HNHacker News
TopNewBestAskShowJobs

hardwaresofton

12,853 karma · joined January 16, 2013

writing at vadosware.io
submissionscomments
hardwaresofton··on Zig's New Async I/O
Note that this same concept is "sans io" and was previously discussed for it's use in Rust:

https://www.firezone.dev/blog/sans-io

https://sans-io.readthedocs.io/

https://news.ycombinator.com/item?id=40872020

hardwaresofton··on '123456' password exposed chats for 64M McDonald's job applicants
No worries! It's just now finally starting to get everywhere -- Postgres is going to get it in 18 by the looks of things :)

https://www.postgresql.org/docs/18/functions-uuid.html

hardwaresofton··on Incus – Next-generation system container, application container, and VM manager
https://linuxcontainers.org/incus/docs/main/explanation/clus...

https://linuxcontainers.org/incus/docs/main/explanation/clus...

You may have a point there that k8s is not meant for single machines but that’s not a hard rule, more like a “why would you want to” you can absolutely run single node Kubernetes.

Also strictly speaking incus is not a container nor vm runtime, it’s an orchestrator of those things.

hardwaresofton··on Incus – Next-generation system container, application container, and VM manager
like what? I'd love to hear some examples of things Kubernetes does that incus doesn't at this point
hardwaresofton··on Incus – Next-generation system container, application container, and VM manager
It’s more like a Kubernetes alternative
hardwaresofton··on Tell HN: uBlock Origin on Chrome is finally gone
This is the right answer, and more people (especially technical people like frequent HN) should be pointing this out.

"What ads? Oh you must be running Chrome" needs to be the common refrain.

Really hope this ends up being a surprising tide shift. Firefox has dipped really hard in marketshare, but there's no reason it can't start to gain again/grow steadily.

It's really too bad the Firefox tent wasn't big enough for all the alternative browsers that exist (though of course they're not scratching the surface of real usage either). I skipped the whole Arc wave and I'm glad I did -- it's a distraction from Firefox.

hardwaresofton··on At Least 13 People Died by Suicide Amid U.K. Post Office Scandal, Report Says
> One final thing, Paula Vennells was an ordained church minister. She was preaching while she was overseeing the destruction of so many innocent hardworking people. https://en.m.wikipedia.org/wiki/Paula_Vennells > > I don't know why that makes this all worse but some how it does. Somehow it speaks to what the UK is or has become.

It makes it worse because most people are familiar with the tenets of christianity and know that this behavior is counter to that value system.

I think it's one of the most redeeming points of christianity/religion in general -- there is a standard to which people can be judged and agree to be judged. That's why it makes it worse, this person is not only doing terrible things, but doing terrible things while professing to believe a value system that would not condone it.

hardwaresofton··on '123456' password exposed chats for 64M McDonald's job applicants
You could also "just" have an internal-use only numeric ID, or use a UUIDv7.
hardwaresofton··on '123456' password exposed chats for 64M McDonald's job applicants
I think I disagree with "totally fine"... Even if that were true though, this case is definitely a point where you wouldn't want to give away information with a numeric ID. Giving away # of applications/growth of that over time is definitely business information that arguably should not be discernible.

The point is not that UUIDs are magically secure, it's that they mean nothing to whoever gains access except a single job app. The assumption is that they will get out (they're in a public URL), and that they will have no meaning when they do.

It's a defense-in-depth thing IMO -- cargo-culting this approach defends you even when you don't do the other things right. It's simple -- with a non-zero probability that the actual access control is faulty, do you want a default that protects you or doesn't. What's the intentional trade we're going for? More DB perf? Easier to type URLs? There are other ways to deal with those

> Can you tell I've been scarred by discussing designs with folks who focus on the "visible" problems without thinking about the fundamental question of "is this secure"?

