HNHacker News
TopNewBestAskShowJobs

sedev

2,010 karma · joined February 15, 2011

Strongly Emergent.
submissionscomments
sedev··on Ask HN: Is StackOverflow being ruined by its mods?
I call Betteridge's Law on this. [ http://en.wikipedia.org/wiki/Betteridge%27s_Law_of_Headlines ]

Stack Overflow has a fairly specific rubric for judging questions, and a central part of it is the requirement that they have a single verifiably correct answer. The example question does not, and it runs afoul of the guidelines in multiple other ways. The example question is something for a conventional discussion board or mailing list - it's not a good Stack Overflow question.

sedev··on [dead]
My impression is that Pwn2Own skews hard towards Safari for two reasons: the Air that's normally a prize is more desireable than the random cruddy Windows laptop, and Flash is a much softer security target than Safari itself, so that's usually what gets exploited.
sedev··on [dead]
Allowing JavaScript is only going to get closer to being equivalent to allowing untrusted, unsigned code on your machine. Atwood's Law applies to malware too.

Before I edited this comment, I had a laugh at the expense of people who think I'm in some way misguided for using NoScript and complaining when sites break with JavaScript off. That was wrong. I think that those critics are also wrong, though, and this sort of thing is why. Even if this particular code is a non-starter, the plausibility of this kind of threat, this kind of nightmare scenario, is a huge problem. JavaScript is a general-purpose programming language that's present on nearly every user-facing computer in the world, with all the security issues that come with that. It is in some ways the world's biggest and most-rewarding malware attack surface. A working 0-day attack in JavaScript itself could be worth millions or billions in the right hands.

sedev··on Traction mistakes
One thing I will always remember from my college economics class was the professor saying, on day one, that that's how you measure what people want.

"You want a lot of things. You want an A in this class. You want a trip to Hawaii. You want a tasty lunch. And you want all of those things ... 'a lot.' Well, I'm economist, I'm trying to be a scientist. I can't measure 'a lot.' What I can measure is - what are you willing to give up in order to get the things you want?"

sedev··on Startups Rival Craigslist for Online Classifieds Market Share
That's also a helpful way to look at it, yes. I would say that given Mr. Newmark's personal statements, "Craigslist doesn't care about profit" is an acceptable oversimplification, and is how a competitor should probably view the situation for purposes of trying to profitably compete with Craigslist.
sedev··on The infinitely profitable program
The headline is pure link-bait, but coaxing functionality out of a zero-byte program is a clever hack, so kudos to the author for that.
sedev··on Loyalty with a tinge of betrayal
I'm happy for the author that he enjoys Android and has reflected on that fact, but he's not making any point with that post. It doesn't really have a reason to exist. It reads like he's answering a question from someone, but redacted the paragraph of setup with the question he's answering.
sedev··on Startups Rival Craigslist for Online Classifieds Market Share
This article seems to miss a very important point: Craigslist basically operates like a nonprofit. Anyone who wants to compete with Craigslist has to have a compelling answer to the question "how do I compete with a company that does not care about profit?" in addition to the normal questions a startup has to answer.

(for the record, I think that the way Craigslist runs things is both admirable and idiosyncratic: it works very well for them, it wouldn't necessarily work well for others)

sedev··on Still running strong after 1,532 days without a code change.
I'll bite: how did that happen?
sedev··on The iPad's 'Ultimate Typing Accessory' Is A Dud
It's worth remembering that Kickstarter is ("merely") a way to codify and publicize promises.

Keeping promises is no easier than it's ever been.

sedev··on Court Recognizes DMCA Safe Harbor in Universal v Grooveshark Lawsuit
I couldn't find this in the article: which court is the decision from? The bio of the judge[1] suggests that it's a superior-court-level decision. This is an annoying omission to me because with decisions like this, it's important to know what the appeals prospects are. The odds of a decision being overturned on appeal are relevant.

[1]: http://www.nycourts.gov/courts/comdiv/newyork_bio_Kapnick.sh...

sedev··on Court Recognizes DMCA Safe Harbor in Universal v Grooveshark Lawsuit
I would bet coffee and doughnuts that it's less that Universal's lawyers believe that than that Universal's executives have ordered the legal team to use anything they can find, no matter how flimsy, to attempt to kneecap Grooveshark and other things that inconvenience the old-media cartel.
sedev··on Unicode is, in 2012, still “cutting edge.”
That's an important piece of context, thank you for pointing it out. Engineering decisions occur in a cultural context of mere humans making decisions, and we do well to remember that.
sedev··on Unicode is, in 2012, still “cutting edge.”
Bingo. That's why I used the "effectively" qualifier - if my toolchain says "oh this is UTF-8," then I should be able to trust that it's for-real, honest-to-goodness, spec-compliant UTF-8. If it's "oh this is the part of UTF-8 that was easy to implement " instead, then that tool has lied to me. I shouldn't have to read the documentation to find out that something is not what it claims to be.

