HNHacker News
TopNewBestAskShowJobs

davidp

1,244 karma · joined January 12, 2012

submissionscomments
davidp··on The FBI Is Wrong: Apple’s Encryption Is in the Public Interest
Yes. It is used to contrast with "the rule of men."

In Russia, Afghanistan, and Venezuela, the laws don't seem to matter very much; if Putin or the oligarchs/warlords/chavistas want things to be a certain way, there isn't much to stop them despite laws that in theory constrain them. That's the rule of men, as opposed to the rule of law, and it's antithetical to a free society.

davidp··on Bike lanes have sped up car traffic in New York City
I'm a fan of biking to work, but my inner skeptic is wondering about correlation vs. causation. You'd also have to compare the total automobile traffic levels to get a clear picture. It's possible that drivers are avoiding the streets because they assume they're worse with the bike lanes in place.

Edit: Oops, somehow I missed this part:

"You might imagine that these bike lanes decreased congestion by cutting down on the number of cars on the road. But if that played a role, it was very slight: on Columbus Ave., the DOT counted cars, and saw only a very slight drop in overall volume during morning rush hour, when travel times declined by 35 percent. Instead, it seems that a pair of design decisions are responsible."

davidp··on Was Localizing Defender's Quest Worth It?
I mostly agree. The real measure of an investment, however, is the opportunity cost: What else could I have done with those resources? Might it have yielded higher returns?

But as the author alludes, the company is much better positioned for "the next one," so the investment actually has yet to pay off and there's plenty of upside left. From that perspective it was a huge win, since it appears that he came close to covering his costs, and now the company has a competitive advantage.

davidp··on Spotify migrate 5000 servers from Debian to Ubuntu
> for true long-term support, with support meaning=capability of debugging issues in-house for all the core stack they release

Your definition of support doesn't match that used by enterprises like Spotify, i.e. the ones with real money on the line. They don't care whether the debugging is in-house or elsewhere; they just want the problem solved, and they want someone they can call who will go solve it. That involves paying someone directly (Canonical or other support companies), indirectly (paying your own employees to learn and manage things), or both. I'm guessing the ecosystem thing is in play here -- it's just easier to find Ubuntu-competent people/firms than Debian-competent ones.

That said, the work done by the Debian team is very valuable (thank you), which it seems ought at some level be reflected economically. I have no familiarity with Debian's financial situation but the hosting and compute resources can't come for free. A reasonable business model might be for the Debian team, or a commercial branch or spinoff thereof, or even just some motivated entrepreneurs, to serve as a (potentially non-profit) service provider for the likes of Canonical. Seems like a natural evolution to me, but as I said I'm not familiar with Debian's economics.

> If the package you're having problems with is an old release that is not maintained anymore upstream

Wouldn't Debian suffer the same problem here, e.g. if some piece of software's maintainer gets hit by a bus? Or does Debian make the commitment to take "ownership", if necessary, of all the software it bundles? The latter seems logistically challenging but I am prepared to be (even more) impressed.

davidp··on Turning College Into a No-Thought Zone
"Eternal vigilance is the price of liberty." [0] This case illustrates one of the permanent forces to guard against: Well-meaning people routinely make shortsighted decisions to address a problem, at the expense of things that are far more important.

None of us is immune to the tendency. Each of us must eternally watch ourselves too. Political maturity comes when we can check our decisions by seeing both sides of an issue and carefully weighing the costs.

[0]: http://www.thisdayinquotes.com/2011/01/eternal-vigilance-is-...

davidp··on Why does Outlook map Ctrl+F to Forward instead of Find?
It might depend on where you live. I took a recent trip through Germany, Austria, and Switzerland and I noticed that Austrian street signs tended to use "Straße" while German and Swiss tended to use "Strasse".

OTOH it could also be just spending priorities of updating street signs vs. other things.

