HNHacker News
TopNewBestAskShowJobs

claudius

3,469 karma · joined February 28, 2013

submissionscomments
claudius··on Please take care of my plant
I have a rubber tree (ficus elastica) and it seems quite invincible. Got it from my grandmother about 15 years ago, it spent three years in my dad’s smoke-filled room and has moved three or four times. Right now there’s direct sunlight in spring and fall and a radiator right next to it in winter. Watering is so-and-so, easily lasts a week to a month without any water.

If I forget to water, some leaves will turn yellow but quickly recover once water is available again.

Oh, and it had half of it sawn off at one point because it grew too large, the other half is now also a very presentable little plant.

claudius··on Firefox Send: Private, Encrypted File Sharing
If one were to build a marketing spyware add-on to analyse user traffic from within the browser and send all visited URLs to some remote server, would those sent URLs then possibly contain the anchor?
claudius··on Compute Engine machine types with up to 96 vCPUs and 624GB of memory
Does someone have experience using this (or other) cloud solutions in a scientific HPC context? The only obvious disadvantage I can think of is that every student running something incurs a certain cost whereas after one has bought the actual computers, running jobs is somewhat free.
claudius··on Amazon Is Testing Its Own Delivery Service to Rival FedEx and UPS
Also in Germany, I much prefer Amazon Logistics. If I’m not home, they’ll leave the parcel either with neighbours (multi-tenant house) or just in front of my door with them taking the risk (and they’ll happily send something again if it gets lost, happened twice so far). This way, I essentially always get the parcel the same day it was supposed to arrive. With DHL, they often don’t ring the bell, put the parcel back into the van and then put it in some post office (available from 2pm the next day), the office open from 9am and 5km away from my commute. If I allowed DHL to place them at the door of my flat, I would have to take the risk of someone stealing it.

The fact that one particular DHL driver routinely unloads his parcels onto the cycle lane every morning doesn’t help my opinion of that company either.

claudius··on How the GDPR Will Disrupt Google and Facebook
Well they can of course trade it as they see fit, just opt-in to those things and be happy?

What gives you the right to force me to trade in my personal information?

claudius··on Sailfish OS – Independent Mobile OS
Thanks, I’ll look into Termux!

> No need for random forums. You should have been able to download an official LineageOS build from https://download.lineageos.org

But even if this worked (from what I have read, others had problems), there still would be nothing to make me trust "LineageOS", as I said in the reply to your sibling - there is no real name associated to the project, no GPG key embedded in the web of trust anywhere that I can find and not even on the download page are actually signed binaries I can verify myself to be trustworthy. Not even the Wikipedia page of the project lists a single individual involved!

claudius··on Sailfish OS – Independent Mobile OS
> The OnePlus 3T seems to be officially supported by LineageOS[1].

Yes, but everything I have read, anybody who tried only the official ROM had various problems, e.g. with the camera. Hence I settled on an unofficial ROM.

But even if I used the official ROM, there is absolutely nothing on the LineageOS website that makes me trust them. No real names, no GPG keys, nothing. Just "The LineageOS project", a bunch of pseudonyms in the blog entries and apparently some LLC. Even their "Legal" sub-page does not contain anything at all.

claudius··on Sailfish OS – Independent Mobile OS
I’ve used Sailfish OS on the original Jolla for a little more than two years from April 2015 through July 2017. Last month, I was finally fed up enough with the horribly slow and limited hardware (couldn’t play music and open OsmAND at the same time) and got a OnePlus 3T with LineageOS.

Tidbits of my personal opinion:

- SailfishOS is much more unixy - getting a shell, setting up a SSH server and syncing files with rsync was no problem at all. I have not yet understood the directory structure of LineageOS

- The permission of apps was a problem, but not more so than on my laptop. Ideally one could solve this by only installing trusted apps, but this was unfortunately not an option (Whatsapp)

- The native e-mail client actually knew about e-mail. On LineageOS, I had to install K9mail to get such simple things as proper treatment of signatures delimited by '-- '

- The user interface on Sailfish was much more usable, in particular the swipe gestures to quickly close apps as well as the tiled view from which you can directly interact with open and running apps. Feels more like a proper computer instead of a single-threaded/single-application-at-a-time thing.

- I actually trusted the team at Jolla with providing decent updates etc. With LineageOS, I am using some unofficial ROM provided by a random guy on a largely random forum which may or may not work with over-the-air updates (it’s claimed to work but I haven’t tried it yet). I definitely trust my phone less now than I did before.

