HNHacker News
TopNewBestAskShowJobs

time4tea

613 karma · joined June 28, 2013

submissionscomments
time4tea··on Allianz Life says 'majority' of customers' personal data stolen in cyberattack
Mandatory £1000 fine per record lost. Would be company-terminal for companies with millions of customers - and thats right. Right now it's just cheaper to not care, then send a trite apology email when all the data inevitably gets stolen.

The status quo, nobody gives a crap, with the regulators literally doing nothing, cannot continue. In the UK, the ICO is as effective as Ofwat. (The regulator that was just killed for being pointlessly and dangerously usless)

(Edit: fix autocorrect)

time4tea··on We built an air-gapped Jira alternative for regulated industries
So much of this is just normal stuff anyway, right? Signing CI output, tracking dependencies, using bundled resources..

Bit-for-bit reproducible builds are definitely doable, but mean including build dates is tricky, and care needs to be taken with archival file ordering.

Is this such a big departure from the norm? Curious what constitutes normal!

time4tea··on Let Me Pay for Firefox
Tbh firefox is excellent.

Having an £1/month subscription that you could take any number of (including zero), would be easy and generate some income.

There have been some mis-steps to be sure, but also some cool stuff. People often focus on the negative.

time4tea··on Congestion pricing in Manhattan is a predictable success
Cycling is so much more effective than cars.. actually approx 5x more in terms of street usage. So when people move to bikes, the streets look way less busy. You'd need a 5x more bike traffic than car traffic for the two lanes to be equivalent.

Just worth bearing mind when people talk about streets being emptier - just emptier of cars

time4tea··on Too Many Open Files
You can recompile libc if you want to change the limit, or at least you could in the past.
time4tea··on Covert web-to-app tracking via localhost on Android
If you work for meta, you're on the baddies team.

(Other bad guys are around too)

time4tea··on Swift at Apple: Migrating the Password Monitoring Service from Java
Absolute bs.

This falls into the category of "we rewrote a thing written by people that didn't know what they were doing, and it was better"

Large class hierarchies (favour composition over inheritance since 1990!), poorly written async code (not even needed in java, due to virtual threads), poor startup times (probably due to spring), huge heaps sizes (likely memory leaks or other poor code, compounded by inability to restart due to routing and poor startup times)

Yawn.

time4tea··on A lost decade chasing distributed architectures for data analytics?
If it fits on a single disk, it's not big data.

Me, circa 2007, when lovely hadoop guy trying to tell me how good it was for 10m rows of data... It was much slower than Oracle free version as I recall.

time4tea··on I failed a take-home assignment from Kagi Search
It's totally unreasonable to ask somebody to do so much free work, and the outputs are hard to judge, and likely not the candidate's own work anyhow, so almost entirely pointless.

Remember kids "just say no"

time4tea··on Maryland's 24/7 Work Zone Speed Cameras Issued 48,000 Tickets in 2 Months
Because speed limits are advisory.

Because I have a fast car

Because I was in a hurry.

Because I had something really important to do.

Because the shops were closing/little Johnny would be late for school.

Because I'm self entitled?

time4tea··on Fixrleak: Fixing Java Resource Leaks with GenAI
This could be interesting, but all the example code is so poor, and the extent of the fix so limited that it feels like this is 'AI' for the sake of it.

Stringly-typed, catch-log-ignore, generates warnings in IDE anyway...

Fixed 90 of 125 errors that were found by a different technology... probably.could have been fixed by one developer in 1-2 days anyway - how long did this take?

time4tea··on Matt Godbolt sold me on Rust by showing me C++
aka use Tiny Types, they will help you.

Been true in all statically typed languages for decades!

It's good advice.

time4tea··on I'd rather read the prompt
Love that final thought.

(AI slop). If it's not worth writing, it's not worth reading.

