HNHacker News
TopNewBestAskShowJobs

slovenlyrobot

822 karma · joined August 15, 2019

submissionscomments
slovenlyrobot··on Covid-19: death rate is 0.66% and increases with age, study estimates
If you click into the per-country view on Worldometers you can see their sources. For example the current numbers for USA came from nyc.gov.
slovenlyrobot··on Zoom still claims ability to “secure a meeting with end-to-end encryption”
This could have been true except probably half of HN have an Android phone in their pocket. So this, like with Android and Google Play Services, is a case study in perception management. Suddenly the perception of Zoom seems to be forced in a particular direction.

My paranoid 4 glasses of wine self can believe nothing other than money being involved.

slovenlyrobot··on Zoom still claims ability to “secure a meeting with end-to-end encryption”
Entirely shoot from the hip comment, but at this point I feel it's warranted..

What is with all the Zoom hate? The company have been around for a decade, enjoyed relatively mediocre success until the outbreak of Covid, and suddenly apparently since they're experiencing huge demand and press coverage, every man and his dog is finding reasons to write a blog post complaining about them.

I've read some article splitting hairs over the nuances of "end to end encryption" and how Zoom is so horrible, evil and wrong because they, like almost every telecommunication provider under the sun, can intercept your calls. What makes Zoom so special?

What's driving all this hate? Because it's a far more interesting question than what technical flaws Zoom, or any other product in this category, almost certainly suffer from.

Has someone done any security analysis of Houseparty? It's experienced surge growth in the same period. But in the time I've seen maybe 20 Zoom-hate articles on HN I haven't seen a single mention of Houseparty. What about Google Hangouts: is it "end"-to-"end" "encrypted"? What about its recording feature? Where are the articles? Where is all the hate?

Why?

slovenlyrobot··on What If C++ Abandoned Backward Compatibility?
I mistakenly thought you wanted clarity on my reasoning, instead it seems I've been made a fool of by providing an opportunity for you to argue a position I already understood and couldn't care less about. It's funny, this is also pretty much the reason I stopped relying on Python.

You're welcome to absorb all the externalized costs your heart desires, but in future please consider reviewing HN's rules before bandying attacks like "smug" and "superior".

slovenlyrobot··on What If C++ Abandoned Backward Compatibility?
There's really not much to it, but if it's a foreign concept it may require a kind of conceptual leap. Essentially, this code worked perfectly well, and suddenly it no longer worked. From your perspective, as you quite effortlessly put it, this code is broken. For others elsewhere in more conservative parts of the world, it was not my code that broke, but the surrounding ecosystem.

There is a fabulously unending depth to explore in the chasm lying between these opposing world views. It would be more than possible to write a book on the topic and fail to cover it all, however here are some of the most important aspects, from my perspective at least:

* given a perfectly functional tool relied on heavily by its user to perform their job, and given that tool suddenly decides to change shape such that it no longer fits the user's hand without retraining, nor fits with the remainder of the user's toolset, including custom tools the user has invested in producing, the continued utility of the no-longer-functioning tool is called into question, along with a deserved reappraisal of the tool's applicability in the context of the user's original intended problem domain.

* when the reason for its reshaping is to solve what are highly important problems from the perspective of the tool, but much less so from the perspective of the average user, and that user's application of the tool to real world problems, it can no longer be said that the tool is simply an implement that may be called and relied upon at any point in future -- the tool develops a chaotic life and importance all of its own, and may choose to reshape once again at any future moment (and indeed in this case it has). It is no longer a tool, but some sentient entity demanding unpredictable ongoing costs and attention paid all of its own.

* given a tool that promises to cease functioning 'correctly' at any future moment based on its own whim, preferences, industry fashions and styles, in an ecosystem where many similar such tools exist that explicitly promise not to cease functioning over the same time period, it is a fool's errand to pick the tool that promises to externalize additional costs on the user when alternatives exist that avoid any such cost.

* given tool designers who externalize almost frivolously minor technical costs on to every user, where each 'minor' change is amplified perhaps 10000 times over and directly translates into expensive engineering time, the question is easily raised whether the philosophy of the tool is appropriate for its advertised utility, and whether continued reliance on the tool makes business sense. In economic terms, what was the cost to productivity of the retraining and re-tooling of users compared to any alleged future productivity improvement?

* had I written these scripts in bash, C# or C++, they would not have broken even remotely to the same degree. Of course these are not some completely unevolving entities either, however all take the promise of forwards compatibility deadly seriously, and it is more than possible to find 10-20 year old programs written in C++ or bash that continue functioning to the present day. From my perspective, they are therefore excellent and highly dependable tools.

slovenlyrobot··on What If C++ Abandoned Backward Compatibility?
I recognize it may be difficult to understand, but this is a thread about backwards compatibility. Of course if I had any faith in the contemporary Python community, I would still be treating Python as a serious programming language and not be suggesting this is a difficult concept for someone to grasp.
slovenlyrobot··on What If C++ Abandoned Backward Compatibility?
I'm several years into the "upgrade" and find myself still swearing daily at the idiocy of the whole thing. Hundreds of scripts used maybe once a year, such as 'dups.py' I tried to run today, broken by a missing parenthesis, and a function moved around.

