HNHacker News
TopNewBestAskShowJobs

Couto

351 karma · joined January 9, 2012

[ my public key: https://keybase.io/couto; my proof: https://keybase.io/couto/sigs/brY4-bIymKwbS8VhIlyOQuHGNge0NlpdLzBRXMf0Ozo ]
submissionscomments
Couto··on Aube: A fast Node.js package manager
Jails seems (to me) the most attractive feature in this package manager.

It's not feasible to believe we can just disable post-install scripts since so many older packages rely on these. Having them contained to avoid dubious scripts seems like the next best solution.

Couto··on React Labs: What We've Been Working On – February 2024
React was closer to elm during the times of stateless functions and redux. Since then it's getting further apart from elm.

Redux was kinda of a poor man's elm but it got the right principles. However the JS community hates boilerplate code so, new, more complicated abstractions appeared. Also, it was too easy, with redux, to shoot yourself in the foot.

Since then, with hooks, things are just getting harder and more complicated in my opinion.

Couto··on New version of Monica, codename Chandler, is available in beta
Definitely interesting, albeit a bit too green to be a beta version imho (I can't select a contact when adding a relationship, added two pets by accident because there was no feedback... e.g).

However, it looks really promising and more feature rich than the current version of Monica.

I do have a question thought. Will this version support WebDav/Cal? Syncing contacts to my mobile phone is the main reason why I use monica on a daily base.

Couto··on Show HN: Garnix, fast and easy CI for Nix
Used jslint extensively back in the days.

The reason why it fell mostly in disuse nowadays is because jshint appeared, which allowed a lot more customization of the available rules being applied.

Later eslint popped up with it's plugin engine allowing anyone to have their own custom set of rules.

As far as I know, no one cared about jshint's license because there was no code being shipped, and eventually code would be minified anyway leaving no traces of jshint.

Now... We can talk about the morality of ignoring a license, but ultimately jshint's license was simply ignored by almost everyone

Couto··on Coverage is not strongly correlated with test suite effectiveness
Coverage only indicates which parts of the codebase were touched by the test suite. A big test suite size doesn't mean high coverage.

Coverage can be increased without increasing the test suite by reducing the code base size (within pratical limits obviously)

Personally, I only find coverage as a good indicator of which code still needs to be tested, like forgetting some edge cases or conditional branches.

Couto··on SLSA, an End-to-End Framework for Supply Chain Integrity
I get the feeling that the update framework[1] fits in here somewhere, but I can't point my finger where or how. Anyone willing to give a description on how they both could work together?

[1]: https://theupdateframework.io/

Couto··on Deno 1.6 supports compiling TypeScript to a single executable
This reminds me of the server that Zoom used to have. Accepting connections only from 127.0.0.1, alone, isn't enough, since any request from the browser would match that IP, even if the request was being made through a XSS attack.

I'm sure someone with more knowledge in security would better chime in.

Couto··on Portugal’s radical drugs policy is working (2017)
You are right, but just to give a better picture of Portugal: We still have a lot of illegal drugs coming from Morocco, it's not a solved problem yet.

When this law was approved (2001) Portugal (Casal Ventoso) was the major Europe's entrypoint for heroin and everybody knew someone who was addicted, and it was impossible to walk in any city's park and not see an used syringe on the ground.

I think what's happening in the US with the opioid crisis is a bit different that requires a different solution. Regulation vs Decriminalization.

Couto··on Portugal’s radical drugs policy is working (2017)
Just my opinion:

In my experience, when people say drugs they think of cannabis, but cannabis was never the major problem in Portugal.

Our problem was heroin. I think no country will legalize heroin, at least not in the short/medium term.

This is clearly working, one of the major entrypoints of heavy drugs in Europe (Casal Ventoso in Lisbon) is almost clean of problems, there are still heavy drug users of course, but most of the associated violence disappeared.

Even portuguese people's mindset shifted from "junkies" to "people that need help".

So even if you consider a "halfway there" because you're thinking about legalization, this is still working and it's a good middle term to help society shift their mentality.

Disclaimer: I'm talking from my experience as a Portuguese person, not hard numbers. I remember walking in my hometown parks (which is a very small city) and see syringes and drug users everywhere when I was a kid. This doesn't happen anymore.

Couto··on Portugal’s radical drugs policy is working (2017)
That's not the same than being decriminalized.

In Portugal, if you do that the police will ask you for your ID if it's a light drug like cannabis, or take you to the police center if it's an heavier drug. If you keep being caught by the police a judge can order you to take psychiatric help.

Being decriminalized means that you won't be arrested when you ask for help, and you have access to clean syringes to avoid diseases and infections.

Help being provided, it's not the same than being legal.

