where this sentiment comes from. If Fusion reactors could be realized, this would solve all energy problems. As you mention, renewables done right doesn't stop at production but also includes global deployment of Smart Grids and Energy storage capabilities. It's nuclear energy done in a reasonable way. Apart from that, it's really not clear if production fusion reactors will ever be possible so it's clearly a research topic. Perhaps better availability of computing power (to engineer the confining magnetic fields) and better abilities to orchestrate such complex projects will also help if you look at the challenges of the ITER project.

blablabla123··on Lawrence Livermore claims a milestone in laser fusion
"Does Fusion produce radioactive nuclear waste the same way fission does?

Nuclear fission power plants have the disadvantage of generating unstable nuclei; some of these are radioactive for millions of years. Fusion on the other hand does not create any long-lived radioactive nuclear waste.

Can fusion reactors be used to produce weapons?

No."

https://www.iaea.org/topics/energy/fusion/faqs

blablabla123··on Commonly used idioms in the tech industry
I can relate to that and it's really important to ask questions. Also it can be quite irritating when people try to look smart instead of being actually interested in the point.

On the other hand jargon is not an exact science. There are things like false friends, commonly incorrectly used terms and all that. That's why spoken language is usually spoken redundantly. Also sometimes the acoustic is bad and you don't want to ask 10 times a minute. Or the person says something incorrectly but you realize what the person actually means because of the surrounding context.

blablabla123··on TikTok overtakes Facebook as most downloaded app
> Another thing Tik Tok does is get rid of people who are obese, queer, or otherwise the target of harassment.

I cannot think of any better metaphor than a virtual American highschool with regard to Facebook or TikTok. The platforms have little to do with what they claim to deliver. That would be connecting with friends and more engaging YouTube. Instead most of the time a user just scrolls through an endless feed. Even worse there is even some kind of actual addicting factor since they are there to replace other actually better working platforms.

blablabla123··on Richard Stallman and the History of Free Software and Open Source (2016)
Around 20 years ago I found it quite difficult to find anyone actually interested in computers. I mean not for gaming but rather exploring cool tools and software development. And even among those interested only few had that much interest that they would go and learn a programming language or install Linux. Of course that was a time when Computers and Internet access were rather expensive and documentation was usually only available in books. So naturally most kids using computers had parents with some sort of engineering/mathematics background or were themselves really interested in that.

I think this is now changing in unexpected ways, one is that devices are becoming really locked down. (On the other hand you can now install a full-featured GNU/Linux as a app... FWIW when I tried Linux the first time it was with Winlinux or so on Win95) On the other hand documentation has become extremely good, it's more common to see devs with no engineering/math background at all.

blablabla123··on Ask HN: Has anyone fully embraced an event-driven architecture?
I've worked on a project that was fully event-driven realized as Microservices. (I think a few of the externally connected Microservices were event-driven as well but not all.) That was all roll-your-own without framework. So things could break. But the philosophy was more like: everything is written in a very lightweight and simple way. So if it breaks, it can be fixed swiftly. I've also seen a similar approach at another place. FWIW both places had unusually high availability requirements. ("Fail fast"...)
blablabla123··on Your Lifestyle Has Already Been Designed (2010)
More subtly a smaller but far more interested proportion of the population tries more experimental things and the big shops just copy that. That's both cheaper for the buyer and the producer.

It's the same for tech, various gadgets or technologies that are hyped right now have been gathering traction since years but have been picked up by the big brands only very recently. Best example is the trend of using non-x86 Computers, a few desktop/laptop projects have been there including Chrome books. Now Apple picked it up and it's a completely normal thing to buy an ARM laptop.

Looks kind of planned but it's not. It's just that some things fall out of fashion for whatever reasons...

blablabla123··on How Dwarf Fortress is built
Actually there is NuclearJS a Flux (React) implementation in JS designed around immutability, FP and also reactive programming. As anything pure FP, it's ridiculously difficult/awkward to get started but it really shines in some areas. Namely complex UIs, state transitions and interrelated data "objects". The first 2 can be solved with proper OOP (it's obviously not nice but it solves the problem), but I've never seen a framework ironing out the nastiness of relational data so well. The idea is to combine multiple data objects using lambdas. It's incredibly elegant and so general concept is supposed to be the "Functional Lens".

