HNHacker News
TopNewBestAskShowJobs

softwarelimits

269 karma · joined November 13, 2015

submissionscomments
softwarelimits··on Mastodon 3.0
What is going on here?

Mastodon does not come with features that enable the idea of "groups"?

I just found issue 139 [0], but "mastodon groups" is an extraordinary bad combination of search terms.

The author seems to dismiss the idea that "groups" are an obvious requirement (IMHO) for any "social" software. Instead he seems to be assuming that one instance of the software might serve one "group" - with no easy way to scale "instance" to many servers.

Pleroma seems to plan for a groups feature [2][3], also using a framework that might be much easier for scaling, but seems to be struggling with implementation.

I see GNU social seems to have groups [1], but in the linked issues people write about bugs with that.

I am not sure this is really how it is, so please correct me if I am wrong.

Would anybody with more knowledge please like to explain why such a basic feature is missing from "social" software alternatives?

I want to understand what the problem is here, I feel like this is the first feature that should be considered from day one. It seems to me trying to handle such a basic feature as an afterthought has a high potential for disaster score (PFD>80): will require a deep re-design and rewrite, trigger several different implementations, standards and endless discussions, in the end will destroy everything.

I understand that groups and p2p / federation is complicated - but is this not a solved problem?

If not, is it a good idea to put this on top of the agenda for "offer alternative for big social brother"?

[0] https://github.com/tootsuite/mastodon/issues/139 [1] https://gnusocial.net/doc/groups [2] https://git.pleroma.social/pleroma/pleroma/issues/656 [3] https://git.pleroma.social/pleroma/pleroma-fe/issues/625

No, tags can not replace groups.

softwarelimits··on Show HN: Stack – Save and explore books and book lists
Which api backend shold one use for the books data? The obvious choice is Amazon, but maybe there are different, better data sources available? Any insights into better book apis?
softwarelimits··on Serverless: slower and more expensive
Thank you so much for critcal thinking! We need more of that!
softwarelimits··on 25 Years of PHP [video]
This is a very old problem on YT, there are many, many content thiefs. It would be very nice to have a good toolset available that helps with finding these videos, however it does not help if YT team does nothing.

Of course for every content producer more viewers is a good thing, but the platform should redirect all profits to the original authors.

softwarelimits··on Encrypted Groups, Files and Chats
Is the server open source?

I would like to trust them, but wire.com open sources the server side, too.

softwarelimits··on We Let Machine Learning Design Logos
Internal Server Error
softwarelimits··on Off-Grid, Solar-Powered, Zero-Battery Refrigerator
I live without a refrigerator. It works.

Probably most people do not need that thing, too.

It seems to be a cult object of prosperity.

It just happened a few years ago while travelling a lot (by train), but then I found that idea interesting and never bought one, just to see if I "can do it" without.

After a few years I do not even know what I would store in a refrigerator.

Yes, of course, I am living in a city, with everything I need in markets around me, but it really just takes a little bit of planning and thinking to not need that thing even in remote places, I did that, it worked.

softwarelimits··on A guide to Oauth2
Such great content now hostage to that website, what a pity.

Also look at their nice django-oauth-server: https://github.com/authlete/django-oauth-server

softwarelimits··on Show HN: Repository of open source space-related software and hardware
http://ascl.net/ is a nice one, since 1999.
softwarelimits··on Freshermeat – Open-Source Security Software
thanks for your reply! BTW I believe you should check that shelter db project, does not show any shelters.
softwarelimits··on Freshermeat – Open-Source Security Software
Just curiosity: why did you choose python flask?
softwarelimits··on Building a distributed time-series database on PostgreSQL
Thank you very much for your valuable input - it is very important that people understand the differences and look into this!

Performance comparisons to the candidates you named would be very interesting to see.

Downvoters: you should be happy that people with more knowledge than the average javascript-aws-webdevops-guy that is needed to operate a startup invest time to inform you about alternatives you might not know about.

Also it is important to keep this site attractive to people that have a different opinions and experiences - do not do that trump thing! Thanks!

Of course, for each claim replicable facts are needed.

softwarelimits··on Bringing Serverless to a Web Page Near You with Hugo and Kubernetes
"selfhosted serverless" will change everything!
softwarelimits··on Bringing Serverless to a Web Page Near You with Hugo and Kubernetes
This is one brilliant piece of modern technical humoristic literature, a genre that is still rare and should get much more attention!

The author has written that really well, simulating a style that some cloud marketing guys still will take serious. Of course every developer with some background in webdev will start to chuckle after a few sentences, but he keeps the flow on a very high level, great!

I wonder if some kind of NLP was involved and a second article with sources attached will follow.

Very good piece of parody!

softwarelimits··on Why ElementaryOS Left Medium
As a proud HN commentor you should have built your own static site generator long time ago. Preferably in Assembler or some esoteric unknown language!
softwarelimits··on Milky Way’s Black Hole Just Flared, Growing 75 Times as Bright for a Few Hours
What software are these people using for the fantastic animations?

