HNHacker News
TopNewBestAskShowJobs

rakoo

6,891 karma · joined November 13, 2013

Keybase stuff: [ my public key: https://keybase.io/rakoo; my proof: https://keybase.io/rakoo/sigs/Rfi9nwciity85sXDFaOPtFshlvLH_dCa6CfZayVJwAM ]
submissionscomments
rakoo··on One-Click RCE in Asus's Preinstalled Driver Software
According to the post above, if you earned enough reputation then you might be given that one-hour window for fixing before disclosing. The issue isn't so much about whether or not there should be a "private" window but how long it lasts, especially when the editor is a multi-billion company
rakoo··on "Night of the Living Dead" accidentally became public domain (2019)
I was talking about comments on a discussion board.
rakoo··on How "Night of the Living Dead" Accidentally Became Public Domain
elevates*

Language has meaning, and the puplic domain is a better situation for society. It is more interesting to say it ascended

rakoo··on "Night of the Living Dead" accidentally became public domain (2019)
Piracy is only bad if you want to earn money for each eye watching a minute of a movie. What we're doing right now is piracy, no one pays anyone anything for content

The question shouldn't be about how much it costs but why do things cost anything in the beginning, and if they have to what is the amount a specific piece should be retributed for its contribution to society minus how the non-zero cost impacts society.

AIs are being let off the hook with their massive copyright infringement but when a movie being open directly benefits everyone suddenly that's a problem.

rakoo··on What went wrong with wireless USB
Which is also way way easier to do than all the existing solutions: create a folder on the computer, add the computer to the phone, share the folder with the phone. Anything you want to share goes in the folder.
rakoo··on What went wrong with wireless USB
There's no formal standard, but I keep seeing this complaint from people who just haven't installed syncthing. At this point it's not inexistence but mere ignorance
rakoo··on What If We Could Rebuild Kafka from Scratch?
Alternatively, your write doesn't have to be fire-and-forget: downstream datastores can also write to kafka (this time fire-and-forget) and the initial client can wait for that event to acknowledge the initial write
rakoo··on The Candid Naivety of Geeks
Individual freedom doesn't exist in a vacuum, it is only effective if collective freedom is aimed and enforced. Having the freedom to live under a roof at the condition that you have enough money isn't something I'd consider actual freedom, and yet someone is free to restrict access to land and empty housing. That is plain stupid for a healthy society
rakoo··on Why is C the symbol for the speed of light? (2004)
I've always learned that "speed" is something that can be used to describe an object aka something with mass. When something without mass travels (basically information) you use "celerity", because it's not talking about the "same" thing
rakoo··on Please stop externalizing your costs directly into my face
Or stop defending individually and start attacking collectively ? This is an issue on scrapers side, they have to fix it

> make following robots.txt a legal requirement

Even better: make them publish their IP addresses so we know what to block, just like robocallers. Every scrape made from another IP is crime.

rakoo··on Delta Chat – Email Based PGP Encrypted Chat
You should really try the thing in question before commenting
rakoo··on Delta Chat – Email Based PGP Encrypted Chat
If your device is confiscated your entire history is in the clear. Forward secrecy doesn't magically solve problems, it's useful if you use ephemeral messages. In DC if there's a window of time where you want messages to not be traceable you just create a new email adress (which is just one click in DC thanks to chatmail) and delete that address after, that's it.
rakoo··on What is vibe coding? How creators are building software with no coding knowledge
The age of write-only programs is back, perl is relevant again
rakoo··on Building a BitTorrent client from the ground up in Go (2020)
If a peer doesn't respond quickly enough they can be disconnected from and marked as bad. Even if they had good intentions their latency might be too high and it's good to disconnect from them.

Check out this very nice link from a sibling comment: https://ncase.me/trust/. You'll see that an adversarial node either is too adversarial and will be cut off, or still gives just enough to not be cut off but if there are other, more cooperative nodes, they will be favored. Being adversarial doesn't work in the long run.

rakoo··on Building a BitTorrent client from the ground up in Go (2020)
If the torrent is already well-seeded it's ok, a 1567th seed won't make a difference so don't bother with them. It's the less seeded torrents where you can put some efforts and do something good.
rakoo··on Building a BitTorrent client from the ground up in Go (2020)
A single node distributing everything "because it's fast" isn't really the architecture that bittorrent is aiming for, and I don't think it's one we should be aiming for.

