HNHacker News
TopNewBestAskShowJobs

zmw

96 karma · joined May 6, 2018

submissionscomments
zmw··on Why I’m done with Chrome
Container tabs just makes up for lack of easy profile switching (at least on macOS, not sure about Windows or Linux), which was in Chrome for years. Even after it came, I gave it a try and found it pretty cumbersome.

(Before I get you-can-do-this-and-that replies, I know Profile Manager exists, and that's an ugly hack: macOS users should not need to run multiple copies of the same app bundle.)

zmw··on Why I’m done with Chrome
GP claims that FF performance is terrible, which I cannot endorse (I guess GP might be having an actual issue), but I'll make a different claim: performance is not as good as Chrome (or maybe even Safari), despite all the accolades of FF Quantum, and my myriad attempts to switch to FF. The (at least perceived) inferiority of performance in addition to general UI ugliness makes it a no switch for me.

P.S. macOS 10.13.6.

zmw··on The Effectiveness of Publicly Shaming Bad Security
Check out clipboard.js.
zmw··on Decentralisation: the next big step for the world wide web
> Its not a higher level of http

Of course it's not higher level of HTTP, I never said that. I said higher level than HTTP. HTTP is just a stateless transport protocol, of course dat is higher level, and as I said much of the benefits described can be built on top of HTTP (and have been, just not standardized or not widespread).

> it all scales poorly, it can all be improved with distribution

Pretty sure it all does NOT scale poorly, as has been proven over the past thirty years. What's being solved here is not a problem of scale. "It can all be improved with distribution" is very hand wavy and doesn't really say anything. DNS and many other protocols are already distributed, btw.

> Instead we encrypt the key and distribute it across the net, ..., if its distributed and a copy goes down you just use it like normal.

There are two kinds of crypto, symmetric key and public key. Symmetric key is easily out of the window. For public key crypto, you always need a secret key and that has to be prior knowledge, not something negotiated on the fly, and of course prior knowledge has to be kept somewhere and presumably synced if you need it elsewhere, and it definitely can be lost. "Distributed secret keys solving everything" sounds like nonsense to me; there's always a secret key that is the starting point (call it the master key, if that makes more sense) and can't be distributed.

zmw··on Decentralisation: the next big step for the world wide web
Umm, having everyone’s data as a flat directory as opposed to an aggregated database sounds terribly inefficient... You need to somehow build a distributed, decentralized database on top of that flat structure, right? Otherwise your Twitter is just a microblog publishing tool plus a direct crawl RSS reader...

Maybe Twitter is too specialized an example. What about any kind of search? You do need an index, and someone still has to own that index, and “donate” computing power to update that index. You own your self-hosted data, like many of us already do, but there will still be gatekeepers, e.g. Google for our current web.

EDIT: I realized that with a clever enough architecture and probably much more computing power than necessary in a trusted environment, no one needs to own the index. But it seems way more advanced than this protocol. (I’m completely new to this stuff so please excuse my naive skepticism.)

zmw··on Decentralisation: the next big step for the world wide web
> Decentralization is a second-order effect.

I see, I was looking at it backwards.

zmw··on Decentralisation: the next big step for the world wide web
Thanks for the list.

> You can generate domains freely using pubkeys and without coordinating with other devices, therefore enabling the browser to generate new sites at-will and to fork existing sites.

Not entirely sure what you mean,

- We can generates HTTP sites at will (all you need is an IP address);

- We have existing protocols for mirroring sites (not implemented universally, but nor is dat://);

- When you talk about pubkeys with coordination, there are obvious problems like the last paragraph of my original comment, right? Again, I'm probably misinterpreting what you're saying.

> Integrity checks & signatures within the protocol which enables multiple untrusted peers to 'host'.

Basically subresource integrity? Granted, with this protocol you can in theory retrieve objects from any peers (provided that they actually want to cache/pin your objects), not just the ones behind a revproxy/load balancer, so that's a potential win from decentralization.