Bonus points for the documentation brazenly ignoring that they're implementing something that's not spec-compliant and naming it like it is.

sedev··on Unicode is, in 2012, still “cutting edge.”
No, it's not excusable - the MySQL project had a trivial alternative: don't call it UTF8!

The options are simple: implement UTF-8 correctly and call your implementation UTF-8, or implement just the BMP and name accordingly. They did neither: effectively, they lied to end-users. That's deeply, deeply problematic.

sedev··on Apple ignores bug report
It's not malicious to build a game or a music app. What I'm saying is that before you hand out tools to do that, you have to at least think about what else those tools can do. Microsoft has been repeatedly burned by this, cf Raymond Chen http://blogs.msdn.com/b/oldnewthing/archive/2005/06/07/42629... , and it's a very, very basic principle of platform/API design.

I argue that Apple's focus on the user experience, especially in the areas of responsiveness, battery life, and consistency with the general Apple design aesthetic, cause Apple to make choices here that you disagree with, but which aren't necessarily bad decisions.

"You can build music, and video, and game web applications on those devices without these limitations, and it is not a problem."

Actually it is a problem: Android malware exists, and I say that it proves my point: if you hand out capabilities without thinking through the consequences, it will come back and bite you.

The uses that you intend for tools are never the only possible uses of those tools.

sedev··on On Starting a Startup
The market is not working properly: it's not, to use the term of art, clearing. Buyers look at what sellers (domain-squatters) are offering, say "well screw that for a game of toy soldiers!" and buy a substitute good (a green-field domain name). The sellers are at fault here: they're not willing to lower prices, and as a result, buyers don't go to them, but instead resort to substitute goods.

As other replies note, the market for domain names has some unique features - but I also think that it's important to note that you're wrong when you say that it's "working properly."

sedev··on Apple ignores bug report
"Platform religion"?

That's a bit rich considering that the iOS app store is where developers can make money. I think that's a far, far more powerful motivating factor than "platform religion." The Blackberry had plenty of fervent followers and advocates: look where that got them.

Also, comparing Mac/iOS users to members of a religion is the oldest, saggiest, most lackluster thought-terminating-cliche in the book. Come off it already.

sedev··on Apple ignores bug report
"Auto-playing audio and video in the browser is also forbidden, which prevents any sort of online music, or video app from being created, among other things."

It also prevents MySpace. I consider that a Good Thing overall - I remember the period of the web where it was trivial to auto-play video and audio, and I remember that the consumer reaction to that was deeply hostile. HTML5 music/video apps certainly are an interesting thought, but you must consider what happens when you let random or malicious developers do those things too!

sedev··on Anonymous Publishing is Dead
I've been tempted to get ahead of the game and start wearing facial-recognition-jamming face-paint just as a fashion statement. Unfortunately, for this particular use case, the makeup makes you memorable in its own way.
sedev··on Anonymous Publishing is Dead
Thank you for the correction, I said TSA when I meant DHS. I agree that they don't have the power to seize your VPS at the border: what I said is that they have the power to seize hardware that you have on your person, which is a non-trivial factor. They've proven themselves willing to abuse this power.
sedev··on Anonymous Publishing is Dead
This makes me think that an analog to steganography could be a fruitful direction for privacy efforts to take - not looking like nothing, but looking like something unremarkable. If I remember correctly, Tor is already working on something like this, but what if this concept permeated the whole stack?
sedev··on Anonymous Publishing is Dead
I suspect that the author wants an anonymous VPS so that he has a computer that's not subject to physical seizure, e.g. TSA thugs grabbing it whilst entering or leaving the US. Plus the convenience of being able to access your VPS from anywhere you have a halfway trustworthy SSH connection.
sedev··on Mobile is Where the Growth Is
Citation needed. How on earth is bad discovery beneficial to Apple? With the size and profitability of their app store, they have the most to gain from good discoverability. That's why they acquired Chomp. Smart money says that the acquisition is going to lead to much-improved discoverability on the iOS App Store.
sedev··on Facebook e-mail mess: Address books altered, e-mail lost
There's an important difference that I think you're eliding. People who use Apple devices and services, are Apple's customers; people who use Facebook services are Facebook's product. The former are not always treated ideally, but the money flows from them to Apple, so Apple is preoccupied with how to make their long-term experience better - e.g., to ensure that they'll continue to be disposed to give Apple money. The latter are digital sharecroppers, to use Atwood's phrase, and Facebook has repeatedly demonstrated that it doesn't give a shit about making their long-term experience better.
sedev··on Did Twitter Just Deliver Third Party Apps A Death Blow?
The takeaway lesson for me is that user-generated content is incompatible with advertising.

