HNHacker News
TopNewBestAskShowJobs

lijogdfljk

1,037 karma · joined July 28, 2019

submissionscomments
lijogdfljk··on The complete guide to protecting your APIs with OAuth2
Appreciate the link. I also like encrypted cookies. I've not used them before, but i was really tempted because .. well, they seem an elegant low-cost way to achieve it.. iirc i was a bit unsure how to avoid any pitfalls with the encryption side of things though. Ie i don't want to allow encryption to bypass security because i chose/made a bade encryption method. Really depends on how general purpose the encryption for the cookies are. If it's very general then i suppose i can take any encryption library, but even many of those are notorious for footguns heh.
lijogdfljk··on The complete guide to protecting your APIs with OAuth2
I'm often frustrated by no clear OAuth-like system for non general auth. Ie you have a server and a clientside JS app. How do you secure it? Cookies are the obvious thing to reach for, but in general i was never clear on exactly what the options are. What are pros and cons of various types of implementations? What are the do's and don'ts? And even if i use something i often felt i was implementing all of it (due to obscure languages choices frequently), but the specifics of the impl were often difficult to find.

It's embarrassing to say but auth has always confused me. And of course managers always instantly say "Just use OAuth" -_-

lijogdfljk··on FBI Didn't Knock Down a Suspect's Door Because 'It Was an Affluent Neighborhood'
I never understand these types of statements.

What is the attempted statement here? To imply that black people are inherently violent? What are you getting at?

The way i see it, those numbers reflect the state of racially focused stunted development in many communities.

It's like when people throw single-parent household statistics around with blacks. What do we think is the root cause here? That their skin color inherently made them do this? Or maybe, just maybe, the living conditions are not prone to healthy structured families and healthy individuals.

lijogdfljk··on Maybe you should do less 'work'
I'm not after parasites.

I'm after not building our ideal utopia of work-life balance on the backs of others who, for whatever reason, don't get to have a work-life balance.

Seems a pretty slippery slope.

lijogdfljk··on Ask HN: Why do search engines not let you blacklist spam domains?
A good argument for some distributed foss search then i guess. Wonder if it could ever be made to have search results return reasonably fast in a distributed large index?
lijogdfljk··on Maybe you should do less 'work'
I can .. somewhat agree with that.

Not to disagree with your general direction though, but i don't honestly think i could boil what i do down into 2 hours. On paper? possibly. In practice i spend far more time thinking about problems, taking breaks from problems, etc - than i do actually writing the solutions. But i'm not claiming i'm any good heh, just that it often takes me hours and hours.

Your assertion is generally correct i think in efficiency sake. Ie when i put in 14h days, i'm exponentially paying a higher tax on my efficiency by putting in extra hours - i'm over worked and tired, i'm far from my best. But i still think i can more work done in those 14h than i do in 8, or especially 4/etc.

lijogdfljk··on ‘This game is so realistic it feels just like working overtime’
Satisfactory and Factorio do that for me. Really good games but i can barely bring myself to play them with how quickly they start making me feel like i'm working.

Wish there was an.. easy mode, or something. Something that let me enjoy that feeling of my work - which i love - but with some simplifications to not exercise the same parts of my brain i'm trying to rest after a long days actual work hah.

Who knows, maybe it would be boring :shrug:

lijogdfljk··on Maybe you should do less 'work'
It's not a complete avoidance. Rather, i'm just advocating that we don't build the idea of less work on the shoulders of people who work more. That seems to me to almost codify the need for some people working more, and that seems a slippery slope for _some_ people getting good work-life balances and others not.

My argument is that we _all_ should qualify for a work-life balance. Not depend on some people not getting a good work-life balance.

lijogdfljk··on Maybe you should do less 'work'
> Do you think everyone pulling the same minimum will ever happen? I don't, and it might be important to come to terms with that concept...

Well i read the parent comment as if it was referring to a hypothetical "less work" society. With better work-life balance. Of which i agree with.

