HNHacker News
TopNewBestAskShowJobs

smorgusofborg

439 karma · joined July 26, 2021

submissionscomments
smorgusofborg··on Retrospective and technical details on the recent Firefox outage
If I have not understood the post then it is probably their communication style.

They lay out a bunch of things to fix about a system that could bring down your browser. What if that system that communication with Google about GCP messed up for them isn't even the IPs you are contacting during unrest in Khazakhstan or an election in Uganda? What if it is a semi-intentionally confused transparent proxy?

Testing a few more things that a friendly proxy may do as it improves your connection is hardly the same as assuming the worst about your network in proper paranoia mode.

smorgusofborg··on Retrospective and technical details on the recent Firefox outage
I was also disappointed for these reasons but couldn't have stated it this well. I also find it alarming in this age of citizen hostile countries blocking/rerouting Internet and J-curve countries having intentional calamities to think that everyone who uses Firefox might hit bizarre technical failure contacting unnecessary centralized servers like this as a first barrier to get past before following common DNS setting instructions to get to whatever local networking people are assembling.

(That's a lot more graffiti than "8.8.8.8".)

smorgusofborg··on I reversed a Node.js malware and found the author
> it seems like you’ve got irrefutable proof.

Or is that irrefutable proof of who was one of their victims?

smorgusofborg··on I reversed a Node.js malware and found the author
I didn't really get that comment in the OP. There's not an API that gives you your entire stored credit card information? Right?
smorgusofborg··on Ask HN: How do you explain the sloppiness of modern software?
In general there are a lot of factors, in the example you give I would point out that it relates to cargo cult followers of a poor summarizations of best practices.

TDD/BDD proposes a world where all things work and remain working when investigated by an automated test. The automated test is built up step by step and happy to do everything from start to finish to look at the one feature and the feature may remain and continue to get repairs long after it continues to make any sense in a flow and with very little observation of how broken it might be in natural use.

smorgusofborg··on The Problem with C (2020)
> Your comment is assuming that language A knows about language B. That's one case, but not the usual one.

You are free to expose an API where strings are not null terminated, etc. Anyone in any language is going to have to work their data into the API you provide so if it is alternatively complicated to make an intermediary language happy that's not really helping.

smorgusofborg··on The new hire who showed up is not the same person we interviewed
Then you have to get out of all the work you were assigning them yourself. Much better to leave it to a specialist!
smorgusofborg··on Mesmerizing Labor
That sounds like a true scottsman argument. Naturally any therapy is hard to perform perfectly to get the full placebo effect and a single blind experiment is almost as hopeless as double blind.

https://en.wikipedia.org/wiki/Neuro-linguistic_programming

smorgusofborg··on Ylang: Universal language for eBPF, Stap+, GDB, and more
Searching on X-?Ray debugging, I see a lot of products from separate vendors so I think it's valid to consider XRay alone a general industry term that is based on an obvious analogy, so disputes hopefully have to relate to an entire trademarked name.
smorgusofborg··on Ylang: Universal language for eBPF, Stap+, GDB, and more
I don't see any parts of this system in openresty's GitHub account. Are some of the components of OpenResty Xray going to be open source?
smorgusofborg··on Ylang: Universal language for eBPF, Stap+, GDB, and more
The percentages of improvement that result from finding and tuning the worst paths in a system are often this good unless it has already been done once for the system.. Sun engineers put a lot of thought into algorithms and where bottlenecks should be but still had some improvements like this when first applying DTrace.
smorgusofborg··on Ask HN: Is it worth it to learn C to better understand Python?
Probably. If you should look at the python implementation and the standard libraries it uses and the kernel you are using they are all primarily in C and in rare cases of other languages they are setup with FFI that favors the thought process of a C programmer.

When I look at a language like python or PHP I often just go down to the C code they call and use a tracer to watch calls to solve a problem without actually using the higher language.

smorgusofborg··on RIP Stack Overflow Jobs
$500 is a very low estimate of how much value a company steals from society every time it adds an additional posting to get people into its permanent hiring funnel and uses them more to tune that funnel than for serious consideration. Interview 10 candidates and pick one or demonstrate that you at least are willing to pay 1/10th the costs of your folly.
smorgusofborg··on GDPR penalty for passing on of IP address to Google by using Google Fonts
Software patents are a construct of the legislature that hands out a template for privateers to create liability. I wouldn't want to do anything in the US market.
smorgusofborg··on Ask HN: At a peak of my dev career, I hate my life
Having flat mates is not always easy but makes a huge difference in the quality of your life and makes some level of socializing a regular part of your life instead of an optional project to attempt.
smorgusofborg··on RIP Stack Overflow Jobs
If 10% of engineers in your country end up working for a foreign firm, wont SE make more money and have less costs vetting remote postings?

