Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
nemo1618
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
27 ms
·
241.
▲
by
nemo1618
5y ago
Instead of TODO, I often add a NOTE instead now, e.g.: NOTE: Attempting to re-synchronize here would cause an infinite loop because... This prefix distinguishes such info from normal comments, which exclusively pertain to the code-a
242.
▲
by
nemo1618
5y ago
Man, I was hoping this would be about how sleeping outside is better for your health, and how to achieve that comfortably in the modern world.
243.
▲
by
nemo1618
5y ago
Here's a simple example: Say that your server has an admin login that simply compares the submitted password to "thisistherootpassword", one byte at a time. The attacker starts by trying "a","b","c&qu
244.
▲
by
nemo1618
5y ago
Sad but true. This is why I'm hopeful that Zig will add support for "constant time" blocks: https://github.com/ziglang/zig/issues/1776
245.
▲
by
nemo1618
5y ago
The main goal here is security against side channel attacks, not performance.
246.
▲
by
nemo1618
5y ago
To elaborate on my snark, this doesn't work because: - Whitelisting my messaging app means I'd still get pinged for non-emergency messages - Enforcing the block at the software level makes it too easy for me to disable it when the
247.
▲
by
nemo1618
5y ago
This is peak Hacker News right here lmao
248.
▲
by
nemo1618
5y ago
I looked into getting a pager recently; my plan was to disable my household internet completely for some number of hours per day (by plugging the router into a Christmas tree timer!), keeping the pager around for when my team needs to reach
249.
▲
by
nemo1618
5y ago
Even today the M1 still feels slow occasionally -- hanging for a second or two, browser taking multiple seconds to launch, etc. Granted, that could be due to I/O or power management, but in any case it's clear that software is not
250.
▲
by
nemo1618
5y ago
I've always found PEM/ASN.1 to be rather ugly. I encode my ed25519 keys as "ed25519:<hex key>".
251.
▲
by
nemo1618
5y ago
Presumably the argument is that a storage host might dutifully provide proofs of storage, but refuse to actually transfer your data to you later. This is true, but it's also true of centralized storage providers. The difference is that
252.
▲
by
nemo1618
5y ago
I don't mean to suggest that at all -- I have great respect for those people, particularly Rich Hickey, whose framing of "simple" vs "easy" is vital to these discussions. But it's clear that a language like Clo
253.
▲
by
nemo1618
5y ago
Safety and correctness certainly are important -- but they're also orthogonal to maintainability (among other values)! It's good to have most of the core values in common, but a language's guiding principle manifests in many
254.
▲
by
nemo1618
5y ago
By "north star" I mean the guiding principle that other aspects are sacrificed for. A heuristic might be: "[Lang] would not be [lang] without [aspect]." I'm sure that the Rust team wants Rust to be a good language f
255.
▲
by
nemo1618
5y ago
I don't know much about Eiffel; do you know of any articles or talks that discuss its design tradeoffs?
256.
▲
by
nemo1618
5y ago
I actually don't think this is true, which is kind of nuts. Programming languages generally fall into two categories: 1) They were either designed by one or two eccentrics, and thus contain a few great guiding principles and many quest
257.
▲
by
nemo1618
5y ago
I think you have this backwards. Go is explicitly optimized for software engineering ; in fact, it's the only language I'm aware of that makes large-scale engineering its north star. Here's Rob Pike discussing how Go's
258.
▲
by
nemo1618
5y ago
If you have the other avatar available for comparison, you don't need to do so visually -- the computer can compare the raw bytes directly.
259.
▲
by
nemo1618
5y ago
That's a good idea! Although, it could still potentially backfire for the same reason as scrypt; now if an adversary is able to obtain your nonce, they are much more likely to fool you. I guess my broader point here (which I neglected
260.
▲
by
nemo1618
5y ago
In the adversarial case, yes, there is. I agree that avatars help you distinguish among ~a dozen users; what they don't do is provide strong guarantees that the person you're talking to actually is who they claim to be.
261.
▲
by
nemo1618
5y ago
FOLLOW-UP: It occurs to me that, actually, plenty of humans could definitely clear my "higher bar." All you need to do is memorize a 64-character hex string, which is difficult but completely doable using a memory palace or simila
262.
▲
by
nemo1618
5y ago
To be honest, I have no idea how many distinct objects humans can distinguish between, but I am 99% confident that it is fewer than 2^128, much less 2^256. I suppose it's a somewhat nuanced question, though. For example, if I were show
263.
▲
by
nemo1618
5y ago
The problem with hash avatars in general is that people want to use them for identity verification -- and humans are wired to do so automatically -- but technologically, they cannot provide this. The space of possible avatars (2^256, in t
264.
▲
by
nemo1618
5y ago
Personally, I've only seen this crop up in one place: structs that signal optional fields via pointers. Are there other usecases?
265.
▲
by
nemo1618
5y ago
Oh I vividly remember watching a guy eat the world's largest Cheeto over the world's most expensive keyboard: https://vimeo.com/4294567
266.
▲
by
nemo1618
6y ago
whoa. Is it your island? What region? How large is it? I need more details.
267.
▲
by
nemo1618
6y ago
Isn't the idea that currently we already do the "mind cursor" plus the actual muscle movements?
268.
▲
by
nemo1618
6y ago
Programming is nothing without whimsy.
269.
▲
by
nemo1618
6y ago
In practice, no one will do this, unless there happens to be a function with the correct signature already available. The lambda syntax is so verbose that it's easier to just write the for loop. Another problem is that tons of Go funct
270.
▲
by
nemo1618
6y ago
> Are there any languages that are good at this? Go. 10-year-old Go code looks much like Go written today. There really haven't been any significant changes to the language since 1.0 was released, and most of the idioms were discove
More ›