HNHacker News
TopNewBestAskShowJobs

vmasto

739 karma · joined July 16, 2013

submissionscomments
vmasto··on Securing your API: a modern alternative to CSRF tokens
It's not. If you think it is you probably store JWT unsafely instead of in an httpOnly secure cookie.
vmasto··on Please Make Google AMP Optional
For some reason I'm not experiencing the same at all.

I googled "Trump". First five stories in carousel (wapo, bbc et all) are not AMP. I see only one AMP link in the first page results. Click on it, page loads. Swipe right/back button gets me to Google results (as expected). Is it because I'm on an iPhone and this is an Android thing?

vmasto··on JSC loves ES6
Just talking about the name.

You can see how this is confusing, here's a recent one just from today by Craig Federighi https://twitter.com/feross/status/871839072590979076

vmasto··on JSC loves ES6
Unfortunately it's the name we're stuck with though, and it makes a lot more sense because ECMA releases are yearly.

Not judging, but if high profile articles and browser vendors started addressing it correctly we wouldnt have any issues migrating, more syllables or not.

vmasto··on JSC loves ES6
I really wish we would stop calling it ES6. Browser vendors should be especially careful to call ES2015 by its correct name and help stop perpetuating the confusion (ES6, ES7, ES2016, ES2017, you can see how this quickly gets confusing).
vmasto··on Truly intelligent enemies could change the face of gaming
So does your NPC. This is what the whole point is about. How does the fact that it lives in a silicon chip make it any different?

It suffers like you and I. That's the whole premise of this discussion.

You didn't answer my second question. Would you be willing to torture the above mentioned being?

vmasto··on Truly intelligent enemies could change the face of gaming
Would you also accept being tortured for fun on a daily basis by your "owner" in the "do we live in a simulation" example?

Would it be ethical to torture a sentient being existing in your hardware, for fun?

Why do you believe ownership is decided based on residence? Do I own my pet dog? Is it ok to torture it?

I think you are grossly underestimating countless nuances of the ethicalities AI brings to the table.

vmasto··on Realtime Bitcoin
Oh Christ I thought it would be a bot. My apologies to Johan.
vmasto··on Npm v5.0.0 released
It is perfectly reasonable and avoids mistakes. It's better to have a module that's unused than to break your whole build.

If you want to try something install it and then remove it. That's the more conscious decision. I don't want to have to remember to save the module if I end up liking it, but I will remember to remove it when tearing it down from the codebase, and if I don't, nothing bad happens.

vmasto··on The largest Git repo
This is mainly why I'm asking for data from Facebook. I've seen claims that their vcs operations (at least the most common ones) are near instant, but nothing official. It would appear that FB have solved the responsiveness problem with Mercurial but, again, no official data to back it up.
vmasto··on The largest Git repo
19 seconds for a commit (add + commit) might be long but the new improvements look promising (down to ~10s).

(Please correct me if the COMMIT column in the perf table includes the staging operations.)

This looks awesome. I just wish Facebook would also share some perf and time statistics on their own extensions for Mercurial, last time I checked their graphs were unitless.

vmasto··on Next.js 3.0 Preview: Static Exports and Dynamic Imports
Possibility of 3x-5x perf impact according to Dan Abramov. https://github.com/facebook/react/issues/2608#issuecomment-2...

I did not expect to argue in HN of all places whether it's OK or not to run the development mode of a library in production when it's so simple not to and the authors are trying so hard to prevent people from doing that.

vmasto··on Next.js 3.0 Preview: Static Exports and Dynamic Imports
I'm afraid it won't reduce the impact, your server takes the initial load of rendering instead of the browser, and the browser takes over for each re-render.

Not sure how Next.js does it but you should probably try putting NODE_ENV=production in the "build" script in package.json like in "start"?

I had a quick glance over Next.js's docs and it looks like they should handle this automatically just by `next build`. ¯\_(ツ)_/¯

vmasto··on Next.js 3.0 Preview: Static Exports and Dynamic Imports
Just a heads up you're using the development version of React which is very very slow. You'd want to switch to the production version, not sure how that works in next but you generally build your React with NODE_ENV set to `production` for this to happen.
vmasto··on The Tools We Use To Stay Afloat
Thanks for taking the time to answer!

