HNHacker News
TopNewBestAskShowJobs

staticvar

330 karma · joined February 25, 2014

submissionscomments
staticvar··on CIA Releases UFO Documents
I used to think UFO sighting meant some kind craft piloted by extra terrestrial beings. Are they often planes piloted by humans you don't know?
staticvar··on Google suggest vi for Emacs and Emacs for vi
I thought this was going to be a link to a technical article suggesting the merge of vim and emacs... Vimacs.
staticvar··on Local-first software (2019)
Was this paper in a journal?
staticvar··on Ways to make a web component
There are also simpler ways to write vanilla Web Components. Here's an example of the counter component written in what I find a simpler fashion. https://gist.github.com/rjsteinert/779d94dfc886723c2967a6f5f...
staticvar··on Ways to make a web component
I appreciate how Web Components are not opinionated meanwhile Component libraries are free to innovate and build on the Web Component foundation.
staticvar··on Show HN: I built a free forms service for static websites
Cool stuff. If you are interested in doing multipage forms and need something that already has a form editor UI, check out the open source <tangy-form> and <tangy-form-editor> web components. Disclaimer, I'm a contributor to those projects.
staticvar··on NY launches live dashboard of each regions progress hitting 7 reopening criteria
For those interested, here's the dashboard from the Vermont Department of Health.

https://vcgi.maps.arcgis.com/apps/opsdashboard/index.html#/6...

staticvar··on Beware of the GIF: Account Takeover Vulnerability in Microsoft Teams
Aha! Thank you munchbunny. Another title for this article could be "How some major tech companies DNS record management practices left your organization vulnerable to attack". This is a great lesson for all of us. Leaving old records in DNS is so easy to do.
staticvar··on Ask HN: Have you been laid off?
I used to think I needed an amazing online presence in order to sustain a freelance career. In hindsight, that time would have been better spent reaching out on job boards and building relationships with real people.
staticvar··on MusicKit JS
You can play your iTunes library online now?
staticvar··on Google’s Monopoly is Stifling Free Software?
FWIW, if you distribute your app as an installable PWA, the google guidelines are clear for reducing install friction on Windows/Chrome/Mac/Android and Let's Encrypt is your cert generator. Perhaps platform vendors treat binaries malicious by default because it so often leads to privilege escalation. Build an app in the web context and you have a cross platform sandbox with a standardized permission model. Alas, this is not very helpful advice for folks who haven't grown up developing for the web.
staticvar··on Using Web Bluetooth to Communicate with Bluetooth Devices
> Browsers are already doing too much (see Chrome's built-in malware scanner), and with complexity come additional security issues.

That does seem like a common feeling people have. Do you feel your OS is also doing too much as well?

> what are the chance that this won't be used for tracking somehow?

Are you referring to Browser vendors tracking people or Websites? Surely there will be Websites using this for tracking, they use everything they can. The same is true for apps in App Stores, such a shame.

staticvar··on Using Web Bluetooth to Communicate with Bluetooth Devices
> Going to the app-store allows for reading opinions (i.e. somewhat independent) compared to just clicking, go-on. It shows some download/usage statistics and the like.

That's a great point! Browsers could perhaps start to include metrics like these for website permissions. For example, when the Web Browser prompts for USB access, show metrics like how many people have granted permission to Bluetooth for this website, perhaps even room for comments and ratings. Chrome is afterall trying to be your next app store.

staticvar··on Using Web Bluetooth to Communicate with Bluetooth Devices
> 99.9999999999999999% of the websites out there doesn’t or shouldn’t need HW-access. 100% of the malicious websites out there will use this the second it lands. That’s one line of code to land seriously serious exploits.

The same can be said for native apps. Are you in the "no Bluetooth/no USB ever" camp? That's totally fair if you are.

staticvar··on Using Web Bluetooth to Communicate with Bluetooth Devices
Aha, yes, we do end up on a lot of random websites. For argument sake, I'm going to assume your objection is not that folks visit random websites, but that there is something dangerous about how we give random websites access to Bluetooth/USB.

