HNHacker News
TopNewBestAskShowJobs

nickitolas

134 karma · joined September 25, 2019

submissionscomments
nickitolas··on Cloudflare acquires Deno
I believe the parent comment is saying the js runtime doesnt affect the speed of downloads, thats all c/c++/rust code
nickitolas··on A missing underscore sent innocent man to prison for 18 months
A reddit user ( https://www.reddit.com/r/news/comments/1v6ehm6/comment/ozrmz... ) shared this link to the sentencing decision https://canlii.ca/t/k2frf

Some interesting bits I found in it:

> The police also retrieved one voicemail message from CH’s iPhone that was sent to her by “Jay,” with a timestamp of December 13, 2018, at 7:40:54 PM (UTC-6), which was played in court.

So it sounds like they played audio of the actual perpetrator's voice in court, and no one realized it was a completely different person.

> In the final analysis, the key issue in the trial was whether the Crown had established, beyond a reasonable doubt, that Mr. Brandon Klayme was, in fact, “Jay” and that he was the person who had sent her the sexually explicit text messages and had demanded and received sexually explicit photos and videos of CH, who was at the time that those images were exchanged, only 12 years old.

Funny (sad?) that the judge literally says he established this "beyond a reasonable doubt".

> The Court ultimately concluded on the basis of the totality of direct and circumstantial evidence accepted by the Court that the Crown had established, beyond a reasonable doubt, that Mr. Brandon Klayme was, at all material times, the person who identified himself as “Jay” and furthermore that, he was the person with whom CH had been communicating over several weeks in sexually explicit messaging and that he had demanded that CH send sexually explicit photos and videos of her, being a 12-year-old girl, to him. The Crown’s direct and circumstantial evidence included numerous references to the IP addresses and other information for accounts such as Google+, Google, Kik which referred to different usernames, like ““Jay” with their subscriber contact being listed as Mr. Brandon Klayme.

I barely know anything about law, but all of this sounds like "circumstantial" evidence, not direct?

> The Court received a Pre-Sentence Report (PSR) prepared by the Probation Officer on July 21, 2023, which indicated that Mr. Klayme, is now 28 years old, single and continues to live at home at his parent’s house. The PSR notes that Mr. Brandon Klayme has a very close relationship with his parents and siblings, is not currently involved in a relationship and also reported that he has never been in one.

> The PSR notes that Mr. Klayme completed grade 12 in 2013, but he advised the Probation Officer that he did not care about school and often was in trouble for not paying attention in class. He has not continued his education, but in terms of future education goals, Mr. Klayme indicated that, in the future, he would like to take a program in sound engineering. Mr. Klayme is presently unemployed, and his employment experience was with the family business and working with his father after graduating from grade 12. He has been unemployed since the family business was sold over one year ago. As a result, he is financially dependent on his parents.

> Mr. Klayme reported that he has good health and that he had been diagnosed with ADHD as a child but took prescription medication to address those issues. He does not use any intoxicating substances but may have a drink on a few special occasions each year. He described himself as being a “very calm person” and has never attended any form of counselling.

> The Probation Officer noted that, during her interview with Mr. Klayme, he presented as being polite, respectful, and cooperative, but took no responsibility and maintained that he was innocent and repeatedly cited that his “email account had been hacked.”

> With respect to those comments in the PSR, at the conclusion of the sentencing submissions, the Court offered Mr. Klayme the opportunity to make any comments directly to the Court or for that matter, any comments directed towards CH or LS, who had remained on the videoconference throughout the hearing on December 18, 2023. Mr. Klayme stated that he was sorry to hear what had happened to CH and her family, but maintained, as he had stated to the Probation Officer, that they were occasioned by another person and not by him.

So it would seem the defense's claim was "He must have been hacked, since he didnt do any of these things". Which, while wrong (He wasn't hacked, they just mixed up two different accounts), I don't see how they could argue that he wasn't hacked?

Like, if we assume in a different case that a person was indeed hacked, and a third party got access to their "kik" account. Would it not be a very similar situation?

nickitolas··on A love letter to flashcards
Have you looked at jpdb.io ? Iirc it has randomized example sentences
nickitolas··on For Linux kernel vulnerabilities, there is no heads-up to distributions
How does that square with this comment from greg from today?

https://www.openwall.com/lists/oss-security/2026/05/01/3

(About heads up to distros)

> Nope, sorry, we are NOT allowed to notify anyone about anything "ahead of time" otherwise we will have to tell everyone about everything. That's the only policy by which all the legal/governmental agencies have agreed to allow us to operate in, so we are stuck with it.

nickitolas··on OpenAI backs Illinois bill that would limit when AI labs can be held liable
I don't think itd be ok, personally. My impression is regulations and regulatory institutions can be very slow to evolve after technological advances, unless the government is financially liable. A scheme I would be more comfortable with is mandatory insurance and insurance companies with a financial incentive absorbing the liability. On top of that probably add some bare minimum regulatory requirements/certifications.
nickitolas··on A Decade of Slug
Harfbuzz does shaping, my understanding is slug does rendering. So they do different things
nickitolas··on Illinois Introducing Operating System Account Age Bill
I have no experience with minors using Linux. Do they not typically have sudo access?
nickitolas··on GOG: Linux "the next major frontier" for gaming as it works on a native client
Clang can target windows just fine afaik, although I'm sure the whole process could be improved.