I knew nothing about the phasing-out of ß until reading the comments on this article.

davidp··on Commencement address by Bill and Melinda Gates
> a person's ethics are primarily dictated by their present circumstances and environment

Citation needed. I can accept "influenced by" or even "heavily influenced by" without too much argument, but "primarily dictated by" is an extraordinary claim, requiring extraordinary proof.

davidp··on Supreme court: Warrantless cell phone searches illegal [pdf]
For the same reason that French laws don't apply to German activities outside of France.
davidp··on Call me maybe: Elasticsearch
As a gay-friendly straight man, I am puzzled by the idea that those gifs are supposed to reflect the author's sexuality. Was that really the author's intent? Serious question. Until I read this answer I did indeed assume that they were "just a quirk of an incredibly brilliant person".
davidp··on Neovim Plugin UI architecture
Although you're technically correct (since baud connotes the rate of change of the signal and not the rate of data communicated over that signal), modems didn't start sending more than one bit per baud until we got to higher data rates. At the time vi was written, 300 baud was in fact equivalent to 300 bps and the terms were used interchangeably.
davidp··on School spyware in coursebooks
Here's the product page for CourseSmart Analytics[0], the product referred to in the link.

By my read it's just as bad as the OP suggests; the screenshots even show specific students' names with their "engagement index".

An aggregated view of student engagement seems like it would be quite useful, e.g. "hmm, only 5% of my students are spending more than a minute looking at this really important chart, I should emphasize it in my next lecture". But Panopticon-style policing, and as you say, comfort with that policing -- shudder.

(edit - fixed product name)

[0]: http://instructors.coursesmart.com/go/institutions/analytics

davidp··on Apple, Facebook, others defy authorities, notify users of secret data demands
"... companies grew determined to show that they prized their relationships with customers more than those with authorities"

I've noticed that the words 'customer' and 'user' are starting to draw my conscious attention when I see them used (and misused) in mainstream journalism.

Consider: For most of the companies listed in this article, the customer is exactly that -- someone who pays the company for something, e.g. a cable or internet subscriber.

But for Google, Facebook, et al, the customer isn't the user; the customer is the advertiser. The user is the product. Google's customers could care less about privacy and user notification, except insofar as it spooks the users away from the service.

The distinction is worth keeping in mind when trying to gauge just how far companies might take this newfound willingness to resist.

davidp··on Why The Clock is Ticking for MongoDB
On the contrary, coming from the world of mature SQL systems (like SQL Server), I was horrified to learn that MySQL supports neither transactional DDL nor online schema updates. These are taken for granted in premium SQL databases, and to a lesser extent in good free ones like PostgreSQL. (Raise your hand if you've seen the polite suggestion from the Django (South?) team to use a "real" database when your migrate command fails...)

Put simply: MySQL was written by and for people whose time isn't valuable. I.e. the assumption is that it's cheaper to throw low-grade people and brainpower at workarounds (OpEx) than to pay to have the problems avoided in the first place (CapEx). There's a reason people shell out the money for big-iron databases: the math can be easy when you factor in the costs saved (both the direct costs and the opportunity costs).

davidp··on Dozens of teenagers are now tweeting bomb jokes to American Airlines
Outraged that 1) someone tweeted a fake bomb threat, 2) that someone actually got arrested over it, 3) that an entire industry finds itself in the legal position of having to take action to respond to something as utterly effortless as some asshat sending a tweet, or 4) that a self-described journalist seems to be wringing his/her hands over the lack of credibility (gasp) in the Twitterverse?
davidp··on LastPass Now Checks If Your Sites Are Affected by Heartbleed
Wait. When I click "Security Check" in my LastPass Tools... menu (this is in Chrome), I get taken to an internet-hosted web page where I'm prompted to enter my master password. [1] I am not taken to a chrome:// page or some other client-side tool.

I take this to mean that I'm giving LastPass's web server my actual master password, and that they will do server-side decryption of my Vault and have server-side access to my passwords in cleartext.

Is that accurate?

[1] https://lastpass.com/index.php?securitychallenge=1&lang=en-U...

davidp··on [dead]
There may be a standard project organization that "makes sense" to people familiar with Go, but based on the amount of confusion out there about this, that page is obviously not succeeding in its mission.

Consider items like these:

> The GOPATH environment variable specifies the location of your workspace. It is likely the only environment variable you'll need to set when developing Go code.

> If you keep your code in a source repository somewhere, then you should use the root of that source repository as your base path. For instance, if you have a GitHub account at github.com/user, that should be your base path.

