HNHacker News
TopNewBestAskShowJobs

slooonz

416 karma · joined April 30, 2018

submissionscomments
slooonz··on The technical merits of Wayland are mostly irrelevant
> There is no way to specify how a client would like this upscaling to be done

Isn’t it one of the points of content type hint ? (https://wayland.app/protocols/content-type-v1)

slooonz··on Simple Unix Chat
By that argument, you should count the codebase of the whole browser against slack.
slooonz··on Supreme Court Opinion on Student Loan Forgiveness [pdf]
> The court is only supposed to decide things when someone has been injured. Who was injured in this case?

It’s literally the first point held. "Here, as the Government concedes, the Secretary’s plan would cost MOHELA, a nonprofit government corporation created by Missouri to participate in the student loan market, an estimated $44 million a year in fees".

slooonz··on French Gov Wants to Inject Domain Blocking Lists Directly into Web Browsers
> To me, it's clear that what's illegal are private genetic tests.

Which is even worse ? Why the hell I have no right to know my own DNA ?

slooonz··on French Gov Wants to Inject Domain Blocking Lists Directly into Web Browsers
Or just sci-hub.
slooonz··on Implementing a Personal Transportation Hierarchy
Why are taxis so high in this hierarchy ? It seems to me they should be barely different from single occupancy vehicles.
slooonz··on Redditor creates working anime QR codes using Stable Diffusion
For the love of sanity, please don’t. In real life, I struggle enough to scan normal QR codes when the redundancy of error correction is here to… you know… correct errors and help the scanning process.
slooonz··on Why did Usenet fail?
I’d add barriers of entry. Not high, but way higher that anything that is publicly readable on the internet and therefore indexed on Google.

I can discover interesting subreddits by pure chance by following a google search on a question I have. Or following a link on a blog

There’s no chance of that happening on Usenet. For most users, search/discovery is a web thing (web search, links) and there’s no link from the web to usenet. Therefore if you don't know anything interesting on usenet you can't easily discover it. Any interesting post/discussion cannot be simply linked on a tweet (or, for that matters, on IRC). Usenet is completely insular. A web forum is not.

Were I a Usenet enthusiast, that would be my 1st priority. Public archives of most important hierarchies (comp.* for example), indexed on Google, easily linkable.

slooonz··on Show HN: Crack this cipher and get $100
You are not accepting DMs from people you don't follow.
slooonz··on TypeScript 5.0
How is it wrong ?
slooonz··on So what’s next (personal news from developer of popular CoreJS polyfill)
Important (IMO) reminder that StackAid exists and has been made just to solve this kind of problems.

(I’m not affiliated with them)

slooonz··on Show HN: Shell Of A New Machine: Quickly configure new environments
> You could use Ansible, or Puppet, or Terraform. But then you need to have the tool installed on the host

Ansible only needs Python to be installed on the host (and SSH access), I don’t think it’s an unreasonable requirement.

slooonz··on Compilers and IRs: LLVM IR, SPIR-V, and MLIR
Shower thought: we need a SQLIR, to be able to communicate with databases on a lower level that SQL. Many ORMs would benefit for that.
slooonz··on Next.js 13
I find the data fetching example extremely confusing…

1. Where does this "use" comes from ? It is not present in the official React API reference : https://reactjs.org/docs/react-api.html

2. It says that the value is not serialized, but what if Page is rendered client side and I want getData to always be executed server side (for example, it may contains secret API key, or make a database call) ?

3. getData is async, so what happens to name if the promise is not yet resolved ?

slooonz··on Security through obscurity is underrated (2020)
Using a random port for SSH (or even "better", port knocking) is a "clever trick", until you forget the one you used for that server that quietly runs on which you log once every two years. Then it can range from minor annoyance to major PITA.

Security by obfuscation has the potential to confuse some (mostly dumb) attackers, but it has also the potential to confuse your future self, for VERY minor benefits (since everyone agrees but most of your security should not come from security-through obfuscation anyway).

Hence, avoid.

slooonz··on Jessica Wade made more than 1k Wikipedia bios for unknown women scientists
So, the flagship of the article is the wikipedia entry for "Clarice Phelps", notably for "her work on a team that discovered a new periodic-table element at the Oak Ridge National Laboratory". The article (heavily) implies that Clarice Phleps not having a wikipedia entry is her "not having her dues" because she’s a woman.

However, if we look at the authors of the original article, there is no mention of her : https://www.semanticscholar.org/paper/Synthesis-of-a-new-ele.... Of the 30 authors of the article, only two have a wikipedia entry (https://en.wikipedia.org/wiki/Yuri_Oganessian and https://en.wikipedia.org/wiki/Joseph_H._Hamilton).

slooonz··on Stop using utcnow and utcfromtimestamp
> I don't want my equality operator doing timezone conversions

Nobody argues for that. Especially since we’re comparing timestamps (floats), not datetimes (objects). Let’s go line by line :

> ts = 1571595618.0

This is 2019-10-20 18:20:18.000 UTC

> x = datetime.utcfromtimestamp(ts)

I would therefore expect x to be 2019-10-20 18:20:18.000 UTC

> x_ts = x.timestamp()

I would therefore expect x_ts to be 1571595618.0. Which is surprisingly not.