That said, as long as windows is the bigger more profitable market I wouldnt expect a switch, unless the dev tooling situation becomes dramatically better on linux

nickitolas··on There is an AI code review bubble
> In addition, success is generally pretty well-defined. Everyone wants correct, performant, bug-free, secure code.

I feel like these are often not well defined? "Its not a bug it's a feature", "premature optimization is the root of all evil", etc

In different contexts, "performant enough" means different things. Similarly, many times I've seen different teams within a company have differing opinions on "correctness"

nickitolas··on Common Rust Lifetime Misconceptions
"life of the program" might imply it needs to begin life at program start. But it can be allocated at runtime, like an example in the list shows. So its rather "lives until the end of the program", but it doesnt need to start life at the start of the program
nickitolas··on Crunchyroll is destroying its subtitles
Not who you were asking but for me about 1800 hours of study+srs+reading+listening for simple shows (not "tons of idioms". Or at least not ones Im not already familiar with). This was for japanese, european languages should be easier.
nickitolas··on Stripe Launches L1 Blockchain: Tempo
Speaking as an argentinian, every time I hear about someone using crypto in that way its to avoid taxes, which seems legally murky/gray (if not directly illegal, but not currently prosecuted) to me.
nickitolas··on GitHub was having issues
Is games not a part of tech?
nickitolas··on The Big OOPs: Anatomy of a Thirty-Five Year Mistake
Since you already quoted wikipedia, here's what it says about ECS:

https://en.wikipedia.org/wiki/Entity_component_system

> Entity–component–system (ECS) is a software architectural pattern mostly used in video game development for the representation of game world objects. An ECS comprises entities composed from components of data, with systems which operate on the components.

> Entity: An entity represents a general-purpose object. In a game engine context, for example, every coarse game object is represented as an entity. Usually, it only consists of a unique id. Implementations typically use a plain integer for this

> Common ECS approaches are highly compatible with, and are often combined with, data-oriented design techniques. Data for all instances of a component are contiguously stored together in physical memory, enabling efficient memory access for systems which operate over many entities.

> History > In 1998, Thief: The Dark Project pioneered an ECS.

So, according to wikipedia:

- An entity is typically just a numeric unique id

- Components are typically physically contiguous (i.e an array)

- Their history began with Thief pioneering them in 1998

nickitolas··on The Big OOPs: Anatomy of a Thirty-Five Year Mistake
> I think his definition of OO is different to what we've got used to. Perhaps his definition needs a different name.

I've seen "OOP" used to mean different things. For example, sometimes it's said about a language, and sometimes it's unrelated to language features and simply about the "style" or design/architecture/organization of a codebase (Some people say some C codebases are "object oriented", usually because they use either vtables or function pointers, or/and because they use opaque handles).

Even when talking about "OOP as a programming language descriptor", I've seen it used to mean different things. For example, a lot of people say rust is not object-oriented. But rust lets you define data types, and lets you define methods on data types, and has a language feature to let you create a pointer+vtable construct based on what can reasonably be called an interface (A "trait" in rust). The "only" things it's lacking are either ergonomics or inheritance, or possibly a culture of OOP. So one definition of "OOP" could be "A programming language that has inheritance as a language feature". But some people disagree with that, even when using it as a descriptor of programming languages. They might think it's actually about message passing, or encapsulation, or a combination, etc etc.

And when talking about "style"/design, it can also mean different things. In the talk this post is about, the speaker mentions "compile time hierarchies of encapsulation that match the domain model". I've seen teachers in university teach OOP as a way of modelling the "real world", and say that inheritance should be a semantic "is-a" relationship. I think that's the sort of thing the talk is about. But like I mentioned above, some people disagree and think an OOP codebase does not need to be a compile time hierarchy that represents the domain model, it can be used simply as a mechanism for polymorphism or as a way of code reuse.

