samhw

55 ms·

1. 511.▲
   by samhw 5y ago

   There are countless ways that this vulnerability could be an issue irrespective of whether user-provided data are being logged. Attackers achieving RCE on a machine in your infrastructure is likely extremely bad for most realistic architect
2. 512.▲
   by samhw 5y ago

   Up until the semicolon, this was actually a decent point. I can see a future for high-quality open-source software hosted on an 'app store' which requires a small payment for use - or for commercial use, perhaps.
3. 513.▲
   by samhw 5y ago

   > The uncomfortable truth is these libraries need scratch rewrites with better authors. If that's true, do you think that having money might possibly be helpful to that effort?
4. 514.▲
   by samhw 5y ago

   I'm not a Java developer, but I don't quite understand your complaint. You haven't used the library in question, you don't have any experience beyond the 'smell of the ecosystem' two decades ago, but you'r
5. 515.▲
   by samhw 5y ago

   > Open source can either mean "publish the source" or "run it as a community project". This is exactly it. I'm amazed that so few people in this thread are recognising this key ambiguity which underpins the conf
6. 516.▲
   by samhw 5y ago

   Sounds a bit like a Chinese room: https://en.wikipedia.org/wiki/Chinese_room > Suppose that artificial intelligence research has succeeded in constructing a computer that behaves as if it understands Chinese. It tak
7. 517.▲
   by samhw 5y ago

   > If you want to lose, share everything and expect nothing in return. Interesting philosophy from someone with their open source projects on their profile...
8. 518.▲
   by samhw 5y ago

   Taking literally the first atrocity you list : > The massacre at Huế came under increasing press scrutiny later, when press reports alleged that South Vietnamese "revenge squads" had also been at work in the aftermath of the b
9. 519.▲
   by samhw 5y ago

   I don't see how something can be both regrettable and necessary? Also, as well as the two wars that the US was on the 'just' side of, it's also been on the quite-hard-to-call-just side of many others, where it was not e
10. 520.▲
    by samhw 5y ago

    That sounds very similar to this, which someone posted elsewhere in the thread: https://www.aclu.org/press-releases/wrongly-prosecuted-chine... It seems like a pattern of prosecution.
11. 521.▲
    by samhw 5y ago

    I don't know why this is downvoted. This is talking the most sense out of anyone in the thread. Talking about American companies choosing to outsource labour to China as if it's some kind of casus belli is absurd.
12. 522.▲
    by samhw 5y ago

    Yes, that's famously why we had Nixon, Reagan, Bush, another Bush, and Trump.
13. 523.▲
    by samhw 5y ago

    I'm not sure what 'corporatey' or 'windowsey' means in the context of an operating system? Also, surely it's part of the nature of drivers that they are hardware-specific. Hardware changes a hell of a lot over
14. 524.▲
    by samhw 5y ago

    He's getting it from the line of code in everyone's head that goes `let imageOfWorld = exaggeratedAntithesis(self.ideals)`
15. 525.▲
    by samhw 5y ago

    Sorry if this is a bit blunt, but I'm mystified by the description of that video as "sober and rational". I'm not a Linux fanboy at all -- I happily use my Mac and don't even own a Linux computer besides my Raspber
16. 526.▲
    by samhw 5y ago

    > The idea is to try and never create null objects This is one of those things which sounds great in practice, and survives approximately 17 seconds of working on a real codebase.
17. 527.▲
    by samhw 5y ago

    I mean, 'money laundering' is a very different thing from 'using a different payment protocol because you've been banned from conventional ones'. I'm not at all right-wing, but it sets a dangerous precedent to
18. 528.▲
    by samhw 5y ago

    Interesting, thanks! My position on the whole 'using moral intuitions in applied cases to disprove fundamental moral theories' is basically what I said in this thread: https://twitter.com/samziz/status/14
19. 529.▲
    by samhw 5y ago

    No problem! And yeah, I had a moral philosophy professor who had endless examples like that, including that one. They were hilarious and so intuitively potent, I just wish I could remember more of them. He could spend a full 5-10 minutes in
20. 530.▲
    by samhw 5y ago

    Thanks for the explanation! Like I said in my own reply ( https://news.ycombinator.com/item?id=29512035 ), this is spot-on and better than I could have expressed it – and, clearly, than I did express it – myself. It's
21. 531.▲
    by samhw 5y ago

    I think the other person got it spot-on in their reply. It's not about social pecking order - a long-time employee could well be at the bottom of the social pecking order - it's about whether it's perceived to be your own w
22. 532.▲
    by samhw 5y ago

    I'm aware, but my point is that you're not making a synthetic claim - you're not proving the (axiological) meaningfulness of a concept. You're just saying "I use this word 'utility' to describe the satisfa
23. 533.▲
    by samhw 5y ago

    Thanks, this was a really insightful comment (as someone who spent years of my life getting a graduate philosophy degree, before doing something more 'useful'). I think the concept of utility is clearly, uh, useful, and the reason
24. 534.▲
    by samhw 5y ago

    You're just defining satisfaction of wants as utility. "Things that satisfy wants have utility" is a statement of a definition, not a synthetic claim. There are plenty of measures of utility other than hedonic ones (or voliti
25. 535.▲
    by samhw 5y ago

    Like I said to the other commenter, the source code for the software being discussed already is available - by definition - and much more easily than if you had to go searching through /usr/lib. It's an absolutely moot poin
26. 536.▲
    by samhw 5y ago

    > It might be in-bubble, but "I have never spoken to anyone who..." is a poor heuristic for evaluating the superiority/inferiority of a product. ∃x→¬P(x) is a poor response to ∃x→P(x), but a good response to ∀x→P(x). In th
27. 537.▲
    by samhw 5y ago

    No probs, best of luck! If I have any advice, it's: - Don't try to write a scannerless parser. It's a fool's errand. Lex first into tokens (e.g. LEFT_PAREN, KEYWORD(for), STRING_LITERAL("foo"), NUM_LITERAL(7),
28. 538.▲
    by samhw 5y ago

    That's the current info, though it sounds like he didn't always do that: > Knuth offers monetary awards to people who find and report a bug in TeX. The award per bug started at US$2.56 (one "hexadecimal dollar"[41])
29. 539.▲
    by samhw 5y ago

    I've done a moderate amount of compiler work, and the resources I'd recommend are: - "Compilers: Principles, Techniques, and Tools" (v popular, generally referred to as the 'dragon book' on account of its cover
30. 540.▲
    by samhw 5y ago

    Thanks - I missed these replies, but this is an interesting result. I'll grant you that the results in all the comments are certainly far better than I would have expected.