- The hardware is of course much better on the OnePlus -- had Jolla/Sailfish sold something equally good or even only slightly worse, I would have bought that again.

claudius··on Carbon Nanotubes Excluding Salt from Seawater
Of course it applies if you wish to extract work from heat. However, it does not apply when extracting work from chemical, nuclear or electrical energy, only if you first transformed that other energy into heat and then transformed the heat into work.
claudius··on Carbon Nanotubes Excluding Salt from Seawater
Hm, I’m not sure I buy this argument, as it relies on the entire procedure being in equilibrium at all times. For the same reason that the human body can operate at much higher efficiency than a steam locomotive (or even the "perfect" Carnot engine), it should be possible to devise a desalination process which is much more efficient than the thermodynamic optimum by relying on catalysts and other non-equilibrium effects.
claudius··on Studying how Firefox can collect additional data in a privacy-preserving way
Yes[1], no[2]. An IP address is "personal relationships" data and collecting, processing or using such data is prohibited unless allowed by law or the concerned person gives consent.

[1]: https://en.wikipedia.org/wiki/Bundesdatenschutzgesetz#Types_...

[2]: https://en.wikipedia.org/wiki/Bundesdatenschutzgesetz#Overvi...

claudius··on Studying how Firefox can collect additional data in a privacy-preserving way
Any submission of data requires the transmission of an IP address, which is personal data and necessitates appropriate protection.

I very much hope that the Debian maintainers (and hopefully also the guys preparing Fennec in F-Droid) will disable such data collection mechanisms, either completely or hidden behind an explicit opt-in instead of the opt-out suggested in the e-mail.

claudius··on The LaTeX Fetish (2016)
Currently works perfectly for me with English and German where I place \selectlanguage{UKenglish} and \selectlanguage{ngerman} in front of the appropriate paragraphs. Hyphenation then simply works.
claudius··on Our Copyfish extension was stolen and adware-infested
Disabling HTML e-mails does not sound particularly unreasonable. There’s little additional benefit from them but a whole host of possible issues, least of all that suddenly your e-mail client has to deal with properly parsing HTML and you have to decide whether or not to load remote images and potentially execute JavaScript.
claudius··on European Commission fines Google €2.42B for abusing dominance
They had a net income of 23 Billion Dollars in 2016, so the one-time fine alone is approx. 10% of their net income last year. The daily fine of 5% of daily worldwide revenue would amount to approx. 20% of their daily worldwide net income (using the 90 Billion from Wikipedia as worldwide revenue and 23 Billion as net income).

Since the EU is likely more than just 10%/20% of their income, they still make some money here, but I doubt that it was worth it for Froogle…

claudius··on [dead]
The old Skype for Linux app stores its logs as a simple sqlite database from which you can export them fairly straightforwardly, see e.g. https://pastebin.com/bWXCQK83 for a simple script which brings them into Pidgin's log format.
claudius··on Opera is Reborn
Ironically, the old Opera did have this feature, where you could arrange tabs side-by-side within the browser window…
claudius··on Is the C++ preprocessor still needed?
> In a language designed for humans, the simplest expression of a loop (e.g. `for (auto paths : m) {}`) would use references not value copying. You'd have to go out of your way to do the it the dumb way, which you would only do when you have a specific reason to do so.

But I would expect

    auto x = y;
to create a new variable by copying with type-deduction from y, not a reference (or even const reference) to y. If I want a reference anywhere in the language I always have to say so explicitly. As such, I find it perfectly normal that

    for(auto x : y)
create a copy of the elements of y while

    for(auto& x : y)
creates a reference to the elements of y. Reversing this just within for-loops would only add to the confusion. Defaulting to references over values just for auto where everywhere else values are the default and references need to be specified would also only add to the confusion.

Of course you may now say that one should have done it right from the start, but this is then an argument about the initial decisions in the late 80s, not about the use of auto in C++11.

Regarding the specification, I am incredibly happy that there is a specification I can trust and nowadays a series of different compilers which largely implement this specification instead of some "model-implementation" which implicitly defines the language and may look entirely different next week.

claudius··on Why Germany Still Has So Many Middle-Class Manufacturing Jobs
The main point of the article appears to be that peripheral EU countries did not benefit as much from the internal open market as Germany due to weak ‘civil service’ and oligarchic structures which predated the EU and caused a misappropriation of EU funds intended to improve competitiveness. It then somehow seems to conclude that this was all Germany’s fault instead of being the fault of the people in those peripheral countries with ‘economic implosion, rising inequality and widespread corruption’.