Perfect.

time4tea··on Oxide’s compensation model: how is it going?
Variable pay for sales roles is the driver of vast amounts of broken behaviour. You've seen it it your own companies, but also in the various financial crashes. It immediately sets everyone's goals in non-coherent directions. Wonder why your favourite software is getting so crap? Pressure from "sales execs" cos they are getting a bonus for the poorly thought out, inconsistent crappy feature they sold to some enterprise.
time4tea··on CATL unveils new EV battery that charges as fast as pumping gas
https://www.google.com/search?q=175Wh%2Fkg+in+Wh%2Flb

Yes Yes No

time4tea··on A New ASN.1 API for Python
20+ years ago used ASN.1 for talking between micro services. (HTTP Services, as they were called then) Very performant. Had to buy OSS tools licence but other than that quite nice.
time4tea··on There are two types of dishwasher people
The article says 3-5 gallons for a dishwasher cycle, but this is loads!

Recent UK dishwashers use less than 2.

time4tea··on Tell HN: Camelgate NPM Outage (Cloudflare)
Scunthorpe problem
time4tea··on Devs say AI crawlers dominate traffic, forcing blocks on entire countries
Yeah my small site got 170k requests from one bot in a few mins. Of course it was rate limited, but didn't seem to know 429 or 444 (drop connection) so kept on coming back for more. I do have ipset drop too but at the moment takes a person to enable it... just so much effort to stop these **s. Exhausting!
time4tea··on One year after switching from Java to Go
The jvm is a pretty insane beast. It will do usage based recompilation, escape analysis for memory, so non heap allocation is super fast, has great memory safety... But a lot of people use it with spring/spring boot, a technology designed to work around the complexities of a particular type of middleware software in the late 90s and early 2000s. It's cargo cult programming of the highest order. In the OP, the author is comparing apples with oranges, with a bit of misunderstanding that java/jvm means spring boot, and while that is true for a lot of people and certainly a lot of stuff on the internet implies that 'this is the way', it's not required. Startup times of ~100ms are absolutely standard for a big program, similarly unit tests taking 1ms. I prefer to write kotlin rather than java, as it's a nicer language ,IMHO, but still those bytecodes run on Jvm and same stuff applies.

Edit: im not advocating writing 'ls' in java, and I would also agree that java uses more memory for small programs, so its not a systems programming language probably.

Just use new() it's pretty fast.

time4tea··on Show HN: 2048 turned 10 this year, I built an updated version to celebrate
Just another scam Internet surveillance.

Why do you need to share tracking data with many hundreds of shady organisations.

time4tea··on C++ proposal: There are exactly 8 bits in a byte
formerly or formally?
time4tea··on About synchronous disk replication
Memories of EMC Symmetrix SRDF. Was a bit more expensive then though, but it was quite nice.
time4tea··on Decker: A reincarnation of HyperCard with 1-bit graphics
There was a NASA laserdisc at school with loads of shuttle information. It was hooked up to a Mac running HyperCard, for navigation and displaying info. It was pretty cool, although I think at the time I didn't appreciate it as much.
time4tea··on Ask HN: How to handle user file uploads?
A lot of people here are telling you to do stuff, but not really explaining "why".

A different suggestion would be to build a threat model.

Who are your uploaders? Who are your viewers? What are the threats?

Only when you've figured out what the threats are, can the solutions make sense.

Internal site? Internal users? Publicly available upload link? What media types? ....

Threat modelling is a thing that adds lots of value (imho) when thinking about adding new capabilities to a system.

time4tea··on SFMTA's train system running on floppy disks; city fears 'catastrophic failure'
Raspberry pi controller $30, couple of people to make it work - let's say $500k. Sure... there are loads of things that probably need attention, but maybe you don't need to fix them all at once?
time4tea··on Ask HN: How to run an old-school mailing list?
I used mailmanlists.net for a few years and it worked very well.

(No association)

time4tea··on Research shows that people who BS are more likely to fall for BS (2021)
And hilarious that the article about BS is behind a BS, illegal in the EU, cookie banner.
time4tea··on Observable 2.0, a static site generator for data apps
Importing libs from a cdn is a big no-no for almost any system I work on - they are just another way of surveilling users on the Internet, and building information about the insides of organisations.
time4tea··on AdGuard Home: Network-wide ad- and tracker-blocking DNS server
You might be interested in py-hole. It's just a python script and some dnsmasq configuration, it runs on openwrt, is free and close to zero cpu usage.

https://github.com/time4tea-net/py-hole

← PreviousPage 4 of 7Next →