HNHacker News
TopNewBestAskShowJobs

cookiecaper

15,526 karma · joined July 20, 2008

Always interested in hearing criticism and feedback. Please don't be shy and send me a mail at hn@jeffcook.io.
submissionscomments
cookiecaper··on RIAA’s YouTube-dl takedown ticks off developers and GitHub’s CEO
Whatever the public perception is, they did indeed get Napster et al offline, which I think is the thing they cared about.

Not sure that they interpret the Streisand Effect in the conventional way. If anything, temporary increase in usage of targeted tools helps them make the case that they're being harmed by said tools' existence.

cookiecaper··on YouTube-dl has received a DMCA takedown from RIAA
The beauty of `git clone` is that there are copies of the repository on many thousands of hard drives (including mine -- last pulled a few days back). The main loss at this point is the metadata stored in GitHub's proprietary addons, like issues.

We can hope this inspires a) greater suspicion toward proprietary players that are sitting atop open-source work like GitHub (they're not the only one by any stretch); and b) greater adoption of systems that distribute the software's entire history together, including documentation and bug reports, e.g. Fossil.

cookiecaper··on I miss Microsoft Encarta (2019)
I'm not familiar with Authorware specifically, but there's a whole lost world where computing was extremely rich in visuality, dynamism, and play, and the striking thing is that these qualities were expected to enhance peoples' useful output. Some of the early Smalltalk demos exhibit this beautifully, and they're from the 70s. It almost feels like the era of "rich media" embodied by Encarta, "animated storybooks", etc., was the dying gasp of that conceptualization.

The common association with computers as mechanisms of boredom, exclusion, and wage slavery is so strong now that it's hard to imagine anyone seriously countenancing the old paradigm that the technology was meant to allow. I don't know whether that outcome was ultimately inevitable or not, but either way, it's massively disappointing.

cookiecaper··on Ask HN: How do you deal with chronic illness?
Partial agree here. HR can be useful but it depends on the company's culture and under good circumstances, it won't be needed. You want a place that will appreciate your contributions and appreciate the value of their long-term investment in people.

If it becomes apparent that $CURRENT_EMPLOYER is not such a place, it's time to start protecting yourself with things like formal disability accommodations through HR, etc. The problem is that once this becomes apparent, shrewd politicians will have already worked to make it look like your accommodations are just a cover-up. That's not necessarily a deal killer, as every company puts a different weight on the legal risk that HR exists to prevent, but it's not likely to ingratiate your manager, which makes things difficult.

The long and short of it is that it's folly to imagine that HR is in your corner. They are paid by the company and they exist to keep the company free from the mind-boggling expense of lawsuits. You can work this to your advantage sometimes.

cookiecaper··on PostgreSQL 13
I should clarify. I'm not saying that Postgres is unworthy or that its adoption is fashion-driven -- it's part of the 5-10% that is driven by practicality. That is only the case now because, as you said, there is no fashionable conventional RDBMS anymore. It's all about transferring as much money as humanly possible to Jeff Bezos now. :)

The grandparent was asking what we can learn from Postgres in terms of driving adoption, as I understood it. And the reality is that most of Postgres's recent adoption uptick is because there really aren't many other options. It's not a good example of driving adoption in a crowded market, etc.

My apologies for being unclear before, and thanks for pointing it out so I can try to clarify.

cookiecaper··on PostgreSQL 13
afaik, MySQL never had a better replication story than PostgreSQL, you've always had to use Percona's add-ons to get something workable. Even then (many years ago), we had multiple data loss incidents that were precipitated by widespread internal confusion over the bizarre intricacies of `binlog_format`.

Like most software that gains adoption, MySQL made some very broad claims about their software's capabilities and never really delivered on them, at least not in a way that would be considered production-ready by Serious Persons(TM).

