hellerve

Didn’t necessarily think you were saying that, but everyone’s looking for an easy excuse with security problems, so best we can do is hit them with the ol' “it depends" :)

Great article, by the way, thank you!

This feels very AI-slop-y, and the green username comments are triggering my spidey senses, but maybe I’m just getting old and grumpy?

That was quite fun, and I enjoyed the data mining aspect of it. Quite edifying, thanks!

i’d argue against just saying "An adversary with write access to files on your machine has better things to do than tamper with your Go cache — by rational choice, they’ll steal your secret keys instead." because that’s only true if I have access to both. If I only have access to the cache, I might use that capability to get a chain into the next level going etc.

I’m not saying that "a poisoned Go cache" should necessarily be part of everyone’s threat model, but I’d also not just dismiss it by saying "well, it requires disk access". Either might be wrong, depending on your situation.

No, a lot of people do that! That’s usually the response I get when I write about it :)

To be fair, this is an interview with him, not an article by him. Still content featuring him, but not quite the same level of endorsement.

This is really fun, and I don’t even like Golf in real life!

The physics feel a bit wonky, but maybe I just don’t get the interface completely yet. Sometimes the balls trajectory curved in a way that I didn’t understand.

As a data point: I can honestly say I’ve never heard of Gamergate before this comment, and I am a 31-year-old white male. I did read a book on Watergate when I was in my teens, though.

I think the downvotes are coming in because you are carrying out a fundamentally different argument.

The article argues that people used to be more intellecutally capable when they were younger and it diminished with age.

You are arguing that each generation used to be more intellectually capable than the one before, and that that is diminishing.

I’m not trying to accuse you of anything, but it seems like you didn’t actually read the article you were commenting on. Is that possible?

I recommend visiting the Ecomuseo in Palermo [1] if you ever have the chance. They examine, among other things, the lasting impact of the subpar building of now mostly crumbling structures by the Mafia that still litter the cities of Sicily.

Yes, the mafia built housing, but it’s not the kind of social housing we might hope for—it’s mostly slum-like. Of course, the city of Palermo is also EXTREMELY densely populated—I read something like the fourth-most densely populated city in Europe in a magazine once, but can’t source that now, so take it with a grain of salt.

Nota bene: I’m not Italian myself; my wife’s family has their roots in Sicily.

[1] https://www.marememoriaviva.it/ (website only (?) in Italian)

2 per week, i.e. roughly 100.

You might want to check out the sibling thread.

It might be a little glib, but that’s the main incentive I see here, especially since they’re exclusively using their own system, Github Sponsors, to direct the money. It makes sense, but if it was truly only about the maintainers, wouldn’t it be better to get the money to them through whatever means they choose to implement?

But you’re right: in the end trying to find out what their actual motives are is purely speculation, and I shouldn’t have phrased it as if it were a fact.

It seems like you are pretty angry at me trying to get the notion across that this is good, but they could do better. That’s okay, I can deal with that.

But I want to make one thing clear: I’m not doing this for HN karma. I haven’t commented on here in years, and this article prompted a reaction. Trying to somehow shoehorn that into "you’re only doing this for points” is invalidating that in a way that I find troubling, because, really, how can I prove you wrong? I might just have an opinion on something and wanted to engage with a community about it, or I might not. Only I can tell (and you, apparently).

EDIT: Correction. I submitted two comments 2 months ago that I forgot about, the comments before that are from 2019.

I make about €120,000/year.

I donate about $2,000/year to projects personally, not counting my time, and work for an OSS company.

Is that enough to be allowed to have an opinion?

> Is there even one $10M ARR business that has donated $500K even one time?

I don’t have exact figures for most of these companies, of course, but I have seen many small consulting or teaching businesses contribute a lot of money to OSS (here’s one such example, I don’t know the company, just a quick look on Open Collective: https://opencollective.com/frontendmasters). That’s because they rely on the success of those software systems to continue making money, of course, but I don’t think that’s any less true for the big payers.

