HNHacker News
TopNewBestAskShowJobs

ossworkerrights

-7 karma · joined October 22, 2019

submissionscomments
ossworkerrights··on NPM lockfiles can be a security blindspot for injecting malicious modules in PRs
I stand corrected
ossworkerrights··on NPM lockfiles can be a security blindspot for injecting malicious modules in PRs
There is also that. But one can reference the exact version and it becomes a non issue. In a properly secure environment it might be desirable. But as with everything there are pros and cons to each approach.
ossworkerrights··on NPM lockfiles can be a security blindspot for injecting malicious modules in PRs
Some people prefer to commit them (along with composer lock files for php). I always advise against it for this exact reason and because I want to make sure packages are correctly installed on the target system. Occasionally, deeply flawed versions are removed and it helps with catching it as well since you are forced to reinstall packages on a pull or build.

Edit: a minor version update should not be backwards incompatible and break things. If it does, the package is poorly maintained imo.

ossworkerrights··on Tell HN: I used to be homeless and want to work as a software developer
Indeed London is much more expensive. I left the city for that reason myself, but probably for a year or two career wise it might be great. Long term, I fully agree with you re nicer apartment and more cash.
ossworkerrights··on Tell HN: I used to be homeless and want to work as a software developer
I reckon you should give London a try as most tech jobs are in that area. Obviously there are some in other parts of the uk, but demand being so high in london there is a good chance you will find one there. Try cwjobs.co.uk and monster.co.uk. Good luck!
ossworkerrights··on Open-source and the demise of proprietary software (2018)
>> Open source has killed indie development.

> In what way? I don't understand the remark.

Open source has reduced scarcity by such a high degree that writing quality code is valued next to nothing in monetary terms. Also, communities around closed source software have better ways to monetize, since there is usually no expectation from clients to get it for free as is from clients who are oss centric. Sure one can get the "opportunity" to work at FAANG just like their forefathers had the opportunity to work at Ford, Chrysler and other googles and amazons of the last generation, but that is not freedom. In other words, OSS reduced scarcity, shifted the balance towards a few centralised software powerhouses and has forced the vast majority of great engineers into 9 to 5 jobs.

EDIT: I am hugely in favor of open source as a means to share knowledge, but i am not in favor of OSS as free code for companies to monetise. Companies are entities that generate revenue, and for them, our effort to better the world is just a reduced investment cost, and nothing more.

ossworkerrights··on Open-source and the demise of proprietary software (2018)
And a little less freedom, and a little more 9 to 5, moving software engineers into bricklayer positions a little more each day.
ossworkerrights··on Open-source and the demise of proprietary software (2018)
Open source is enabling large corporations to establish monopolies.

Open source powers google and amazon yet the authors get little return from it.

Open source has killed indie development.

ossworkerrights··on Open-source and the demise of proprietary software (2018)
Would be interesting to research how open source affects indie development.
ossworkerrights··on EU beckons Indian tech talent
People from the eastern part of the eu, taking a 42k a year salary are probably mid to senior. Salaries in east europe are higher than that, and the quality of life is way better than india.
ossworkerrights··on EU beckons Indian tech talent
This eu madness, mainly drive by germany, to allow mass migration due to a lack “of labour” needs to end. I welcome immigrants but they are heavily abused by means of lower wages, and it depresses local wages as well.
ossworkerrights··on EU beckons Indian tech talent
The romanian education system is grossly overrated by people from that country. From experience, the quality of engineering there is only marginally better than that of india and statistically speaking the education system is the second worst in europe. Universities are ripe with corruption as well. There are some good engineers but overall it is horrible.
ossworkerrights··on France to Raise Pollution Tax on SUVs and Trucks to €22k
Few years ago Romania has introduced a pollution tax for used vehicles imported into the country. The situation is extremely worrying as old cars are imported mainly from Germany, and pollution levels are beyond critical. The EU has chosen to ignore the environmental impact and the context of Romania's economy (people will naturally want to buy whatever they can get their hands on, due to economic hardship). There are so many "Made in Germany" high polluters in the country that I personally can not and will not buy German made cars again. This is an example of where the EU has applied regulation, without proper consideration for the context of a country, and in favor, as usual, of Germany.

Details can be found here: https://ec.europa.eu/commission/presscorner/detail/en/CJE_11...

ossworkerrights··on France to Raise Pollution Tax on SUVs and Trucks to €22k
That's pretty much how protectionism works in the EU: tax sectors where local manufacturers are weak, by means of "environment" protection taxes, "quality" standards and so on. Meanwhile, east Europe is full of used German cars which pollute heavily and are a danger to public safety. Governments in some countries tried limiting imports from that country, and they have been punished by the EU. But the EU has "high standards" when it comes to non EU vehicles.
ossworkerrights··on France to Raise Pollution Tax on SUVs and Trucks to €22k
Often you will notice that regulation in EU countries, and the EU itself, are not thought through. Indeed a BMW M3 and many small cars can emit more emissions than SUVs. But I suspect this is more of an eny tax, as in Europe SUVs are not that common and are considered "luxury", despite small cars shrinking to the point where there is not enough headroom on the backseat.
ossworkerrights··on Show HN: Angeldust – a fast and efficient video game
Would be interesting indeed!
ossworkerrights··on Show HN: Angeldust – a fast and efficient video game
Sounds good - keep up the good work!
ossworkerrights··on Show HN: Angeldust – a fast and efficient video game
While I would advise against open sourcing the core of the game, opening the client api may be a good idea - perhaps others can write clients for it, but there may be issuing around people making bots to cheat the game.
ossworkerrights··on Show HN: Angeldust – a fast and efficient video game
How long did it take you to reach 250k players, and has there been marketing involved?
ossworkerrights··on An immune molecule can sometimes influence the social behavior of mice: study
My comment is a pun, not a show of support for anti vaxx, not sure why am I getting down-votes.
ossworkerrights··on An immune molecule can sometimes influence the social behavior of mice: study
My thoughts exactly! That would be a bizarre turn of events.
ossworkerrights··on Google claims copyright on employee side projects
It is time to deprive large corporations of the privilege of using open source to generate profits based on people’s free work. It is high noon for saas restrictive open source licenses. Spread the wealth along small indie devs.
ossworkerrights··on Nebraska farmers vote overwhelmingly for Right to Repair
Would you trust a plumber entering your house? They might plant bugs. paranoia
ossworkerrights··on Nebraska farmers vote overwhelmingly for Right to Repair
Apple
ossworkerrights··on Some BBC election result stories were computer-generated
Content farm generators used to do something similar over 10 years ago.
ossworkerrights··on Ask HN: What's the current sentiment on JWT for stateless auth tokens?
Actually no, it’s an “in-memory data structure store, used as a database, cache and message broker.”.
ossworkerrights··on Ask HN: What's the current sentiment on JWT for stateless auth tokens?
Well not really. Storing session data in the db can hit your performance pretty bad. Storing them in mem is a better option.
ossworkerrights··on Ask HN: What's the current sentiment on JWT for stateless auth tokens?
Hmm never had an issue with in memory caching and scalability (except in the old days of memcache). One can send a unique and hard to guess pair of identifiers and drop the lb stickiness. anyway depends on the use case, but i feel like given the symptoms you describe there are a few other ways of doing it without jwt.
ossworkerrights··on Ask HN: What's the current sentiment on JWT for stateless auth tokens?
Why do you need a db call for api request when you can just cache session data?
ossworkerrights··on Offering software for snooping to governments is a booming business
A sad state of affairs to be honest.
← PreviousPage 2 of 5Next →