HNHacker News
TopNewBestAskShowJobs

admax88q

4,765 karma · joined August 17, 2012

submissionscomments
admax88q··on For developers, Safari is crap and outdated
How is giving up on achieving something a win for users?
admax88q··on For developers, Safari is crap and outdated
Because if the hole exists at all, malicious actors will find a way to abuse it. But if non malicious developers have to jump through too many hoops to provide useful functionality to users they will just give up and users lose out.
admax88q··on For developers, Safari is crap and outdated
The fewer features the browser has, the more code ends up as native apps or on cloud backends instead of the user's device.

How many IoT devices could have just used bluetooth for interactive with them, but instead they all phone home to some central cloud server because the user experience of just hitting a web page is better than installing some clunky native app.

Should we "just go ahead" and expose everything? Of course not. But there's room for thoughtful implementation of these features that users want. A super secure platform that nobody uses provides security to no one.

admax88q··on For developers, Safari is crap and outdated
If the hole exists and is not going to be closed, why refuse to add other useful features that use the same hole?

It's like taking a room, and refusing to add a back door for "security" when the front door already exists.

admax88q··on For developers, Safari is crap and outdated
Personally I find very few sites that work in Chrome but not Firefox. But as a web developer I'm still irked by some of the more "fun" APIs that firefox refuses to support such as USB/PWAs/NFC etc.

Your issue however also ties in to what the article said about how Apple does not auto update Safari. You're tied to Safari 12 partially because the upgrade flow is a huge disruptive process as you have to update your entire OS to a new major revision.

Who can say why those sites are breaking for your version of Safari. Web devs do love to just use the "latest and greatest" APIs just for fun, but it could also be that their changes have improved the experience for the rest of users on modern browsers, and that for them outweighs the loss of users still of Safari 12.

I'm not saying every use of new APIs is justified by web devs, the population of web devs is too large and varied to make any statement about the group as a whole. I am saying that the lack of modern features by Safari and Firefox _is_ a detriment to users and web devs, and it pushes developers to make native apps instead which I would argue are a worse experience for many users for certain use cases, and a worse experience for many developers as well.

admax88q··on A Linux distro with a focus on simplicity and the concept of less is more
I dunno I still disagree.

If someone gave me a "simple" API for say networking. I would expect the API to be easy to use. But by your definition, I could give you an API such as "write(byte[])" which just puts bytes on the ethernet wire or into on the wifi radio. It's simple! It's not complex, there's only one API method with only one argument!

But in reality, I'm just shifting complexity to the user. I only consider things simple if they truly reduce complexity rather than if they just shift the complexity to someone else.

admax88q··on For developers, Safari is crap and outdated
Take Background Sync for example.

Mozilla considers the periodic sync API "harmful" because you could use it to track users IP and consumer resources when it's not clear they're interacting with the site

Their stated position:

> We're concerned that this feature would allow users to be tracked across networks (leaking private information about location and IP address and how they change over time), and that it would allow script execution and resource consumption when it isn't clear to the user that they're interacting with the site. We might reconsider this position given evidence that these concerns can be safely addressed, however, addressing them for periodic background sync appears substantially harder than doing so for one-off background sync.

But you could achieve very similar behaviour by using Web Push (which they _have_ implemented) and just sending periodic push message. So now as an honest web developer if I want nice background sync behaviour I have to implement some Rube Goldberg system of periodic push messages from a backend rather than just asking the system to wake me up every now and then.

admax88q··on For developers, Safari is crap and outdated
I don't buy Mozilla's/Apple's concerns for those APIs.

Sure if seems sketch to access USB from the web, but as a user if I'm trying to achieve something and I can't do it on the web, I'll end up installing a native app which has way more access to my system.

As a developer I would much rather be able to just deploy cool things on the web instead of having to package up native apps for every platform just to do things like read/write NFC tags, or send notifications to users who want them.

admax88q··on For developers, Safari is crap and outdated
That's absurd.

I'm not targetting Lynx, Haiku, or 8 year old shitty phones. Nor are most web developers.

And the attitude that you must support those things is detrimental to the web. It makes people feel like they're doing it wrong of they don't spend all their time chasing those rare edge cases. Which if you're trying to start something new, can kill your productivity.

I'd rather have web developers target the common platforms only, than have those developers give up and switch to native apps.

admax88q··on A Linux distro with a focus on simplicity and the concept of less is more
"Simplicity" does imple trivial or easy though, at least to an extent.
admax88q··on Without Enough Water to Go Around, Farmers in California Are Exhausting Aquifers
They pretty clearly confused 0.25 cents with $0.25
admax88q··on Google broke a conditional statement that verifies passwords on Chrome OS
The way you fix organizational/process failures is not by firing the person in charge of them every time they fail to catch something.

How many breaking bugs have _NOT_ shipped due to the current processes. Your approach suggests that there is some perfect process manager out there who will let no bugs like this ship (whilst not dropping any other business priorities mind you) that they just haven't hired yet into this position.