The article does mention wage suppression in the beginning but does not give a good argument why the wage suppression as observed in Germany since the early 2000's is a bad thing -- if wages are inflated and you need to compete with China for manufacturing, then you can either scrap your manufacturing or suppress wages, there’s not that much of an alternative there.

My sibling comment arguing that the largest low-wage sector in the EU is somehow inherently bad is also misguided: if the alternative is much higher unemployment, low-wage jobs are still preferable to no jobs, especially if they come with the usual social security mechanism, as is increasingly the case again.

claudius··on Show HN: Kryptonite – a new home for your SSH private key
Neither Google nor Apple have root access on a Yubikey, nor does that key have some sort of wireless transmitter included which would allow for unnoticed data transfer to or from the key.

Furthermore, it is nowadays largely trivial to set up sandboxing within a single user (using SELinux, Apparmor or whatever else) or to use multiple users and classical privilege separation to achieve the same effect.

It is also telling that your "Threat Models" in the link above do not discuss attacks against the phone at all.

Edit to add: You currently also do not have the ability to use my keys. If I were to install the app (and set it to auto-update as suggest so vigorously elsewhere), all it takes is for a tiny little update by you with no public oversight to own every server I have access to. How is that possibly improving security?!

claudius··on Ask HN: What do you want to see in Ubuntu 17.10?
> If that library is the system "libc" library or something similar, then it has to be reboot (not relogin). The only way that I can think for reboot-free updates, is to save the full state of the system, then silently restart everything to the previous state.

Restarting running services and logging in again is fully sufficient to handle a libc upgrade, at the very least on Debian. "Just restart" is maybe easier advice to give, but overshoots the target a little bit.

claudius··on Cloudflare data still in Bing caches
https://dns.he.net/ works for me, though your requirements may be different.
claudius··on Cloudflare data still in Bing caches
You are of course responsible for the tools you use, so if I use nginx and it has a bug, I won’t send them the bill.

A better analogy would be to crash your client’s car into the building of a competitor and then complain if the competitor doesn’t repair that car immediately because it makes you look bad and it is for the greater good for your client to have a working car. This is what happened! Cloudflare took their clients’ cars (their data), crashed them into random buildings all over town (Google, Bing etc.) and now complains that Google and Bing don’t get their act together to repair those cars (remove the private data from the public internet).

If Amazon Prime took your car to do your grocery shopping and then crashed it into Walmart, would you really complain that Walmart can’t send the bill to Amazon Prime for the clean-up?

claudius··on Cloudflare data still in Bing caches
Yes. And once it is cleaned up, send Cloudflare the bill. And once they go bankrupt, send the executive officers and the shareholders the bill. And once they go bankrupt, make sure they are still held responsible for the damage inflicted and that nobody that incompetent tries to run a major business damaging millions of people’s lives ever again.
claudius··on What can Rust do for astrophysics?
Yes: Safety does not get you correct results where non-safety would have given you wrong results. Safety gives you correct results in some cases where non-safety would have given you no result. Those cases are easy to identify and can be solved using standard debugging techniques.

So safety gets you faster development: less debugging, easier parallelisation etc., but it does not give you correct results, nor does it give you those results by spending less computational time.

claudius··on What can Rust do for astrophysics?
> I think this is what is most flawed in the paper. For (some) concurrent problems Go is about as fast as C [1].

Certainly, this was really only taken as a ballpark estimate of the performance difference. Looking at your link, it seems to have been slightly overestimating the difference, though the general point still stands: C is (in most cases) faster and there is (nearly) no case in which Go beats C.

> Is there a reason why GRP computing isn't mentioned?

> They are really efficient and CUDA isn't that hard to learn.

Sorry, not sure if you mean GPU instead of GRP in the first sentence. CUDA helps to some degree, but not always, e.g. when you are memory bandwidth bound (common in tensor networks in physics). I have no experience with Monte Carlo methods and can’t comment on whether they substantially benefit from CUDA; I know of at least one (Quantum Monte Carlo) code which runs much faster on a standard Xeon than on the Xeon Phi, though.

> They seem to care about safety.

Yes of course safety is nice to have and I’ll gladly learn Rust when I have some free time to get that safety at hopefully zero cost. But sacrificing performance is simply not competitive, if you can throw someone with gdb at the problem and get essentially the same "safety".

claudius··on What can Rust do for astrophysics?
During the past years of coding in C++ in the context of tensor networks in condensed matter physics, I have never encountered the case where a programming error which would have been caught in Rust or Go lead to incorrect results. Yes, there were plenty of crashes and plenty of hard to debug issues, but it was always obvious that something was wrong way before any results were calculated/printed/output.
claudius··on What can Rust do for astrophysics?
> * Almost as fast as C

That's the key point. Judging by the (wrong) benchmark above where both C and Go seem to do some work, Go is about half as fast as C.

