Hacker News Reader

reidracon “Computer security 80% solved if we deprecate technology shown in this graphic”

You are supposed to run software packaged by your distribution, and that's trusted.

The curl | bash is bad practice and shouldn't be used.

You have way more control and security using a Linux distribution. The objectives of that and Windows are completely different, and that affects user's security.

reidracon NixOS and my descent into insanity

My Guix experience wasn't great. IMHO the people that love it will give you a non realistic view of it, so I recommend you listening to those that didn't like it that much but still like it.

I installed it on Debian, and there's no uninstall. Sure, at that point I was already frustrated, but IMHO that's just a sample. It wasn't for me.

reidracon LXD is now under Canonical

I did the same by the time Jessie was released. I realised the XFCE version was good enough, and I could use a few tools from the vendor binaries plus a couple of things I could compile.

Yes, it is more work, but since then I've been upgrading Debian and it just gets better!

reidracon Ask HN: Could you share your personal blog here?

https://www.usebox.net/jjm/blog/

I wrote a blog before this one for 19 years and I closed it because the archive of posts had too much weight and limited me on what I could write. Or that I thought. Turns out I write pretty much the same now.

reidracon The best place to drink is the emptiest bar in the city

Avoid karaoke night (really, unless you're certain age and want to sing), and generally sport pubs.

Good traditiona oubsl, even the family friendly, are usually quiet.

reidracon Millions of GitHub repos likely vulnerable to RepoJacking, researchers say

In fact, that's how you delete your old tweets: rename old account to a new username, register the old username, delete the renamed account.

https://help.twitter.com/en/using-twitter/delete-tweets

See "How to delete multiple Tweets".

As bad as it sounds.

reidracon Red Hat cutting back RHEL source availability

When did that happen in your opinion?

It was like this at least 20 years ago.

reidracon Red Hat cutting back RHEL source availability

That's spot on.

That was what I meant initially: in HN there's a strong opinion against copyleft, not necessarily free software.

reidracon Red Hat cutting back RHEL source availability

Well, go and check: https://www.gnu.org/licenses/license-list.html

Then see how many of those are OSI approved licences (thus open source).

reidracon Red Hat cutting back RHEL source availability

Besides it isn't true they don't contribute. As you say, they are filling the gap left by CentOS, and that helps sustaining an ecosystem that benefits RHEL.

reidracon Red Hat cutting back RHEL source availability

I think you mean anti-copyleft.

Free Software and Open Source are essentially the same, despite the philosophical differences. The issue here is against the copyleft (GPL and AGPL).

reidracon John Carmack on shorter work weeks (2016)

I experience it exactly like you.

I need some time to recover to get my brain functioning again. When I finish my 8 to 4 work day of average intensity (as in not exceptionally stressful or busy), WFH I'm with my kids, there are a lot of things I can't do until I have some rest. You mention hangover, perhaps. Is more like waking up after only sleeping 4 hours.

When the kids are on bed and the house jobs are done, say 9pm I can have a shower and I may be 80% to do any intellectual activity. Sometimes, as you say, may be watching a series or something like that; definitely not rockets.

reidracon Removing PGP from PyPI

The package index only hosts the packages, but doesn't release them. The dev releasing the package is who signs it.

Without an easy way to verify the keys, the signatures are useless. Which is why PiPy is removing the GPG keys all together.

reidracon Removing PGP from PyPI

I have been thinking about this in the context of Java libraries (really using Scala, but bear with me).

If the repo requires a GPG signature, they could also ask for the public key of the developer making the releases (e.g. when they make the account), and they could sign it with their key at that point.

Then make available the package, the signature, and the signed public key. Then I only need to trust the repo's key (in this case PyPi).

Does this make any sense?

reidracon GitHub Copilot emits GPL code

> Codeium doesn’t regurgitate non-permissive code

What is that? The problem is when GH Copilot it emits the code without the licence, not the licence.

reidracon How to make good small games

My experience has been quite the opposite: after a while working on a game I think "is this any fun?", and turns out people likes them (even if sometimes I don't really get it).

reidracon AWS Announces Open Source Mountpoint for Amazon S3

I experimented with similar ideas 11 years ago with the OpenStack counterpart of S3, and basically an object storage is not a real filesystem. You can get away with a FTP/SFTP interface (for example), but that's it. Everybody wants a cheap object storage, but not the fact that what you deal with is "objects".

