HNHacker News
TopNewBestAskShowJobs

gluczywo

149 karma · joined March 15, 2013

submissionscomments
gluczywo··on Goldman Sachs Report Explores Use of Bitcoin as Currency
"banking the unbanked"

It has never been the goal of bitcoin. The original Satoshi paper rather implies the "unbank the banked" objective which is to remove corrupt middleman.

gluczywo··on What are you banned from? Why?
This story has the happy ending.

To understand what may happen to the US visitor read this book: https://www.goodreads.com/book/show/30524537-the-russians-ar...

I can confirm it's not fiction as it was written by father of my friend.

TL;DR from goodreads:

During a short business trip to California, Irishman Denis Sugrue was arrested and accused of spying for Russia. But this is no Cold War thriller - this is 2005 in Bush's America.

Facing ten years in federal prison, Sugrue must negotiate the corrupt corridors of American justice and attempt to convince FBI agents that the fact of his innocence outweighs the embarrassment of a failed prosecution.

gluczywo··on Web Push API centralized nature
tl;dr

Web Push API requires centralized service the messages are sent over what has serious privacy implications. Android Chrome makes it even worse because it does not allow changing the Push API provider (Google's proprietary GCM/FCM is used)

gluczywo··on Peer-to-Peer Communication Across Network Address Translators (2005)
While NATs might have contributed to its demise, there were more fundamental reasons why CORBA failed.

For anyone interested in thorough analysis instead of opinions I recommend this really good article from 1994:

https://github.com/papers-we-love/papers-we-love/blob/master...

gluczywo··on TunnelBear Publishes Security Audit
Fruho is a decent VPN GUI on Linux
gluczywo··on Where Tcl and Tk Went Wrong (2010)
Tcl is a great language and ecosystem. It fell victim to a few independent political decisions that resulted in low popularity:

- Sun's pushing Java and killing everything else

- Stallman's distaste for anything non-GPL

EDIT: wording

gluczywo··on In a Robot Economy, All Humans Will Be Marketers
True for an individual.

For life seen as a part of system/society reproduction is the key motivation (for lack of a better word). Non-reproducing activities are irrelevant temporary aberrations because societies that don't reproduce get extinct and are replaced by societies that focus on reproduction.

gluczywo··on Monolith First (2015)
even experienced architects working in familiar domains have great difficulty getting boundaries right at the beginning. By building a monolith first, you can figure out what the right boundaries are

This line of thought reaches two decades ago and was expressed in a wonderful essay "Big Ball of Mud" http://www.laputan.org/mud/

EDIT: updated with the quote

gluczywo··on TIO: Try it online
For Go: https://tio.run/##S8//X5CYnJ2YnqqQm5iZx5WZW5BfVKKglJZbovQ/rT...

BTW Do we really need ~540 bits (~90 chars of base62) to identify permanent link?

gluczywo··on TIO: Try it online
This was my first thought: sandboxing is gonna be tricky for such project.
gluczywo··on Programming Books
"Network Programming in Go" is no longer free so it should be removed from the list.

This book has been removed as it will shortly be published by APress.

gluczywo··on Build a Serverless Web Applicaion
It's not only a misnomer but the term is not needed. We've had SOA, web services, microservices, now serverless. I'm not saying it's all hype. It's rather a steady, lasting a few decades, transition towards outsourcing by encapsulating complexity into services. For me we've just arrived to the point where web services are mature enough so they can be consumed directly from the browser.
gluczywo··on South Australia teams with Tesla, Neoen to build world's biggest Li-ion battery
Unfortunately no word on durability and maintenance guarantees. What happens after a few years when batteries lose most of their capacity? Who is going to take care of recycling? I'm honestly curious about details because as opposed to lead-acid batteries industry, there is no profitable or existing li-ion recycling market.
gluczywo··on Show HN: Evilpass – A slightly evil password strength checker
You are right. The second point remains valid though.
gluczywo··on Show HN: Evilpass – A slightly evil password strength checker
With the difference that when user types the password it is not displayed on the screen. Server-side generated password must be somehow presented to the user.
gluczywo··on Show HN: Evilpass – A slightly evil password strength checker
systems should probably not let users pick their passwords. That is they get to pick a generated password (by the system)

It implies that the system knows plaintext password. Even if the system deletes the password and keeps a hash, it remains the problem of distributing that password to the client in a secure way.

gluczywo··on No CEO: A Swedish company where nobody is in charge
It might be the natural size optimal for efficiency but not for survival (in the natural selection sense). The capacity of an organization grows with headcount even with diminishing efficiency per capita.
gluczywo··on Blockchain could save investment banks up to $12B a year: Accenture
This is so terrible use case for blockchain. In a trusted environment blockchain might only introduce complexity and security problems. Hey, but isn't it what consulting is about?
gluczywo··on Go 1.8 Release Candidate 1 is released
You can view GOPATH centered development as a sign of simplicity. Probably not the most elegant thing in the world but the code organization is easy to fix with:

ln -s PROJECT_SOURCE_FOLDER $GOPATH/src/

gluczywo··on What science says about naming in programming
AbstractLocalObjectFactory is a long name but carries little meaning.
gluczywo··on What science says about naming in programming
I had no idea the rule is a classic. It's frustrating that with a little more education I would have spared plenty of time spent reinventing the wheel.
gluczywo··on What science says about naming in programming
Naming is related to scope and I'm surprised there is so little about it in the article. While trying to find an universal principle I came up with this rule: "identifier's entropy should be proportional to its scope".

