wizzard0

Everything is insanely good. I sometimes wonder if it’s less known only due to its too-clever name

TLDR: Cops can't decrypt messages but they can still deduce who's chatting with whom.

Welcome to the dark side of the cyberpunk I guess?

does operator overloading turn c++ and others into the weakly typed language?

does typescript-like type checking (which barks on 1+”1”) with “disallow emit on error” turn javascript into the strongly typed one?

This sorely misses the step-by-step tutorial.

Eg I like Nomad and would love to deploy wasm stuff there, but tbh have no idea how to get from building to deploying something using this driver

Isn’t washing dishes one of the few instantly rewarding actions available in todays’ workspace?

The feeling of warm water running over your hands, the immediate change, the purity that you create, the complex pattern of light reflecting in the water drops, the sound of it…

To me, this is an immensely pleasant activity.

Sure, if I’m in a rush, I just load the dishwasher and jump to other things, but otherwise this is a great time to relax and meditate.

Compare that to waiting while the CI pipeline is chugging through over and over, only to end up with frustrating disappointment that another test started to fail, or that something has stuck in the cloud house-of-cards again

IMHO Clojure’s protocols look like a much more clean fit here (also, multimethods!)

watching this doesn’t get any comments due to everyone being distracted by ai news is surreal

I mean, this is an adjacent topic yet the gravity of gpt4 and stuff completely sucks the air from here

I wonder how the Subresource Integrity can expand to the root document hash (other than using IPFS gateways).

UPD yeah, extension hashing resources sounds nice too

Assuming the malicious server operator, you need to obtain the client out-of-band (package manager, app store etc), or if we require it’s the web app - thru somethink like an IPFS gateway where you can be sure the bits received match a particular hash.

Or do a git clone (pinned to commit hash) and host the client locally, I guess))

A thing long overdue, I’d say!

Have you thought about making some ELI5 explainer on how the algo essentially works?

The post you link to is already a great start, I feel like it’s just a question of a little editing work and maybe more examples

— for the nerds to get interested and actually read the paper

— for the users to understand privacy properties better (eg why this is better than TLS in case of a server infected with malware, etc

— and also things which it doesn’t do, which would calm anxiety in those who /need/ to understand the limitations to feel safe

— and to keep devs from thinking it’s a magic pixie dust and over-promising users, only to get hacked

what's the benefit for discord as a business itself? it's not like they are running ads or something and need more info to target ads better

A great start! Really needs examples one can play with, to get the feeling of the controls in context

There’s a reimplementation of the Tailscale control plane called Headscale, if you want to self-host.

I’d try to use that first, because sadly Nebula and ZeroTier don’t have a relay/TCP/HTTPS fallback option and still “have no plans of implementing one” as of Mar 2023, which leaves you out of luck as soon as you encounter NATs or try to access your cluster from an airport/hotel wifi

Maybe you know of other mesh/p2p VPNs that do support TCP fallback though? Would be great to see some alternatives in this area

well... i've yet to read this through, but likely this is THE thing that made calculus and linear algebra so hard for me (learning discrete math was definitely worth it too, but still!)

A fire alarm at home is important, a fire alarm in the chimney or the engine cylinder makes it unusable.

Exploit mitigations do work, but

a) compiler /does not/ know what are you building and what are your requirements

b) they only protect from /specific, known/ threats the same way a generic fire alarm won't protect you from CO leak or an electric shock.

c) but they waste time, energy and RAM whether they are relevant or not

The only way to get systems that are secure, performant and easy to maintain is to invest in tools that make it easier for developers and users (!) to analyze what the system actually does. Not trying to make everything "magically secure".

Pretending a microwave with Super Safety Cat Detector is a Magic Pasta Heater will only end up with lawsuits from owners of dead hamsters - and rightfully so, because it's trying to defraud and dumb down users instead of educating them.

End-to-end (or deeper-than-usual) understanding is the reason why I never worried about losing a job.

At the same time… trying to grok-everything consistently kills my attempts at anything business-like, where one has no choice but to focus and delegate.

One more example that security cannot be abstracted, packaged and bought in a box.

The same goes for performance (but that one can be packaged at least sometimes)

Very cool! Love the no-bullshit and concrete, to-the-point explanations. As one who tried a lot of TFT/SB apps, and built them too - I really appreciate the value of simple and focused ones. Sadly I won't use Grug as offline/onprem is a must for me, but you really set a new benchmark of what a MVP should look like.

Really inspiring. Let it bloom, and keep it up!

They discover a NN optimization algorithm via search in a symbolic space. Most of the article is about using it for NNs and not discovery itself though :(

python runtime is great. bites back with the dependency versioning though

I use an in-browser typescript loader (no type checking, just stripping definitions -> ~10x faster than tsc), fast enough for most personal projects I do recently

I made a build-less preact template once, and still use it. It just works %)

k k updated the comment) preact is bundled but intentionally non-minified so it's easier to debug. ts incoming, gonna clean it up a bit and write a README

UPD you recognize a software developer a mile away by his awesome estimation skills >_> published the typescript loader too!

is this the right place to shill a similar thing? (I use preact without bundlers for a while; also fast enough typescript without bundlers)

UPD:

- Preact template: https://github.com/wizzard0/naked-preact

- node/browser TypeScript loader: https://github.com/wizzard0/t348-loader

any chance for macOS and especially the console version?

definitely, but depends on the implementation and usage (e.g. you might want to still keep the “created date”) or “yearly snapshots”, so - not automatic

The very very hard part is merging across schema changes (i.e. ALTER TABLE on one machine, concurrent inserts/updates on another)

I’ve made a schema-aware CRDT previously that can chew thru concurrent JSON schema change, doing the same for SQL is certainly doable but a huge amount of work

> Network is much much more reliable than it used to be

Within DCs, sure. At the same time, a lot more company networks become spread thin over 4G/5G networks and finicky cable ISPs in recent years with WFH.

This caused quite a strain on internal LOB apps which could reasonably assume zero packet loss and sub-1ms LAN latency beforehand :)

Cool, though the website suspiciously omits the contrast.

Given it's RGB(W?) and not pixel qi or similar - likely at least 2x worse than Dasung eink?

UPD: yes it is. definitely faster though. https://wz.ax/r/Reflective_LCD/stxqo6

> random-access file system loopback-image standard

> But there is no such format.

What do you think of ISO (ISO9660)? just downloaded a random image to double-check, opens on OSX, Windows and Linux just fine.

It's read-only ofc, but that should not be a problem given we're talking about archives