What i don't agree with, is balancing this society on the fact that some are required to work more than others. Ie just because some people are addicted, or even healthily-like to work more, that they would be required to work 40h/w where as perhaps the parent comment would only be required to work 20h/w.

"Required" in this context would be for society to stay afloat due to taxes or whatever hypothetical reason. It's pretty loose, i'm inferring a lot from the parent comment of "Those people will generate enough taxes and labor for lazy people like me, and it's okay".

lijogdfljk··on Maybe you should do less 'work'
Well i'm not talking hours, to be clear. Just some idea that we're all equal.

Ie, if a hypothetical society depends on addicts working more than "lazy people" (in the parents words) then it feels to me we're set up for failure.

lijogdfljk··on Maybe you should do less 'work'
> Those people will generate enough taxes and labor for lazy people like me, and it's okay.

Feels odd to me to make a statement like this. Is it in jest?

In my view everyone should pull the same minimum. Not have some people work more to offset other people working less.

lijogdfljk··on How our free plan stays free
I agree with your statement, but to devils-advocate for a moment the details matter do they not? Ie if your scaling costs are high than wouldn't you need to extract much more from each user than if they are low?

Ie high enough and you're doing sketchy shit and selling every ounce of user data you can because you have to recoup some of the user costs. Low enough and users could "just" be a mind-share cost.

If true, the devil is really how the user has no information here. All we can do is assume we are the product and they're fully-evil. Unfortunately.

lijogdfljk··on Ask HN: Full-text browser history search forever?
I've got a very different goal than you, but with quite a bit of overlap on saving web pages for historical lookup.

How are you pulling and storing the pages?

For context; I feel like there are quite a lot of solutions here, but not many overlapping and often reinventing many wheels. Memes aside (14->15 standards), i wonder if there's a way i can write my version of this that would benefit others by using common formats we can all benefit from.

edit: Interesting, sounds like it's network/proxy request based. Perhaps there's minimal overlap here?

lijogdfljk··on Antarctic sea ice hits lowest minimum on record
They'll have a _long_ time to migrate though, no?
lijogdfljk··on Lawn mowing frequency affects bee abundance and diversity (2018)
Oh man, i have Rabbits. It's a pretty common war between my dog and Rabbits heh.
lijogdfljk··on Offpunk 1.0: Offline Gemini/Gopher/Web Browsing
You know.. this gives me a thought. I've not followed Gemini much, so pardon if this is stupid..

I've (very) slowly working on a knowledge base and planning features. All focused on myself/FOSS. A big desire i recognized early on is being able to store immutable references to the source material. Good for offline usage, but also nice as a "Reader". I would probably ingest direct to some reasonably bare HTML or Markdown format.

Alternatively, i wonder if adhering to Gemini/etc would be a good way to achieve this?

Ie rather than store data in some adhoc format, you just write a "Traditional Web -> Gemini" converter, and then just build the Reader ontop of that. Clearly i'm just speaking of Gemini as a storage format, ignoring transport mechanisms or protocols. Ie the HTML aspect of Gemini. I am unclear if Gemini is just literally a subset HTML - but even if it is, it adds a nice constraint on what HTML this Reader would produce.

Seems neat and general purpose. As long as Clients can markup Gemini content with enough semantic visual meaning as to not detract from the experience in my eyes. Ie i'd want to be able to view Codeblocks with some simple syntax highlighting.. not sure if Gemini prevents that somehow.

Now i need to look into Web -> Gemini scrapers, got me interested

lijogdfljk··on Lawn mowing frequency affects bee abundance and diversity (2018)
Do you have tall grass too? I planted clover a while back over my existing grass and if i didn't mow i'd still have a foot tall grass, which i find really annoying.

I still love the clover, and it helps keep the grass a bit more sane - but the length of the grass is my primary fight.

lijogdfljk··on Senior devs. Is anyone else insulted by coding exams?
I've had moderate success discussing Rust (a language we hire for) at moderately low levels.