Global variables (if any) are long explicit phrases while inner loop variables can be a single letter.

Without taking scope into account the naming guidelines become dogmatic and impractical trivia.

EDIT: wording

gluczywo··on AI’s Language Problem
AI researchers overestimate the role of language in the development of human-like intelligence understood as a common sense heuristic physics that is built empirically through non-linguistic experiences (e.g. if I turn that glass, the wine spills and leaves dirty stain on the couch what has further consequences). The one that is most difficult to implement/reproduce/emulate by machine.

Language is only a communication protocol most efficient in an interactive context (dialog) that allows two agents with shared but not identical set of experiences achieve understanding in some domain and context with the caveat that understanding is unprovable and not absolute. Understanding that is only empirically tested and behavior probed (e.g. long after successful conversation Agent Alice discovers that Agent Bob "did not get it" as she expected).

By analyzing sole language without experiences, the machine, using something like word2vec, may discover semantic dependencies (e.g. man + cassock = pedophile) but not true semantics that has world consequences.

Even with unlimited language corpora the machine does not have the set of axioms that humans have (experiences and observed stories). These axioms are needed to build further more abstract knowledge.

gluczywo··on Why aren’t we using SSH for everything?
SSH lacks a key distribution/certification model for server authentication.

The article describes server authentication (in the section with misleading title "SSH connections are encrypted") but does not mention the fact that fingerprint should be sent over another secure channel and manually verified.

gluczywo··on Don't Outsource Your Thinking (2015)
You are probably referring to the quote from Whitehead:

"Civilization advances by extending the number of important operations which we can perform without thinking about them."

And while it is a powerful line, in case of media and journalists I made a habit of thinking deeply about every message I receive in terms of what is the hidden agenda their mighty landlords try to convey.

gluczywo··on Go-style concurrency in C
> "Libmill is intended for writing single-threaded applications."

You can do concurrency on a single thread. This is the message I find it hard to get across when explaining CSP concurrency libraries.

Some people argue about usefulness of such libraries as being not native and leaky abstraction. I developed Go-style concurrency "port" to Tcl:

https://github.com/securitykiss-com/csp

and it is one of few developed-in-house things that became the productivity booster in my toolbox.

The interesting thing about it is that thanks to the expressive power of Tcl I was able to port not only the semantics but also almost completely mimic Go syntax.

gluczywo··on Why do we need modules at all? (2011)
"There's a good an bad side to modules: Good: Provides a unit of compilation, a unit of code distribution. unit of code replacement"

I think that Joe ignores the major rationale for modularization.

Modules provide the way to cut out the fragment of a complex project and apply local reasoning to it.

In other words a module is the way to "divide and conquer" the complexity that crosses the border of the single mind's capacity.

As such a module is not about code compilation, distribution and upgrades. It's about human cognitive abilities.

gluczywo··on Why do we need modules at all? (2011)
What I meant is not incompatibility of basic types across languages but the tendency to create named classes where they are not needed. For example the OOP tells us to create UserList.java instead of using List<User> because it allows attach behavior and preserve encapsulation.

Having 325 results for UserList.java in Krugle:

http://opensearch.krugle.org/document/search/#query=userlist...

I can't image how to create globally reusable function that has the list of users in the signature.

gluczywo··on Why do we need modules at all? (2011)
The prerequisite for such a way of programming is to use plain universal interchangeable data structures.

It does not seem possible in mainstream languages where the OOP dogma tells you to obfuscate your sets, lists and maps and turn them into non-reusable classes.

gluczywo··on Tcl Static Prime: experimental compiler for Tcl that produces C or Java code
I didn't believe I'd see the day when a larger Tcl project reaches HN front page. This looks really exciting and ambitious. John Ousterhout mentioned in one of the interviews that he regrets he didn't manage to produce the Tcl compiler while working in Sun.

While in my day to day work I don't feel the need for the compiler (starkits are good enough) it might attract more performance concerned people to this powerful but forgotten language.

For me returning to Tcl is always an immense pleasure. This is what it gives out of the box:

  - convenience of bash
  - power and elegance of Lisp
  - self-containing no-dependency nature of Go
  - clarity of Python
  - probably unique for the entire industry reliable cross-platform GUI toolkit
  - simplicity of Dodecalogue
What Tcl is missing:

- good handle on concurrency in bigger projects (with scale, events lead to spaghetti or mega state machines). I tried to address this one myself by developing Golang/CSP style concurrency library https://github.com/securitykiss-com/csp

- large community

Page 1 of 2Next →