HNHacker News
TopNewBestAskShowJobs

rqs

1,036 karma · joined September 28, 2017

submissionscomments
rqs··on Go 2, here we come
One question: As far as my knowledge told me, anything (or most?) interface{} in Go will be put to heap instead of stack. Will generics change that?

I really want to utilize those 2~4K stack spaces for the routines.

rqs··on Tracking China's Muslim Gulag
One thing you don't realized is that, if you put Uighurs along side with Falun Gong, you're making Uighurs look bad.

And we are talking about Falun Gong here. I don't have enough information about Uighurs.

About Uighurs, two videos you might interested:

This one trying to erase regional discrimination (in Chinese): https://www.youtube.com/watch?v=8s4XP5qFzTc

This one explains "Why China is keeping a tight grip on Xinjiang": https://www.youtube.com/watch?v=yUg-w0tdyBs

I don't hold any point with either one of the two.

rqs··on Tracking China's Muslim Gulag
[flagged]
rqs··on Tracking China's Muslim Gulag
> Falun Gong is the blueprint for this

Let's don't bring them on the table. Just like you don't bring Peoples Temple or Branch Davidians or any other cult onto the table when you talking about such topic.

I actually knew some people who was practicing Falun Gong before the crack down (And some still practicing it after). If you want to paint a portrait of those people, just image an uneducated man/woman at age around 40~50, who probably encountered some misfortunes in their life and became vulnerable enough to take anything into their head without a thought, and act upon that thought.

They're those people who would also actually believed they can receive superpower from a tinfoil hat (Well, not actually a tinfoil hat, but guess what, they have upgraded version of that [0]), meditation, or, maybe, killing themselves/others.

Oh, also, do you know the "Eastern Lightning"[1]? Don't bring them as well.

[0] https://www.flickr.com/photos/undersound/23239355 [1] https://en.wikipedia.org/wiki/Eastern_Lightning#Zhaoyuan_McD...

rqs··on China Expands Research Funding, Luring U.S. Scientists and Students
Meanwhile in China, people are bashing the education system hard as well, saying it "Teaching to the test" (a Wikipedia term [0]), "Serving political purpose" and "Like a factory".

In my opinion, a successful education system is the one which can produce people who are capable of learn new knowledge my themselves, resolve problems by themselves and create new things by themselves.

So maybe, reading 800 Chinese words in a very young age is impressive, but there is more important things to do.

[0] https://en.wikipedia.org/wiki/Teaching_to_the_test

rqs··on Many free mobile VPN apps are based in China or have Chinese ownership
> Pretty clear sign that they quit the Chinese market for whatever reason

Well, I'm not very sure, but we had few crack downs on VPN selling recently in China, some people even received prison time plus fine.

It's not very safe to operate VPN company in China, so maybe the best way is to sell that hot potato to whatever who wants to take it. The only exception is probably "Game Accelerator"(s) which is a special type of VPN that only transports game traffic.

rqs··on China blacklists millions from booking flights as 'social credit' introduced
The thing is, when you ask somebody for their opinion, the most important thing you'll get out of it is not about the opinion itself, instead, it's about how and why the opinion been formed.

And most people build their opinion based on the information they're exposed to, probably including that imaginary women you made up for the comment. That's why controlling information is every government's wet dream, not just China, not just Russian, and actually, not just government.

So, the real question is not about who you asking (young women or men), it's about what's the information that women or men has received. Does she or he received all the information needed in order to make rational choice, or the information is just one sided?

BTW, In China, young women already been able to walk around most the city safely, even at night. You may take that into account.

rqs··on China blacklists millions from booking flights as 'social credit' introduced
> There was a young Chinese woman there, who felt safer.

Why wouldn't she?

If you've installed a nuclear bomb inside a person's home and tell that person the bomb will keep him safe, he will probably feel safer either. That is as long as you don't tell him about the fact that the detonator is controlled by a nasty monkey.

In China, you can only see the positive news about the system. Even when a journalist are trying to tell you the danger, on the surface the writing will eventually boil everything down to privacy protection, not the system.

So, don't be surprised.

rqs··on Still in love with Rust
> depends a bit on which in part of the ecosystem you work

This is also my experience. The feeling towards Rust is highly depends on the dependency of choice.

Rust itself is mostly very stable though. I've implemented few pure algorithms in Rust a little over two years ago, and it still compile and runs today without having to change a single letter.

Wish one day I can say the same thing to my other Rust projects :)

rqs··on An Analysis of the ProtonMail Cryptographic Architecture [pdf]
> Any E2EE service that has a webapp is susceptible to this

But I don't think everybody are making webapps to service data of their E2EE product, isn't it?

The key point is, if the webapp can be compromised by anybody who are in control of the front-end assets, then what's the point of the entire ProtonMail E2EE thing? Especially when you have other solutions like GPG which also is an open protocol?

rqs··on Elementary OS – Fast, open, privacy-respecting replacement for Windows and macOS
> People with little to no experience with computers. Guess what they were all fine.