A grad student (if paid properly) costs maybe 60k €/year. In comparison, we regularly spend more than 250k on new and faster computers, not including maintenance, the electricity bill etc. If you can make software even 50% faster by increasing development time, this is nearly always worth it in an academic setting. Note that the benchmark implementation shown here is a very simple example, normally computing jobs take days to weeks (multiplied by however many cores you can sensibly use) of CPU time.

Decreasing runtime also increases productivity a lot, since the turnaround time becomes shorter; waiting 3 versus 6 weeks for results is a noticeable difference.

Additionally, these tools rarely have safety concerns: In my own code, there is no "untrusted user input". There is correct user input (good) and incorrect user input (mostly it will crash, with common mistakes it will try to notify the user). Safety is handled by the operating system (such that you can’t overwrite someone else’s data, for example).

This means that the only advantage Go could have over C/C++ in academia is the "good concurrency support". However, concurrency in HPC is usually handled via OpenMP (shared memory) or MPI (distributed memory) parallelisation. This takes a while to get used to, but is very different (and in a sense much easier) than e.g. the typical case for a web server, where you wish to serve as many users as possible at the same time using as little CPU time as possible – a busily waiting loop is horrible in the latter case but perfectly fine in the former (under some circumstances).

So overall, languages are not interesting in the academic HPC crowd if they sacrifice speed for anything, which, incidentally, makes Rust also interesting, because that is precisely not the case (apparently, under some circumstances, etc.pp.).

claudius··on What can Rust do for astrophysics?
On my laptop (i7-5500U), I get the following timings (always with -march=native or -xHOST):

    GCC 6.3, -Ofast:      5.93s
    GCC 6.3, -O3:        93.06s
    GCC 6.3, -O2:       134.43s
    Clang 3.9, -O3:     346.92s
    Clang 3.9, -Ofast:    5.87s
    Intel 15.0, -O3:    110.84s
    Intel 15.0, -Ofast: 106.88s
The Intel compiler is relatively old, but mostly it seems to be a case of IEEE 754 conformance -- if enabled, things take longer, if disabled, they’re (probably) as fast in C as in Rust.
claudius··on E.U. Agrees to Cross-Border Access to Streaming Services
> You are calling my assertions lies, when you aren't citing anything to back up any of your assertions. That's not very civil debate and won't get us anywhere.

I also didn’t cite sources for my assertion that de Gaulle died and that the UK joined the EEC, all of these things are well-known facts. But do allow me to cite my source, namely from the preamble of the 1957 treaty, here in its English translation:

    HIS MAJESTY THE KING OF THE BELGIANS, THE PRESIDENT OF THE FEDERAL REPUBLIC OF GERMANY, THE PRESIDENT OF THE FRENCH REPUBLIC, THE PRESIDENT OF THE ITALIAN REPUBLIC, HER ROYAL HIGHNESS THE GRAND DUCHESS OF LUXEMBOURG, HER MAJESTY THE QUEEN OF THE NETHERLANDS,

    DETERMINED to establish the foundations of an ever closer union among the European peoples,
for an (unofficial, of course) translation, see for example: https://en.wikisource.org/wiki/Treaty_establishing_the_Europ... or http://www.hri.org/docs/Rome57/Preamble.html, the primary source at eur-lex.europa.eu seems to be down at the moment.

> If you mean the EEC membership referendum of 1975, this is the actual question the Brits voted on "Do you think that the United Kingdom should stay in the European Community (the Common Market)?" [6]. > That doesn't seem much like voting on being a member state of a United States of Europe to me. But maybe there are multiple ways of interpreting that, still newspapers referred to those in the yes camp as "pro-marketeers" or "Pro-Market" [8] which seems to suggest it was about economic trade and not so much political aspects of giving up national sovereignty.

The EEC was founded by the Treaty of Rome and literally the first sentence of the preamble of that treaty contains the phrase "ever-closer union". Please do explain how any reasonable person could think it was not about laying the foundation for a United States of Europe? You may argue that the UK-internal politics and media misrepresented the whole thing horribly, but you don’t fix that by leaving the EU.

← PreviousPage 5 of 34Next →