Unfortunately it's discontinued, probably rightly because it's definitely not for teamwork. But really, it doesn't depend on anything OOP in the strict sense.

blablabla123··on Apple staff quit because of the company's stance against remote working
> They spend all their energy chasing experiences [...] choosing easy, cushy jobs instead of taking a small risk and starting their own businesses

It's hard to assume that post is not irony but apparently it's not. Half of the points are so obviously wrong that I won't even attempt to invalidate them. (The other half seem to go ad hominem) Life is surely easier than in the past but that's a good thing. Society profits when core problems are solved - I wish that was the case anyway.

On the other hand there are no risk free ways to earn money, especially not if you don't have any money on your account. Anything else would be statistically and economically out-of-bounds.

blablabla123··on Windows 96
One time I wanted to tweak my graphics on Windows 3.1. Normal VGA with 640x480 was no problem to configure since it could use some kind of generic drivers. So eventually I choose one of the SVGA modes with 800x600 and after restarting the screen was just dark. Luckily I managed to undo the settings with the keyboard and a blank screen. IIRC the settings for that were quite exposed and it worked. However, countless times where I lost my system setup.

> usually the system would get into some kind of bad state after several months of usage (or at least mine did)

Sometimes some part of the bad state would go okay again for me after some more months of waiting. E.g. the system would only go past the Windows 95 loading screen after opening and closing the CD-ROM drive but at some point that problem would disappear.

blablabla123··on Return to Office Hits a Snag: Young Resisters
> When in the office, someone stopping by or having me come to their desk was awkward and there was usually no paper trail to reference.

Just in general what I noticed about remote is that my engineering colleagues are much more easily reachable. I remember years ago at a place where I had to chase a colleague for months to mentor me about a certain topic - despite going to lunch together almost every other day. Ironically in the remote setting most of the people are even in for a synchronous call/quick screen share. What I also like is having to take much less notes.

blablabla123··on Electromagnetism is a property of spacetime itself, study finds
A really simple example is voltage. What does it even mean if one cable is on a potential of 5 V? It's always compared with the Ground voltage since the voltage is always a difference between 2 electric potentials. That means you could add a constant to each potential and nothing would change. So in this case not gauging would be quite hacky... (This example has nothing to do with the phase though, but just to illustrate. Almost always when you measure something, some gauging is at least implicitly involved.)

So it turns out this happens quite often that there is some kind of constant that can be divided out. In case of particle physics a whole framework has been developed out of it that has really close relations to Lie group theory. (The experimentally confirmed parallels are just astonishing with group generators and elements corresponding to interaction particles and the normal particles.)

blablabla123··on Ask HN: Which vintage computers do you find interesting?
I really like the old SGI computers, the design was amazing. Not sure how much fun those are nowadays even if you happen to be into CAD or 3D modelling. I friend of mine got an old workstation from eBay and it weighed 50 kg and had a huge power supply.

A really interesting one might be Apple Newton, they have been quite powerful for their time. I think a few years ago I read that there is still a vibrant community around it.

blablabla123··on Europe floods: At least 120 dead and hundreds unaccounted for
Not sure https://en.wikipedia.org/wiki/Detention_basin These seem to be feasible though.

> I can't help but think that our ancestors would judge us pretty harshly for treating rainwater like nuisance and not a resource to manage wisely.

Also considering that many cities are like wind channels...

blablabla123··on Ask HN: Recruiters want people who do side projects, yet contracts forbid them?
If you really want to, just work on things that are not related to work and strictly work on your own stuff outside of work hours. Just think about it, they cannot forbid you to edit your .bash_profile or even publish it. It's just hypothetically speaking. Unless you contribute to anything major (which will put you into another position anyways) many people will not care at all for the better or worse. Different story if you start making money on the side. And even then, I once worked at a small corporate where someone from HR worked on the side, I doubt that was ever made official but it was also totally unrelated work.

