HNHacker News
TopNewBestAskShowJobs

mdhb

4,371 karma · joined December 23, 2022

submissionscomments
mdhb··on Roadmap for improving the type checker
https://flutter.dev/multi-platform/ios

It’s actually 28% I just checked but it’s front and centre there if you scroll down.

mdhb··on Roadmap for improving the type checker
There is a reason why 1/3 apps in the Apple App Store are now written in Flutter instead.
mdhb··on I tried OpenAI's new Atlas browser but I still don't know what it's for
It’s designed for stealing your data, they can’t exactly list that as one of their primary use cases but it’s the truth. You are there to help feed their training models.
mdhb··on Rust cross-platform GPUI components
I would say the opposite and it sounds like a personal preference at which point I think lack of cross platform compatibility ceases to anything else other than a major major problem.
mdhb··on Rust cross-platform GPUI components
Same model as Flutter which is a million times more pleasant to write and mature at this particular use case which I don’t actually think Rust is well suited to generally speaking.
mdhb··on The Swift SDK for Android
Shader compilation lag hasn’t been a thing for years
mdhb··on AI assistants misrepresent news content 45% of the time
Almost as though it’s not a sustainable business model and relies of tricking people in order to keep the lights on.
mdhb··on Knocker, a knock based access control system for your homelab
I recently wrote a deception / honeypot service that does some similar stuff so that all makes sense to me and I think the general strategy of impose costs on attackers by making them expose more of their infrastructure etc are actually a really good move especially in the context of developing an early warning signal.

I had some additional logic that gave me a really easy but unintuitive way to tell with an incredibly high degree of confidence the difference between a bot and a human on keyboard scenario and for what it’s worth I think that is the specific thing that makes it worth the effort.

If I have reasons to suspect it’s a bot I just drop the request and move on with my day. The signal to noise ratio isn’t worth it to me.

mdhb··on Knocker, a knock based access control system for your homelab
I’m not super familiar with the intricacies of fail2ban and don’t currently understand why op made that claim but would very much like to know more because he is talking about a topic he is highly regarded for and I respect that. I just don’t have the context.
mdhb··on Knocker, a knock based access control system for your homelab
Just to be super clear.. using this in place of something like WireGuard is absolutely not an improvement. It’s actively worse in the majority of scenarios assuming you can manage to secure your keys.
mdhb··on Knocker, a knock based access control system for your homelab
Comrade J by Pete Earley
mdhb··on Knocker, a knock based access control system for your homelab
I’m not arguing with you or pretending to not know the difference. I’m saying that is the right answer 999/1000 but there are other scenarios as well.
mdhb··on Knocker, a knock based access control system for your homelab
I mostly agree.. there’s a couple of very specific scenarios where maybe something like knockd makes sense I think but they are all scenarios where you’re doing things covertly, not as a general authentication mechanism.

As a side note I just happen to be reading a book at the moment that contains a fairly detailed walkthrough of the procedure required to access the Russian SVRs headquarters in New York in 1995.

Think of this as an analogue version and in no way a perfect analogy but it does include a step that has more or less the same security properties as this… anyways here’s a relevant quote:

“After an SVR officer passed through various checkpoints in the mission’s lower floors, he would take an elevator or stairs to an eighth-floor lobby that had two steel doors. Neither had any identifying signs.

One was used by the SVR, the other by the GRU. The SVR’s door had a brass plate and knob, but there was no keyhole. To open the door, the head of the screw in the lower right corner of the brass plate had to be touched with a metal object, such as a wedding ring or a coin.

The metal would connect the screw to the brass plate, completing an electrical circuit that would snap open the door’s bolt lock and sometimes shock the person holding the coin.The door opened into a small cloakroom. No jackets or suit coats were allowed inside the rezidentura because they could be used to conceal documents and hide miniature cameras.

SVR officers left their coats, cell phones, portable computers, and all other electronic devices in lockers. A camera videotaped everyone who entered the cloakroom. It was added after several officers discovered someone had stolen money from wallets left in jackets. Another solid steel door with a numeric lock that required a four-digit code to open led from the cloakroom into the rezidentura.

A male secretary sat near the door and kept track of who entered, exited, and at what times. A hallway to the left led to the main corridor, which was ninety feet long and had offices along either side. ”

Excerpt from Comrade J by Pete Earley

As another funny side note… I once discovered years ago that the North Koreans had a facility like this that they used to run a bunch of financing intelligence operations using drugs in Singapore where I was at the time and thought it would be funny to go and visit. It was in a business complex rather than a dedicated diplomatic facility from memory. But as I recall it was a similar scenario of unmarked door with no keyhole.

mdhb··on ChatGPT Atlas
I’d rather slam my dick in a car door than install this.
mdhb··on Dutch spy services have restricted intelligence-sharing with the United States
That is very literally the accusation that is being made for the record.
mdhb··on Japan asks OpenAI to keep Sora 2's hands off anime IP
Like his sister…
mdhb··on A classified network of SpaceX satellites is emitting a mysterious signal
And we are going to put that in the hands of Elon musk? Are you fucking kidding me?
mdhb··on Ask HN: How does one build large front end apps without a framework like React?
As someone who does both a lot of app development and web development I’m always kind of confused about how insanely far behind the majority of the web crowd is on these topics and I largely put it at the feet of React who went off on a wildly different direction and ended up making a huge mess in my opinion that huge numbers of people will swear is somehow a “best practice”.

