HNHacker News
TopNewBestAskShowJobs

john-shaffer

595 karma · joined October 22, 2019

https://github.com/john-shaffer

hn.scorn217@passmail.net

submissionscomments
john-shaffer··on China orders U.S. to shut Chengdu consulate, retaliating for Houston
Political submissions tend to get flagged and removed. It's partly a function of how hostile the comments are. HN doesn't want flame wars. If a submission provokes polite, thoughtful discussion, it's more likely to stay up even if the article is highly political.
john-shaffer··on Mail for Good
You can "bring your own IP" or lease a dedicated IP address for $25/month. I'm not sure how effective it is, but the option is there.
john-shaffer··on Editorial board of Index and more than 70 staff members resign
1949 is not what most people would consider "a few decades ago".
john-shaffer··on Buy on Google is now open and commission-free
They will still prioritize paid listings. The only thing that has changed is you can now get on page 51 without paying for the privilege. This just helps them get a slightly bigger marketplace to make their paid listings a little more valuable.
john-shaffer··on Twilio: Someone broke into our AWS S3 silo, added 'non-malicious' code to JS SDK
The bucket should never be publicly writable. The "go-to" techniques are signed POST requests [1] and signed URLs [2].

[1] https://docs.aws.amazon.com/AmazonS3/latest/API/sigv4-post-e...

[2] https://docs.aws.amazon.com/AmazonS3/latest/dev/PresignedUrl...

john-shaffer··on The Billionaire Behind Efforts to Kill the U.S. Postal Service [pdf]
> So if you want to keep the price of a stamp the same nationwide you need to grant a monopoly.

The conclusion does not follow. If it is important that the price of delivery to remote Alaska be cheap, then why not just subsidize it directly?

john-shaffer··on Safely Reviving Shared Memory
> WordPress expects a working .htaccess for its URL structure

I haven't heard this. I'm running WordPress via NGINX with no issues.

john-shaffer··on Wiki.js
I use PHP in my day job. It is by far the worst language I've ever used. Nothing else even comes close. The language and ecosystem are so full of footguns that you are bound to shoot yourself eventually. The OpenSSL implementation will silently truncate the key [1][2] without even giving a warning. The cURL lib, in 2020, still hasn't implemented a get_curl_opt function. Sure you could wrap it if you're writing everything, but the reality is I have to work in this nightmare ecosystem that just uses raw curl. Every == comparison is still a potential security hole due to PHP's insane (and inconsistent) typecasting behaviors. Sometimes a number gets cast to a string, but a string gets cast to a number if you use it as an array key. WTF? Do I have to wait another 15 years for PHP to become a halfway decent language?

[1] https://github.com/WP2Static/wp2static/pull/506

[2] https://stackoverflow.com/questions/55062897/decrypt-aes256-...

john-shaffer··on The German Problem with Tor
> When you point out that TOR fails in its primary purpose: non-attributable access to information or communications in totalitarian regimes you get scorn.

It's my understanding that the subjects of totalitarian regimes use software such as Ultrasurf [1], and not TOR. I agree that TOR is not very useful in practice, but it seems misleading to state that without mentioning the success of the alternatives.

[1] https://ultrasurf.us/

john-shaffer··on Cloudflare outage on July 17, 2020
I think this is the "postmortem" he's referring to: https://developers.facebook.com/blog/post/2020/07/13/bug-now...

> Last week we made a server-side code change that triggered crashes for some iOS apps using the Facebook SDK. We quickly resolved the issue without requiring action from developers.

john-shaffer··on Orthodox Privilege
https://en.wikipedia.org/wiki/1960s
john-shaffer··on Hosting your entire web application using S3 and CloudFront
As I stated, they are client websites, which I don't particularly feel like disclosing. It's trivially easy to find benchmarks. [1] is old, but it gives you an idea of the stark differences that I have seen in practice.

[1] https://goldfirestudios.com/cdn-benchmarks-cloudflare-vs-clo...

[2] https://www.bizety.com/2018/05/01/network-performance-benchm...

john-shaffer··on Hosting your entire web application using S3 and CloudFront
TTFB and total load time
john-shaffer··on Hosting your entire web application using S3 and CloudFront
I have some clients that use Cloudflare, and others that use CloudFront. All of the CloudFront sites perform far better than all of the Cloudflare sites.