Here are the ways in which "random websites" can gain access to USB/Bluetooth:

1) Prompt the user to download a native app. 2) Prompt the user to follow a link to an app store for their OS. 3) Prompt the user to allow the website access to the Web USB / Web Bluetooth APIs.

My follow up question then is how is option #3 less good than #1 and #2, and "less good" in what ways?

staticvar··on Using Web Bluetooth to Communicate with Bluetooth Devices
I'm super interested in unpacking the reasons why folks think WebUSB and Web Bluetooth "can't end well" as one user here put it. Would folks mind listing their reasons? This is assuming there is some way to install a native app with access to these APIs... But if you are in the camp of "no bluetooth ever" and "no USB ever" that would be totally interesting to know as well :).
staticvar··on Gitlab: don't discuss politics at work
An organization is not a tool, it's a group of people thus it reflects the morals of those people. Software is also not a tool, it's a continual process in an organization of people. Just think, is the code you wrote today a rock? Will it survive without you supporting it? I used to think that was the case but after decades have never seen that to be true.
staticvar··on Amazon AWS had a power failure, their backup generators failed
Do you have a source detailing this issue in us-east-1? I don't see a recent post-event summary from AWS mentioning us-east-1 https://aws.amazon.com/premiumsupport/technology/pes/
staticvar··on Amazon AWS had a power failure, their backup generators failed
This tweet might be in response to the AWS Post event summary from August 23, 2019:

> We’d like to give you some additional information about the service disruption that occurred in the Tokyo (AP-NORTHEAST-1) Region on August 23, 2019. Beginning at 12:36 PM JST, a small percentage of EC2 servers in a single Availability Zone in the Tokyo (AP-NORTHEAST-1) Region shut down due to overheating.

https://aws.amazon.com/message/56489/

staticvar··on How to Build Minesweeper with JavaScript
> But when you need to do more than that, you'll realize jQuery is still useful

Such as?

staticvar··on How the Dat Protocol Works
I built a Connect Four clone you can play multiplayer over the Dat protocol.

- dat://connect-four.hashbase.io - https://github.com/rjsteinert/four-in-a-row-game

staticvar··on Tracking.js – Computer vision library for the browser
'bower install' is a dead give away.
staticvar··on Darpa wants to make a better, more secure, version of WhatsApp
> Exist completely within a network

I bet this requirements implies working seemlessly between online and offline networks. In which case this project is not just building another XMPP/WhatApps/Signal/etc. They are building another Cabal (https://cabal-club.github.io/) :-)

staticvar··on Web Components could replace frontend frameworks?
Polymer is deprecated in favor of LitElement which comes with TypeScript decorators.
staticvar··on Web Components could replace frontend frameworks?
The lit-element package comes with typescript decorators.
staticvar··on Facebook to ban white nationalist content
> Knowing her, it wasn't. It was sarcasm.

Did she know that the person she directed that comment to did not know her?

staticvar··on Show HN: FarmNet, an open-source LoRA agricultural sensing/actuation network
It would be cool to see this sending data to farmOS running on the Raspberry Pi. farmOS has a nice graphing and mapping UI for assets on farms and I know they have it running on some Pi's.

https://farmos.org/

staticvar··on Re-decentralizing the Web, for good this time
Beaker Browser is a cool experiment showing how you can decentralize the web that is both easy for end user's and fun for developers because it pushes web standards.

https://beakerbrowser.com

*disclaimer: I help develop Bunsen Browser, the mobile companion for Beaker Browser.

staticvar··on Show HN: Connect 4 Built with Redux and Web Components
Play the "AI" -> https://rjsteinert.github.io/four-in-a-row-game/

Simple reducer -> https://github.com/rjsteinert/four-in-a-row-game/blob/master...

staticvar··on Show HN: IronDB – a resilient key-value store for the browser
If anyone could point to an up to date docs around storage eviction in browsers it would be greatly appreciated. It's been a big hit to our team's confidence in the "use the platform" mentality that this is not accurately documented.
← PreviousPage 2 of 5Next →