Anyways, what I mean to say is that I don't think arguing about the specifics of what "OOP" means in the abstract very useful, and that since in this particular piece the author took the time to explicitly call out what they mean that we should probably stick to that.

nickitolas··on The Big OOPs: Anatomy of a Thirty-Five Year Mistake
If my memory isn't failing me, that was part of the reason rust went with a postfix notation for their async keyword ("thing().await") instead of the more common syntax ("await thing()")
nickitolas··on The Big OOPs: Anatomy of a Thirty-Five Year Mistake
I'm a bit confused. What does any of this have to do with the central thesis of the talk? ("Compile time hierarchies of encapsulation that match the domain model were a mistake")

I understand that OOP is a somewhat diluted term nowdays, meaning different things to different people and in different contexts/communities, but the author spent more than enough time clarifying in excruciating detail what he was talking about.

nickitolas··on Global hack on Microsoft Sharepoint hits U.S., state agencies, researchers say
I would assume some orgs made it public facing for covid and it remained like that
nickitolas··on The Big Oops: Anatomy of a Thirty-Five-Year Mistake [video]
I don't know if it matters to you, but the "video" is just a recording of a conference talk. It wasn't made with the sole intention of making a "video". I agree a text format version of the same information would be useful.
nickitolas··on The Big Oops: Anatomy of a Thirty-Five-Year Mistake [video]
> but also wrong in a few places

Would you be so kind as to elaborate how/where? (Other than the "arpanet in the 90s")

nickitolas··on A university president makes a case against cowardice
I think they were thinking of Carlos Menem's "si hubiera dicho lo que iba a hacer, no me votaba nadie” , but AFAIK thats a misquote [1]

A more recent Argentinian president (Mauricio Macri) said a similar thing though: " If I had told them everything I was going to do, they would have voted to lock me up in an asylum" (Tl mine).

Original [2]: "Si les decía todo lo que iba a hacer, votaban por encerrarme en el manicomio"

[1]: https://www.infobae.com/sociedad/2023/11/12/si-decia-lo-que-...

[2] https://www.cronista.com/economia-politica/Macri-Si-les-deci...

nickitolas··on Revolt: Open-Source Alternative to Discord
> What do people find upsetting about Discord?

These are the most common complaints I see from people

- They don't allow third party clients and some people have various complaints about theirs (e.g resource usage)

- Some people think discord is too popular, to the point some things that "don't belong there" have moved to discord. This is usually about being search indexable and requiring an account.

- Fear of monopolostic behaviour ( "enshittification" )

- Some people are mad that they killed public urls for files uploaded to discord. Mostly this is people running into links to images online and being unable to see them, usually not the uploaders

- Discord is centralized and you cannot host your own server

- The only client they allow you to use (See above) is propietary, and some people would rather run something open source

As for me personally, their search functionality drives me insane. I feel like the exact same query gets completely different results depending on the time of day and phase of the moon, making it super unreliable.

nickitolas··on A comparison of Rust’s borrow checker to the one in C#
You're correct that as far as I understand it the analysis propsoed by the C++ Lifetime Safety Profile is similar in many ways, however I think there's a few important distinctions with these C# features that are not directly related to the analysis: The C++ safety profilers are trying to be backwards compatible with as much C++ code as possible. Whereas my understanding is most of what's talked about in this post is sort of a clean break from idiomatic C#, and is not changing the semantics or adding new warnings to any pre-existing code. Another difference is that C++ obviously does not have a built in runtime GC, so the situations mentioned in this post that get "fixed" by GC heap allocation would remain an issue.
nickitolas··on Why Safety Profiles Failed
Are you also a proponent of nonlocal type inference? Do you think annotating types is too costly for programmers?
nickitolas··on Why Safety Profiles Failed
Not to mention the error messages when you get something slightly wrong
nickitolas··on Show HN: Pumpkin – A Modern Minecraft server written in Rust
If you need to separately convert files yourself, then it is by definition not drop in
nickitolas··on Dev rejects CVE severity, makes his GitHub repo read-only
there's an example in the first reference link associated with the CVE: https://cosmosofcyberspace.github.io/npm_ip_cve/npm_ip_cve.h...

Granted, it's basically if(function_from_lib(user_input)) make_http_request(user_input) , which imo seems like a bit of a forced example, but it is an example

nickitolas··on I'm forking Ladybird and stepping down as SerenityOS BDFL
> Why not?

Because it's extra work.

nickitolas··on Super Mario 64's invisible walls explained [video]
I think most of it is that he shows and explains every invisible wall in the game (Or tries to). The basic explanations are about an hour and a half. It uses graphics for explaining almost everything and does it in quite a bit of detail.
nickitolas··on The Rust project has a burnout problem
I mean ... https://news.ycombinator.com/newsguidelines.html

> Please don't complain about tangential annoyances—e.g. article or website formats, name collisions, or back-button breakage. They're too common to be interesting.

Page 1 of 3Next →