Yes :(

hardwaresofton··on '123456' password exposed chats for 64M McDonald's job applicants
Yes, you are technically right -- I should have said "functionally impossible". It's not actually impossible, but close enough for the average random onlooker.
hardwaresofton··on '123456' password exposed chats for 64M McDonald's job applicants
UUIDv7 indexes better in databases
hardwaresofton··on '123456' password exposed chats for 64M McDonald's job applicants
A third problem that senior engineers might recognize: using numeric IDs on an outward facing object. UUIDs would have made this impossible as well
hardwaresofton··on Show HN: Pangolin – Open source alternative to Cloudflare Tunnels
Did the compress middleware not work for you?

https://doc.traefik.io/traefik/middlewares/http/compress/

Are you trying to compress the request that has already come in to your cluster? I'm not sure there's a ton of value to be extracted there, since the requests have already made their way across the internet uncompressed to your ingress point.

If there's a "long way" to go after hitting your ingress controller then maybe there's something to be gained...

hardwaresofton··on Show HN: Pangolin – Open source alternative to Cloudflare Tunnels
> Pangolin uses Traefik under the hood to do the actual HTTP proxying.

Traefik is awesome, and one of the biggest reasons is it's extensibility and robustness.

It absolutely does not get enough attention!

hardwaresofton··on Generic interfaces
Imagine the brain cycles rob pike is wasting. Good on him for having so many to spare
hardwaresofton··on Apple just released a weirdly interesting coding language model
Would you mind sharing how you arrived at this conclusion? Was there some benchmark that it really shined at? Personal use?
hardwaresofton··on # [derive(Clone)] Is Broken
I used Haskell for a while and eventually switched over (and intentionally target Rust for many new projects, though I suspect I should be doing more Go for really simple things that just don't need more thought).

One large problem with Haskell that pushes people to Rust is strictness, I think -- laziness is a feature of Haskell and is basically the opposite direction from where Rust shines (and what one would want out of a systems language). It's an amazing feature, but it makes writing performant code more difficult than it has to be. There are ways around it, but they're somewhat painful.

Oh there's also the interesting problem of bottom types and unsafety in the std library. This is a HUGE cause of consternation in Haskell, and the ecosystem suffers from it (some people want to burn it all down and do it "right", some want stability) -- Rust basically benefited from starting later, and just making tons of correct decisions the first time (and doing all the big changes before 1.0).

That said, Haskell's runtime system is great, and it's threading + concurrency models are excellent. They're just not as efficient as Rust's (obviously) -- the idea of zero cost abstractions is another really amazing feature.

> [1] Affine types? Linear types? The ones where the compiler does not insert a destructor but requires you to consume every non-POD value. As someone with no understanding of language theory, I think this would simplify error handling and the async Drop problem

Yeah, the problem is that Affine types and Linear types are actually not the same thing. Wiki is pretty good here (I assume you meant to link to this):

https://en.wikipedia.org/wiki/Substructural_type_system

Affine is a weakening of Linear types, but the bigger problem here is that Haskell has a runtime system -- it just lives in a different solution-world from Rust.

For rust, Affine types are just a part of the way they handle aliasing and enable a GC-free language. Haskell has the feature almost... because it's cool/powerful. Yes, it's certainly useful in Haskell, but Haskell just doesn't seem as focused on such a specific goal, which makes sense because it's a very research driven language. It has the best types (and is the most widely adopted ML lang IIRC) because it focuses on being correct and powerful, but the ties to the ties to practicality are not necessarily the first or second thought.

It's really something that Rust was able to add something that was novel and useful that Haskell didn't have -- obvious huge credit to the people involved in Rust over the years and the voices in the ecosystem.

hardwaresofton··on # [derive(Clone)] Is Broken
Haskell has, like-for-like, a better type system than Rust.

That said, Rust is just enough Haskell to be all the Haskell any systems programmer ever needed, always in strict mode, with great platform support, a stellar toolkit, great governance, a thriving ecosystem and hype.