> To compile and run a simple program, first choose a package path (we'll use github.com/user/hello) and create a corresponding package directory inside your workspace:

> $ mkdir $GOPATH/src/github.com/user/hello

Keeping the above snippets in mind, here's my thought pattern while reading the page:

So... I have only one workspace for all my work and I can set GOPATH once, in my .bashrc? Or I have one workspace per project and I need to set it differently for each project, kind of like a Python virtualenv? But then what's the difference between a "workspace" and a "project"? I do have a github account with a bunch of different projects -- err, repositories -- so that seems to reinforce the first way, but I don't typically work on them at the same time, so why would I combine them into a single Go workspace? And what's a "base path"? I must have missed that definition... nope, it's not in there, ok, I guess it's the root of where I'll put my... _new_ code? (Is it going to sync down all my repos?) But wait, here's an example where they say to create a Go "package" directory github.com/user/hello -- AHA! A Go "package" is like a git repository! Wait, that doesn't make sense... I'm planning to check this whole directory structure into github as a single project -- err, repo. Or am I not supposed to do that? But then I'd have to recreate all this on any machine where I want to work... is that really the intent? Yep, sure enough, they eventually say I should put the package directory into its own repo. So yes, I'm really only supposed to have one workspace for all my Go projects (I think). I wonder how Go manages dependency isolation for completely unrelated packages -- err, projects? -- that have the same output filename but are in the same workspace? Anyway, it sure would be nice to have a shell script or something to set up the workspace scaffolding for me, since I'm not supposed to check it into github...

And so we end up with folks like the OP doing exactly that. I'm sure there's a way to beat your head against this stuff until you eventually "get it", but it ought to be far easier than that to teach people coming from other environments.

At the very least, it would be helpful for this page to start by explicitly defining the mappings between the way Go uses words like "workspace", "package", "project", etc. and the way other languages/environments use them.

davidp··on GnuTLS considered harmful (2008)
Huh. This is the first licensing-related thread I've read on HN in months where someone said something I found interesting and informative before I gave up and stopped reading.

Thanks for your even-keeled comments here; helpful and refreshing.

davidp··on TypeScript included with Visual Studio 2013 Update 2
Enabling rich IDE support is precisely the point of TypeScript and similar enhancements like Python 3 type annotations: Give the computer in front of you enough information to automatically do for you what you would otherwise have to do manually, freeing you up to focus on higher level problems.
davidp··on Questions People Ask When I Tell Them I Own an Airplane
I've been secretly lusting after one of these aerial SUVs for 10 years now:

http://en.wikipedia.org/wiki/Pilatus_PC-12

davidp··on Sta.li: Static Linux
> it takes some time to dynamically load a library into an address space. There are tables that may need to be walked and updated with correct pointers

True, but I'd expect that to be dwarfed by the I/O time required to load even a single 4k page from disk, vs. keeping one copy of a big dynamic library like glibc loaded for the whole system, with fixups done per-process.

Good points about ASLR and static-linking frequently-exec'd-and-exited processes like the shell; and certainly for embedded and HPC it makes sense. I guess the moral, as always, is to measure.

davidp··on Sta.li: Static Linux
I'm puzzled by the idea of a system being leaner/faster with n copies of a library in physical RAM rather than 1 copy mapped via VMM into whatever process wants it. IIRC this was the main point of shared libraries, not pluggability or changing code during runtime. Am I missing something?
davidp··on Programming Interview Question: Eight Queens
You might be surprised at how many people show up to a developer interview and are unable to have an intelligent conversation about the problem, let alone solve it. This is a weedout question, that's all.

Bear in mind that the objective isn't to weed out people who can't solve it. There are plenty of people who are fine coders who wouldn't quickly hit the solution for any number of reasons, including nervousness. The objective is to weed out the charlatans and amateurs who managed to get past the HR resume filter, so that as little time as possible is wasted.

davidp··on What I Didn't Say
> To blame the listeners is one step short of accepting things as they are.

I disagree:

- If the talkers are the problem, then the solution is... less speech? Muzzling/censorship? I'll pass, thanks. Better to have the frenzied finger-pointers grow hoarse blathering to a crowd that's ignoring them, than to give them the very attention that they crave and that drives their fortunes.

- I didn't mention solutions to the problem because my post was already long enough.