Utterly pointless and reputationally ruinous. I don't do serious work in Python any more

slovenlyrobot··on Fed reinstates multi-trillion dollar bailout program for Wall Street
Notably compared to the 2008 program, this time around they allow dealer banks to take out cash loans using... equities.. as collateral.

Dealer goes bust, market takes a huge hit, and the collateral value shrinks in correspondence to that hit. Madness. And still the markets have barely even sniffed at these announcements.

I expect before this is all over, POTUS will be making those daily coronavirus livestreams wearing fancy dress and cracking jokes just to keep people interested, because they've already spent every last drop of substance in the opening weeks of what promises to be a 6+ month journey.

slovenlyrobot··on 2020 Stock Market Crash
The dates are up to present day. Trump is due to give another press conference during market hours (3:30 today), watch the chaos he's wreaking on your friendly neighbourhood index

Expecting another rally followed by another crash

slovenlyrobot··on Covid-19 is now officially a pandemic, WHO says
> Here is evidence why it works: new cases/day decreasing dramatically since February: https://pbs.twimg.com/media/ESywcEKUwAADhcQ?format=png&name=....

Such an impressive single day drop, it's almost like they stopped testing people..

Meanwhile, I recommend relying on vastly more credible and less easily falsified sources to judge how China is recovering.

If you trust your eyes, https://www.youtube.com/watch?v=Tf-4zQADLS8

If you trust TomTom, https://www.tomtom.com/en_gb/traffic-index/wuhan-traffic

slovenlyrobot··on Overview of JPEG XT (2016)
You can think of them all as JPEG NB.. 'no browser support' ;)
slovenlyrobot··on Cryptocurrency Now Fully Legal in South Korea
Is it my imagination or was this the second country announcing the same in the past few days?
slovenlyrobot··on Highest French court reclassifies Uber drivers as employees
It eliminates the sizeable premium that previously attracted skilled labour to the instability of contracting. Without premium, why bother with the risk?

FWIW, prior to the recent change, I believe the situation had been the status quo since well into the 90s. I only started contracting circa 2007

slovenlyrobot··on Google Kubernetes Engine is introducing a cluster management fee on June 6
The most common thing I've heard is "blast radius reduction", i.e. the general public are not yet smart enough to run large shared infrastructures. That seems something that should be obviously true.

People had exactly the same experiences with Mesos and OpenStack, but k8s has decent tooling for turning up many clusters, so there is an easy workaround

slovenlyrobot··on Highest French court reclassifies Uber drivers as employees
They moved responsibility for determining whether a person is acting as an employee or a vendor in the vast majority of cases to the client, who must demonstrate a bunch of factors (I'm not a tax guy), not least

- the "vendor's" right to substitute himself for a replacement they subcontract (via employment or otherwise) to, irrespective of the client's deemed suitability of the chosen replacement

- the "vendor's" right to a significant level of autonomy, such as the ability to choose their working hours and lunches, and have high level control over their workflow

- the process of determination 'employee' vs 'vendor' must be significantly documented and can be challenged in retrospect for years after completion of the contract

Falling on the wrong side of a determination could leave the client liable for mandatory national insurance and pay-as-you-earn tax deductions. Now HMRC need not prosecute individual contractors, but instead clients (who may hire hundreds of contractors), making the enforcement process much more efficient for them, and much higher risk for the clients.

Net result for companies: building big overnight temporary teams out of contractors e.g. for 6-12 month projects are vastly less likely to do so, for fear that at some future date, the tax man could claw back a year's worth of tax for e.g. 20 contractors on the same project, with non-compliance and late payment penalties lumped on top (which themselves increase with respect to how long it took HMRC to get around to investigating you). It could be the case (hypothetically) that it would only require one member of a team to report the inability to substitute, or the presence of a line manager, for an entire project team's worth of tax to get a question mark placed next to it.

Net result for contractors: anyone who understands what's going on has either pivoted into becoming a permanent employee, avoiding the whole mess, since contracting is an expensive activity to begin with, and the premium has now been removed, or has banded with a few friends and attempted to set up "micro agencies". I've already encountered these, where substitution was advertised very early in conversation.

Net result for the market: it will be all but gone by April 2020.

slovenlyrobot··on Highest French court reclassifies Uber drivers as employees
The UK HMRC has just absolutely devastated the London contracting market due to a rule shakeup like this. Speaking as an ex-contractor and current hiring manager, the result has been disastrous.
slovenlyrobot··on Google Kubernetes Engine is introducing a cluster management fee on June 6
OVH also offer a free control plane, but their service is relatively beta so far.
slovenlyrobot··on My Covid-19 Story in Brooklyn
It appears to be pretty much all western governments. at least 3 countries in the middle east appear to be pretty transparent, including surprisingly, Iran

The level of censorship around unquestionably authentic videos coming out of China has left me in a deep state of shock

slovenlyrobot··on Peerd: an AWS VPC peering connection management tool
BitBucket still has users?