> Versioned URLs

We can have that over HTTP, but usually it's not economical to host old stuff. In this case, someone still needs to pin the old stuff, no? I can see that client side snapshots could be more standardized, but we do have WARC with HTTP.

(EDIT: on second thought, it's much easier to implement on the "server"-side too.)

> Protocol methods to read site listings and the revision history

> Standard Web APIs for reading, writing, and watching the files on Websites from the browser.

You can build that on top of HTTP too.

My takeaway is it's simply a higher-level protocol than HTTP, so it's unfair to compare it to HTTP. Are there potential benefits from being decentralized? Yes. But most of what you listed comes from being designed as a higher-level protocol.

zmw··on Decentralisation: the next big step for the world wide web
That indeed is a fundamental difference. But on second thought I got confused. Source independence, content addressable are nice and all, but we don't build static websites that always have same hashes; "Ubuntu Server 18.04.1 ISO" could be ipfs://<static_hash>, but even "latest Ubuntu Server 18.04.x ISO" couldn't be that. You still need to query the origin server (or client, whatever you call it), the central authority, to get those addresses. So, frequently changing websites/webapps don't benefit from this; they may even be penalized by the overhead. Only aggressively cacheable objects could benefit, but the vast majority of those probably won't be popular enough to be cached/pinned by peers anyway, so you still end up getting whatever you need from the origin server (or paid CDNs).

Btw, I skimmed through Beaker docs, and it seems they resolve names through DNS (what else can they do) and even use HTTP for discovery.

zmw··on Decentralisation: the next big step for the world wide web
I checked out Beaker Browser, and apparently it's based on the Dat project [1], which seems to be very similar to IPFS. Then apparently it follows that, just like IPFS, you can't throw random things onto the network and expect it to stick; you need to pay someone for hosting and bandwidth (that someone could be yourself) to have it pinned, and in order to have it available worldwide at all times you still need to pay for a CDN of sort — the Linux box in your closet, or worse, your laptop that sometimes goes offline just won't cut it. Eventually it's just another protocol to copy stuff around, where stuff originates from various servers (your browser basically embeds a server, capable of serving stuff), with the possible benefit of popular stuff may be p2p'ed (but if you're a business you probably can't rely on that anyway). I fail to see how it's radically different.

(Also, I'm not even sure how you could p2p private user data, unless you expect everyone to carry around one or more yubikeys, or implant chips into fingers or something; plus all devices need into buy into that. But I haven't given that much thought.)

[1] https://datproject.org/

zmw··on Tell HN: Using Gmail? You will be force logged into Chrome
To add a little bit to my UI complaints: I recall that one of the original designs goals of Chrome was to reduce the chrome (ref: 2008 Chrome comic book). Over the years I’ve had a number of UI complaints with Chrome too and actually switched to Opera multiple times, but overall I think they did a good job at hiding the chrome and presenting what really matters. On the other hand, Firefox UI elements and cues stand out and intrude even after disabling everything I can find. Maybe some people prefer that for “usability”, but I personally prefer minimal UIs (hint: Apple user) and find them perfectly usable.
zmw··on Tell HN: Using Gmail? You will be force logged into Chrome
I confess that I have uMatrix in Chrome but not FF, but I do use pihole, and it’s not really a third party scripts problem, FF feels slower on perfectly clean sites.
zmw··on Tell HN: Using Gmail? You will be force logged into Chrome
I keep hearing how awesome FF quantum is. I always have a copy of FirefoxDeveloperEdition for the occasional compatibility testing, and I keep coming back to it over the last few months, the last time being yesterday, but it just feels as sluggish as ever, whereas Chrome just feels snappier until there are hundreds of open tabs. Am I using it wrong?

Also, Firefox tabs are as ugly as ever (lots of thick lines), and the search bar drop down is cluttered as hell. I thought I’d hate the Chrome 69 tab style, but I got over it in a couple of hours; whereas for Firefox I simply can’t.

← PreviousPage 2 of 2