I don't care how many points of presence Cloudflare has if the performance is worse.

john-shaffer··on Hosting your entire web application using S3 and CloudFront
From TFA, "For reference, we had around 100k hits on our web page in the month of June and our cost was roughly 0.79$"

At such a low amount, cost is not the main concern for most websites. Speed, reliability, and ease of development are.

john-shaffer··on Hosting your entire web application using S3 and CloudFront
79 cents cheaper = "beats this hard" with no analysis of the performance or reliability differences? Or even time to set up? B2 is still missing basic website functionality that you have to code and test yourself. [1]

[1] https://news.ycombinator.com/item?id=23071273

john-shaffer··on Linux Mint drops Ubuntu Snap packages
I'm very happy with Debian. I mostly like Ubuntu, but I can't have snapd restarting things whenever it feels like it.
john-shaffer··on Google Common Lisp style guide
> The only way two symbol values can be equal is if they are actually same symbol, I would hope.

Why is this important? Specifically, why do symbols need to be interned?

In Clojure, "Two symbols are equal if they have the same namespace and symbol name." In general, "Clojure’s = is true when comparing immutable values that represent the same value, or when comparing mutable objects that are the identical object." [1]

[1] https://clojure.org/guides/equality

john-shaffer··on Brave Browser, wiping history still leaves trace of visited sites
> you always have the option to just turn them off entirely

This is not fully accurate. You have to explicitly find and enable ads if you want them. They are off by default.

john-shaffer··on China suppression of Uighurs meets U.N. definition of genocide, report says
The intent matters. Suppression of birth among Han Chinese was intended to limit population growth. Locking up 1.5 million Uyghurs in concentration camps, sterilizing them, and harvesting their organs is done with quite a different intent.

The UN guidelines that Zenz is following:

> In the present Convention, genocide means any of the following acts committed with intent to destroy, in whole or in part, a national, ethnical, racial or religious group, as such:

john-shaffer··on Bible API
It's not censored. You just have to use the correct URL.

https://bible-api.com/luke%2014:26

john-shaffer··on Does saying “Fuck You AWS” constitute offensive content?
Separation of concerns: https://en.wikipedia.org/wiki/Separation_of_concerns

I, for one, greatly appreciate having CDN features cleanly separated from object storage. It makes sense, since they are completely different things.

john-shaffer··on Apple forcing app developers to implement auto-billing after free trial
The developers can't choose to not charge or to cancel a subscription. The user must cancel. The devs cannot refund a subscription that a user forgot to cancel.
john-shaffer··on YouTube bans Stefan Molyneux, David Duke, Richard Spencer for hate speech
While this is informative, it leaves out one big thing. Rule number 1 in the sidebar is "Posts from black people only".

> This sub is intended for exceptionally hilarious and insightful social media posts made by black people. To that end, only post social media content from black people.

john-shaffer··on YouTube bans Stefan Molyneux, David Duke, Richard Spencer for hate speech
That's reassuring to hear.
john-shaffer··on YouTube bans Stefan Molyneux, David Duke, Richard Spencer for hate speech
> The worst of the alt-right are far, far worse than the worst of the extreme left (antifa, maybe? Though there is no alt-left).

There are people that support Stalin and Mao, which is just bad as supporting Hitler.

john-shaffer··on Reddit shuts down subreddits including r/The_Donald and r/ChapoTrapHouse
Admins tell the moderators how to act, and remove mods when they don't comply. Most content is effectively invisible unless it's heavily upvoted, so mods only really need to act on a small subset of posts. Some subreddits are moderated pretty heavily, while others remain mostly user-driven.
john-shaffer··on Reddit shuts down subreddits including r/The_Donald and r/ChapoTrapHouse
> What's wrong with just saying that it's their platform and they have the right to set the rules?

1) They don't want to alienate people who care about free speech. 2) A lot of people liked reddit because it was user-driven, and don't like it when the content they see is selected by admins and mods. They want to keep the illusion of being user-driven as long as they can.

john-shaffer··on Facebook announces policy changes ahead of 2020 elections
You seriously need to step friending violent neo-fascists.
john-shaffer··on Why the US military usually punishes misconduct but police often close ranks
> “A soldier is reasoning agent,” a military court explained in the 1991 case U.S. v. Kinder, in which a soldier who killed a civilian was convicted of murder on the grounds that his superior’s order to do so was obviously illegal and should have been reported.

This reference appears to be completely wrong. The case it links to is an appeal of drug dealing convictions.

The phrase "A soldier is a reasoning agent" appears in the 1973 case U.S. v. Calley [1] appealing Calley's conviction for murder at My Lai.

[1] https://casebook.icrc.org/case-study/united-states-united-st...

← PreviousPage 6 of 7Next →