That's the crux of MySQL v. PgSQL, Linux v. BSD, etc. Good engineers spend their time building good software and are generally too focused on that to spend much time going around and making outlandish promises. Postgres has benefited from Oracle's intentionally-bad stewardship over MySQL, but it doesn't usually work that way.

cookiecaper··on PostgreSQL 13
Do people ever look at how much more they're paying for Aurora? I've saved companies thousands of dollars per month just by switching them to standard RDS instances for systems that see tiny load and were only on Aurora because that's "the super good AWS-optimized version, duh".

The added benefit of this is that you then know what software you're running, instead of Amazon's fly-by-night hackjob. We've hit several real-world bugs that were either incorrect backports of something that had been patched years before upstream, or wholly new issues caused by whatever they're doing to make Aurora auroar.

cookiecaper··on PostgreSQL 13
> Anyone can share what makes PostgreSQL so successful? Maybe other projects can learn adopt a few of these good practices.

Since honesty is a theme of this thread, let's be real here. PgSQL is popular now only because Oracle killed MySQL.

This is not to denigrate the work of the Postgres team -- it's easily one of the best-managed open-source projects and my admiration for them is immense -- but ~95% of the time, the tech stack is chosen as a fashion statement.

MySQL was fashionable until Oracle showed up. Postgres has been trucking along for decades and has essentially won by default. I don't know if there are many great marketing insights to take away, other than "stay out of the way of the $50B gorilla".

cookiecaper··on Lenovo’s IdeaPad Slim 7 is a showcase for AMD’s exceptional new processor
Just missed the edit timeout, but noticed that GeekBench run was on battery. Here it is with the system plugged in. https://browser.geekbench.com/v5/cpu/3689889
cookiecaper··on Lenovo’s IdeaPad Slim 7 is a showcase for AMD’s exceptional new processor
Fedora 32 works reasonably well, just some minor hiccups, such as:

* There is no driver for the Goodix USB fingerprint reader yet

* Occasionally thin lines of pixels don't update correctly (hard to describe, might get a photo soon)

* dmesg logs periodic errors with amdgpu and the new driver for the realtek wireless card, but I haven't noticed any negative functional impact associated with these.

* The TSC is marked unreliable on each boot.

That said, it's plenty usable as a daily driver, and the performance is very strong for the price point. GeekBench 5 results at https://browser.geekbench.com/v5/cpu/compare/3495992

cookiecaper··on FTC Is Investigating Intuit over TurboTax Practices
FYI those letters are, afaik at least, typically grossly overestimated. The number is meant to scare you into calling a CPA to straighten it out, essentially. So for anyone else with the same kind of letter, don't just pay unless you know that it's correct ahead of time.
cookiecaper··on The software industry is going through the “disposable plastic” crisis
Definitely the case, people don't realize how much a weak link in the chain can break the whole structure, and just how much influence the command structure can have. I've worked places where all my peers were very smart and well-qualified and still ended up outputting what boils down to smart trash because a middle manager somewhere refused to allow them to structure things well. Conway's Law isn't dependent on the group's collective IQ.

A little sensitive on this due to a recent experience where I was hired and given "ownership" only to have my very modest proposals for changes shot down if not just entirely ignored. Some "ownership"!

cookiecaper··on One Year of Nushell
PowerShell is underrated, but it's its own worst enemy, stubbornly insisting on LongForm-VerbNoun syntax for all but the most common commands that anyone familiar with the shell would expect. A few UI touchups and it could go substantially further, especially as MS continues quietly gutting the NT heritage out of Win10 and integrating more and more nix-like features, including full Linux kernel emulation, all so you can run Docker without a VM! What a world.