Ie, i've had the thought that it's difficult to bullshit topics with any depth. Even basic questions, why isn't an Rc safe to send to a thread? How does an Rc work? What is the difference between an Rc and an Arc? etc

I'm happy to accept "i don't know", those are valuable too. But the whole conversation process led me to believe a lot about the candidate. We've hired 10+ juniors and seniors with this process and i've not felt cheated yet.

I still feel like i need to find a way to open up people who "freeze". I do that myself, so i can relate, and my strategy of interviewing is pretty 1:1. Still though, i've had more faith in it than live/take-home tests.

lijogdfljk··on S.e.p.i.a. – Digital voice assistant
Honest question, as i've never used Java.. why do i need to install various Java runtimes then?

As someone who never uses Java _and_ still dislikes it, it's because i've had to install that damn runtime a thousand times. At least Python has the simplicity in coming pre-installed on many systems. I can't count the number of times i've installed/uninstalled Java.

Also, back in the day i was used to seeing some Java systray icon. I imagine that built some dislike towards Java too.

lijogdfljk··on Native Matrix VoIP with Element Call
A bit off topic, but anyone know if Threads are something Matrix currently supports, or ever wants to support?

My family uses Signal for _a lot_, likely way more than we should, and i feel like we'd benefit from threads immensely.

Maybe i should toy with making my own Matrix client or something, heh.

edit: https://github.com/vector-im/element-web/issues/2349 looks like it might exist in some beta form. Depending on the client heh

lijogdfljk··on YouTube suspends The Hill for playing clip of Trump denying election results
Fair, what i meant should probably have been worded: "Recommendations on drinking bleach to cure Covid" or etc.
lijogdfljk··on YouTube suspends The Hill for playing clip of Trump denying election results
If it's instructions on drinking bleach, why censor it?

The discussion has to be one of nuance, but i think back to the days of TVs (lol). TV and radio had (to my understanding) laws about what you can say on air, different than what you would encounter on the sidewalk. It seems to make sense. After all, piping instructions on drinking bleach into everyones home seems bad. Inciting riots in mass seems bad. I don't know, but it seems logical to me.

The internet is obviously different.. but not different in every way, in my view. It seems like we need to be honest with ourselves. The internet is different than just yelling things on street corners. What should be allowed? I don't know. But i don't think it has the same freedoms as yelling on the sidewalk.

lijogdfljk··on Pikuma: Isometric Projection in Game Development
As someone interested in making some indie games, any courses you'd recommend?

I'm always looking for a weirdly.. medium level explanation of things. I specifically focus Rust, and use Rust game frameworks (because they interest me), but i often find i need more information than the framework level tutorials explain.. but not necessarily "write everything from scratch in C".

Maybe i'm wrong, maybe i as a person do need everything-from-scratch to wrap my head around everything. It just feels like so often frameworks assume so much more domain knowledge than i have. Yet most books/courses/etc are binary. They're either super deep, or super light.

Are there medium courses? Are medium courses even possible?

lijogdfljk··on Namecheap: Russia Service Termination
Fair, thanks for the reply. It was only half humor though, as a local i do genuinely hate much of the city. However, i'm not "city local" if that makes sense.

But it's not unique to Seattle. Tacoma and Olympia (where i live) is bad too. Cities just suck these days it seems.

lijogdfljk··on Namecheap: Russia Service Termination
I mean, Seattle is a hellscape to me lol. I mostly kid, i live south of Tacoma, i just hate the homeless problem in Olympia, Seattle. The roads in southern Seattle also make me want to die hah.

Anyway, just making local-jokes mostly. Not actually attacking Seattle :)

edit: Is it because i was kidding, or is very mild criticism of Seattle not appreciated? It's not like i live in Texas and have never been there lol.

lijogdfljk··on “O, so sorry. I need more time. my country defending Russian invasion”
> What kind of company is it?

A contract company with customers. The company would likely "be fine", but 5 years ago it was ~6 people. We've pushed for some larger clients recently, which allows us to employ ~50 people. If rolling out to the larger clients fails, that income source dries up and we go back down to ~10 people or w/e. With a sizable failure on our track record, which will be a bit difficult too.

