HNHacker News
TopNewBestAskShowJobs

tapas73

61 karma · joined September 23, 2021

submissionscomments
tapas73··on Charge, Baby, Charge for Parking
> this is the very point of having these charges. They relieve congestion

Yes.

>> ensuring the only people using it are the people who want it really badly

Not necessarily. People using it could just have more money.

tapas73··on Dev corrupts NPM libs 'colors' and 'faker', breaking thousands of apps
> This sounds increasingly like security theater.

It does help. Quite a bit.

Each layer (e.g. firewall rules that require that all internet access go through a proxy), adds non-trivial amount of work for the hacker to get anything useful done.

1. best case - hacker will give up.

2. good case - you have more time to notice and react.

How much layer cost you, how much does it cost for hacker to overcome it.

Things to remember:

1. Not all hackers are nation states. Most are not.

2. We must accept that no security measure is absolute even against script kidies. Given enough time and luck/misfortune js sandbox will do "rm /sensitive/file".

Recent Log4shell example shows that one can follow all best practices and still get bit in unexpected way.

tapas73··on UUIDs are popular, but bad for performance (2019)
reasons are: 1. no need for coordination in distributed system, no need to check what is the next available id. 2. if userid is visible to users, sequential userid gives away information about the amount of users and allows guessing other valid userids.
tapas73··on UUIDs are popular, but bad for performance (2019)
there is new uuid versions (draft) that solves the locality problem: https://datatracker.ietf.org/doc/html/draft-peabody-dispatch... (one of the new ones, cant remember which exactly)
tapas73··on UUIDs are popular, but bad for performance (2019)
but if mistake is made, and you wrote down L instead of 1, and sent me in a e-mail. I, knowing that it is crockford 32, would easily deduce what mistake was made.
tapas73··on Ask HN: Are We in a Bubble?
could it be just inflation. I heard that there was a lot of moneys being printed.
tapas73··on SQL language proposal: JOIN FOREIGN
It enforces foreign keys during select.

One can say that it makes you explicitly state, which foreign key do you use.

"on a.foo = b.bar" can be a incomplete and/or incorrect join condition.

tapas73··on SQL language proposal: JOIN FOREIGN
I would argue that conceptually it's not too different from needing to know what tables/columns exist in datamodel.

I get that it is not common now to care about FKs when writing selects. But it could be. Tooling can be improved to help here. (show fks, autocomplete)

Btw. Everybody seems to concentrate on conciseness, but keep in mind that this helps also with query correctness.

tapas73··on SQL language proposal: JOIN FOREIGN
First, very valid concern regarding table name.

> Other than saving some typing,

I would like to point out the corectness aspect of the proposal.

Today foreign keys are enforced during inserts, updates, deletes. (you just can't violate fk. this is so good) But you can violate it in selects. (e.g. mistype column name, forget to include a column)

This proposal (or its adjustment) would allow to use fk also during select. It's like static typing for join conditions.

tapas73··on SQL language proposal: JOIN FOREIGN
I will write a letter to santa asking to get this into sql. During 10 years in data warehouse I constantly wondered why SQL does not have something like that.

Reducing verboseness is nice, but the main perk is the correctness.

Oh.. if I got a cent every time I found a bug in colleagues sql, because of join accidentally multiplying/doubling rows... :-)

tapas73··on SQL language proposal: JOIN FOREIGN
Lets have disabled FK then.

postgre, seems to not have it, but the proposal could include also "disabled FK" part.

teradata, oracle, sql server already have option for FK "disable/no check".

https://docs.teradata.com/r/eWpPpcMoLGQcZEoyt5AjEg/df1PvVh6e... https://docs.microsoft.com/en-us/sql/relational-databases/ta... https://docs.oracle.com/cd/B28359_01/server.111/b28310/gener...

tapas73··on Features of a dream programming language
I am sad that compilation speed is not on the list.
tapas73··on I found (and fixed) a vulnerability in Python
please dont interfere with browser hotkeys
tapas73··on Japan to pay companies to keep sensitive patents secret
Deterance, is also (kind of) defensive purpose.
tapas73··on What will enter the public domain in 2022
Is there some story about it?
tapas73··on Rust programming for web developers, by a web developer
back button does not work. Bad site. No treat for you.
tapas73··on Spinoza’s God: Einstein believed in it, but what was it?
regading conciousness being an illusion. Does it not imply a spectator? (illusion has to trick somebody)
tapas73··on Spinoza’s God: Einstein believed in it, but what was it?
are you referencing to virtual particles? If so, are those real or just mathematical device used for quantum calculations?
tapas73··on Ask HN: Is HN having problem keeping up today?
Also when parents and grandparents join, kids start to leave.
tapas73··on Europe’s energy crisis is about to go global as gas prices soar
There is more than one way to avoid taxes. (hollywood accounting)
tapas73··on What will programming look like in 2020? (2012)
My take on this:

1. Societal issues. Microsoft wanted Java they could control and change. C# it is then. Google is moving away from java to kotlin, because of disagreements with Oracle.

2. Wish of different trade offs. fast-to-learn vs feature-full vs ease-of-use vs configurability vs portability vs speed vs safety vs developer friendly vs user friendly vs admin friendly vs development-speed vs program corectness.

3. Low proof-of-concept cost. If some lib involves lot of boilerplate for my usecase, it is easy to create my own improved version and feel the sense of achievement (my version might be just a wrapper at first, but the gate have opened)

4. Reduction-of-programing-worlds-complexity is at the bottom of everybodies priority lists.

tapas73··on The Science of the Benefits of Religion
> Atheists do good because it's the right thing to do.

Or is remnant from religious generation? (parents programm kids that doing good is right thing to do because God says so. Certain generation starts omitting "God says so" part)

tapas73··on The Science of the Benefits of Religion
which is which?
tapas73··on The Science of the Benefits of Religion
Linked article conveniently forgot to mention the relevant footnote from original article:

> This may seem paradoxical, since atheists and agnostics have very low levels of religious commitment and yet score very well on the survey questions. However, atheists and agnostics account for a relatively small share of the total number of people with low levels of religious commitment; 4% of Americans describe themselves as atheists or agnostics, while fully 35% have low religious commitment. Atheists and agnostics answer an average of 20.9 questions correctly, compared with an average of 15.4 correct answers among people with low religious commitment who do not describe themselves as atheists or agnostics.

Btw survey questions them selfs are a bit nitpicky.. (who cares if jesus realy changed water into wine or if that was just symbolic)

Original article: https://www.pewforum.org/2010/09/28/u-s-religious-knowledge-...

tapas73··on Serbia surveillance law urgently withdrawn
Pushing Serbia away from Eu (democracy'ish), would push Serbia into hands of Russia & China (authoritarian'ish).

I know whos influence on Serbia I would prefer. (for my self (eu) and for Serbia)

tapas73··on The world's worst Linux kernel module
> I was ...

We'll need a peer reviewed article to believe that.

tapas73··on Lab-grown meat may never be cost-competitive enough to displace traditional meat
Are you sure there is such distinction? (cognitive level ethics vs emotion)

As I see it, if there are no emotions/emphaty then field of ethics has no use.

← PreviousPage 2 of 2