jcrites

57 ms·

331.
by jcrites 10y ago
> My own dream system would be one where every "package" for my operating system is a filesystem image with `/bin`, `/lib`, `/etc`, and possibly `/var`. Take a look at NixOS and the Nix package manager. It w
332.
by jcrites 10y ago
> Email is missing encryption. Email is generally encrypted with TLS today. The Google Safer Email initiative's transparency page shows that 86% of emails sent from Gmail to other providers are encrypted, and 78% of messages coming
333.
by jcrites 10y ago
One workaround might be to request that the user send an initial email to your servers from their address before attempting the authentication. You'd want to validate that the email arrived and is valid according to SPF/DKIM/
334.
by jcrites 10y ago
Great points! One other remark I'll share about software engineering is that the amount of engineering rigor required or warranted depends a lot upon the task and problem. If I'm building a back-office website for a few colleagu
335.
by jcrites 10y ago
Looks neat! A screenshot would be helpful, to get a sense of what kind of interface will be available when I install it. Take a look at how NodeJS-Dashboard was advertised: https://formidable.com/blog/2016/10/
336.
by jcrites 10y ago
It's true that instance profile roles today supply credentials to the entire server. One benefit of virtualization is that it's reasonable to run small, single-purpose VMs. However if you do wish to restrict role credentials to ce
337.
by jcrites 10y ago
I appreciate your comment! > either your credentials can call the TerminateInstances API or they can't Note that you can restrict the inputs to this API using IAM Policy in semantically meaningful ways. Three controls I'm famil
338.
by jcrites 10y ago
Dang and other HN staff have said before that they like making readers have to work a bit for the information, and not just be spoonfed in the headlines. I understand it to be about fostering curiosity and wonder. I assume it's also ab
339.
by jcrites 10y ago
Kerbal Space Program is a really fantastic game that rekindled my love of flight (and space) simulation. For those who don't know about it, it's a spaceflight simulation game. You design a spacecraft from parts, assembling rocket
340.
by jcrites 10y ago
Yes, that's an apt comparison. Proprietary APIs for email exist today between parties that trust each other (clients and their service providers). What I'm proposing is to take it further and devise a standard HTTP-based protocol
341.
by jcrites 10y ago
You know, I've had thoughts along similar lines in the email space (SMTP). HTTP is such a fantastic protocol and an amazing amount of engineering effort has gone into it compared to SMTP. I've wondered whether there would be any i
342.
by jcrites 10y ago
It would be nice to be able to develop "native" Linux software right from within Windows where I'm doing other things. I can see the appeal. That's why Microsoft built the Linux subsystem, I suppose.
343.
by jcrites 10y ago
> [...] the benefit of having as much of your data processing jobs in one ecosystem as possible. [...] The main benefits are the fault tolerance, failure recovery, elasticity, and the massive ecosystem of aggregations, data types and ext
344.
by jcrites 10y ago
I think you're considering only a single request, and not the larger context of how people interact with systems over time. Imagine that today I visit https://example.com and I see a certificate from a CA that I trust. Ever
345.
by jcrites 10y ago
Good points. I'm not proposing a single owner, but rather a federated protocol where sign-in operates over email with each person's mailbox provider. The hope is that each mailbox provider will provide the sign-in.
346.
by jcrites 10y ago
I think the first category is "ban something if it's ineffective and there's a tragedy of the commons from using it ". Antibacterial soaps are probably not any more effective than regular soaps, but they might contribut
347.
by jcrites 10y ago
It's really a shame that we haven't solved this problem yet as an industry. I was thinking we could build a general purpose version of "Magic Links" for logging in, where the format of the email is well-defined, and the
348.
by jcrites 10y ago
That problem can be avoided without monorepos. You primarily need a way to declare a dependency from one package on another at build time, such that the appropriate release gets pulled in. For example, maybe you've depended on version
349.
by jcrites 10y ago
> Synchronous I/O by default means you're wasting your CPU cores When a process becomes blocked (like due to synchronously waiting for IO to complete), the kernel will context switch away to another runnable process. The proces
350.
by jcrites 10y ago
There are a number of downsides of libraries that make services attractive by comparison. Of course, it's not as if one or the other is better in all circumstances. First, libraries don't encapsulate very well. A storage service h
351.
by jcrites 10y ago
I can't adequately convey what I think is Fielding's position on how machines should interact with RESTful systems, but I will convey my understanding of the purpose and intent of his thesis: REST is a characterization of the Web
352.
by jcrites 10y ago
The best way to understand REST is by example. First check out the blog post by Roy Fielding mentioned in this thread which summarizes the constraints [1]. Then let's examine how several popular restful services work versus those cons
353.
by jcrites 10y ago
> if a signal is sent to a process while it is handling another signal then you can lose that signal > signals not being queueable Are you sure? I'm not an expert on signal handling, but I believe these statements are not true in
354.
by jcrites 10y ago
I've recently made the argument that science publications should include code and data. See comment history e.g. https://news.ycombinator.com/item?id=11606278 Glad to see that concrete good is coming from such efforts:
355.
by jcrites 10y ago
Yes, I've often considered that this is probably how Java's collector tends to behave in practice, particularly with the eden and young generation. If you're handling an RPC call that returns promptly, it's probable that
356.
by jcrites 10y ago
The Lambda Calculus does have to do with symbols and is defined in terms of them. Consider how application is defined. "λx.t" is an anonymous function that takes an input and substitutes it for the symbol "x" in the expr
357.
by jcrites 10y ago
Outlive -> Outlivity? :-) I think talking about the "outlives" relation is reasonably clear. "A outlives B (written B < A) if ...". The relation for <= could be written "outlives or is equal to", or &q
358.
by jcrites 10y ago
I don't disagree with your criticism. I read through the Urbut whitepaper [1] a while ago, and there's some meat and novel ideas there. As far as a concise description, here's my attempt, followed by some content from the whi
359.
by jcrites 10y ago
You make a good point and I agree. However, code also doesn't exist in a vacuum; when it's first written it's not perfect. Systems are built iteratively as the problem becomes gradually more understood. The wonderful thing ab
360.
by jcrites 10y ago
Java exception handling is very successful, and does exactly what I want as a system designer. The article objects to the fact that applications handle many exceptions by logging them and giving up. What's wrong with that? That's

More ›