Is there an established framework for astrophysics that allows to work on a high level to produce these nice visuals?

softwarelimits··on Recycling of plastics enabled by dynamic covalent diketoenamine bonds (2018) [pdf]
Because that institution also seems to be heavily engaged in the area of "Intellectual Property" I would like to mention:

one big reason for the problems with plastic recycling is the fact that producing companies do want to "protect" their "intellectual property" and do not provide a list of ingredients.

This is an area where IP does have a very big impact in the global contamination process.

softwarelimits··on Recycling of plastics enabled by dynamic covalent diketoenamine bonds (2018) [pdf]
Using the big searchbox it is not possible to find this document, you need to use the small searchbox on top.

Then you can find this post that seems to be related.

https://foundry.lbl.gov/2019/06/05/new-polymers-close-the-lo...

softwarelimits··on Planet: Imaging the entire Earth every day
Absolutely great, I am sure we will need these kind of visualizations to survive.

But the planet needs a JavaScript programming competition with the challenge of minimizing CPU load of such fantastic presentations.

It would be so good to have one golden path to browser animations with the lowest energy consumption, one default framework that will be easy to use without deep knowledge of browser quirks and JavaScript optimization tricks.

We are wasting too much time.

softwarelimits··on Food is free if you know where to look
This seems to be a good website to advertise for trained dogs :)
softwarelimits··on Food is free if you know where to look
Unfortunately they do not open source their code.

Also I found this one:

"Wir gendern nicht, weil wir bei der Umerziehung des Menschen durch Sprachmanipulation nicht mitmachen wollen und weil die Mehrheit von euch dies laut Umfrage auch so sieht."

softwarelimits··on Liftbridge: Lightweight, fault-tolerant message streams
Hi, what are the message delivery guarantees with Liftbridge? I would like to replace a PostgreSQL based hand made queue system, but I need the transactional safety of a database - should I use Liftbridge?

Thank you very much for your attention!

softwarelimits··on Show HN: Cloud Maker – Rapidly create cloud architecture diagrams
> I don't like the clutter of having all the Azure/GCP/AWS resources grouped by type ("Compute", "Databases", etc). 99% of companies are single-cloud and it would be more convenient if I could filter down to just AWS

But it would be very cool to have details abstracted in a way that it would be easier to build architectures for several cloud providers with one diagram.

softwarelimits··on Mirth – a type-safe concatenative purely functional programming language
This will change everything!
softwarelimits··on Ask HN: How do you maintain balance between all the things you want to do?
most important: stop reading HN! ;)
softwarelimits··on REST and GraphQL framework to build API-driven projects
Took a look at this some time ago, a few things you might like to know before diving deeper:

OpenAPI support

Developers seemed to oversee that there is an important spec-first trend with building apis. Currently there is no way to generate code / models from OpenAPI spec, only generates documentation - so the statement about "OpenAPI integration" is only partially true.

Instead you have to fall back to legacy technique of manually coding models - this is bad for teams that adapted OpenAPI as their single source of truth. With this project you will have to maintain php code on api updates and it breaks any established spec-first OpenAPI roundtrip workflow.

Security

Very weak support for expected security out of the box - you need to implement Symfony based security ideas - if you have already done this and know that dark planet, go for it, if you have never seen that before be prepared for lots of awkwardness:

  /**
   * Secured resource.
   *
   * @ApiResource(
   *     attributes={"access_control"="is_granted('ROLE_USER')"},
   *     collectionOperations={
   *         "get",
   *         "post"={"access_control"="is_granted('ROLE_ADMIN')"}
   *     },
   *     itemOperations={
   *         "get"={"access_control"="is_granted('ROLE_USER') and object.owner == user"},
   *         "put"={"access_control"="is_granted('ROLE_USER') and previous_object.owner == user"},
   *     }
   * )
   * @ORM\Entity
   */
Yes, that is a PHP comment - Symfony uses comments for simulation of the non-existing language feature of annotations. Anybody who needs to make money in the Symfony universe follows that awkward and evil cult. Privately you will always hate it, but if all your team says "cool" you just shut up and accept it (and start looking for the next better job).

The whole security story with Symfony seems to be a horrible mess and after-thought, feels incredible tacked-on and will slowly grow into a maintenance nightmare. Badly maintained external libraries. Every software that uses it implements it in a different way.

But: because of large adaption in companies you will still find a solution for everything - be prepared for a long journey. You will end up with your very own solution and never be sure, if it is really secure - why did you want to use open source in the first place - was it for security reasons?

Interesting alternative security implementation: https://medium.com/@ordermind/better-authorization-for-symfo...

Integration

This is just Symfony, so luckily you will find libraries for everything. However, it seems to be somehow detached from the current API product market, so there are some overlapping and not so obvious integration points with tools that help with API management. Note: this is not a complete api platform like the name suggests - many basic features for API management are missing. Developers should stop simulation of "no other software exists" and instead offer nice integration with some of the advanced api management tools.

Nice: GraphQL output only needs import of one library, no additional coding needed.