I think the original comment was talking about ugly UI rather than "Linux works just fine".

The key point I believe was, if Linux came with better UX design like what Elementary OS did, then it will be "Good" instead of "Just fine".

It's about an upgrade, bring Linux to a better level, not "Linux UI looks ugly, it's bad and unusable".

rqs··on Singapore to test facial recognition on lampposts, stoking privacy fears
Time to bring up this educational video: https://youtu.be/JASUsVY5YJ8?t=280
rqs··on Fan death
> Never leave a bedroom window open in SE Asia, unless you love mosquito bites

A bit weird. How do you guys in the west repellent bugs during summer?

In China, we use window mesh + mosquito coil + vape mat, work like magic most of the time.

rqs··on What I Learned From Making Hot Sauce at Scale in China
Well, our city (far smaller than Shanghai) has installed few devices to monitoring traffic jam many years ago, probably because nobody actually wants to take stand beside a road for a whole day as a carrier.

It's very interesting point, but not just because abundant and cheap I think.

I was discuss a potential business model with my boss years ago for fun. It's about a breakfast deliver service. My point was, if we have enough data, then we can optimize the process so we can deliver all the breakfasts in the time window (to make sure people can get their breakfasts once they wake up in the morning, and the food itself is still in the "best by" time when they enjoying it)

My boss ask me back "Why would you think those delivery staffs cannot figure it out by themselves?"

Sometime we just forgot how flexible and intelligence human labors can be, and that level of flexible and intelligence is something current automation still can't bring to the real world.

rqs··on VW CEO says they’ll have ‘EVs as good as Tesla’s for half the price by 2020’
Since we're here already ... Maybe also no smartphone door unlocking?

I don't get it, why everybody start to build car like a smartphone now days?

rqs··on Rust can be difficult to learn and frustrating, but it's also very exciting
> you could define the equivalent of Go error in Rust as a trait and box it (ie. a trait object).

I know this basically how Go's error handling works (Put error data on heap and pass the reference), but I'm not fan of it (the put data on heap part of it) too :(

I will try out the error-chain, thank you for reminding me that.

rqs··on Rust can be difficult to learn and frustrating, but it's also very exciting
I know. But for me personally, the `io::Reader` and `io::Writer` is still not comfortable enough. Mainly because it's return values, `io::Error` to be specific. Because I found that in many of my cases, predefined `io::ErrorKind` is not enough for me, this results my abuse of `io::ErrorKind::Other`.

In Go, `error` is an interface that can later be asserted, so I can return any `error` then deal with them as late as I need.

This gives me ability to write some complex `io.Reader` and `io.Writer`. For example, an `io.Reader` that can Decode data stream, and returns both CodecError and IoError when it encountered any.

In Rust, if I want to write a similar thing, a HPACK decoder that returns both `io::Error` and `HPACK::DecodeError` for example, I need come up with another `Result` type that wraps both errors. This can sometime be tiring and makes the code inflexible (As one simple change to the `Result` may effect the entire call chain up and down).

BUT ... Maybe it's Go's fault, it treats me too well, make me want something that I cannot have for free (performance cost) else where.

rqs··on Rust can be difficult to learn and frustrating, but it's also very exciting
I think the learning curve thing is depends on what's the language that you are compare it with.

C++ for example, is a hard language, but the learning curve is ... progressive (rise bit by bit).

Rust on the other hand, is like climbing a cliff: You're exposed to everything as soon as you start learning. That's all the Rust things (memory safety model and borrow etc) plus the rest of the knowledge that you need to learn when you normally learning a language (std library & stuff).

Luckily though, Rust did many thing in later years made it a little bit easier to use and learn. Like the rewritten books and manual and in my opinion most importantly few twists to the language.

My biggest (maybe nothing in the big picture) complain about Rust now is maybe it's too community driven, which can sometime cause minor fragmentation.

As a personal developer, if I've already followed every best practice writing my code, then to be honest, after the code is finished, I'm not willing to rewrite my code just to make it dated or work again (I mean, I'll pay my time to do it, but my hate meter will rise). Currently, Rust cannot fully deliver that.

I think Rust need strong leaders to layout a clear and stable plan, so more things can be standardized across it's ecosystem (Somewhat like what Go did, for example, io.Reader && io.Writer is life changing for me). In that way I can keep my hate meter at a safe level.

rqs··on Encrypted SNI Comes to Firefox Nightly
Of course. But what if DNS can also be encrypted?
rqs··on Encrypted SNI Comes to Firefox Nightly
> So what's the plan for when IPv6 gains more adoption and we don't need SNI as much since every site can have its own public IP address

Say sometimes I love to visit a very private website for my personal pleasure when I'm alone at night.