Lots of overlap in communities (more Haskell -> Rust than the other way IMO) and it's not a surprise :)

hardwaresofton··on Are we the baddies?
What was George doing on Hinge? I've seen a stream or two and IIRC he had a significant other.

Absolutely none of my business but technically this is on-topic right now, in this thread.

hardwaresofton··on Are we the baddies?
> In my first comment I referred the Scandinavian countries. Read up on the flexicurity model of Denmark.

Denmark does not have UBI. They "just" have a good welfare system, good income redistribution policies, and strong labor policy.

They do not make the case for UBI, they make the opposite case -- that the problems of present can be solved without UBI.

> You cannot within the confines of the responsibility of the monetary systems (Eg. The FED). What you are seeing now is that the FED "prints" money that accumulate at the top because the fiscal powers (Eg. the government) are psies who do not dare to redistribute - this is called the velocity of money. And there is a higher velocity of money when they are in the hands of the people than in the pockets of the rich.

You can, and they have. In fact, much of the US wants the FED to lower rates right now, but they have not.

I agree with you that people lack the wherewithal to redistribute more effectively, or at least as a stated goal.

Trying to make sure I'm hitting the points you're noting here but the FED is not "printing" tons of money right now, they have tightened monetary policy, especially relative to the last ~6 years.

It's unclear if the use of "velocity of money" is right here -- I think you're referring to propensity to spend, which would increase velocity of money. Yes, poor people spend more of their income than rich people, and that is stimulative to the economy, and so arguably policies should be crafted that encourage productive work for pay rather than rent seeking or pure accumulation of capital. I'm not sure if that's your point, but that's what I take away from it.

> Regardless, proposing UBI on American forums is generally like setting fire to a wasp nest. Americans have been conditioned to support the oligarchy in quite some decades now.

Welp, that's kind of an unproductive way to end, but sure. Conditioned or not (I'm American), I'm still looking for a good argument for UBI and haven't found one.

Good arguments for better redistribution are easy to make, good argument for higher taxes are good to make, good arguments for better social safety nets are easy to make -- but still can't really find one for UBI specifically above the other options.

hardwaresofton··on Are we the baddies?
> I would agree if there were no billionaires in a country where people also cannot afford things such as housing, food, healthcare and basic education. With economic inequality this high, I don't think we are trying hard enough to create a more egalitarian society.

Agreed -- the ratio is a problem. The problem is not that billionaires exist, because that is a slippery slope IMO (you could say the same thing about millionaires, or people who make money WITHOUT working at all -- i.e. wealth). The problem is the ratio. We need to decide what disparity is acceptable for our society, and then enforce that.

Not full on regime change to whatever new government might be better than the current. Just a clear stating of what our values are as a nation, and some numbers.

> That scaphism is more cruel than stoning as means of execution, it does not make stoning more humane. > > I think you get my analogy.

True, but if I had to pick a way to be executed, I don't think it's a hard choice. The analogy has to imply that you have to pick a poison -- there's no utopia.

> No society collapsed directly because of use of slave labor. Many actually thrived in such a system. > > That should not be an argument in favor of slavery. > > Just because the lack of UBI does not cause society to collapse ot does not mean that a society as inequal as ours cannot be improved.

UBI was proposed as a "need". It is not a need -- it is a want, or seen as a moral imperative.

Of course society can be improved, it's a question of how, and UBI is not a convincing how, that's my problem.

I'm not really sure the comparison to slavery here is relevant. I did not imply that the lack of UBI is desirable, just that UBI is not present and not a necessity for any government that exists.

> I don't think we turned this corner. But if we did, then perhaps it's fine we head towards extinction. With no humans there will be no inequality eh?

I think we did -- even if AI stopped where it is right now we already have created a pretty insane new tool. Even if it's only use was surfacing knowledge 5x/10x/100x??? faster than current search engines can, in a way that is more natural to humans. The knock-on effects are profound and likely going to be immeasurable.

Almost completely separate from that, robotics is really progressing. We have self-driving cars, just casually running around right now. We've turned some pretty big corners.

