klabb3

64 ms·

841.
by klabb3 3y ago
This strengthens my theory that VC vocabulary consists almost exclusively of other people’s hot takes. I know only of two other groups of people who speak primarily in quotes: religious fundamentalists and teenagers during a brief fan-frenz
842.
by klabb3 3y ago
Thanks, i was wondering about this since day 0 and was too lazy to look it up. Yes it can be spoofed, but I imagine a good chunk of day-to-day is work is semi-interactive, which would make it preferable to have the attacker be in the same t
843.
by klabb3 3y ago
TIL. Would it be better to say that Prolog is a general purpose PL, albeit more archaic than what we typically think of?
844.
by klabb3 3y ago
Fair enough! I agree with that and looks like I missed your main point. It’s a bit naive and generally ahistorical to think we’ve “transcended paradigms”, whether within tech or outside. It’s similar to the bias of thinking that current yea
845.
by klabb3 3y ago
> I think that the Promise API was not the actual thing people directly wanted (and on its own had no compelling reason to be added to the base library), but a standardised Promise API was needed in order to add the hugely useful async&#
846.
by klabb3 3y ago
I don’t have a dog in the fight. I also don't see yet any mainstream support behind the proposal. So I don’t get why it has to be so heated? The main benefit is interop. Same with promises. You can implement all of promises with custom
847.
by klabb3 3y ago
Good points. We don’t want the wrong thing. But we want the right one! Reactive UI won. The main thing stopping me from using vanilla JS is the absolute explosion in complexity managing state for even small sized applications. To me, any re
848.
by klabb3 3y ago
Replying here to both. I don’t disagree on any of your technical points. But I also think for practical purposes you’re missing the forest here. I agree with the sentiment of the article - I think the big trend in general purpose PLs is a
849.
by klabb3 3y ago
Absolutely yes. As a rule of thumb, for sure. However, in reality the problem isn’t binary per se, but anything that’s too obfuscated or boilerplatey to audit manually. It could be magical strange strings or more commonly massive generated
850.
by klabb3 3y ago
Agreed it’s a decent way to create a “map” of vulnerable projects. But it’s over-fitting the MO of adversaries - plugging an arbitrary hole. Why not play into the strengths of OSS instead of trying to replicate frictionous trust models from
851.
by klabb3 3y ago
Are you suggesting to ask a state actor to demonstrate commitment before participating in the discussion? :) I mean, the idea of commitment -> privilege isn’t bad. But it’s got nothing to offer in the story of xz.
852.
by klabb3 3y ago
Wow. Given the otherwise extreme sophistication this is such a blunder. I imagine the adversary is tearing their hair out over this. 2-3 years of full time infiltration work down the drain, for probably more than a single person. As for the
853.
by klabb3 3y ago
To sound like a broken record, what’s the alternative? To put into context: we have an enormously distorted ecosystem today compared to just a decade ago, consisting of open source projects like Linux, Postgres, and all your programming lan
854.
by klabb3 3y ago
Dislike of VCs as much as the next guy, but is this a representative picture? Many companies I’ve seen have been genuinely interesting, like SurrealDB, CockroachDB and Hashicorp. Are you saying it’s all a long bait and switch game?
855.
by klabb3 3y ago
Right. It’s a public benefit org based in CA. I very much appreciate what they do, but I don’t think they own or should own the term. In either case, it’s a moot point because it’s just a term definition. The important thing is to find a go
856.
by klabb3 3y ago
> That's not what AWS is doing. Well yeah technically the product is free but the value comes largely from unpaid labor. That needs to change if we want a healthy small business sector around larger open source products. It’s not ba
857.
by klabb3 3y ago
> Define "fix". It’s early. Everyone is confused. If I could define it, I would have provided a defintion. At this stage, it’s about acquiring requirements and looking at prior art. And being humble about the solution space. No
858.
by klabb3 3y ago
Why don’t we try to fix the “cannot be used for bezos yacht”-licenses instead of shunning the numerous companies of especially databases who want to do good in a meaningful way? Source available is good, better than proprietary which is w
859.
by klabb3 3y ago
Yeah to be fair I don’t think I even have a problem with embedding per se. It’s quite nice. It’s more the fact that embedding can be used to work around missing type system features. I can’t recall exactly, but I remember using embedding fo
860.
by klabb3 3y ago
Yup. I love Go but they didn’t get types right. The level of abstraction is too low, and embedding and iota never feel quite right. Rust got the basics right. Pattern matching, no nulls, traits, sum types, and the sugar around try with the
861.
by klabb3 3y ago
> and now I believe you are directly referencing this Yep haha. > but may be useful for others who don't get the reference Probably also yes. Important lore for techno-archeologists.
862.
by klabb3 3y ago
> both as the ultimate secret, and also as a number you must give to hundreds of people Don’t forget the final nail in the coffin, which completes the trifecta: it’s entirely immutable - damage radius = infinite.
863.
by klabb3 3y ago
> and getting MFA bombed immediately when putting in his old SIM... I think it’s technically unrelated to the SIM, but rather to create the new Apple ID he used his existing (compromised, lol) phone number for “verification” or something
864.
by klabb3 3y ago
TIL D1 is SQLite. Why don’t they market it more prominently that way? If their sql is interoperable with SQLite it’s a huge selling point, both for reducing vendor lock-in and compatibility with existing frameworks and such.
865.
by klabb3 3y ago
Yes. If you write your server in eg Go or Rust, you can have a “single executable deployment” so to say. But the main limitation is no horizontal scalability. So if you want web scale, you have to use something faster, like /dev/n
866.
by klabb3 3y ago
Agree with this. And why it’s important to have spaces to blow off steam and vent without being shunned as a bad team player or whatever. I’ve seen quite a bit of toxic positivity that makes people sit on their grievances in silence instead
867.
by klabb3 3y ago
In my experience PMs are not rewarded for good product, but rather a mix of shortsighted metrics and whatever their VP/senior person has on their personal agenda. At big companies, employees are often not even using their own products.
868.
by klabb3 3y ago
This is a perfect example of why the problem isn’t the stack, native vs web, or programming languages. I’ve been saying this for ages when people bash JS for being slow, or the web for being bloated. Yes, you pay a bit for the sandboxing, G
869.
by klabb3 3y ago
Imo this is because threads is a good abstraction. Not perfect, and quite inflexible, but powerful and simple. I would argue green threads are equally simple, too. Async is implemented differently in different languages. Eg in JS it’s a dec
870.
by klabb3 3y ago
> empirically 9/10 Rust discussions I see nowadays on HN/reddit do revolve around async. It kinda sucks for me because I don't care about async at all, and I am interested in reading stuff about Rust. 100% yes. I really fe

More ›