klabb3

61 ms·

931.
by klabb3 3y ago
Yeah this bias is pretty prevalent everywhere sadly - it’s just extreme in the US. In Northern Europe and Japan(?) if you talk out of your ass overconfidently people will largely ignore you, similar to how you’d ignore someone making a TikT
932.
by klabb3 3y ago
Thanks, finally some thoughts about how to solve the issue. In particular, email based login/account reset is the main important use case I can think of. Do bots that follow links in emails (for whatever reason) execute JS? Is there a
933.
by klabb3 3y ago
I am genuinely confused and can’t tell if circleback is chosen unironically or not. The argument against would be that it’s risky to take an unserious name, although I think it’s an overrated fear. But if it’s serious, how do people not hav
934.
by klabb3 3y ago
> "These protections," Apple's blog said, "help reduce some of the privacy and security risks to iOS users in the EU," but "Apple has less ability to address other risks—including apps that contain scams, fr
935.
by klabb3 3y ago
> Who would ever listen to an idea by someone who was too timid to voice it though? Happens all the time. Just not common in the US. It’s a cultural thing.
936.
by klabb3 3y ago
> I'm sure how we got here would seem baffling if you're going to just ignore the history of the C10K problem that led us to this point. I am not unaware of pooled syscalls. I worked on the internals of an async Rust runtime, a
937.
by klabb3 3y ago
Make sense might be an overstatement but ok. Then why do functions with sync syscalls (ie file, timers or mutex ops) not expose the same contractual differences? They’re just regular functions in most languages including Rust. Perhaps anyth
938.
by klabb3 3y ago
> Does Conway’s law imply that an organization of size 1 produces a system with components that are optimally integrated? It’s creative work, like anything else. 1 is not necessarily always the right size, but 100 certainly isn’t. If you
939.
by klabb3 3y ago
To be precise: the contract depends on the implementation. Here’s an example: I write an in memory kv cache. It’s in memory so no async needed. Now I create a trait and implement a second version with file backing. Now the children are cryi
940.
by klabb3 3y ago
Never used multicast outside of local networks, but I was wondering: does you like it for the perf benefits or are there practical advantages that makes multicast systems easier to reason about or program for?
941.
by klabb3 3y ago
Sounds very interesting. > Fun stuff, but still probably a few years away from a HN post about it... Remember that partial results are very useful too. Personally I like reading posts that have unfinished ideas, with commentary. Eg “I ne
942.
by klabb3 3y ago
> The issue is that moving from synchronous API calls to asynchronous message passing introduces new complexity. It's not suitable for every problem. Well yes but request-response is simply a pattern that can be implemented on top o
943.
by klabb3 3y ago
In bigger deployments it’s a cluster of intermediaries with similar traffic patterns to any type of proxy. The only extra overhead is the “routing table” which in message land means subject subscription maps. Yes, in theory we probably shou
944.
by klabb3 3y ago
Correct. The messaging system. Not to be confused with Network Address Translation (NAT). Since I used both terms, I should have made that clear.
945.
by klabb3 3y ago
Im not a backend guy. I assure you that I’m not a magician. As I never had the fortune of being blessed with the knowledge of modern backend stacks like k8s. All I know is at a surface level. This probably makes me naive. At the same time,
946.
by klabb3 3y ago
This makes sense but I can’t really unsee the learnings from subject based addressing in messaging systems like NATS. It would make this article like one paragraph long. The very idea that services should talk directly to another is flawed
947.
by klabb3 3y ago
There are no tuples in Go. Very unfortunate. Tuples, enums and pattern matching is sooo good in Rust. I really miss it in Go.
948.
by klabb3 3y ago
The author is right but makes a similar mistake as the Americans, given he’s European. He does not clarify what market means. This can be perplexing and misunderstood by an American audience. Market in the US is such a different thing. Amer
949.
by klabb3 3y ago
Hmm, are we talking json parsing? Yes, the field would take the zero value. If you need to differentiate between the zero-value (eg empty string, 0 for numbers) you’d typically use a pointer only for that purpose. That kinda sucks but there
950.
by klabb3 3y ago
> how do you deal with the lack of optional type or narrowing? The idiomatic way is to return an error or an `ok` boolean at the function boundary. Callers always check return value anyway, this is hard to forget because it’s almost alwa
951.
by klabb3 3y ago
Isn’t it wonderful when business is more anti-market than straight up socialists and everyone’s like “yeah, that’s obvious”. Feels kafkaesque for sure.
952.
by klabb3 3y ago
Thanks for following up. I agree, however say Google and Apple have very few of these despite being disproportionately targeted. Doesn’t mean they are doing enough. But it sure as hell makes a difference. In ~15 years my gmail has never bee
953.
by klabb3 3y ago
I doubt it. Could be a soft factor, but at the end of the day this (and other rulings) are consumer related. This being suspicious against the EU mindset is amusing. From a European perspective, the US has enormous influence, the arrow clea
954.
by klabb3 3y ago
That's really nice. What tools are you using? How do you manage adding and removing keys? How many people and devices are involved? > Where does GitHub come into all this? To maintain verification dynamically for team members. Maint
955.
by klabb3 3y ago
> It’s not a GitHub feature, it’s a git one. Yes, I know. That’s part of my answer. The point is that signing is a ritualistic useless dance if there’s nobody on the other side verifying that the signature belongs to someone (ie trusts
956.
by klabb3 3y ago
This economic projection-simplification doesn’t sound right to me. Even if $1M gets you a successful attack, doesn’t mean that the next $1M will. A strong security culture patches up holes and reduces the surface area and damage radius over
957.
by klabb3 3y ago
A lot of statements but with an important convoluted point: git signing happens with a public key that nobody knows how to verify properly. So should we sign them today, without being able to verify yet? Well, that isn’t 100% true. GitHub k
958.
by klabb3 3y ago
I think they mention every platform for marketing because once the device is rooted, they can extract data from any app. That doesn’t mean the vulnerability was in the app mentioned, nor that it was the fault of an app at all. At the end of
959.
by klabb3 3y ago
And he who owns the kingdom owns the serfs. The result of dominance games is stagnation. Innovation happens only as a side effect during regime change.
960.
by klabb3 3y ago
I agree, but if the bar for cynicism is “not taking a billionaire at their word”, then we’re at peak gullibility. Especially if said actor has a track record of deception for economic, social or political gain. This requires less cynicism t

More ›