Nowhere the equality operator was involved in the surprise.

slooonz··on Why is it so hard to write a scaffolding tool? (2019)
Because scaffolding by itself is an anti-pattern and you shouldn’t do it. The proper way to factor code is libraries/packages, not automated copy pasta.
slooonz··on When did POP and IMAP become a “legacy protocol?”
HTTPs not completely blinding traffic analyzer doesn’t make the partial blinding useless.
slooonz··on Fabrice Bellard: Portrait of a Super-Productive Programmer (2011)
When anyone tells me that "there’s no such thing as a 10x programmer", he’s my go-to example.
slooonz··on Google Suspends Engineer Who Claimed Its AI System Is a Person
Can you prove you to us have one ?
slooonz··on Ask HN: Why should I trust password managers?
> They have above average security, but unlike a typical website they can’t just store a one-way hash of passwords that remains secure even when stolen, they have to store the actual password

No, they don’t store directly the actual password, they store it encrypted by a encryption key derived from your master password. A leak of the database won’t reveal any password, as long as your master password stays secure (aka is not "hunter3")

slooonz··on Building for the 99% Developers
How do you backup a 500 GiB sqlite database ?
slooonz··on Terminal support for emoji
Unicode and utf-8 are fine. The one at fault is the one who thought that Unicode was a good place to put things like "GIANT POOP WITH FLIES".
slooonz··on Professional maintainers: a wake-up call
> - receiving donations wouldn't be fair to any current or past contributors that made the projects what it is

Hard disagree on that. Maintaining (bug triage, pull requests review, bug fixes…) is actually the hard work and the part that deserve the reward IMO.

When I contribute to an open source software to fix a bug/add a feature, my reward is that the software I use has an annoying bug gone/the feature I want. I don’t need any reward. On the other hand, the thankless maintainer deserve it.

slooonz··on “Open source” is broken
Don’t you see that one big issue, that I never see addressed in this kind of discussion, is the enormous tension between true observation 1 :

> Consider something as basic as running an SSH server on the Linux kernel. In the mix you would have at least 10 vendors (assuming a minimal Alpine Linux system in its default configuration), which means that there are at least 10 separate organizations that still have bills to pay with actual money dollars regardless of the number of users of the software they are giving away for free.

And your judgment 2 ? :

> If log4j2 is responsible for your company's success, you have a moral obligation to donate to the person who creates this library thanklessly.

Let’s say that you convince me of 2. I have 603 packages on my production server, with no obvious way to know how much distinct maintainers this is, or how they accept funding. One node application on it developed by my company has 991 dependencies, 129 of those "are looking for funding", according to npm.

How do I even start to fulfill that responsibility in a fair way ? Just picking the 5 (or, hell, even 10) most "visible" or "obvious" projects would be a significant burden, and I don’t see how prioritizing by visibility is fair or fixes anything about "that obscure but important library maintained by that guy in nebraska".

slooonz··on Wrap a website with a WebExtension
For the usecase of that screenshot, I would just have used https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/Web...
slooonz··on California tries to close the gap in math, but sets off a backlash
Please explain me how you can have maximum likelihood estimator or cumulative distribution function without calculus.
slooonz··on “You don't need this overengineered goo for your project.”
And yet the main point stand : they don't need K8s to manage this application running on 23 servers.
slooonz··on Human Rights Are Not a Bug
But "Human Rights" are not intended to be "nice things that we could and should have in the current American society". They are intended to be the Universal Human Rights, valid everywhere and all the times. They logically pre-exist before any government, because they are the moral foundation on which you are entitled to resist/overthrow by force a government that violate the Human Rights of his citizens. If you say for example that free access to education is an Human Right and your government must provide it, you are not merely stating "free access to education is very important, and is a deal breaker when it comes to election". It’s saying that should your government fail to provide free education, that is a casus belli between the government and the citizens, and that you have the right and the duty of insurrection to fix the situation as soon as possible.

Human Rights are a kind of schelling points where we agree that "those roles are so Universal that as soon as we recognize a violation of them, we instantly recognize who is the Bad Guy (the one who is violating them) and who is the Good Guy and (the one who is denied his basic human rights) and EVERYTHING GOES to fix the situation". If you have to put a bullet in the head of the Bad Guy, so be it. If you say that "Housing is a Human Right", you are instantly obligated to donate all of your disposable income as soon as you encounter one homeless. If you don’t, well, any bystander is justified in taking it from you, by force if necessary.

By putting everything that sounds nice in "Human Rights", you cheapen the term. Let’s say that in 20 years Human Rights really means exactly that : housing, basic income, internet access, and so on. In the mind of everyone, Human Right violation is no big deal, like someone not having internet access. Then how do you communicate the horrors of innocent citizens getting arrested, tortured and murdered ? Are you really going to put those two realities in the same term, "Human Rights Violation" ?

← PreviousPage 3 of 5Next →