HNHacker News
TopNewBestAskShowJobs

kstrauser

34,219 karma · joined March 27, 2011

I make things. I’ve learned a lot from messing up along the way. It always works out OK in the end.

I don't speak for my employer, obviously. I barely speak for myself half the time.

I blog at https://honeypot.net/

Write me at kirk@strauser.com

submissionscomments
kstrauser··on Show HN: Vela, a New Linux Desktop Environment
Cool! By any chance, is it written in either Vela[0] or Vela[1]?

0: https://vela-lang.org/

1: https://realm-labs.github.io/vela/overview/

kstrauser··on TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8
One example is that you might be able to read what was written there. Here that may mean you could read another process’s packet(s). Imagine they were sending unencrypted passwords, perhaps because it’s in a trusted LAN connection.
kstrauser··on Halloween is a crass American import – I'll never indulge it
Maybe that’s it.
kstrauser··on Halloween is a crass American import – I'll never indulge it
Eh. I’m American. I love grumpy British humor roasting us. This article was more “old man screams at cloud”.

Basically, we’ve been called worse by better. This roast was hardly worth an amused tsking.

kstrauser··on Why Did Meta Suspend a US Senate Candidate's Instagram in the Middle of a Rally?
That’s exactly right. Every time I heard hand-wringing about some right-wing person getting suspended, it’d inevitably trace back to that person saying something incredibly outlandish, racist, or otherwise rule breaking. I did not see one example of anyone being suspended for being a Republican. Not one. Zero.
kstrauser··on French digital tax may kill VideoLan non-profit
And for households with kids, it's easy to imagine that turning into 30 hours a month, or $12 by your reasonable estimate. That's not a huge number, but I'm sure that'd push almost any streaming service into negative territory. I don't know what the average service's profit margins are, but highly doubt any of them could absorb that kind of hit.
kstrauser··on The federated code forge
Love it. Thanks!
kstrauser··on The federated code forge
How soon will that be, do you suppose? It's not a blocker for most of my projects, but I can think of a few that I'd like to keep more closed (while still making them publicly cloneable). That doesn't keep me from using Tangled today for the open repos. It just means I'd need to have at least a couple of sharing setups - Tangled plus Forgejo - going at the same time for a while.

Also, will Tangled support private repos that are only visible or fetchable to specific people? Would that even make sense in its model?

kstrauser··on The federated code forge
Got it. I'm still trying slightly unsuccessfully to wrap my head around this, but I've run a Mastodon instance for about 10 years and it took me a little while to wrap my head around that, too.

This is great. I'm delighted at the idea of having my own knot hosting my projects, talking to my friend's knot, and coordinating on a global project's knot, all without having to lock everyone into one centralized point of failure (even mine). Amazing. I love it!

kstrauser··on The federated code forge
I’m excited about this direction. I’ve moved most of my own projects onto my own Forgejo, but miss it being easy for remote strangers to open PRs and such without registering in my system, which I have zero desire to allow.

So what’s the state of Tangled today? Say I have a Tangled server (instance? host?) up and running with my repos. Some stranger wants to contribute. What do they have to do before they can open issues or send PRs or whatever?

kstrauser··on Commodore 1600 VICmodem
I learned very quickly that computers are simultaneously really smart and really dumb. That's served me well over the years.
kstrauser··on Commodore 1600 VICmodem
I think I typed in the terminal program from the book to start. That’s the day I learned that not every computer agreed what number “a” is.

An older peer quickly set me up with a better terminal on a floppy.

kstrauser··on Commodore 1600 VICmodem
This got me online, dialing first to my buddy, whose dad almost bought him a modem. We chatted a few times and that was fun. I found BBSes. He wasn’t into it. The rest is history.
kstrauser··on If IPv4 were land
Very weird take, and not supported by facts or evidence, but OK.
kstrauser··on If IPv4 were land
> The 50% stat is really mostly mobile phones on cellular networks, which remain the _only_ major success story for IPv6.

The largest ISPs in the US are Comcast, AT&T, Charter, Verizon, T-Mobile, Starlink, and Google Fiber. They all support IPv6. The only top-10 US provide that didn't support it is Frontier Communications, who is rolling it out.

In other words, the biggest companies who actually do this for a living all demonstrate that you're wrong.

As to your questions, read up on IPv6 ULA which solves all of them. None of the hosts on my LAN depend on having an outbound connection.

kstrauser··on If IPv4 were land
> Most security conscious operators would only allow IPv4 instead of IPv6.

I strongly disagree. That's obsolete knowledge, thrown around by people who want to be considered security conscious but haven't actually updated their knowledge in many years. A statement with similar implications might be "security conscious operators require their users to rotate their passwords monthly", which is what a lot of people use to think a decade ago, and now what it really communicates is that you're talking to a dinosaur.

kstrauser··on StackOverflow now gets fewer than 1000 questions a month
I’ll be frank: I no longer care enough about SO to bother with researching it. The results of all the rules lawyering and purity tests ruined the fun of it for me — and according to the graphs, everyone else, too. It just wasn’t enjoyable anymore. I like answering questions and teaching and explaining. I don’t like spending more than 0% of my time dicking around with gatekeepers.

No amount of “you’re holding it wrong” could convince me that the millions of people who wanted to use it the way it was broadly described were truly doing it wrong. The payoff for slavishly doing things the “right” moderator-approved way just wasn’t worth the effort.

kstrauser··on StackOverflow now gets fewer than 1000 questions a month
Me personally? Reddit. For the languages and technologies I worked with, their subreddits were far friendlier to reasonable questions, even FAQs, even if they weren't pristinely composed. There was also a recency bias that I appreciated. If you brought up a subject that was asked last year, people would link back to the earlier conversation while continuing the current chat given new developments. An example might be:

> Q: What HTTP library should I use?