And IMO it's not an ideal outcome to head towards extinction, but it's a possible one. It's arrogant to think that humanity will live on forever, no matter how much we want that to be true.

Very against people who explicitly want extinction though -- pretty anti-human thing to say, and I can't think of something more worthy of suspicion. We worked pretty hard to survive this far.

> I always say the same. If businesses leave, but the demand for goods and services in that society still exists, other businesses will occupy that space. Either existing businesses will seize that opportunity or new businesses will spawn.

Yup, that's an even more compelling argument. Imagine all those companies vacating the space. The absolute explosion of entrepreneurship and new innovation would be transformative, if the interim can be managed through and the right incentives put in place.

> In no small part because our current system favors capital above all else, and excessive capital concentration allows its owners to distort institutions to their will. Excessive economic inequality is a bitch.

I'd agree, except I'd replace "capital" with "power". No political/social system seems to be immune to excessive power accumulation, but IMO current representative and direct democracies are the closest we've ever gotten.

Real politik is a bitch.

> Note that I said excessive. I am not against some economic inequality. I think it's alright for a surgeon to have a nicer house and a better car than, say, a store clerk. > > I don't think it's alright for one to have a mutiple yachts and mansions on ski resorts, while the other fights starvation.

Yup, while I like leaving it up to a market to decide that, I do think markets need to be controlled/have guard rails.

Agree though, the ratio is the problem.

I often think there's a really simple solution that sounds amazing -- just cap the discrepancy between total comp of the lowest employee at a company and the highest one (including the board). Super simple solution that broadcasts values, and is relatively easy to understand.

People might argue that the "most productive" people would lose motivation, but IMO it wouldn't do a thing -- they'd keep their same motivation because the drive (put overly simply, greed) will always be there.

hardwaresofton··on Are we the baddies?
> A class of people would have a larger spending power.

Spending power with no real alternatives (i.e. in monopoly/oligopoly conditions) isn't actually very useful IMO. It's mostly just more guaranteed money for the current monopoly/oligopoly -- you're just guaranteeing revenue streams.

In a pre-UBI world, you can at least assume that companies can't completely shaft employees because then no one can buy anything. If the government steps in to make sure people can still buy stuff, that has almost the opposite effect.

I think walmart & it's treatment of employees (with employees reportedly needing to ALSO depend on food stamps) as a perfect example of the system kind of working against itself. The fix for that problem is within our reach right now, but it's just unpopular for the usual reasons with the people with the ability to make the fix.

> Naturally, implementing UBI would require the entire financial sector to adjust. We would likely need to significantly raise interest rates (Which, IMHO would be great) and have a period to manage inflation. > > But beside the initial recalibration phase, I have not seen any convincing arguments for why prices on non-positional goods would increase. Even with the increase interest rates, we would likely see that prices on positional goods / assets would stabilize as dead-cheap capital is not available.

OK, so then how about we do this without the UBI bit and just raise interest rates? I'm not seeing where UBI actually has a material benefit here, and there are other real problems with raising interest rates, because losing access to cheap credit also hurts those at the bottom of the economy (arguably even more) -- the solution there is political, likely (i.e. lower income borrowers could somehow be advantaged, but then we have shades of 2008 all over again if excessive greed/moral hazard sets in).

hardwaresofton··on Are we the baddies?
Yes, IMO that's exactly what will happen, except companies that can best compete for their share of this $1000 will get a government funded revenue stream (think Amazon, Netflix, rent seeking enterprises, etc).

I have not heard a convincing argument the other way, would really appreciate a link to one if you find one.

hardwaresofton··on Are we the baddies?
> It will never be ready for primetime because the system under which we live requires an underclass of people that are coerced into working jobs that no one really wants to do for abysmally low wages. Because the only other option left for them is homelessness and starvation. > > It is an inherently cruel system, but this cruelty is what keep things afloat. Any system that guarantees the basic subsistence of all would not do.

