HNHacker News
TopNewBestAskShowJobs

swinglock

1,329 karma · joined March 28, 2013

submissionscomments
swinglock··on Chrome Feature: ZSTD Content-Encoding
Possibly just use the one from Brotli since it's already standardized. If it's any good then the work is mostly already done, right?
swinglock··on When random numbers are too random: Low discrepancy sequences (2017)
Fallout developer Tim on randomness.

https://youtu.be/DqL9R5PqE20

swinglock··on An Empirical Study and Evaluation of Modern CAPTCHAs
But is it worth billions? You just need to increase the cost 1000 fold and pay it back after a holding period to implement that.

The drawback is it gets a lot more complex when using a token, because of the additional state, communication, costs and security.

A one shot proof of work can be very simple, but probably not effective enough, given that mobile users likely do not want to wait what may have to be many minutes and drain their battery.

Freezing a cent or a dollar for days seems like a better option. Might very well be that VISA/MasterCard figures this out before the crypto bros build anything usable. It will be far easier to do without decentralization and would also be great to spy on and control people.

swinglock··on An Empirical Study and Evaluation of Modern CAPTCHAs
Proof of work can already be implemented without a token.

Tor has such a feature for denial of service protection.

https://blog.torproject.org/introducing-proof-of-work-defens...

A benefit of a token is you can recycle previous proof of work by using a small amount of Bitcoin, which could be transferred using Lightning. The value could also be transferred back some amount of time after registration given no bad behavior, allowing for larger sums than a cent, which could provide better protection.

swinglock··on If buying isn't owning, piracy isn't stealing
I can agree with that, though when something is patently false, I don't think it's wrong to point this out clearly. A misinformed reader could miss the nuance and mistake facts for options, which in this case could land someone in jail.

As for smugness and the format of posts, you sure don't live as you preach.

swinglock··on If buying isn't owning, piracy isn't stealing
I didn't comment on piracy.

As for piracy, of course it's wrong, though far less serious than what I responded to.

> depriving the original owner of the use of the item

When someone invests to make a film, do you think the use of the resulting film to the owner is to watch it or sell it?

To break it down, did someone invest millions to make millions, or did someone pay millions to watch one movie?

You know the answer and thus we know that stealing a copy without paying does does in fact deprive the original owner of the use of the item, which was always to sell copies of it, that's the reason and criteria for its existence.

At small scale though the industry still makes do, so it's less serious than stealing for example, a company (e.g. their information). Every act of piracy also wasn't technically a stolen sale, because not everyone stealing would ever have bought it if stealing wasn't an option.

swinglock··on If buying isn't owning, piracy isn't stealing
False. When someone without your permission copies your source code, plans or inventions, which are not physical things, is this not theft? What about the non physical bits and bytes in your Dropbox or bank account? That's just like, an exchange of information, man. Why must the "physical" qualifier be there?
swinglock··on Truthiness in C
That's correct.
swinglock··on AML works, even if it intercepts less than 1% of criminal proceeds
In addition, this "tax" just ended up within another department of organized crime.
swinglock··on New acoustic attack steals data from keystrokes with 95% accuracy
Obviously the comment discusses a shared space. If you have your own room you can let your fart rips and sniff them for fun, pull out your dick and piss in a bottle for fun, clank on your loud toys for fun, all the things you should never do with other people around that you might find fun for whatever reason. No one cares. But don't do these things to other people around you, it's anti-social.
swinglock··on PCSX2 is an open source PS2 Emulator
What does "load balancing" mean in this context?
swinglock··on SUSE is forking RHEL
The documentation exists. That's the best thing about it and it's a whole lot better than none. It has been worse too. Compared to Red Hat though, there's just no comparison.
swinglock··on A dispute over IPv4 addresses blew the lid off an effort reshape allocation
> AFRINIC is one of the world's five regional internet registries, or RIRs: AFRINIC; Asia-Pacific's APNIC; North America’s ARIN; Europe’s RIPE; and Latin America’s LACNIC. These are the organizations that manage, allocate, and track the use of internet number resources – IP addresses and autonomous system numbers.

Which one is the central authority?

swinglock··on A dispute over IPv4 addresses blew the lid off an effort reshape allocation
IPv4, the original decentralized Internet currency. Just get on IPv6 already! These numbers wouldn't be worth enough to fight over if we just upgrade.
swinglock··on I prefer trunk-based development
> It always contains 100% of everyone elses code.