I wrote a NBD server to proxy to OpenStack Object Storage: https://github.com/reidrac/swift-nbd-server -- and it was fun, but not that useful.

reidracon Are you ok?

I miss going fishing, I should go back to it. Thank you for sharing this!

reidracon Replacing my MacBook Air M1 with a ThinkPad T480

I got a refurbished ThinkPad T470 for £200 and it is like new. May need to add more RAM (came with 8GB), but that's it.

I don't really need to upgrade my hw often, only when it breaks and it is clear it was so outdated is not worth repairing it. OK, it all depends on your requirements, but I don't see myself buying a new laptop ever again. Both because price and cost to the environment.

reidracon Pip and cargo are not the same

They included virtual envs in Python 3, perhaps they should have done the same with some of the packaging solutions.

reidracon I've just started mixing shaders with Pygame

pygame isn't that slow if you use pygame 2 that depends on SDL2 (2D hardware acceleration, yay!) or go with OpenGL directly.

I used to do a lot of amateur gamedev with Python (pygame and pyglet). If most of the work happens on the GPU or external libraries, it is usually OK if you aren't doing anything stupid.

reidracon Pony Programming Language

There are a few, but you are right that they could be more accessible: https://github.com/ponylang/ponyc/tree/main/examples

(I had the same problem)

reidracon Lichess on Scala3 – Help needed

I haven't looked at the graphs, but they updated netty to 4.1.85.Final on 2022-11-10.

https://netty.io/news/2022/11/09/4-1-85-Final.html mentions that a potential memory leak was fixed. In includes a debug log warning of the leak; but enabling debug logging may be a no-no.

Perhaps could be worth reverting that and see if there's any change. Sounds cheap and harmless.

reidracon Show HN: Whole Git repo was made with ChatGPT

> The language doesn't completely run, but it was just a two-hour experiment.

Do you mean?

reidracon We're Drowning

I disagree. I work with Scala and I can see myself in that post 100%.

If things compile and your test pass you might be OK (sure), but the part where "those ecosystems tend to have a lot less need for new versions to fix things or change behaviour in the first place" is not there, unfortunately. If you are using Scala Steward, you'll have a good number of PRs almost every week.

reidracon Firefox Private Browsing mode upgrade

When I read this in the what's new page:

> Also, private windows have been redesigned to increase the feeling of privacy.

What does it mean? It doesn't make me feel very confident that Mozilla know what are they doing any more.

reidracon Canonical shows ads in the Ubuntu CLI

> Ubuntu Pro APT integration is a bit much

https://bugs.launchpad.net/ubuntu/+source/ubuntu-advantage-t...

reidracon “This removes a.out support globally”

He can still run those on a kernel that has a.out support; and he can run that on a VM instead of using dos box or any of the other more complicated alternatives.

I mean, dropping a.out support is not a retroactive change.

reidracon Neovim 0.8 Released

I have been using vim since the late 90s, although the experience back then was much different. I don't think I really used plugins until around 2010 or so, and I was more into gvim until I moved to tmux + vim combo around 2016. So my nvim setup is not too fancy (sometimes I try plugins, if in two weeks I don't use them -or I don't even remember how they work-, I uninstall them).

Moved to neovim because it felt faster than vim 7.x and it was fresh and exciting (couldn't believe the progress the project was making in a short period of time, compared with vim). Then I stayed because of the native LSP support and nvim-metals (among others).

Things work, to the point that I'm not really using the editor but editing (if that makes sense). It is completely invisible to me. It is my editor.

reidracon MiSTer FPGA: Recreate classic computers using modern hardware

> real hardware is usually still available and not too expensive

I all depends. There's a "retro" bubble currently and people ask silly money for the original hardware. Then capacitors burst, original hardware needs maintenance, and is not something everybody can do.

The MISTer provides an experience that gets very close to the original hardware, without all those nuances.