HNHacker News
TopNewBestAskShowJobs

marisen

47 karma · joined February 19, 2022

submissionscomments
marisen··on Make your first edit to OpenStreetMap
iOS has Go Map! Which from my understanding is a very powerful mobile editor.

https://wiki.openstreetmap.org/wiki/Go_Map!!

marisen··on Why Book Corners won't sync contributions back to OpenStreetMap
There's another path that the author hasn't considered, which is making users contribute directly to OSM.

To contribute a bookcase, ask them to create an OSM account, log in with OAuth, and send the edit straight to OSM.

Book corners becomes just a custom view and editor over OSM data, instead of being its own database.

Users are now responsible for the data they submit (OSM already has tools to deal with vandalism etc...).

marisen··on Rust at Scale: An Added Layer of Security for WhatsApp
WhatsApp doesn't use libsignal, and Android is already pretty Rusty and deployed more than WhatsApp around the world (not just smartphone. Tons of "embedded" use cases also run on custom Android)
marisen··on Scaling long-running autonomous coding
It is well known that a programmer that stops programming stops requiring food
marisen··on What happened to WebAssembly
> React, the defacto UI framework for Javascript has a lot of web assembly components.

I'm pretty sure this is just plain false. Do you have an exemple?

marisen··on We pwned X, Vercel, Cursor, and Discord through a supply-chain attack
Given this (including the linked writeup on the mintlify RCE), after the React RCE, if think it should be pretty obvious that

1. content security policies should always be used to prevent such scripts (here they would prevent execution of scripts from the SVG)

2. The JavaScript ecosystem should be making ` --disallow-code-generation-from-strings` a default recommendation when running NodeJS on the server.

Vercel (and other nodejs as a service providers) should warn customers that don't use CSP and `--disallow-code-generation-from-strings` that their settings should be improved.

There are a bunch of other NodeJS flags that maybe you should look into too: https://sgued.fr/blog/react-rce/#node-js-mitigations

marisen··on Several core problems with Rust
If you use a lot of Arc<Mutex<Box<T>>> you you probably just learn to use Rust properly and just use Arc<Mutex<T>> instead because it pretty much never makes sense to have a Box inside an Arc...

I say that as someone that thinks Rust's learning curve is the main reason it rarely makes economic sense to use it.

marisen··on Openly Licensed Streetview with Panoramax
It's a french project funded in part by the french government and the only current instances are for french contributors. They actually make it pretty easy to contribute... for the people that will contribute in France.
marisen··on Openly Licensed Streetview with Panoramax
There are currently only 2 panoramax instances. One from IGN (french "National Geographic Institute) and one from the french OSM charter.

This is obvious by looking at the coverage the world. France it where the majority of the coverage is. The coverage of most cities is actually pretty impressive for a young project.

While the UI and coverage is not necessarily on par with street view, it's still pretty usable in France.

Secondly Panoramax is first built for OSM contributors/mappers, not for end users. The blog reflects this in the tldr: "If you are interested in contributing"