It contains no one else's code since everyone works on a branch. This is only holds if a single team uses a brach. That doesn't scale.

swinglock··on Ericsson to WhatsApp: The Story of Erlang
Ericsson is currently using Erlang where appropriate.

Open sourcing Erlang and it finding some success outside, meant it's no longer an in-house only language.

swinglock··on What Is Systems Programming, Really? (2018)
I don't think there's a significant difference and I don't see the importance of making the distinction.
swinglock··on What Is Systems Programming, Really? (2018)
This appears both incomprehensible and wrong, but let me check if I understood.

Systems:

- Lacks a GUI.

- There are technical details.

- Doesn't compete with applications.

- Memory pressure is an issue.

Applications:

- Has a GUI.

- Need to be responsive.

- Power usage is important.

- Memory pressure results in slowness.

I don't think we got any closer to a useful answer.

swinglock··on What Is Systems Programming, Really? (2018)
What's the significant difference between having users, and having a chain of users, in purpose, philosophy and reality?
swinglock··on What Is Systems Programming, Really? (2018)
Got it. Businesses heavily employing a B2C marketing strategy should employ Python, Java and JavaScript programmers, while the B2B equivalents should use C and C++. Very useful to be able to make these decisions on a higher level, so that programmers don't need to argue about which tools would be well suited for a particular product. Allowing sales to make these decisions for us will improve our time to market.
swinglock··on What Is Systems Programming, Really? (2018)
Every software has a user. Other programmers are users too. In addition, all software is performance constrained, as no user has an infinitely fast computer or infinite time.

Of course it's fuzzy and unimportant, they're just words for categories we've made up, and didn't even make a very good job of it.

Even if we did make it clear which is which, what's the gain from being able to make a clear distinction? Is it any more productive than fighting over who got the best text editor?

swinglock··on Ask HN: How do ADHD people cope on here?
If glancing at the subject and bookmarking to later seldom go back to it allows you to move on, is that a problem?

Just like you don't have to and cannot read every book in your lifespan, you can't read every blog post. Your bookmarks doesn't have to be your todo list.

You might like Pocket or similar. Pocket specifically can sort your bookmarked articles in various ways, including popularity on the service, or just let it sit there knowing you have the possibility.

swinglock··on Lichee Pi 4A
Ironically this seemingly widespread issue makes the opposite even more true. That is, working correctly with Linux without patches would be a differentiator and a competitive advantage.
swinglock··on Lichee Pi 4A
There's Ubuntu support as well.

https://ubuntu.com/raspberry-pi

swinglock··on Ask HN: Learn C in 2023?
Ideally you use both, as both can find some more obscure issues the other may not. At least in the past. Either in isolation also works well, though Valgrind is really a suite of many tools.
swinglock··on Six charged in mass takedown of DDoS-for-hire sites
Game development is business. The "messing" does real damage with real costs.
swinglock··on Fuzzing ping(8) and finding a 24 year old bug
Although not exploitable, the bug is still an issue. Here are reasons to fix it.

* Puts burden on readers to know or find out if something else already protects the bug from being exploitable, instead of just having a check in the code. That's trivia masquerading as an optimization.

* A bug or change in behavior in one program (the kernel) could cause a bug in another program (ping) due to assumptions, which may not even have been documented as never changing guarantees. Could make a bug somewhere grow into a worse bug elsewhere, as well as being harder to debug.

* It allows the program to be fuzzed or statically analyzed for any bugs without having to constrain what inputs are considered valid enough, adding maintenance costs and opening for accidentally limiting too much and hiding exploitable bugs.

* Another option to be clear that this is impossible and thus correct code would have been to assert that the user data never looks like this. A failed assert is better than an infinite loop, so this is an improvement. However this would make it blindingly clear that user input is trusted, making it too obvious to ignore the next improvement; to check and handle the issue, even if that input passed through another program first.

swinglock··on SSHGuard
Because you block legitimate visitors. After we ran out of IPv4 space and started to use CGNAT instead of IPv6, the internet has become a bastardized version of itself.
swinglock··on Chibicc – A Small C Compiler
If you track and free all allocations diligently, you can also use tools to automatically find accidental memory leaks. If everything is a memory leak then useful tools become less so.
swinglock··on Building a simple shell in C – Part 3
Even an offline game is dangerous. What if the save files are backed up and that storage is compromised? This allows an attacker to escalate access from one computer or service to others.
← PreviousPage 4 of 19Next →