HNHacker News
TopNewBestAskShowJobs

moojd

461 karma · joined September 18, 2017

[ my public key: https://keybase.io/mooj; my proof: https://keybase.io/mooj/sigs/AfQQqgJbHRteeex6ikj_NIJ_3bk5Hss3VFXMWN5FToE ]

hn [at] jmoo [dot] io

submissionscomments
moojd··on Advantages of Monorepos (2015)
Yes! I once had to merge a dozen or so repos into a mono repo. I don't have my script handy but git allows merging repos with unrelated histories into one repo while preserving the history.

If I remember correctly, this is how you do it:

  1. Create a new empty repo for the monorepo
  2. For each repo, 'git mv' all of the contents into a new directory with the repo's name
  3. Add the repos to the mono repos as remotes
  4. Run 'git merge --allow-unrelated-histories' for each repo
You will now have a monorepo with preserved history with each old repo existing inside of a sub-directory in the new monorepo
moojd··on I Am Well Versed in Active Shooter Training. What About First Aid?
Class of 2010 here in the US and I don't know anything about these trainings. I'm also interested to hear if this is a thing now.
moojd··on Solito – React Native and Next.js unified
I would guess that the point is to share more code between web and mobile.
moojd··on Ford to Impose Non-Negotiable Pricing on EV Sales as Part of Model E Plan
Weirdly enough I'm currently going through my first maintenance request with Tesla and despite me living 15 min from the service center they scheduled a mobile service appointment. I was totally expecting them to ask me to bring it in.
moojd··on Quebec bans unvaccinated from buying groceries at Walmart, Costco
This comment is red meat for M4A opponents. Socialized healthcare should not be an excuse for increasing invasive government mandates or restrictions.
moojd··on Gunicorn
None of this is a problem in modern PHP. In production you flip a flag to turn on operation caching. You can also tell it to preload all of your code. You can then deploy the app and then clear the cache once all the files are there.
moojd··on Backdooring Rust crates for fun and profit
If you are in node land I highly recommend using 'yarn install --flat' and I desperately wish this was the default in npm from the beginning. It would have radically altered the package development culture in a good way.

The way npm currently handles version conflicts is one of the primary reasons why using npm is currently a nightmare. The average node project will have dozens of abandoned or ancient package versions precisely because allowing multiple versions to exist means that these packages never get forked or updated. Each one of those packages is a ticking time bomb waiting to be taken over by a malicious actor. Forking is a better solution than pulling in unmaintained packages with out of date dependencies.

moojd··on Backdooring Rust crates for fun and profit
I don't think composer has a diff option to dump the actual code differences before you update yet but yes most of this list comes from my past experience with composer. My current company doesn't use PHP but I look back fondly at how easy it was to audit my dependencies manually and be explicit about upgrades and transitive dependencies.
moojd··on Backdooring Rust crates for fun and profit
This one is frustrating because this is an issue that has been solved many times before and I hate seeing it repeated in every new package manager. A vendor name should always be required and the top level should be reserved for official/standard packages.

I want all of the following from a package manager:

1. Required vendor/namespace for third party packages

2. No multiple package versions. If there is a version conflict between transitive dependencies of a package because of semver, you should not be able to install that package.

3. Lock file and a separate 'install' command for installing the locked versions and an 'upgrade' command for updating versions via semver

4. Upgrade command should support a --dry-run option that lists the packages and versions that are to be updated and a --diff that lets you preview the code changes.

moojd··on NPM – "is-even", 160k weekly downloads
I wish some of these large projects would start seriously auditing their dependencies and stop pulling in dependencies that have many dependencies themselves. There is a one-two punch of a culture of "there's a package for that" and npm not requiring flat dependency trees by default. The denial in the node community that npm is uniquely bad is frustrating. I want the community to stop denying and own these issues so things can get better. It's going to take the authors of large packages to start evangelizing the use of fewer, higher quality packages, using flat dependency trees, and re-implementing trivial functions instead of adding another node to trust.
moojd··on Ford to invest in EV and battery plants in Tennessee and Kentucky [pdf]
Not only does it not come with a ccs adapter you can not even buy one from Tesla.
moojd··on Human Rights Are Not a Bug
Your right to representation and to a trial by jury are limits on government power, not positive rights. You do not have the right to a lawyer or jury whenever you want. These are the conditions required if the government wants to prosecute you. If these conditions cannot be met the government can just drop the charges against you. We've seen this happen recently during covid due to court backlogs.
moojd··on How Discord Stores Billions of Messages (2017)
My company was also using discord for virtual desks and have moved to slack huddles. They work as good as discord voice channels.
moojd··on Apple employees rally against office working plan
This is it. I would actually prefer going into the office if it wasn't for the commute (and being away from my dog). I miss the separation between work/living spaces that the office gave me but I value the lack of commute and getting to take my dog along on my problem solving walks more.
moojd··on Tesla loses U.S. designation for some advanced safety features
I don't think humans are a good benchmark for what we should expect from FSD.
moojd··on Complexities of e-mail validation logic
I was unable to provide my email address for a retail rewards program last week because the input field for the domain was a dropdown in their POS. Not the TLD, the entire part of the email after '@'!
moojd··on Now your car is a cybersecurity risk, too
Most of the non-technical people I know buy an Apple TV or Roku and get confused when they sit on the tv remote and accidentally bring up the smart tv netflix instead of the Roku netflix. Ignoring the privacy concern, the dumb TV is a better option for those who are going to buy an Apple TV, chromecast, or roku anyway.

