HNHacker News
TopNewBestAskShowJobs

trustno2

573 karma · joined April 19, 2024

submissionscomments
trustno2··on Are We Anti-Cheat Yet?
It's like DRM; on some level, the user is using computer how he is supposed to use it - interacting with memory and processor and the programs.

Of course nowadays DRMs are sort of baked-in, so I guess anti-cheats could be too?

trustno2··on Microsoft donates the Mono Project to the Wine team
It's the Microsoft way to apply the same name to bunch of unrelated products.

everything is .net, azure, 365, now also copilot.

trustno2··on Fixing a bug in Google Chrome as a first-time contributor
It's not searching plaintext though.

VSCode itself can deal with big text data being thrown at it, this will be some of the language server stuff

trustno2··on Meta cancels high-end mixed reality headset after Apple Vision Pro struggles
MBP returns you the investment pretty soon
trustno2··on Facebook Helped the FBI Exploit Vulnerability in a Secure Linux Distro (2020)
(2020)
trustno2··on Make Firefox Private Again
So? Epiphany is based on WebKit now, KDE Browser doesn't exist anymore. (I needed to check it first.)
trustno2··on Make Firefox Private Again
There is Safari. Or whatever is based on WebKit on Linux (there must be some...)

GNOME Web/Epiphany (same thing) seems to use WebKit and is officially supported

https://webkit.org/downloads/

https://apps.gnome.org/Epiphany/

It seems there is no WebKit browser for Windows.

trustno2··on Intel's Thunderbolt Share is a speedy sneakernet replacement and more
Yeahhhh looking at the license stuff, I think flash disks are still safe
trustno2··on FlightAware Leaks Customer Data (Name, Email Addresses and Passwords)
What if someone gets into your app logic and make a POST trigger that gets the passwords out.

What if you log all POST requests for debugging purposes and forget to sanitize the logs.

What if you have XSS in your web app that sends the password to a third party.

What if your mobile phone app has a dependency that includes a keylogger.

The likelihood of this increases the more layers you have in your organization (for example, the log pipeline team assumes the logs are already sanitized; the login form team assumes the log team is sanitizing them; it all goes through some A/B testing team that just dumps all data to "data lake" somewhere unsafe; the FE team puts in random node.js dependencies as it's "just a frontend"; etc).

Passwords can leak from more places than just from the DB...

trustno2··on FlightAware Leaks Customer Data (Name, Email Addresses and Passwords)
Good model is credit card numbers because they really cannot leak and if they leak, people are prosecuted.

Thus there is basically nobody doing credit card processing and the companies that DO that are unreasonably big and basically a monopoly. (Everyone always complains about PayPal...)

trustno2··on FlightAware Leaks Customer Data (Name, Email Addresses and Passwords)
If security breaches lead to jail time, nobody but a few big companies will build anything. Be careful what you wish for.
trustno2··on Spring-rs is a microservice framework in Rust inspired by Java's spring-boot
To be honest, 8 million of java code lines is equivalent to like 50 thousand lines of code in other languages
trustno2··on How I won $2,750 using JavaScript, AI, and a can of WD-40
You realize it's true because the same people easily morph their "areas of knowledge" so they can write opinion column about basically anything.
trustno2··on Gitlab is reportedly up for sale
gitlab is much more digestible for companies that want to self host. But at that point GitLab the company gets no money...

no corp will use sourcehut. That's just outside of the possibility. And corps have the most money.

trustno2··on Apple Intelligence beta flagged a phishing email as "Priority"
People actually use Apple's Mail? Wow
trustno2··on Airlines are running out of 4-digit flight numbers
https://www.mckinsey.com/careers
trustno2··on Airlines are running out of 4-digit flight numbers
You can be, the consultancies are hiring. But you need to up your PowerPoint skills.
trustno2··on "We ran out of columns"
You ship your org chart.

If you have a messy app, you have a messy organisation.

trustno2··on "We ran out of columns"
Does this seem like a healthy person to you?

https://www.instagram.com/durov/

trustno2··on Russ Cox is stepping down as the Go tech lead
I have worked in enterprises and the layers are usually an organizational issue that just acts as code issue.

Structure of code often reflects structure of your company.

The code is often maze of layers because the company is a maze of sub-committees. Java/C# fits more neatly in there.

Although with Go, what can happen is that there is a maze of microservices. Maybe that's not that much better.

trustno2··on Russ Cox is stepping down as the Go tech lead
error handling is what I like about go.

ok errors.As is a little stupid, I'll give you that. But that's all.

trustno2··on Russ Cox is stepping down as the Go tech lead
One guy that did ML in Google told me that Google indeed tried to use Go for ML problems, then realized it's too slow and went back to C++ there.
trustno2··on Russ Cox is stepping down as the Go tech lead
Go doesn't really lend itself that much into code with a lot of abstraction layers. If you try to do that, you will start to run against the language.

The more enterprisey software usually have lots of layers for organizational reasons, and go doesn't really fit there. So I don't think it will really be a hit in the enterprise.

yes there are orm solutions and DI frameworks and all that, but they always feel like they don't belong in the language.

(Also, java and .net and php are much older and have much bigger enterprisey ecosystem.)

I have seen go replacing the php stack though, and in some way the "original" python stack - but python now has ML.

trustno2··on Russ Cox is stepping down as the Go tech lead
The interesting thing is - this went pretty much against the community at the time.

At the time, the community seemed to have settled on dep - a different, more npm-like way of locking dependencies.

rsc said "nope this doesn't work" and made his own, better version. And there was some wailing and gnashing of teeth, but also a lot of rejoicing.

That makes me a bit sad that rsc is leaving.

On the other hand, I don't really like the recent iterator changes, so maybe it's all good.

Btw if you reading this rsc, thanks a lot for everything, go really changed my life (for the better).

trustno2··on C# almost has implicit interfaces
Your hypothetical issue is that you accidentally make a function conforming to an interface without actually meaning the same thing that the interface means?

That almost never happens in reality so it's not an issue.

For example, go has io.Reader which needs just `Read(p []byte) (n int, err error)`

Your issue is that you accidentally do Read with same signature, but it will mean something else, and the error it returns are different, so instead of EOF (as io reader should) it will return something else on end of file?

... it just doesn't happen in Go. You would need to go out of your way to break it. I guess it theoretically can happen.

trustno2··on Maestro: Netflix's Workflow Orchestrator
Temporal's go is... something. They used to use Java (I think), then they switched to Go, and the Go is very Java-like.

Or maybe I just don't know Fx.

https://github.com/temporalio/temporal/blob/main/service/mat...

The issue we hit with Temporal - again and again - is that it's very under-documented, and it's something you install at the core of your business, yet it's really hard to understand what is going on, through all the layers and through the very obtuse documentation.

Maestro has... no documentation? OK Temporal wins by default.

trustno2··on What is the significance of the character "j" at the end of a Roman Numeral? (2013)
It's just a smiley face in Wingdings font.
trustno2··on CrowdStrike debacle provides road map of American vulnerabilities to adversaries
You can do bugs in any language. The problem here was monoculture and critical dependence on one supplier, not a programming language choice
trustno2··on The only tourist in Moldova
Russia is a lot like west if you stick to the big cities. Sometimes it's "more western than the west", some people just eat in fast-food chains. Well, at least when I was there before the war.
trustno2··on The only tourist in Moldova
Mariupol is now de-facto Russian territory (it is administered/occupied by Russians) and you would need to either go from Russian side or cross the frontline.

(Please correct me if I'm wrong.)

← PreviousPage 2 of 5Next →