We're talking about how it might be about to not require the this underclass, and how we might need a UBI to fix that right? Can it be both of these things at once?

Also as a side note, I think that it's kind of arrogant to think we can create a society where no one does work they don't like, for wages that are always perfect. Nature is not that way, and creating those condition is basically asking for utopia. There is probably always a percentage of undesirable outcomes that every society must endure (and undesirable outcomes are a moving target).

I get your stance on the cruelty of the current system, but I want to note that in the span of human time we've had MUCH crueler systems in place. For example in the US despite the perceived high cruelty of the system, soup kitchens exist, governmental help exists -- there are a lot of things that exist that wouldn't exist in a maximally cruel society/one you describe. There are places on the planet we live on now where these safety nets don't exist.

The problem is the relative position of those with the most resources in society to those with the least. That, is fixable.

> It's important to qualify that "we" as "we that make six figures working in white collar jobs". Yes, "we" are making do without UBI just fine. This "we" does not include the vast majority of people.

I mean that we in the sense that no known society has collapsed because of a lack of UBI (would love to be corrected here). UBI is clearly, objectively not a need.

There are other ways to create a society that works for those with and without, what is probably most needed is clarity on those steps/what we want to guarantee people who live in the given society.

I would disagree that the "majority" of people in (for example) the US are against the current situation. The poverty rate (likely a reasonable proxy for an economic system that really isn't working) is not above 50%. People may

It's hard to quantify -- one of the things about sentiment polling is that people often just don't have a good grasp on how well or how badly they're doing. See earlier this year, when sentiment polling basically was incredibly negative, yet the "economy" as a whole is still mostly chugging along and unemployment has not spiked dramatically across all industries. Tech is in dire straits but "regular" jobs like HVAC, Plumbing, etc are doing fantastic AFAIK.

> Hopefully plummeting birth rates will throw a wrench to this system by making labor a lot more expensive.

Yes, except that is happening at the same time that we've turned what could be a huge corner on automation of both white collar and maybe eventually blue collar work.

I think the price of labor needs to go up, but this is only part of the equation. The more direct answer is simpler -- we need higher taxes on businesses or automation or both.

If you want to profit from US citizens (US company or not!), enjoy infrastructure and stability provided by the US, then the price for that can rise. Charge businesses for the jobs they don't create.

The classic refrain to the increased tax is that businesses will leave. I think that's absolute bullshit -- the US is where people want to be for many reasons, and it is incredibly unlikely that companies will unseat themselves to go run their headquarters out of malta or whatever. Also, incredibly unlikely that all the people who work at those companies will go redomicile. Also, INCREDIBLY unlikely that those companies will give up on the incredibly profitable American consumer they're targeting. What we lack is politicians who can/want to reign in corporate power.

hardwaresofton··on Are we the baddies?
> I don't think there are many proponents of that type of ubi.

Another good sign of a difficult policy to implement successfully/an idea that isn't ready for primetime. If everyone has different ideas of what the thing is, it's very hard to make good decisions, and easy for the "wrong" UBI to sneak in.

Other commenters have already made this point, but there are other ways to guarantee "subsistence". I think the hard to answer question is why are the targeted methods currently available not good enough? If we want to ensure people have food, then food subsidies/support make sense.

Also, if unemployment is the problem, fix that. If unemployment isn't the problem and people who are working aren't getting subsistence wages, fix that.

I think part of the problem is that no one wants to stick up and define what we think every human deserves and what we want society to provide. Does every human deserve housing? Access to green space? etc. Trying to clearly define this will lead to really interesting discussions that lay bare the disagreements core to society.

I think my early point still stands, UBI is not needed (we're making do without it now), and if it ever is needed, it's a sign of a lack of dynamism in the economy/ineffective wealth distribution mechanisms (basically, taxation).

hardwaresofton··on Are we the baddies?
> If you open a government S&P 500 account for everyone with $1,000 at birth that’ll pay their social security cause it like…goes up…wait who’s creating this value again?