Support: Better learn french if you are using this to build your company on.

softwarelimits··on Basic HTTP Authentication in Elixir/Phoenix
This is the lesson to learn from Elixir/Phoenix and every web framewrok that does not come with a strong security concept: if you do not build solid authentication and authorization into the framework from the ground up, there will pop up bazillions of half-baked libraries and even more blog posts about how to do auth "the right way" and still there will never be the right way as long as the framework does not implement this.

Many eyes on security relevant code is one of the most important reasons for using open source frameworks for web development - so it is very unfortunate if exactly this part is missing, it will always look incomplete.

Of course this leaves room for professional services, I understand that, but I believe the damage done is greater than the opportunities generated. The current situation for "Phoenix auth libraries" is horrible - as a developer you will

  * waste a lot of time researching and testing all the available solutions
  * or just take one "random solution from the internet" that "looks good enough" 
  * or you will just implement another solution yourself.
Instead you want to build on the solution that is provided and maintained by the core framework community.

This is such a sad story. Elixir / Phoenix looks so nice, but without a strong security foundation it looks incomplete. Authorization and Authentication is not even mentioned in the docs - that is absurd!

I simply can not understand why the project leaders are ignoring this important area.

softwarelimits··on Open Distro for Elasticsearch
meanwhile there is this: http://solr-vs-elasticsearch.com/

But some real war stories would make the comparison much more enjoyable...

softwarelimits··on Open Distro for Elasticsearch
Dear Ladies and Gentlemen, it would be of extraordinary interest to I believe many people in our industries if anybody with some production experience on the topic would like to write a short comparison "Elasticsearch vs. Solr", thank you very much for your attention!
softwarelimits··on Gestalt: A set of React UI components that supports Pinterest’s design language
First a big THANK YOU very much for your very valuable work comparing design systems and making the results public - this is really very appreciated! A fantastic collection and your comparison is based on important features, very helpful!

However, I want to take the risk making me a bad person to express in full honesty my thoughts about an uncomfortable feeling that I get when reading your "About" section, hopefully without making yourself feel bad.

It is about the use of that popular "low contrast text" design pattern - one of the most awful and most ignorantly mindless-copy-pasted design patterns of our times.

Looking at a low contrast text on a website about design patterns is already ironic enough, but seeing it used with a text about "one of the most important computer scientists focused on graphic user interfaces, design patterns and object-oriented programming" makes it insulting.

Please do not use that low contrast pattern. I will explain:

That "low contrast text" idea once, a long time ago, was a very interesting and intellectually inspiring approach to the very old art of "text presentation". Making the text nearly unreadable, vanishing against the background, transports a lot of symbolic potential about what the viewer might think about the relationship of content and presentation - making the pattern itself a non-ignorable contribution to the evergreen discussion about exactly that issue. Applied in a not expected context such a design pattern could be seen as provocation or at least as some kind of challenge questioning the value of text production itself. Many hours of interesting discussion can arise from that, what again increases the value of that pattern, making it an effective social engineering tool.

However, at some point some person with basic knowledge about "Photoshop" (but certainly not a well educated graphic designer!) has seen that pattern somewhere and her/his idea about it was just one word - "cool". This was a very young person, maybe with a drug addiction or a similar handicap that made it hard for that person to think deeply and to analyze things, so his/her vocabulary and therefor the ability to name things was very limited to some prototypic primitives and the only way to express and to think interest was the word "cool".

That person then just copy pasted that pattern, without thinking, without ever understanding the context, the intention or the potential impact - all that person was able to think was the word "cool" - in his/her small world this was already enough to explain a lot.

As we all know, unfortunately and because of very bad education policies everywhere there are many people that understand the world in a similarly limited way like that person - and so that pattern spread around like a disease, copy pasted many times over and over again, and most people used it just because of "cool".

Then big companies came along and understood that this "cool" pattern was new and trendy. Big companies are extremely good at catalyzing the most stupid ideas that humans produce, often ignoring or not understanding any ironic potential of an idea, and so the use of that low contrast pattern found its way into popular culture and is nowadays one of the most used, most annoying design anti-patterns.

But what still remains is the original idea and the potential symbolism of that interesting idea - and it bites their unmindful users in a clandestine way, without them being aware of it: that pattern is mostly used by people producing meaningless or laughable words, hollow marketing phrases or plain lies, text, that is just meant to spoil the reader and that "vanishes against the background".

And this is the magic of good ideas.

So nowadays that low contrast pattern is usually a valid indicator for worthless, senseless time wasting BS. But this is also the reason, why it feels insulting in a potentially serious context, and most certainly in a text about iconic UI designers.

I hope I was able to express my feelings in an understandable way, and it would be a great pleasure if you could accept the existence of this world view. You might express your respect and friendship by avoiding that low contrast pattern from now on, just to not hurt people. As a benefit it will put your work in a different context, making it less disappear against the background noise of everyday information overload. Thank you very much!

BTW you might also like to take a look at http://contrastrebellion.com/ for some more pragmatic explanations of why that pattern should be avoided.

Also, too all dear HN readers: yes, it would give this text an additional level of ironic meta and make it an object of collaborative art if you downvoted it into vanishing against the background... I will then make a big print of a screen shot and will try to sell that to some modern art gallery... :)

Have a nice day!

← PreviousPage 2 of 6Next →