At the same time, while applying for a job with a running side freelance job, they might offer you to continue that arrangement perhaps with reduced work hours. Just mention your doubts after they make you an offer. (I speak from experience)

blablabla123··on I Stopped Using Emojis
I mean a more picture-like emoticon is more neutral in my opinion. And it can be supporting/cheering, e.g. when doing a complicated change or deployment. Probably there are better alternatives though. ;) can be interpreted as condescending, so I rather avoid that with work topics. :) Is generally friendly though, I think.
blablabla123··on What every coder should know about gamma (2016)
Is there actually a mapping to downsample colors so that the mapped colors are visible on any screen? (Assuming there is a minimal common intersection on the color space)
blablabla123··on What every coder should know about gamma (2016)
I'm really looking forward to read this article, I've longed for an article about this for a long time. The problem becomes noticeable when for instance comparing colors on web apps with different screens. The colors can look different on the different screens, or if you use color profiles then the colors look different on apps that support it vs. apps that don't support it.

To my surprise the New Relic NRQL editor in light mode which heavily relies on highlighting for editing is hardly usable on my dated LCD screen which doesn't have a color profile I guess. (Safari supports color profiles actually) Luckily there's now the dark mode option...

blablabla123··on Loneliness a 'bigger health risk than smoking or obesity'
Lockdowns are pretty bad, I think this cannot be emphasized enough. Still I think nobody wants to experience full-fledged pandemics like in the past that not just wreck social lives but whole economies. Right now some economies are quite well off again.

I think society is fading during lockdown, it really goes by the distance, let's hope that's changing back to normal soon.

> Everyone likes feminism! Men commit suicide at 5x the rate? Not a problem! Men work themselves till death

So do women, even in the G8 nations. Not sure if everyone likes feminism but also men have to suffer from the fallout of toxic masculinity. Like over-competitiveness, and yes this can also result in overworking. Even unrelated movements bring something anyone can benefit from. It's like with software, you think you fix a bug but at the same time you improve a structural problem.

blablabla123··on I know the secret to the quiet mind but wish I’d never learned it
I remember former fellow students telling how they corrected medical students' practical physics internship assignments. Apparently the statistical rigour is much lower. On the other hand, I guess in pure natural sciences you work with much more indirection and have zero results nowadays unless you use a lot of tools. Probably there aren't that many medical conditions that can be treated in-depth based on first principles but I think concluding that whole medical science can be replaced by an AI assistant might be a bit far-fetched. Compassion is probably under-estimated indeed. Some people with serious conditions prefer to be treated at objectively less sophisticated yet less industrialized facilities.
blablabla123··on 80% of tech could be built outside IT by 2024, thanks to low-code tools
> What they all have in common, in my experience, is that they make simple things very simple, but difficult things impossible.

Exactly that...

I used to work at a company where all kinds of tools where in place, from normally written Code to some web-based Oracle app and even an Access-like solution. The Oracle stuff turned out to hardly work remotely and being extremely inflexible. Eventually the company was split ("un-merged"), so the Oracle app wouldn't need any further customizations. A few months later from the department that used this Access-like solution the lead was fired.

On the other hand much of the properly engineered code survived several mergers and acquisitions.

blablabla123··on The MiniDisc: the failure of a forgotten format (2020)
But you could play the music over SPDIF and record it while playing. I cannot remember having had problems with that. (Until my self-built SPDIF adapter broke...) Also other than stated in the article, MD used its own compression format so you could put 700 MB uncompressed audio onto a 130 MB disc. But in times of > 10 GB storage it makes no sense anymore to use replaceable cartridges. Just put it all on the player. That's what ultimately killed it.

It could have gotten a second life though with MD Data but the drives for that were just too expensive.

← PreviousPage 17 of 34Next →