> IMO, it's just the way it's being handled. They have their people fighting for their lives. Here's what looks like a manager or lead not being able to work with all the stress around it. And all that upper management sees is, fill in the chair.

So in our case i imagine we'd attempt to fill in a chair. I'd advocate for it. But again, i want to keep the rest of the staff employed and fed, myself included. However i would _definitely not_ expect to see those employees let go. I'd raise hell and question my employment if they were treated that way. Just filled in while they're gone, hopefully still paying them as long as we can (which probably wouldn't exceed 6 months i'd guess).

Which is partly why these conversations can be difficult for me. My #1 concern is keeping everyone employed, including the people having a tough time. Which can often mean keeping my head focused on income.

As much as i love WorkReform and worker focused rights, i often feel these conversations are adversarial and don't seem to consider what will happen when the company goes under. But they're also framed against massive corps, like Starbucks or w/e, and the reality is much different for them than it is my company.

Talking about my company in the WorkReform context is really odd these days.

lijogdfljk··on “O, so sorry. I need more time. my country defending Russian invasion”
What's expected though? Not that i'm defending mistreatment, but i work with a small team of all remote and we have a few Russian devs. If they go absent for a while due to all this issue, we're not going to fire them or be angry.. but we still need to try and keep the company afloat, no?

Like forget bottom lines and corporate greed for a second. My company is small and if we don't hit an upcoming deadline, we're laying off at least half of our staff. I'm in full support of affected people but i also have to do my best to make sure the people employed by this company have a job tomorrow. This post seems to make that sound.. cold, uncaring?

To be clear i don't own the company nor am that high up on the management chain. We're only ~50 people. But still, i think this way. If an employee goes through really difficult times, of which we've had many, we wish them well and continue to pay them as best we can for as long as we can, but the 49 other people still have families, need food on the table, etc. It's just as important to me that the 49 other people are happy and healthy as it is the 1 person is happy and healthy.

I'm a bit confused by the anti-corporate take sometimes. I think the human lives are all that matter, fuck corporate greed - but when everyone is months away from losing jobs due to runway-like funding models.. it seems unfair.

Am i off base? I imagine you're mostly thinking huge companies?

lijogdfljk··on Brains and algorithms partially converge in natural language processing
Would be really interesting to see how well it works for various people.

Eg i feel i have a very.. noisy mind. Maybe some ADHD, but i don't like to hop on diagnosis trains. Point is, unless i am uniquely "in the zone", i often feel my productivity is in bursts between thoughts wandering mostly randomly.

If i had the ability to just transcribe everything i think i suspect it would need a huge filter to actually get useful output.

Likely related, i often have to stop and re-order my thoughts during conversation or writing. I will jump through a sentence to "the point", and then have to back track and actually add the grammar/words necessary to actually convey "the point". It seems my thought process doesn't like to dilly-dally on the communication. It's very binary if you will. I either have the solution/point/etc, or i have a blank space where i'm trying to think of the solution/point/etc. Once i have it, then i have to back track and re-order everything to actually be able to convey the thought.

This thought-ordering issue becomes much more complex if the problem is multi-tiered. Ie A->B->C->Answer. As i jump from point to point to point without clear explanation.

Anyway, i'd be curious if my thinking would pose challenges for some sort of thought transcriber.

lijogdfljk··on Chernobyl power plant captured by Russian forces
I'm sorry, but it's in there.

> Russia is one of the most powerful nuclear powers in the world

If you're using a different transcript then i'm not commenting on that. I was literally just pointing to what i posted, which may not be accurate - as i said multiple times.

Not sure why i had to type out what is clearly readable in what i posted, but /shrug

lijogdfljk··on Rust 1.59.0 with inline assembly support etc.
I'd be curious to see how many of those are actually safe code though, eh? I've written hundreds of thousands of lines of Rust. Can we estimate how much UB i've introduced?
← PreviousPage 9 of 14Next →