This is a good point. Some VCs were major proponents of this (and tons of other business people I'm sure), but this is of course just a guaranteed inflow into the largest companies and the companies that think they will be large some day. Yet another way to reallocate public cash to private companies.

Another similar example is UBI -- its proof of an economy that is not dynamic. It's a tacit approval and recognition of the fact that "no, you probably won't be able to find a job with dignity that can support you and your family, so the government will pay to make you comfortable while you exist".

hardwaresofton··on Who is Soham Parekh, the serial moonlighter Silicon Valley can't stop hiring?
Remember, the rules are always different for capital holders, the professional managerial class, and labor.
hardwaresofton··on Who is Soham Parekh, the serial moonlighter Silicon Valley can't stop hiring?
> It turns out that Parekh did quite well in many of these interviews and received offers, largely because he’s a gifted software engineer.

> For instance, Rohan Pandey, a founding research engineer of the YC-backed startup Reworkd, told TechCrunch that he interviewed Parekh for a role and he was a strong candidate. Pandey, who is no longer with the startup, says Parekh was one of the top three performers on an algorithms-focused interview they gave candidates.

hardwaresofton··on Microsoft to Cut 9k Workers in Second Wave of Major Layoffs
> Union may save job for few who have job but people who don't (and they are lot more and increasing) are not gonna get helped by any union.

Note that in some countries, unions extend to cover workers who are not even part of the union. Heard about this from some french friends:

> Collective bargaining agreements (conventions collectives) may be negotiated between employers and labour unions covering a company or group of companies (accords d’entreprise), or between employers’ associations and labour unions covering an industry as a whole; in the latter case, the government may decide that the collective agreement covers even those employers who are not members of the employers’ association and is therefore mandatory throughout the industry.

https://www.nortonrosefulbright.com/en/knowledge/publication...

Not saying it's the right solution for $COUNTRY, but I was certainly surprised when I heard of this

hardwaresofton··on Sam Altman Slams Meta’s AI Talent Poaching: 'Missionaries Will Beat Mercenaries'
I read through and I think that the analysis suffers from the fact that in the case when the modifier is the user it's fine.

Free software refers to user freedoms, not developer freedoms.

I don't think the below is right:

> > Notwithstanding any other provision of this License, if you modify the Program, your modified version must prominently offer all users interacting with it remotely through a computer network (if your version supports such interaction) an opportunity to receive the Corresponding Source of your version by providing access to the Corresponding Source from a network server at no charge, through some standard or customary means of facilitating copying of software.

>

> Let's break it down:

>

> > If you modify the Program

>

> That is if you are a developer making changes to the source code (or binary, but let's ignore that option)

>

> > your modified version

>

> The modified source code you have created

>

> > must prominently offer all users interacting with it remotely through a computer network

>

> Must include the mandatory feature of offering all users interacting with it through a computer network (computer network is left undefined and subject to wide interpretation)

I read the AGPL to mean if you modify the program then the users of the program (remotely, through a computer network) must be able to access the source code.

It has yet to be tested, but that seems like the common sense reading for me (which matters, because judges do apply judgement). It just seems like they are trying too hard to do a legal gotcha. I'm not a lawyer so I can't speak to that, but I certainly don't read it the same way.

I don't agree with this interpretation of every-change-is-a-violation either:

> Step 1: Clone the GitHub repo

>

> Step 2: Make a change to the code - oops, license violation! Clause 13! I need to change the source code offer first!

>

> Step 1.5: Change the source code offer to point to your repo

This example seems incorrect -- modifying the code does not automatically make people interact with the program over a network...

"free software" was defined by the GNU/FSF... so I generally default to their definitions. I don't think the license falls afoul of their stated definitions.

That said, they're certainly anti-capitalist zealots, that's kind of their thing. I don't agree with that, but that's besides the point.

← PreviousPage 5 of 34Next →