Now, as a caveat, I'm the sort of person who thinks that modern advertising is 99% toxic sludge in the mental environment: I am firmly in the Kalle Lasn camp. However, here's how I see it working: users come to the site because of the UGC, but advertising, by nature, has to grab attention at some level. You can't design for both "make the UGC, stuff users actually care about, primary" and "make sure that you get ad clickthroughs." Since the latter pays the bills, it tends to win - and users tend to leave because on one level or another, it's obvious that the site isn't about them (and if your site depends on UGC, your users ain't wrong to think that the site should be about them!)

The secondary takeaway is that advertising is not a long-term sustainable business model.

Advertising has a strong tendency to push startups into this insular turtles-all-the-way-down bullshit: social media with ads for analytics, analytics for ad-based startups, startups about how to reach demographics, and so on. They're as familiar an archetype around here as Punch & Judy. But it's all the tertiary economy, it's all flash: the fundamentals of advertising as a business model only get weaker over time. The effectiveness of advertising at all, in any context is debateable, and participating it is participating in an endless arms race. I argue that this should tell us that advertising is not the way to go if you want to build a lasting company: you need to take money in exchange for goods and services (real goods and services: advertising doesn't count, as I'm in the process of arguing).

That's hard! That's really difficult. PayPal, Square, and WePay should show us how ridiculously, gratuitously difficult the "take money for" part is, and taking people's money once you've convinced them that you've got something worth their money, is the easy part! Before you even get there, you have to build something good, and none of us should have any illusions that that's easy. Then between those two parts, there's "persuade users that your cool thing actually is cool and worth paying money for," and sweet leaping Buddhas that's a lifetime of work in itself (the lifetime of work, in fact, that advertising is doing in such a toxic and commons-destroying way right now).

But: you are a hacker. You are a hustler. You are an engineer.

Solving hard problems is your job.

Advertising is not a business model: advertising is a problem to be solved. Advertising is a bullshit legacy of past business models, here to be disrupted. The reason that I hang out on Hacker News is that I believe that its hackers, hustlers, and engineers are the people who can look at the way we do something now, think "that suck! I can do better than that!" and then do the difficult, frustrating, painful work to actually make something better, show people why it's better, and accept the monetary rewards that come from having made something better and proved it.

We can do this.

sedev··on Mac Pro gets half-assed “update”
A wire is a commitment, an adapter is a training wheel. The intent is for you to grow out of needing it. Apple's guesses about what you'll eventually stop needing have been pretty good so far (e.g. ditching floppy drives, going to USB-primary early).
sedev··on The Silent Majority: Why Visual Basic 6 Still Thrives
I argue that Silicon Valley startup culture's existence and profitability disproves the point you're attempting to make here. Haven't we all read pg's "Beating the Averages"? Haven't we all heard a hundred startup founders say "I used the tool that was closest to hand, and customers didn't care what I used as long as my service met their needs"? Haven't we all seen the companies with printing presses handily beating the calligraphers both in the Iron Age assembler-versus-C contest and the modern contest of web startups with FOSS stacks beating companies burdened with compiled languages and expensive licenses?

Peer pressure is certainly not zero - but hackers are pragmatists. If the tool really was easier and made a coder more productive, they'd be making money with it and that would be its reputation right there. The thing you call "cheating" is celebrated and encouraged. Better tools improve the whole community.

>>> "I had to stop using Visual Basic anything just because I knew people would judge me as being a lesser programmer if I took advantage of the easier and more productive tool."

This says far, far more about you than about the people around you.

sedev··on Those Who Have a Job, Want to Quit. Those Who Want a Job, Can’t Find One.
The article also hits one of my pet peeves about BLS stats: referring to "the unemployment rate" without qualification. U3 and U6 unemployment are distinctly different things - the main difference is that the average person's idea of "unemployed" includes a lot of able-bodied willing-to-work individuals who are counted in U6 and ignored by U3. Unfortunately, when someone talks about "the unemployment rate," they're almost always talking about the U3 measure of unemployment, because that's the one that presidents, senators, and congresscritters trumpet (on account of their incentive to understate unemployment).
sedev··on What happens when you rip off a site but forget to host the JS yourself
I'm using NoScript because JavaScript is

* a privilege, not a right

* a huge security vulnerability

* a huge privacy vulnerability

You gotta earn epsilon trust to get me to whitelist your site for JS. If your site is 100% broken with JS off? You haven't earned that trust; you've instead told me that you're sloppy. Double points if your site is something that could get its basic functions done with JS - I have seen blogs, sites whose job is present straight text, that completely break with JS off. What that tells me is that I should be deeply suspicious of the technical chops of the people responsible.

It's not like it's hard to earn epsilon trust! Slap in a < noscript > element that says "here's what our site does, please turn on JS" is usually enough. "Please turn on JS" by itself, though, is not.

You don't have to cater to people who have JS turned off - you just have to not give us the middle finger! When site designers let their sites break when JS is off, that tells me that they're not worth my time.

← PreviousPage 6 of 12Next →