My advice is to go and learn a proper architecture (MVVM is a great fit in my opinion for MOST things) and then figure out how to implement that with something you enjoy using. My only bit of advice here is that the closer you stick to the underlying web platform the better off you’re going to be so if you want a concrete recommendation something like Lit here gives you all the primitives you need along with great performance, documentation and developer experience.

mdhb··on EU Commission presents defense plan to protect 'every' centimeter of Europe
He is right and you are wrong here. You also have a years long history of bad faith contrarian comments here.
mdhb··on We Found That More Than 170 U.S. Citizens Have Been Held by Immigration Agents
And you were entirely correct. Yet another garbage moderation move.
mdhb··on EU to bypass Washington and woo US states on green agenda
This is the logic of a five year old.
mdhb··on Upcoming Rust language features for kernel development
To which the counter argument I guess would be.. there’s no sense in trying to solve for some abstract future set of problems that the vast majority of people are never going to have ahead of time on the off chance you’re one of them.

That too requires a substantial investment of time and resources.

I think in a more pragmatic sense too that you can form a very good understanding on if you’re going to have weird special requirements just from looking at what others have done with the same tools in similar situations before you.

mdhb··on Upcoming Rust language features for kernel development
No I get all that, but to the parent comments point however, there’s no way in hell I would ever pretend for a moment that one is as straightforward as the other and it’s no longer a choice between Rust and C++ both of which add a lot of complexity to a scenario where it offers very little benefit.
mdhb··on Upcoming Rust language features for kernel development
But that’s no longer the choice you need to make. Ubuntu themselves have said for a couple of years now that every new GUI app they make natively for Linux is going to be Flutter and dedicated a bunch of engineers to the project to make sure it’s a first class citizen.

Beyond that, Dart / Futter are truly an absolute pleasure to use for that use case.

mdhb··on Sam Altman says ChatGPT will soon allow erotica
Just putting a note here to say I told you so when there is inevitably a leak that’s able to tie individual people back to the horny shit they posted to OpenAI when this launches.

This is going to become a blackmail target 100%.

mdhb··on Tesla FSD will drive straight into the path of a oncoming train
Strong natural selection vibes here. Don’t put your life in the hands of a ketamine addict
mdhb··on The React Foundation
Yea just to be clear none of that ever happened in real life.

I think maybe you might be mixing up some things here which is that there was once many years ago a version of Angular which was written in Dart which exists internally and powers AdWords but no longer exists publicly. Perhaps that is why you’re thinking of?

mdhb··on The React Foundation
I’m not trying to be rude in any way here but literally everything you have posted here is incorrect. I don’t know where you’re getting your information from.

The only exception is about job postings and react, I’m not making the argument in any way shape or form that that isn’t the overwhelming majority of jobs out there, but that wasn’t what I was talking about I was saying it’s an actively bad choice for a project in 2025.

mdhb··on QUIC and the end of TCP sockets
Isn’t WebTransport more or less TCP (reimagined I guess but it’s key functionality and set of capabilities) running on UDP while also able to play well with the web’s security model.
mdhb··on The React Foundation
After doing this for so many years now and one thing I’ve really come to see as a fairly fundamental truth at this point is that the more you can align with the underlying platform you’re working with generally the better.

And so in that sense, the answer is web components. I know everyone hates the API but it was intentionally designed to be a low level thing to build a developer experience on top of and the best implementation of that right now is Lit. It’s also a pleasure to use and incredibly lightweight and designed to become even more lightweight overtime as new capabilities come to the web like signals in JavaScript or talk of native templating etc.

There is another option that I really like for certain kinds of applications which is Flutter which might sound contradictory to my original point because it skips the idea of the DOM entirely and brings its own rendering engine to a canvas element.

But it’s set to be the first serious Wasm and WebGPU based UI library on the web and has no problems spitting out 120fps (this is before even they have actually added WebGPU support and their newest rendering engine to the mix by the way) while keeping its rendering engine to I think about 1.5-2mb in size. It also gets you a single codebase that will run literally anywhere as an AOT compiled app.

That’s to say nothing of Dart itself which I cannot even begin to describe what a huge improvement it is over JavaScript and Typescript. If you haven’t tried it yet, do yourself a favour.

I’m just making the point that JavaScript and the DOM are no longer the only players in town and when you’re not trying to mix abstractions of a document markup language and an application a whole lot of problems just disappear like does this look different in different browsers or can I use this new feature etc.. it just works… everywhere… on the web.. on a desktop.. on a phone or an IoT device.

← PreviousPage 5 of 34Next →