Try downloading any well distributed torrent and you'll see your bandwidth capacity automatically maxxed out. The gradual decision with an emerging selection of better sources always leads to that. Bittorrent doesn't really have an efficiency problem

rakoo··on Building a BitTorrent client from the ground up in Go (2020)
Sufficiently evolved torrent clients follow a tit-for-tat protocol:

- If you're nice with me I'll be nice with you

- If you're mean with me I'll be mean with you

This is the best answer for the Prisoner's dilemma (https://en.wikipedia.org/wiki/Prisoner's_dilemma) on the long run, ie a situation where peers don't trust each other but will both gain if both cooperate.

In bittorrent it's typically implemented as follows: peers start by sending a very minimal content, and see what the other replies. If they reply with low enough latency then slowly increase the amount of content that is sent and see if they reply with the same increased amount of content; if they do, continue up to the max of what the network link allows (in combination with other peers of course). If at some point the other peer doesn't send something equivalent (even though we know they have it and we asked for it) then that peer can be cut off for not being cooperative.

Situation is different for seeds of course, because they have everything and want nothing, but they can have a similar behaviour -- start sending a little, increase slowly over time

rakoo··on Multiple Russia-aligned threat actors actively targeting Signal Messenger
Take time with the people to do the boring stuff on their phone/computer:

- install [the thing]

- start it, show how it works

- search for yourself, start a convo, exchange messages

- add them to the group

IME the friction comes from having to do the first step, because it's really an annoyance no one cares about, so if you take it for yourself and do it they'll like that

rakoo··on When imperfect systems are good: Bluesky's lossy timelines
Ok I'm curious: since this strategy sacrifices consistency, has anyone thoughts about something that is not full fan-out on reads or on writes ?

Let's imagine something like this: instead of writing to every user's timeline, it is written once for each shard containing at least one follower. This caps the fan-out at write time to hundreds of shards. At read time, getting the content for a given users reads that hot slice and filters actual followers. It definitely has more load but

- the read is still colocated inside the shard, so latency remains low

- for mega-followers the page will not see older entries anyway

There are of course other considerations, but I'm curious about what the load for something like that would look like (and I don't have the data nor infrastructure to test it)

rakoo··on Perma.cc – Permanent Link Service
Irrelevant. The point is that there shouldn't be a single archive for anything, because then it has the longevity of the operators. Who can say whether Harvard or the IA will close its service first? Why choose ?
rakoo··on Promising results from DeepSeek R1 for code
Ok but you can say the sace thing about deepseek: maybe it says what it says because of the training data
rakoo··on Show HN: An SSH based utility to transfer pipes across machines – beam
This is for cases where the server in the middle can't ssh into the target server
rakoo··on Are PC hardware companies driving technology into restricted closed ecosystems?
The whole point of capitalism is for a minority with the means to profit off of the majority without the means. It doesn't care about the quality of products as long sa they make money. Since owning all the means of production means owning the power, capitalism will never self-regulate: it doesn't have the interest of the majority in mind

"Capitalism properly managed" isn't capitalism anymore, so if that's what we want (and I agree with you) then let's use proper terminology. Workers-owned coops, democratically-chosen regulations, communities governed by and building for themselves,federating between each other, the stuff

rakoo··on Are PC hardware companies driving technology into restricted closed ecosystems?
Capitalism.

We should call it out loud and clear where ever we see it.

Don't buy from for-profit entities, or soon there will be no non-for-profit entities.

rakoo··on Ruby 3.4.0
And some will say the exact opposite: contrary to what would seem obvious, code is primarily meant to be read by humans, then written by humans. Because you'll spend way more time unfucking code than actually spitting it.
rakoo··on Feed readers which don't take "no" for an answer
Surely there's a step between self-hosting on your home computer and colocating a server you buy

Surely a $15 per year vm would be enough to receive a few thousands POSTs per day (https://tinykvm.com/), or if that's not enough, paying less than $5 per month for a VPS is still cheap

Surely transposing a binary hosted on vendor A to vendor B is as minuscule in involved labor as configuring a webhook

I'm not trying to diss on your own reader which is an awesome thing to do, I'm just sad that resorting to a fully proprietary architecture is an automatism when considering a protocol that can't be more open than RSS

rakoo··on Feed readers which don't take "no" for an answer
Aws lambdas and sqs are not
rakoo··on Feed readers which don't take "no" for an answer
That's why websub (formerly pubsubhubbub) was created and should be the proper solution, not a proprietary middleware
rakoo··on Why we use our own hardware
> You have someone else to point the SOC2/HIPAA/etc auditors at.

I would assume you still need to point auditors to your software in any case

rakoo··on Show HN: Artemis, a Calm Web Reader
sfeed (https://codemadness.org/sfeed-simple-feed-parser.html) has basic infrastructure to do that
← PreviousPage 2 of 34Next →