Couto··on Keybase is not softer than TOFU
Certain countries like Portugal, Estonia and so on, already emit digital certificates stored inside the chip of every citizen's ID card. I believe these cards are made by Gemalto[1]

[1] https://www.gemalto.com/govt/identity

Couto··on How to Android without Google
Out of curiosity, how did you manage to have Mozilla as a location provider?

I hope i'm wrong here, but as far as I can tell. You need either google services or unifiedNLP from microG to achieve that.

I say this, because I run LineageOS without Gapps and I could never make it work with Mozilla's location provider.

The lack of geolocation is the only thing bothering me to be honest.

Couto··on Little Snitch 3 – Protect your privacy
I think AFWAll[1] is what you're looking for, at least the closest I know.

[1] https://github.com/ukanth/afwall

Couto··on Atom text editor 1.7.0 released
Not necessarily. You can set the property in your ~/.atom/config.cson before the first run.

https://github.com/Couto/.dotfiles/blob/master/tag-atom/atom... in case you need an example

Couto··on Saved Replies
Not saying that they've copied or anything, but this has been around for a while: https://github.com/notwaldorf/github-canned-responses
Couto··on SSH Keys on GitHub
I'm not sure if there are other ways, better or not... but blackbox[1] can be used to store secrets.

And it might be possible to achieve some success with git filters[2], at least to avoid pushing secrets into the repository.

Still... just my two cents, I'm not exactly a pro-user of those two features

[1](https://github.com/StackExchange/blackbox)

[2](https://stackoverflow.com/questions/6557467/can-git-ignore-a...)

Couto··on SMSSecure – SMS Encryption for Android
You can use SMSSecure as your default messaging app. That way you don't have to switch apps. You can even import your SMS from the default messaging app so that you don't loose your history. Bonus: you can then encrypt those SMS locally, but that's optional.

You can toggle the option to send encrypted sms or not, per contact, so if your contact doesn't support SMSSecure, you just send a regular SMS.

The ability to know who's using SMSSecure is interesting and not currently supported (that I know of)

Couto··on SMSSecure – SMS Encryption for Android
Both parties need to have SMSSecure installed, and a secure session started — a roundtrip of sms to exchange keys, or something (im not an expert so not sure if those are keys, or something else).

Otherwise they will only see a garbage of letters/numbers.

Couto··on How to set up your own free VPN server on AWS
Yes.

Streisand is just a bundle of ansible playbooks so it can easily be deployed on any server that meets the requirements: Debian 7 or similar.

It also has a nice menu to deploy to Amazon, Linode, Digital Ocean and Rackspace without extra effort.

Couto··on Yahoo wants to let you forget your Yahoo password
Quick question... assuming that this would work on all yahoo services.

Now imagine that I lose my phone, I guess that I will have to ask to receive a reset token, or something similar, on my yahoo mail, right?

But then how do I login on the mail service without my phone?

(it's a honest question)

Couto··on A Shark on the Network
https://github.com/jlund/streisand is a nice and quick way to achieve this.
Couto··on How to quickly localize your app for 300 dollars
short answer: yes.

long answer: Most Portuguese users under 30 years old can read and write, at least, basic english, and would prefer to use the english version of your app instead of brazilian portuguese. This is the scenario that I experience with people around me, at least.

People who are not so comfortable with english will _endure_ the brazilian portuguese if you provide no alternative.

Couto··on Quietnet: Chat client that works over near-ultrasonic sound
I can say my cats are fine... :)
Couto··on Show HN: Include this JS library to enable cross-origin requests
Don't take me wrong… I would use your service in any proof-of-concept/mockup/prototype… It really helps a lot in those use cases, since is one less thing for me to worry about.

I just don't trust it enough to use in production.

Couto··on Show HN: Include this JS library to enable cross-origin requests
I don't doubt that your service works with the best intentions, but why should I open a security hole in my application, when I can easily avoid it by writing my own proxy and keep it private?

What happens to my application, if your service goes through a DDoS? What happens to my application, if you suddenly decide to close your service?

I'm pretty sure you can use these arguments about other services, but this service exactly, is not worth the risk.

Couto··on Show HN: Include this JS library to enable cross-origin requests
Seems a cool idea to use with mockups and prototypes, but an awful idea to use in a serious product.
Couto··on Chimney burns your (console.)log to keep you warm.
console.log is a debug statement used in Javascript code. However is not supported in older browsers like IE8...

If you forget to remove then, IE8 will crash and burn...

It may also affect performance, although that is usually negligible...

Couto··on Ask HN: Just bought my first Mac. What should I know?
To print screen a specific window, CMD+Ctrl+Shift+4+Space
Couto··on HN Spoof
ahaha! my mistake =) still... as the country is going, even a little-known cheese manufacter will be able to buy the country
Couto··on HN Spoof
As a portuguese... Zuckerberg buying Portugal would be the best thing ever! =D
Page 1 of 2Next →