I assume at least one, the person who thought the last redesign was a good idea.

slovenlyrobot··on Coronavirus Forces World’s Largest Work-from-Home Experiment
> it's so rare for an application to ask you to open a port in your firewall, most users probably don't know how to do it.

in home settings this step has been automated for something like a decade or more. One of UPnP or NAT-PMP are available on basically every router

slovenlyrobot··on CacheOut: Leaking Data on Intel CPUs via Cache Evictions
> How do you know where the key is, and how are you guaranteed to be able to read enough of it before the "shifting sands" that is timing unpredictability and general noise in the system make you read something else?

I don't mean to understate the difficulty of the task, but I've also seen probably tens of repros by now that use intimate knowledge of e.g. the kernel page allocator and known post-boot state of e.g. a firmware image flashed on millions of devices to drastically cut down the search space

slovenlyrobot··on Show HN: Screenshot Hero - iPhone app to make all photos text searchable
You get what you pay for with Tesseract, don't judge OCR performance based on it. Would highly recommend checking out FineReader if you're on a supported platform. You can feed it crumpled beer receipts and the results are still decent
slovenlyrobot··on Google is finally killing off Chrome apps, which nobody really used
Speaking just for one, I haven't adopted a new Google consumer product in 7 years. I don't even click the links.

Pretty sure Reader had that effect on a large chunk of the technical base they previously relied heavily on.

slovenlyrobot··on Deploy your side-projects at scale for basically nothing – Google Cloud Run
A slight twist on this is a cheap, beefy colo box with nothing installed except something like k3s. This way you end up with all the YAML bureaucracy paid down in case that dreamy future with millions of users finally manifests
slovenlyrobot··on Bug #915: Please help
For some reason Docker is struggling to download the image right now (lots of interested parties? :), I just wanted to trap writes to the database file and look at what's actually getting written there.

Is there any possibility e.g. of an FD reuse issue in the code somewhere? It might even be possible to spot it with strace (although you need to start the container with the right caps to try that). An example where this can happen is programs closing 'stderr' fd 2, only for e.g. SQLite to open its database reusing fd 2, then some library code calls fprintf(stderr, ..) etc.

Would love a copy of the DB 'sometime before' and after to look at. There are tools around for inspecting SQLite databases on a page-by-page basis

slovenlyrobot··on Firefox 72.0
Posts like this always come up in these threads and they're really great, but it's worth adding that 'switching to Firefox' isn't something anyone actually has to do. Just start using it for one thing or another and any complete change will happen naturally if it makes any sense. It's a process that involves no effort and no risk

The only thing I use Chrome for is gaming, graphics perf is still miles better than Firefox. But I'd never trust Chrome with anything as much as a private URL or a username or password, for much the same reason I wouldn't stick my hand through the bars of a cage while visiting the zoo. Did they ever get around to fixing that opt-out password sync crap?

slovenlyrobot··on Windows 95 UI Design
There are more or less 2 major modes of managing a product relative to the current technological zeitgeist:

- expand to consume every new use case and buzzword that comes along. Survive in some form indefinitely, while the product becomes less concrete and meaningful over time. The product continues to succeed not because it is technically best in class any more, but sheer momentum of the large base of existing users it serves adequately

- remain focused to the original mission, delivering iterative improvements over time. Watch waves of loyal users get eaten away one after another by the tide of the current technological buzz

VB was mostly the second case, although it did have many cousins in the form of VBA and ASP. The original tool - VB itself, was only ever relevant to desktop computing. By the time it got merged into Visual Studio, I believe the RAD aspect of the tool had already mostly disappeared (although VS even today still offers some variety of the original experience!)

VB in its prime was a beautiful thing, and the experience AFAIK remains unmatched to this very day. I've pined for a "client/server VB" on many occasions.

slovenlyrobot··on Google Brass Set 2023 as Deadline to Beat Amazon, Microsoft in Cloud
I had a 4 roundtrip email thread with their support over a speech API bug. Eventually sent them a narrated step-by-step screencast, and the guy is finally like "oh, it's not supposed to work that way." (Yes, that's what I said in e-mail 1!)
slovenlyrobot··on Httpserver.h: Single header library for writing non-blocking HTTP servers in C
You've never in 28 years lost a single day to a compiler/linker flags/version mismatch and some random tool? I find that difficult to imagine. The horrifying alternative would be that such situations had been encountered but considered justifiable productive work
slovenlyrobot··on Httpserver.h: Single header library for writing non-blocking HTTP servers in C
"header only" is C-speak for "up and running in 15 seconds" more or less. One major concern with integrating a new dependency in C land is how much of a pain in the ass it makes your build, especially considering a large chunk of C projects do not target typical desktop environments. After the first time you lost a day trying to get some batshit custom build tool to emit the correct link flags for your exotic ARM board, "header only" carries a lot of weight.

On the intermixing of source and header files, it doesn't quite work the way you mentioned. It's not possible to just cut-paste any old public object definition into a header file without at least applying 'static' to it, and that only works where the object truly is private to each translation unit. It's not so easy e.g. to instantiate a global variable shared across the whole program this way, so 'header only' also implies 'almost certainly free of globals', which is a good sign of hygiene

edit: yikes, in this case, the implication is totally invalid

Page 1 of 3Next →