> What about all of the banks, oil, retail etc. with enormous ARR?

I in no way meant to single out GitHub or insinuate that what they were doing was bad, that’s why I tried to end on a high note (to emphasize yet again: _it’s a great start_). What I’m trying to say is that I hope it doesn’t stop there, for GitHub or anyone else. The incentive to do it is higher when there’s good PR coming out of it, and that is mostly true the first time around. I’m hoping that there are more incentives at play than just PR (genuinely, not in a “but I don’t think so” way).

Fair enough, but should $500k coming from a $10M ARR business be received with the same applause as $500k coming from a >$1B ARR business?

Both are valid opinions, I think, but personally I tend to be more impressed by the smaller business.

At any rate, as I said, it’s a great start.

Hyperbole is a dangerous rhetorical figure, but I had hoped that I was clear enough so as not to be taken literally but, well, rhetorically.

I think companies or individuals contributing money to projects they rely on is great, and I personally do it and incentivize OSS development in my own consulting practice (through lower fees and philanthropy).

Now, should it be the main source of income for an OSS project, especially when it’s “critical infrastructure” (let’s just pretend that term is well defined and means whatever it means to each of us)? Probably not, and there should probably be a better way.

Whether science funding in particular is a good model I would debate, since it can be such a beauty pageant at times.

I’m of two minds about this:

- On the one hand, for GitHub, 500k is nothing, just a PR move. For maintainers, $500 might make the difference between struggling to pay rent and having enough money to leave it in the bank, or having a nice dinner at the end of the month.

- On the other hand, for GitHub, 500k is nothing, just a PR move! If they really wanted to show appreciation for the maintainers that power a billion dollar business, more than a drop in the bucket would be great.

So, I guess it boils down to: that’s a great start, don’t stop there!

I wasn’t particularly interested in entering the discussion (mainly providing the link and an explanation), but I used the word "feudal" because Yarvin himself used it, in the name as well as in the description of the system.

I presume the author is referring to this blogpost[1]. The proposed name of the system is actually "Feudle", which might have made it harder to find for you.

The word "woke" did indeed not make an appearence, but this choice quote: "Eventually, all desirable content will move out of the anarchic slums and into this new, happy gated community. And junkies will be shooting up in the old Google building." His idea seems to have been that hierarchic—or "feudal"—arrangements would be preferrable to the "anarchic" ways of information indexing Google uses.

1. https://www.unqualified-reservations.org/2010/03/future-of-s...

Thanks for suggesting him! I was unaware of his talks, and instantly fell in love! The first talk just made the list, and I’m planning on looking through more of his talks in the coming days.

Sadly not! It’s also worth pointing out that not all of the talks are hosted on YouTube.

Maybe `youtube-dl` can help you anyway, though!

Super interesting work, thanks!

At one point I just stopped adding people to the list, but I guess that doesn’t make much sense. Gary Bernhardt and more than just a few other people from your scrape deserve to be on that list!

They’re some of my favorites (the Hammond organ one is just hilarious)!

Sometimes it’s just hard to categorize things, and things end up in a low-visibility section like Miscellaneous.

Original curator here. I don’t have experience with either TypeScript or C#, so I rely on other people pointing me at great talks in this space!

I do have a slight skew towards functional programming, so this list probably reflects that—I’m still the person who’s added most talks, and probably one of the few or even the only person who has watched all of them.

You want exceptional talent, you know that they need to be “pampered” to take the job, and yet you make them fill out a form before they even talk to you? That doesn’t sound like a great tactic.

In my experience the single best free tactic for vetting candidates is having them be referred by your employees. Of course you’ll still have to look at them yourself like at any other candidate, but at least they have a direct reference you can talk to. If your employee is any good, chances are the people they want to work with/have previously worked with and enjoyed it are as well.

If you’re interested in how this works or would like to try it out you can also checkout the blog post I wrote about the system:

https://blog.veitheller.de/Introducing_anima.html

Please note that you have to have Carp and SDL2 (including SDL_image) installed.