I continue to believe that within 10 years, Microsoft will have just switched entirely to Linux+WINE under the covers. :)

cookiecaper··on How Shopify reduced storefront response times with a rewrite
Yeah. Consider that BigCos end up writing transpilers and new runtimes for their target platforms before rewriting the application, which would entail discarding the decades of built-in bugfixes and application logic as well as reconstructing the organization around a different platform -- HipHop for PHP, Grumpy, etc. A language change is no small thing in any company of appreciable size.
cookiecaper··on Rideshare operations are being suspended in California
Yeah, there are many reasons that people like driving for Uber and/or Lyft, and it's very closed-minded to say that the market can't exist if it doesn't fully and completely replace a "real job" for all of its drivers, up to and including full-time employment with attached benefit packages.

I've had friends who've done it just because they enjoy meeting people who are coming into town and hearing their stories, telling them about the area, etc. Many of the rides I've taken, upon talking to the driver, they'll say they do it because it gets them out of the house and they can work whenever they want. Very few of the people were trying to use it to replace a conventional employment situation.

We should all be grateful that the state is rescuing all of these people from the exploitative habits of these unprofitable companies, I guess.

cookiecaper··on Tampa teen accused of being ‘mastermind’ behind Twitter hack
My guess would be that he is being tried as an adult and thus not eligible for the protections afforded to juveniles.
cookiecaper··on Apple reports Q3 results
Yes. The reality is that COVID unemployment checks have made it so that a lot of people can finally afford this type of upgrade. Many people are receiving a larger "paycheck" now than they've ever earned in their life.
cookiecaper··on Not an Amazon Problem
They're serving different market segments. Costco literally charges an admission fee. "Pay me money to come spend more money inside my store and it'll be really cool, promise" is the antithesis of the Walmart philosophy. Walmart itself recognizes this, which is why Sam's Club exists (no reason to let a competitor run away with that less price-sensitive market segment without a fight, of course).

For any arbitrary shopper-item combination, as long as the item can fit the basic merchantability requirements over the duration of the return period, the only significant criterion is going to be price. Knowing this and then ensuring that they have the cheapest merchantable items in every product class is how Walmart became the de-facto shopping nexus everywhere that major social and/or governmental interference hasn't stopped them. It's the place to go to get the stuff you have to buy, not the stuff you want to buy.

If your standards are too high to wear a shirt that consists of 80% recycled plastic, you don't buy shirts at Walmart. But that doesn't mean you automatically have the same high standards for a garden spade, a toilet seat, or a kitchen spatula. If we imagine that we need all four of these items today, we go to Walmart to buy the latter three and then use the money saved to invest in a better 100% cotton shirt from $FAVORITE_SHIRT_VENDOR.

cookiecaper··on Firefox 79
I don't think Brave's attempts to integrate BAT are either a scam or a pump-and-dump. I think they're sincerely just trying to figure out how to move "the internet" to a revenue model that doesn't necessitate holding its users hostage.

Every decentralized or censorship-resistant network gets dragged down to the worst of its adopters in the public consciousness (not entirely by accident IMO). It's sad, but should be acknowledged as par for the course at this point. If you're not going to fall into line, expect the power brokers to mix you up with the worst of 'em.

cookiecaper··on New ‘Meow’ attack has deleted almost 4k unsecured databases
The thing is that no one cares. It's a cultural issue. If Elastic makes it "harder" to get off the starting line by setting secure defaults, they'll get their lunch eaten by a fork called EasyElastic that people perceive as "easier".

This probably isn't an excuse for Elastic anymore, but it's how Elastic was born ("easier than Solr!" -- they didn't invent full-text search, after all) and it's how whatever supplants Elastic will be born. Why is MySQL dominant over Postgres even though "referential integrity" didn't come to the game until v5? Why Docker over jails or OpenVZ? etc. People adopt technology because it's fashionable and it becomes fashionable in part because it's perceived as easy to use. Security and ease-of-use are not quite true opposites, but there's definitely some intrinsic tension.

We have a lot of hapless practitioners in the space and the root problems here won't go away until we get some standards. Better solutions usually lose because crappy stuff focuses more effort on marketing and an "easy" onboarding process, where better stuff focuses on the operational complications of the real world.

cookiecaper··on Fawkes: Image “Cloaking” for Personal Privacy
I think that technique probably works a lot better with high-resolution professional headshots than it does with candid photos at the family reunion, for example.