Solutions would involve (at least):

- Persuading people to take their media viewership and loyalty away from the worst offenders (MSNBC, Fox News, etc.). Hit them where it hurts, in the pocketbook. Do this by pointing out the emperor's nakedness. - Persuading people to give their media viewership to sources and outlets that don't pander to them (not quite the opposite of the first point). This gives influence (money) to media voices who, eventually, can credibly call our leaders to task for their race-to-the-bottom mentality. - Improved critical thinking curricula in formal education at all levels.

The above improvements would have gradual second-order effects on civic life, e.g. you might eventually end up with real town hall meetings instead of staged, scripted tripe. It really wouldn't take much overt change to see results -- you don't have to boil the ocean.

davidp··on What I Didn't Say
> The talkers have gained power over the doers, and it is wrong. Somehow critics have grown in power to be able to extract punishment and concessions from people actually on the ground.

Agreed, although I don't think it's the talkers vs. the doers; it's the talkers' audiences vs. the doers.

Here's your "somehow": The lack of critical thinking skills in the general population (not new), combined with the power of instant global communication (new).

The lack of critical thinking skills leads people to seek absolutes, simplicity, and swift action in areas where shades of gray, nuance, and care should be called for. Again, nothing new here: mob justice is a well-understood, if regrettable, characteristic of human society.

Instant global communication much more swiftly connects 1) the easily-manipulated with 2) those who lack experience and maturity but who nevertheless possess the gift of persuasion.

In short, I blame the listeners, not the talkers. It would be a Good Thing(tm) if people were generally more skeptical of everything they heard and read, and even better if they knew how to ask the right questions to resolve that skepticism. It would make it harder for unworthy critics to hold power, and easier for worthy ones to be heard.

Here's another quote, from Joseph de Maistre: "Every nation gets the government it deserves." A similar thing could be said for culture and civil society.

davidp··on Kevin Rose’s idea for a new blogging platform called Tiny
Useful perhaps to someone enamored with the idea of they themselves being the story, instead of their words. None of the people whose work I admire would go near it.
davidp··on Clojure: The JFDI language
I enjoyed the presentation very much, until

    "Engineers 3-10x more productive"
Citation needed.

If this were generally true (of any technology X) the dollars would be flowing that way in an unstoppable torrent, and anyone using anything else would be the subject of ridicule and/or pity. It would be like writing custom websites in C.

Since that isn't happening, I have to take assertions like that with a sizable chunk of salt. The alternative would mean that there's a gigantic arbitrage opportunity that's being missed by a bunch of highly motivated people. So yeah, citation(s) please.

davidp··on CyanogenMod Installer Application Removed from Play Store
If Google knowingly allowed their app store to host software that harms carrier-supported devices, they might easily be in breach of contract with those carriers. This is a defensive move.
davidp··on Microsoft does away with stack ranking
Thanks to the law of averages, a "stack ranking" system isn't harmful as long as the size of the group is sufficiently large. Employees aiming to be in the top 20% of a 5000-person organization are incentivized completely differently from from those aiming to be in the top 20% of a 5-person organization.

I think what they've done here is to allow each manager in the chain to decide how to handle their organization's evaluation and compensation. You could be VP of a 500-person division and instruct your directors and managers to rank everyone in your org in a single pool; or you could delegate to your directors and tell them to do what they think is best for their groups within their own individual budget constraints, which you assigned.

davidp··on Why You Should Never Use MongoDB
> For that use case, mirroring the data on save to MongoDB was a no-brainer

I think you just confirmed the OP's point -- MongoDB makes a good cache, not a good primary store. I'm guessing you didn't do updates into that MongoDB store, and always treated the SQL source as "authoritative" when it became necessary. Am I right?

davidp··on “Remove occurrences of the short name of the Debian derivative from Canonical”
Yes, I said 'restricted use logo' above; I wasn't talking about the open use one. My point is that Debian, like Canonical, may assert their intellectual property rights for whatever purposes they see fit. Some folks (not necessarily you) are confusing "can they" with "should they" w.r.t. Canonical.

You're right that copyright and trademark law are two different things. That said, the word "trademark" occurs on that page only in the footer, applied to the name Debian. Nowhere (on that page at least) are the images asserted as trademarks, whereas there's a prominent copyright notice near each logo. I suppose the copyright could be read to apply to the license text and not to the logo, although that would be odd, and inconsistent with the explicit copyright wording of the open use logo.

← PreviousPage 3 of 6Next →