> A: Last year everyone liked Requests [link to chat], and that's still good, but if you're using async you might look at aiohttp which is newer and not quite as polished yet but has much better async support.

Those were the answers that would've kept SO relevant: here's what we all thought last time this came up, but here's how the situation has evolved since then.

Reddit came with its own problems, of course. The programming subreddits hadn't (yet?) been as weighed down with those issues when I weaned myself off going there.

kstrauser··on StackOverflow now gets fewer than 1000 questions a month
That's not quite right. Deletionists campaigned to be elected as moderators based on the number of questions they closed. For example: https://stackoverflow.com/election/14

They did not directly increase the integer counter of their reputation score. They did use it to explain why they should be granted increased human reputation as a moderator.

kstrauser··on StackOverflow now gets fewer than 1000 questions a month
No. That's ridiculous. Whatever the rules say, there's never a situation where it's morally OK to change someone else's words and leave them attributed to them. Imagine I had edit rights here on HN, and I could change your message to:

> I think goats are sexy.

> - jodrellblank

Even if the site allowed it, or even encouraged it in certain small circles, you would not be OK with this. Or if you would, surely you could appreciate that other people absolutely would not be.

Sometimes people edited my SO answers in ways that were factually incorrect. A colleague or would-be employer might see that wrong answer attributed to me and suspect that I'm incompetent. That is not acceptable. Again, it doesn't matter if the license permits it. Morals and ethics do not.

This is different from, say, forking my software project and releasing an altered version. People would prominently see that you're publishing the changed version under your own name. That's fine. You having the ability to go in and change my own published code, without my permission, so that people see my name on your work, is morally and ethically wrong (and a major security risk). No rule or guideline on SO can override that principle.

kstrauser··on StackOverflow now gets fewer than 1000 questions a month
I think a lot moved to subreddits. You could ask a decent question there and actually get answers, even if it didn’t meet SO’s purity requirements.
kstrauser··on StackOverflow now gets fewer than 1000 questions a month
That approach was untenable because then it still attributed the answer to the original author, even when the content was updated. That could cause real-world issues. “Hey, why did you say that Python is untyped on SO? I thought you knew something about it.” “I never said any such thing.” “Here’s your answer where you say it!” “WTF.” And sure enough, there’s some dumb answer with crappy grammar and mistakes, still attributed to you.

That was a terrible, awful plan, and I always reverted edits to my answers that went beyond fixing typos or updating old links.

kstrauser··on StackOverflow now gets fewer than 1000 questions a month
From far down in the shady distance of the alley, a small voice shouts back: "Closed, duplicate!"
kstrauser··on StackOverflow now gets fewer than 1000 questions a month
It's astonishing how vastly different our experiences were. I trawled the new Python questions frequently, looking for fun, novel things to answer. It was dismaying how often they'd been wrongly marked as dupes, often because the original answer was ancient and obsolete. It would often be egregiously bad, like:

Q: How do Python's dict preserve insertion order?

A: [duplicate of "Why does a Python dict's keys have a different ordering each run?"]

It was clear that the mod/curator/whatever spent no time attempting to understand what was actually being asked, and linked it to something that was completely incorrect as an answer to the real question.

I saw this constantly, so frequently that I'd be hard pressed to answer with specifics. If you asked me "when did you last eat a fruit bat", I can tell you the month and year because that stood out. If you asked me "when did you last eat spaghetti", I'd have a hard time saying.

kstrauser··on StackOverflow now gets fewer than 1000 questions a month
Fair.
kstrauser··on StackOverflow now gets fewer than 1000 questions a month
To be fair, there was a lot of X Y question asking there. "Would it be better to use MySQL or PostgreSQL to implement a clone of the Redis protocol? We're deploying an app that needs a 100% compatible Redis API. We own the Linux server it'll run on. Which should we use?" Uh, can you just use Redis? "Don't XY me!"

I'm not saying that's the problem you had, not at all. I do see why some of the answerers were quick to jump to it though.

kstrauser··on StackOverflow now gets fewer than 1000 questions a month
How so? I stopped hanging around in Perl-land around 2001 and it seemed friendly enough way back then. What happened to it?
kstrauser··on StackOverflow now gets fewer than 1000 questions a month
That infuriated me and I revoked those edits constantly, until I gave up and left the site altogether. I'd rather you steal my answer and put your name on it than put your own words under my name. Fix some dumb typo I made on mobile or something, sure, fine. Edit my answer to change the meaning or phrasing whatsoever? Oh hell no. Go make your own answer, and don't lie and say that I was the one speaking your words.
kstrauser··on StackOverflow now gets fewer than 1000 questions a month
Right? It's not a very subtle spike, is it? Even then, if you erased the bump, the graph is pretty close to a straight downward-sloped line from 2016 to late 2022.

It's kind of sad: I bet there was some excitement around the SO office. Is this it? Are we on the way back? Have people remembered that we're here and now they're returning? Alas, no, they weren't, and they weren't. That must've been rough.

kstrauser··on StackOverflow now gets fewer than 1000 questions a month
I did too! The gamification was fun, but more than that it was just really enjoyable to help other people. I like teaching, and SO was like the crack cocaine version of that.
← PreviousPage 2 of 34Next →