Without eSNI, when I type-in pornhub.com and hit enter, my buddy Bob who working for the ISP immediately knows and be very sure that I'm trying to accessing none other than pornhub.com. And then, with great confident, he greedily calling me for a live chat.

Bob is a ... special person. He might tell my mom about the pleasure thing, but not just that, he also secretly tracks my pleasure activities only to figure out the pattern using some sort of weird thing called machine learning, so he can show up in front of my door at the exact right time to share the pleasure with me.

I don't like that.

With eSNI, Bob only knows that I'm accessing 216.18.168.0. But when he tries to access the 216.18.168.0:80, he be greeted by a 403 error which says "Invalid Host".

A website may have many IP addresses, and an IP address can serve many websites. Because of that, now Bob can only know MAYBE I'm watching my little pleasure, oh wait, or maybe it's imworkingverylateatnight.com? He just can't be sure now.

rqs··on Google’s CEO Says Tests of Censored Chinese Search Engine Turned Out Great
> A consored Google would do so much good by bringing proper competition to the market.

China is experiencing some weird shit right now. Before we can sort things out by ourselves, I don't think a new character can change the status quo magically.

Also, censorship is just one of the problems.

I use foreign service mainly because it's harder for CCP government to acquire my data, so I can fully enjoy my constitutional rights like freedom of speech outside China's Internet.

If Google operates the China branch completely independent of it's home company (No data sharing in between), then I will probably fine with it. But I DON'T think that would be the case here.

So in the worst case, Google China may one day became a tool that can monitor me even I'm using foreign services. I don't like that at all.

rqs··on Who paid 99¢?
"Paid".

"Will Pay" is a completely different business model here, a riskier one.

rqs··on Every Byte of a TLS Connection Explained and Reproduced
Explained in detail, also the web page is well-built.

Thank you.

rqs··on FAA Moves Toward Treating Drones and Planes as Equals
What an accuracy hit.

Few years ago I was watching across some YouTube video about drones. In one video, some guy was flying a hacked DJI drone to workaround the limitation so just he can fly it higher.

I of course concerned about it because the altitude he have reached is well above the limit set by FAA. So I wrote a comment to ask about hes acknowledgement on those FAA rules. And what's followed was a debate that lasted almost a week.

Today, you can still found that kind of videos on YouTube where people are flying hacked drones to "Break/Test the limits".

I hope somebody like FAA can do something to prevent people from doing stupid things (Hack their drone so it can fly higher etc), and make the sky safer.

rqs··on Ask HN: I'm going to China. What privacy precautions can/should I take?
> It was hard for me to get vendors to accept paper money.

In this case, by law (Law of the People's Republic of China on Commercial Banks to be specific), refuse to accept RMB as domestic commercial payment in China is illegal.

It won't help you that much (unless you want to sue them), but you still have upper hand there to ask them to do you some favor.

rqs··on Ask HN: I'm going to China. What privacy precautions can/should I take?
Install Google Translate was really a good tip. And Maybe some paper strips with translated sentences printed on it could also be helpful.

And don't forget to download a map app, not only it can prevent taxi scam to a degree, also it can help you ... well, navigate. I could recommend AutoNavi[0], but I'm not sure about whether or not it had English version.

[0] https://play.google.com/store/apps/details?id=com.autonavi.m...

rqs··on 2018 Desktop Linux Platform Issues
Overall, all of them are fine desktop environments.

But the thing is, if you're making a large application, for Gnome for example, then you can't by default be confident that your application can work very well on other desktop environments like KDE or XFCE.

I think this is what the speaker have meant: Linux Desktops moves many responsibilities on to you (You need to test your app against for each desktop environment for example). And sometime, that many responsibilities can be troublesome (burden, to say the least).

rqs··on UK cyber security agency backs Apple, Amazon China hack denials
Or maybe just those manufacturers doing their online shopping and accidentally bought those kind of comprised chips.

Yes, you can actually buy the similar looking chip on Taobao.com by searching HHM1523C1[0] or HHM1526[1]. Some vendors even claims the chips they're selling are "Imported, 100% legit".

And, of course there can be another interpretation: We (China) bugged your server, because you (the U.S.) bugged ours first.

The water is so muddy right now, maybe wait for more information?

[0] https://s.taobao.com/search?q=HHM1523C1

[1] https://s.taobao.com/search?q=HHM1526

rqs··on Don’t sign a CLA
> the title and the tone implies that you as a contributor should be a FOSS maximalist.

But what if somebody was changed the license from BSD to proprietary after you've contributed to the project? Would you still be happy about it then?

I think the idea was: I have my code contributed under BSD, so you cannot re-license my code without clearance from me.

rqs··on Bloomberg’s chip story reveals murky world of national security reporting
In this case, maybe using a software or firmware virus could be a better way? Easy to install, easy to remove, leaves no evidence if be careful.

This got me thinking, why plant a chip? I mean, it's hard to make, and will almost certainly be caught.

← PreviousPage 5 of 12Next →