From the wal-mart website, it looks like the 55" Sceptre is dumb but the 65" is smart. When I bought my 65" tv earlier this year, I couldn't find a dumb tv that fit all of the specs I wanted so I compromised and got a vizio (simple, chromecast based smart tv) and just never connected it to wifi. It doesn't seem to nag me about the smart features or connecting it to the internet at all

moojd··on AI Dungeon public disclosure vulnerability report
You absolutely can. You can write as much fiction as you want about whatever as long as you present it as such. You specifically cannot make statements presented as truth that you know to be false with the intent of causing harm to that person. It may seem pedantic but the difference is vital.
moojd··on Parler drops offline after Amazon pulls support
I don't think a legal business can survive this kind of incident (becoming a pariah in the eyes of FAANG.) There isn't a point in being resilient against being dropped by one service if they all drop you in unison. If you try to take payments you will be dropped by all of the payment processors. If you try to run bare metal and are dropped by cloudflare you will be DDOS'd to death. If you go p2p you'll need to be able to ship native apps which will be dropped from the app stores or denied a certificate. Side-loading is already dead in iOS and things are moving that way for other major operating systems including desktop.

If you are an illegal business there are a multitude of ways of working around many of these issues (using fake identities with hosting companies and other services, making money via shady malware riddled ad services, money laundering, etc...)

Until recently I thought that p2p/crypto/etc was the solution but since you cannot do true p2p in the browser and must ship native code, at the end of the day you will still need the blessing of Apple/Google/Microsoft and agree to their TOS to exist. Of course this is perfect storm that happens rarely but it's still chilling to watch it unfold despite how contemptible the target is.

moojd··on How bad is your Spotify?
As soon as I saw melon I knew I was in for a ride.

   > sad-knowledge-worker bad
   > wear-carhartts-to-your-desk-job
   > remember-when-williamsburg-was-cool bad
I've never felt so roasted haha
moojd··on Record Breaking Number of Journalists Arrested in the U.S. This Year
Even as someone who is generally sympathetic to reports like this I don't think 2019 is a useful comparison. What are the numbers compared to other years with mass protests and/or riots (ex. 2016)? Is this a number that scales with the number and size of large events or was 2020 truly an outlier regardless?
moojd··on Christchurch shooter was radicalized on YouTube, New Zealand report says
I assure you jazz does indeed exist.
moojd··on Nvidia Broadcast App
It looks like they are still disabling it: https://youtu.be/AG_ZHi3tuyk?t=627
moojd··on Casino-like apps have drained people of millions
People spend tens of thousands of dollars gambling on what are essentially just PNGs of cute anime girls in gatcha games [0]. Someone else in the thread linked Fate Grand Order which has over $4 billion in revenue. I didn't really understand it until I watched this very NSFW video [1]. The presenter does a great job of explaining what gatcha games are and the history behind them. He also spends $1000 to show what you actually get for your money in these games.

[0] https://en.wikipedia.org/wiki/Gacha_game [1] https://www.youtube.com/watch?v=LvdtJsZpuQ4

moojd··on Show HN: Muse – Tool for Thought on iPad
I've been looking for a note taking / chart app that worked spatially like this and that would allow you to zoom indefinitely from high level concepts into low level details. Specifically something that worked collaboratively like lucidchart, google docs, etc.

Is there anything similar to this that works in the browser? I'm tempted to buy an iPad just to try this out. Looks great!

moojd··on California issues first rolling blackouts since 2001
It's a manifestation of our inner American Exceptionalism. We only have the ability to see our country as "exceptionally good" or "exceptionally bad"
moojd··on Mac keyboard shortcuts
Just moved to a mac and I'm having the same experience you had. Never had issues with Windows or various Linux distros. Currently I have a pretty absurd Karabiner config to work around some of the issues but I still haven't ironed them all out.

Home/End always worked for me on Windows and didn't work for me on mac until I did a ton of tweaking.

moojd··on Thomas Sowell interview
I haven't read Sowell but is this what he means by a 'hybrid ideology'? My impression of Marxists is that they view the world through both lenses and believe #1 can be achieved when #2 is solved through revolution or other means.
moojd··on The stable marriage problem and modern dating
The difference between a whitelist and blacklist.

Here is a movie that satirizes the 'whitelist' approach: https://en.wikipedia.org/wiki/The_Lobster

moojd··on Apple WWDC Keynote
Think start vs desktop for windows or dock vs finder for mac os
← PreviousPage 3 of 5Next →