This isn't as big of a bug as people on HN want it to be. A few months from few people will remember, and even fewer will care.

admax88q··on JVM Anatomy Quark #26: Identity Hash Code
What objects do you have lots of that you're not storing in a HashMap or similar?
admax88q··on JVM Anatomy Quark #26: Identity Hash Code
Where is the bloat? There are default behaviours for equals and hashCode, so you never need to define them if they're not useful for your Object.
admax88q··on Our lawsuit against ChessBase
Forking the code doesn't fork the copyright ownership. Stockfish still owns the code under their copyright regardless of whether it lives in their repository or in some fork of their codebase.

A forked project doesn't have the right to grant people licenses to code which they don't own.

admax88q··on EvilModel: Hiding Malware Inside of Neural Network Models [pdf]
Consider how you would defend this attack.

If there are extra unconnected neurons, it would be trivial to just remove them, or flag them from anti-virus.

admax88q··on NYT gives 'water witches' the both-sides treatment
They could be documenting how people are being scammed in desperate times. That would document what people are truly up to.
admax88q··on Deurbanising the Web [pdf]
There's also opportunity cost in spending time maintaining, indexing, annotating your own archive of documents.
admax88q··on Deurbanising the Web [pdf]
Well this sucked to read on mobile. I'll stick to HTML.
admax88q··on Google Drive bans distribution of “misleading content”
I think it's less about being factually wrong, and more about leading people to factually wrong conclusions with truthful statements.

Even just saying "X sells stock Y before event Z" imples that X knew about event Z and that it would affect the stock price of Y. People will read headlines like this and walk away assuming there was insider trading, but that may not be the case. Nothing in that example headline has to be false in order for it to spread falsehoods.

admax88q··on Building a Curve25519 Hardware Accelerator
I'm not sure you gain much by moving the forward secrecy to a weekly or session based level, and I think you lose a lot in terms of simplicity.

It is simpler to design and analyze if it applies at every message. It's a design for the best case. No longer need to make judgement calls on if 1 week is enough, or maybe 2, or maybe some middle ground.

admax88q··on My app just got removed with no prior warning
Seems like a pretty boilerplate privacy policy. When in doubt cover your own ass.

Privacy policies are just a waste of time anyways, bad actors are going to act bad regardless of any "policy" they have in place.

Not to mention the policy is not necessarily a contract.

admax88q··on Downgrade User Agent Client Hints to 'harmful'
Accept and content negotiation has a long established history, and content negotiation is different than the server making decisions based upon metadata.

It's one thing for the client to say "give me this resource in this format" its another for the server to say "oh you're coming from version X.Y of OS Z, I know what you really want."

admax88q··on $100M xPrize for Carbon Removal
Lot's of "just do this" comments in here. If its as easy as you think it is, then winning the grand prize should be pretty easy.

Do the math, grab an investor and go get $100M.

"Just plant trees." Okay do the math on how many trees you need. Figure out how your going to build a program to get that many trees planted. What incentives, partnership, funding do you need. How will it scale to the amount needed. What will the full lifecycle look like.

"Just improve soil." Okay do the math on that. What's the timeframe for return on investment. What do the logistics look like for producing soil in huge quantities and deploying it where needed. How do we then use that soil to grow plants that sequester carbon.

90% of the comments in here are just the "middle-brow dismissal" of climate change of all things. As if we can "just do X" to solve it and everyone else is an idiot.

It's a hard problem, especially because part of the problem is determining how to actually implement and incentivize the population to do it. You can't just ignore that part, or just throw up your hands "people are stupid so we're fucked." Solving the incentive problem is actually part of the problem. Any solution that ends with "people just need to learn to do/value X" is dead in the water. You can start with "people just need to learn to do/value X" but you need to end with a plan on how you will bring about that change in mentality/incentive.

admax88q··on Downgrade User Agent Client Hints to 'harmful'
I hear you, but I'd wager the size differences are actually pretty minor. Absolute worst case you have 2X the CSS and HTML but much will be redundant so it will probably compress well with gzip.
admax88q··on Downgrade User Agent Client Hints to 'harmful'
Honestly though, if its enough content for mobile, its enough content for desktop as well.

The "garbage" we don't want to serve mobile, is often also garbage for desktop, autoplay videos, too many tracking scripts, etc. If we force people to optimize their site for mobile and desktop then maybe we'll actually get good desktop sites.

admax88q··on Downgrade User Agent Client Hints to 'harmful'
Even with web apps, you can serve the same app from the same URI. URI doesn't imply static content.

Serving a slightly different web app from the same URI based upon other random metadata on the other hand. Makes caching all the more complicated.

admax88q··on Downgrade User Agent Client Hints to 'harmful'
Serving different content for the same URI based upon various metadata fields in the request goes completely against the spirit of a URI.
admax88q··on Why Google's bookmark manager and Docs have purposefully bad UI
macOS takes the same approach with Finder however. Managing files in macOS is a huge pain if you want to keep it in some nicely organized tree. Its optimized for just searching to find what you're looking for. It presents all files in a flat list by default.

Apple's primary business model is not search, so there could be some evidence that more people just prefer search over tags/folders/icons etc.

admax88q··on We replaced rental brokers with software and filled 200 vacant apartments
Sure, but it seems that in the short term at least this company is improving the rental market. Should we really critize them on hypothetical future behaviour when the current behaviour is a benefit?

And as for Uber/Lyft, there's no doubt that they provide a much improved experience for the consumer.

← PreviousPage 2 of 34Next →