halayli

30 ms·

301.
by halayli 9y ago
Rust being advertised as a safe language (which is true) got so much into the user's heads that they think if they write it in Rust it's safe and crash free by default. There are plenty of security/safety bugs that aren'
302.
by halayli 9y ago
One of the most challenging exercises in any language is to learn how to organize your code and modularize it at a large scale. I recommend reading Postgres's source code. But don't wander aimlessly, set a goal. For example, figur
303.
by halayli 9y ago
Often techies sudo apt install packages and these packages might have a nodejs/python/ruby as a dependency. Why python/ruby would be ok but nodejs is not?
304.
by halayli 9y ago
what difference does it make? There are plenty of cli commands implemented in python/ruby/dtrace/shell and you're not aware of them. What's different about node aside from your negative bias?
305.
by halayli 9y ago
The title is what readers see first. If content and title don’t match then yes it’s trash. But that doesn’t mean that having a good title isn’t important.
306.
by halayli 9y ago
Gil? The fact that almost everything is a PyObject and requires allocation?
307.
by halayli 9y ago
There are plenty of bottlenecks in python. If you're really concerned about performance, maybe python isn't the tool you're looking for.
308.
by halayli 9y ago
Relevant: https://herbsutter.com/2013/06/05/gotw-91-solution-smart-poi...
309.
by halayli 9y ago
A major characteristic of a solid programmer is how they structure and modularize their code. This is not something you can learn from books because it ties strongly to the problem at hand. But you can get much better at it by delving into
310.
by halayli 9y ago
I really wish they merge Django and DRF.
311.
by halayli 9y ago
They’re playing Whac-a-mole
312.
by halayli 9y ago
Why are you assuming that the additional cost is for the extra services instead of a more reliable infrastructure for example?
313.
by halayli 9y ago
So he basically uses ec2 equivalent service and is complaining about the existence of other services.
314.
by halayli 9y ago
I don't use Go but I find the reasoning fueled by a confirmation bias to pick JS. goroutines are now 2k. If you use 2 goroutines per connection that's 4k. If you have 10k connections that's roughly 20mb only which is very rea
315.
by halayli 9y ago
You can come up with whatever arguments to backup and support your decision. It’s ok to say I don’t know I just feel like making a change. Most arguments mentioned aren’t new and existed for the longest time.
316.
by halayli 9y ago
Regarding setuid, this is why when you run programs like ping(8) it doesn't require root access to open a raw socket. ping's setuid is set so upon execution it executes as root since ping is owned by root and then calls setuid(get
317.
by halayli 9y ago
Here's my comment from last week related to this: https://news.ycombinator.com/item?id=15687021
318.
by halayli 9y ago
It’s hard reading random papers like that without deeply understanding the problem they are trying to solve. Sometimes understanding the true problem is more difficult than the solution in the papers. What I would suggest instead as a learn
319.
by halayli 9y ago
Here's how I get things done for tech related projects but it can be used for any other project. It's just what works for me but I am sharing it in case it can help someone else. Take what you want from it. I maintain everything i
320.
by halayli 9y ago
these are great achievements for sure but they aren’t related to the domain. random sampling and building a profile overtime that can be used to enhance the sampling is a very easy method to snoop at times that gives you good results.
321.
by halayli 9y ago
PMs aren't as technical as you might think, and the fact that he worked for facebook means he could have strong reasons to deny that they are listening. My point was that technicality isn't what will get in the way of listening vs
322.
by halayli 9y ago
author is relying on his own limited technical knowledge on wether it can be done or not. There are plenty of ways to do it like sampling / increase sampling when other fb friends are around or maybe they just listen randomly and in th
323.
by halayli 9y ago
The point you’re missing is why would something be more expensive online than in store? It makes sense that an item in store to be more expensive than an item online because of the costs involved in running a store and hiring employees, but
324.
by halayli 9y ago
apples vs oranges imho. i feel op is speaking from a narrow perspective.
325.
by halayli 9y ago
try embedding a web server inside your program and have it manage threads, event loops, and not be vulnerable to security attacks and compare it with a simpe nginx config pointing to your application and you’ll get an idea which one is simp
326.
by halayli 9y ago
yep, more secure, and battle tested. And one additional subtle advantage is that it leads you to make better architectural decisions because it eliminates state.
327.
by halayli 9y ago
It's tempting to consider using an http server in your program. But also consider wrapping your c/c++ programs in fastcgi loop and have nginx run behind it. It removes a lot of complexity from your code.
328.
by halayli 9y ago
This is why Linus is very adamant to not break userspace applications.
329.
by halayli 9y ago
> Cedexis: a CND/ad-delivery platform Cedexis is not an ad-delivery platform. It's a multi-cdn platform that allows you use multiple cdns under the hood and picks optimum cdn based on the user's location. OP loses credibil
330.
by halayli 9y ago
browser security vulnerabilities are expensive and heavily scrutinized. Just because they are on top of it for reporting vulnerabilities and fixes so that you become aware of it doesn’t make the alternatives more secure. You just wouldn’t b

More ›