HNHacker News
TopNewBestAskShowJobs

henvic

1,071 karma · joined February 11, 2010

https://henvic.dev/

[ my public key: https://keybase.io/henvic; my proof: https://keybase.io/henvic/sigs/9AHKpavSZhmnppQTP4td-ntkHcRP8WLppxOdm1nC6SU ]

submissionscomments
henvic··on Fuzzing Go APIs for SQL Injection
I'm afraid that even on the Go ecosystem you'll find people relying on ORMs that doesn't even use server-side prepared statements, but escapes queries ¯\_(ツ)_/¯

bun, I'm looking at you...

* IMHO there is not even any good reason to use an ORM whatsoever (unless, perhaps, you're building something very very very very very specific that needs to deal with very very very generic data).

henvic··on How far can you go by train in 5h?
I think you are thinking about European countries.

If you take the biggest countries worldwide, this doesn't apply.

henvic··on Nutanix Objects violates MinIO’s open source license
Any recommendations on MinIO forks or open-source alternatives with more welcoming licenses?

They changed their license from Apache recently. https://en.wikipedia.org/wiki/MinIO#Re-licensing

henvic··on Should GitHub be sued for training Copilot on GPL code?
No. IP sucks. Copyleft is just copyright in disguise.

Don't want people writing code similar to yours? Don't publish anything. Force people to sign contracts before having contact with your source code.

henvic··on Facebook says Apple is too powerful – they're right
Apple ascension has to do with satisfying customers' demands. Intervention the way Facebook seems to be promoting is crony capitalism, and is powers of magnitude more powerful than that... and in a very grim way.
henvic··on Facebook says Apple is too powerful – they're right
So what?
henvic··on Dear Crypto
You meant: most (if not all).
henvic··on I disabled WiFi on the new Samsung fridge
My Samsung washing machine has Wi-Fi. It's quite useful to know when laundry is ready... but it also allows me to say what I'm laundering, and it'll configure the machine for me. However, it doesn't allow me to turn it on ¯\_(ツ)_/¯ I imagine that forcing me to be physically near it and press a button to turn it on is a safety mechanism, but it sucks. Especially because it isn't clear whether this is something that can be configured or by design. I've tried everything to change this, but failed to find a way to remotely power it (I'd rather always use my smartphone to configure & turn it on).
henvic··on Keep the web free, say no to Web3 (2021)
All this cryptocurrency/NFT thingy is just another tulipmania full of bs. https://henvic.dev/posts/bitcoin/
henvic··on Google's Subsea Fiber Optics
omg... I need something like this!
henvic··on How did Tropicana lose $30M in a packaging redesign?
Not wrong at all, this is a great idea (as long as it mixes well).

I've resorted to something similar when making my tangerine juice: I put some water, ice, and a sugar cane "square" in the jar or cups first, and then go to squeeze the juice. By the time I'm over making lunch or dinner, the juice is ready without having to use a spoon to mix it.

henvic··on How did Tropicana lose $30M in a packaging redesign?
> buying the liquid form means paying for the shipping and space cost of the water.

Buying frozen solid means cleaning up your mixer. I also bet it's easier to lose some fiber.

Either way, the taste isn't the same as freshly made juice.

I'm from Brazil and loved tangerine/mandarin juice since when I was a kid. Now I've moved to the Netherlands and love it even more. How come, you may ask? In Brazil, we usually find tangerine pulps. Here, I buy fresh tangerine in the supermarket. Sure thing, it takes much longer to squeeze them and clean things up... but the taste is 5 times better.

henvic··on The problem with Bitcoin miners
> As of writing, there are 1,960,775 bitcoin remaining to be mined.

There will be more: https://henvic.dev/posts/bitcoin/#scarcity

They'll find a way to convince more suckers to adopt the shitcoin.

henvic··on Free stuff makes us irrational
Wow. Is it really cheaper? I've been living in the Netherlands for two years, and never noticed it.