However, if someone is willing to go to that level of effort, the target probably needs to aim for something a little more forceful than tricking Facebook's autotagger.

cookiecaper··on Fawkes: Image “Cloaking” for Personal Privacy
The goal, afaik, is to stop facial detection software from learning to recognize you and put a face to a name, not to frustrate visual similarity searches. The images are supposed to be visually similar -- so similar that they're indistinguishable to a human viewer.

Surveillance software that purports to accurately identify a person across multiple images is not just looking for the same content with some visually insignificant modifications. It's reading your facial structure, attaching your name to it, and searching for it in every image received. Fawkes is working to defeat that specific use case, not all fuzzy matchers in general.

P.S. If you have a human assailant running a reverse image search for photos of you, I think you're well past the point that something like this could be expected to help.

cookiecaper··on A React implementation of Spectrum, Adobe’s design system
It's not just Rails, it's basically any semi-modern development toolkit. JavaScript's minimal standard library is one of its biggest flaws and one of the richest sources of exploitation, as exemplified by the left-pad fiasco.

It's not even about the standard lib as much as the culture. Ignoring the fact that it would take years for the changes to become widespread enough to be usable, "pull in 400MB of dependencies for everything, including dependencies of dependencies" is practically a cultural value in the JS scene. It demonstrates why JS is voluntarily practiced primarily by the inexperienced all these years after it established itself as the universal platform.

cookiecaper··on Fawkes: Image “Cloaking” for Personal Privacy
> What we really need is Fawkes face paint.

Check out https://cvdazzle.com (archive link, because honestly I'm surprised the site is still up: http://archive.is/v39xI)

cookiecaper··on Mormonism and Multilevel Marketing Companies
I've got to commend the OP here for having the guts to title this appropriately whereas Cambridge titled it "Institutions, the social capital structure, and multilevel marketing companies" when the abstract states that they explicitly (exclusively?) focus on MLMs in relation to Utah/Mormonism.
cookiecaper··on Zulip 3.0: Threaded Open Source Team Chat
No, we've had several experienced users immediately disengage because they felt overwhelmed and/or confused (not using as synonyms here, but common related reactions) by the interface. Performance issues, especially on mobile, haven't helped. Most people are just annoyed that you aren't using their favorite chat app already.

Zulip is promising but I think there's a little bit of a bubble around it here on HN. In the real world, its reception is much more mixed, and outside the context of software development, topic threads are awkward and difficult to manage.

cookiecaper··on Starlink WiFi Router FCC Approved
Most ISPs don't require this -- you can use your own equipment if you wish. Most customers take them up on the rentals, though, either because they don't know any better or because it's easier than buying and maintaining their own equipment.
cookiecaper··on Perl 7 is going to be Perl 5.32, mostly
I think the point is not that Perl's rules don't make sense -- it's that they're much less obvious than those in many competing languages. In Python, lists are `l = [1, 2, 3]` and dicts are `d = {"key": val}`. Both structures can be nested without any change to the semantics.
cookiecaper··on Dynamic linking
It's not Gentoo, but in practice, many frequently-used packages remain in the AUR and an AUR helper to make that transparent is standard kit for anyone using the box as a workstation. It's much more "source-based" than it may appear at first glance. I have ~15G of self-built packages sitting in my PKGDEST right now, if that counts for anything.
cookiecaper··on DHH: The HEY stack Vanilla Ruby on Rails, MySQL, redis, stimulus, elastic search
Elsewhere in the thread it says they have a goal to be free from "Big Tech" within 5 years, but that there are no reliable non-Big-Tech cloud platforms at the moment. Apparently "cloud" was a mandatory part of the platform. ️
← PreviousPage 2 of 34Next →