There's plenty of opportunities they left on the floor because they didn't like the best deals of that business, sure they could have grown and lowered their average return.

smorgusofborg··on RIP Stack Overflow Jobs
I don't get your comment. Paying $500 to reach many candidates is not expensive in headhunting and they didn't claim to have a problem finding enough clients. $50 would make vetting more necessary and cover less of it as well. (SE did respond to specific questions about the legitimacy of ads when I asked them.)
smorgusofborg··on In quieter corners DAOs are forging a new ecosystem for digital startups
I think this potential conflict of interest for miners to push DAOs and then maybe for raised beurocracy in a DAO for more gas money and questions of whether a seller in some of these auctions realizes they should become a large holder in DAOs that might bid 100X the valuation of their asset are the kinds of conflicting interests that make this kind of system less practical than a legacy system where the structure for regulators to subpoena whatever they need is part of the licensing, etc.
smorgusofborg··on Ask HN: Why is there no high quality method for voice control of a PC?
If I had to program with audio, I would make a steno dictionary with a theory that results in a pronunciation that is sufficiently different from normal language and then speak it instead of chord it.

The complexity of doing that is IMO a good explanation of why commercial audio recognition is worthless to someone who programs a computer instead of interacts with humans over a computer.

http://plover.stenoknight.com/2013/03/using-plover-for-pytho...

smorgusofborg··on The baseline for web development in 2022
The sell of the time to jQuery webmasters was:

XHTML's complexity is too much to deal with and the WHATWG is going to keep all this unnecessary stuff out so you won't lose control to generalized tools like an IDE and systems that favors formally educated language/tool writers, i.e. schema validators and, as we see now, transpilers.

The end result is still everyone using an IDE perhaps due to more irregular features after WHATWG encouraging a framework, but at any rate demonstrating XHTML was not the real source of webmaster stress and future angst.

So now you have more complexity, a still pointlessly irregular format that needs to identify it's magical elements, and, (to get back on topic,) features that must be implemented first in 2 browsers to become standard.

All of this is brought to you by employees of Apple and the other vendors. If WebKit isn't one of the 2 implementations most people choose to work with when pushing a standard then Safari is the dead implementation due to a constellation of choices all made with Apple's support and approval.

smorgusofborg··on The baseline for web development in 2022
It is pretty funny to defend Apple (or any other browser vendor) using the argument that standards are unfinalized. Running living standards was the coup done by WHATWG, a.k.a. browser vendors.

https://whatwg.org/faq

smorgusofborg··on Despite decades of hacking attacks, companies leave sensitive data unprotected
I'm not sure I agree with your last point. The merchants have historically been powerless but the merchant side bank ends up patching things up to fix it's own costs. Often this patching means penalizing merchants with products that are fun to buy fraudulently for failures that originated or could only have been detected at the buyer's bank.
smorgusofborg··on Spotify is removing Neil Young’s music after falling out over Joe Rogan
Spotify committed to a deal they would have estimated around $1 per year per premium member on exclusive rights to JRE. Neil Young may want to influence their choices in how they mediate social/political discourse that doesn't change the discussion musicians should be having about whether they are the equivalent of films on Netflix. Sidelined for original/exclusive content that inherently has to have a social/political mediation run by Spotify.
smorgusofborg··on Spotify is removing Neil Young’s music after falling out over Joe Rogan
Music is their international product. Choosing to support and subsidize talk radio from a position you could only get to with music is not a new plan. If I were a musician I would pull my work before everyone in talk radio wants equal time for their slime.
smorgusofborg··on Pwnkit: Local Privilege Escalation in polkit's pkexec (CVE-2021-4034)
> I'd trust SpiderMonkey much more because it's battle-tested in the most hostile environment imaginable

Enough OSes are behind and everyone using spidermonkey is unable to keep up with the porting requirements in the short window of ESR overlap so you can read vulnerabilities for the latest ESR and apply them to everyone. It would be nice if duktape had complete sandboxing, etc, but it has the advantage that hackers have to do all their own research to mount an attack.

smorgusofborg··on You Don't Need the Cloud
Don't rely on one article to design your tech stack, rely on one comment to know that the cloud is "literally" perfect for everything larger than a blog.
smorgusofborg··on Ask HN: Why hasn’t music been disrupted in the same ways movies have been?
Music has had radio and playing an individual song is very close to fair use. Further, music sort of has the same cost to produce, though big band is an exception. Because of this, legislators actually establish rules for commissions to be payed on music where it is hard to opt-out and since it is already setup, you are at a disadvantage if you do.
smorgusofborg··on Everything must be paid for twice
If you watch shows like "No Reservations" a traveler who is competent in gastronomy will avoid near 5-star restaurants. They are largely copies of an international standard you could get anywhere, certainly much closer to home.
smorgusofborg··on Covid Booster Highly Effective Against Omicron
That's a complicated discussion. To keep it short, I think different societies are prone to different institutions being centers of organized crime because organized criminals are rational evaluators of power structures and risk.
smorgusofborg··on Covid Booster Highly Effective Against Omicron
I'm aware of that but my examples are not in the US.
← PreviousPage 2 of 9Next →