Granted, I don't see Hershey's as much... and I've seen some times Lindt for way cheaper than I expected in the street market, but even so I had no idea...

henvic··on Free stuff makes us irrational
What??? I don't think so.
henvic··on Safer Enums in Go
uh? I'm saying "just use regular constants". The risk of typos is when you're defining them, just as much as the risk of defining bad variable values.
henvic··on Safer Enums in Go
> The one tiny drawback is that the globals have to be variables instead of constants, but that’s one of those problems that really only exists in the theoretical realm.

I'd argue that needing this enums safety so bad that you go out of your way to create a struct with a protected field also lies in the same category of something you need that is mostly in the theoretical realm too.

Don't get me wrong, sometimes you want that kind of protection indeed and it's easy to mess up if you need to add validation everywhere. However, most times you can get away with just rethinking your code.

More importantly, I think the downside of using variables rather than constants makes it less safe than the alternative of relying on you always having to do validation.

henvic··on Can a laptop from 2012 be a viable home server?
Be mindful of thermal throttling, though: the noise (in the living room?) can be a nuisance. I've bought an Intel NUC (https://henvic.dev/posts/homelab/) to use as a home server and kind of regret it. It's not a laptop, but has the small factor of one.
henvic··on Git.io deprecation
Why don't them just start returning the redirection link as a text (so if you want to follow, you must copy & paste), and call it a day?
henvic··on Elon Musk texts Larry Page about investing in Tesla (2018)
https://www.youtube.com/watch?v=GYcKdK7hmEo

I think he's talking about a different Merlin engine, though:

https://en.wikipedia.org/wiki/SpaceX_Merlin

henvic··on Home lab beginners guide (2021)
wow! Pretty good :)
henvic··on Ask HN: Share your personal site
https://henvic.dev/
henvic··on Mac Studio M1 Ultra Teardown [video]
Give him a break. He's probably doing his best to make money out of his channel.

Of course he wants to draw attention, and that's fine. People understand he's acting, besides doing a professional work.

henvic··on Crypto is an unproductive bubble
> Fiat currencies administered by competent central bankers have the attractive feature that their governance can be used as a tool to cool excesses and calm panics when the credit cycle goes through its inevitable revolutions.

No. Gold standard has none of the properties you told. Fiat currency is a disaster and evil. Besides, it's also likely the only reason why cryptocurrency is drawing attention to anyone.

https://henvic.dev/posts/bitcoin/

henvic··on Go 1.18
Tip: If you've only heard about generics, make sure to check out about fuzzing (*testing.F)!
henvic··on Tesla triples Model Y delivery time if you don’t add on the $12,000 FSD option
Funny thing: In the middle of January I ordered a Model 3, and the expected delivery was May/June. I really wanted it for around June, and not before, and I was told that it'd be fine, and not to worry because it wasn't going to be delivered earlier anyways.

This Monday they assigned a VIN, and called me to let me know that if I wanted there was a car waiting for me, and I could pick it up the next day. I had to refuse as it wasn't possible for me at the moment, and asked them for a later delivery date.

* I ordered the white Tesla Model 3 with white interior, and nothing else.

henvic··on Finding an authorization bypass on my own website
I see no parameterized queries on the article. The title is misleading.
henvic··on Go’s major versioning sucks – From a fanboy
Semver isn't designed for this, and this whole idea of automatically updating dependencies is awful. Don't do it. Use discretion when updating anything.
henvic··on Go’s major versioning sucks – From a fanboy
I recognize that this might be a PITA, but for me there is no easy way out of problems related to major versioning, and the clear answer is sticking with version 0.x.x for a considerate amount of time.

It seems people rush to publish version 1.0 (or 2.0, etc.) of their libraries, when they'd be better off just sticking with version 0.x.

It's not like that a package isn't ready for production because it is < 1.0. It might as well be. If you're an early adopter, I'd say that is even welcome: you're aware that its API might chance, that its quite new, etc. It gives more confidence than a package with version 7.x (at least in informing you that it's prone to changes, and allowing you to make an informed choice), IMHO.

henvic··on Things that used to be hard and are now easy
> VPNs, with Wireguard

I'd say: Tailscale.

I'd also add Kafka for integrating different systems/databases, etc.

← PreviousPage 4 of 20Next →