FWIW this topic would make for a great technical post/how-to.

I also seem to recall that Automattic does this with their front end (calypso) which handles wordpress.com

vmasto··on The Tools We Use To Stay Afloat
How do you handle the database? Do you reuse the one on staging or create a new instance with prepopulated data? If the former how do you deal with migrations and schema edits?
vmasto··on Microsoft Issues WanaCrypt Patch for Windows 8, XP
Windows 8.1 Update is supported until 2023 AFAIK. Also Windows 8 -> 10 was free for a reasonable amount of time.

Purely out of interest what kind of hardware is incompatible between the two versions?

vmasto··on Microsoft Issues WanaCrypt Patch for Windows 8, XP
Their (ex) customers placed their own security on a lower level themselves. WinXP is unsupported for quite some time and was given plenty of time to switch or upgrade.

What's impressive is how people manage to spin this into an anti MS rant even when Microsoft is doing the right thing (stopping support for paleolithic software).

vmasto··on React Riot: online 48hr hackathon for React
This looks awesome, just one question and forgive my ignorance; since the topic is free to choose and audits will only be performed in the repo involved, what's stopping someone from creating an app a month prior and then simply manually replicating their commits during the 48hours?
vmasto··on Ask HN: How many are 30+ years and still active programmers?
What do you mean "still great at programming"?

Are you afraid that programming skills deteriorate with age for some reason?

vmasto··on Node.js Compiler – Compiling your Node.js application into a single executable
How is this different than zeit's recently released pkg?

https://github.com/zeit/pkg

vmasto··on Prepack helps make JavaScript code more efficient
JavaScript parsing is still a huge bottleneck. 1mb of it will still take 1 whole second to parse in V8 (note: just to parse it, not actually evaluate or run it!).
vmasto··on I'm an ex-Facebook exec: don't believe what they tell you about ads
He was a Product Manager (says right there in the article).
vmasto··on Vue Loop – Infinite scrolling
Indeed, the website seem fairly broken. i.e. the right side is clipped as well on Firefox (can't see the Contact link on the mast head).

On (desktop) Safari hovering over a few sections causes the site to just randomly scroll to another section (e.g. Hovering any of the first 2 links of "Get in touch" goes a section back and the third one goes to the last hero section").

In mobile Safari (latest version) the website stops functioning after the first scroll until the end, the hero is the only thing that is viewable.

Lastly, the infinite scrolling loop doesn't work backwards (i.e. scrolling up) which gets a bit confusing.

There's something extremely fundamental in scrolling, it gets embedded in the user's cognition. I wonder what we need to do to raise awareness in finally stopping to meddle with it.

vmasto··on The Boring Company [video]
Kinda off topic with what this is about but I have a few technical questions regarding the website (which is just a logo and a YouTube video embed on a white background):

- Why is it built with React? - Why does it need to load so much JavaScript? - Why does it need to load a custom web font? (There's exactly zero text from what I see). - Why does it need a CSS grid framework?

vmasto··on A PostgreSQL response to Uber [pdf]
Streisand effect indeed but I don't mind. I got to see two posts and some technical aspects I wouldn't otherwise.
vmasto··on Emojipedia.org
I apologize for the kinda off topic reply; I have no idea why but Google's cookie emoji triggered me into an uncontrollable laughter. It looks so low effort, it's amazing.
vmasto··on When Does a Project Need React?
Oh yeah you're absolutely right of course. Not saying it doesn't run V8 or some kind of interpreter in the background (I actually have no idea how they work), just think that's abstracted away and I don't think there's any JavaScript setting up required from the developer.
vmasto··on When Does a Project Need React?
but React server-side rendering only runs on Node.js AFAIK.

There are a few solutions for Ruby, PHP and Python although I have no experience with them and how well they perform/work.

vmasto··on When Does a Project Need React?
Certainly not the only language, see my reply above (or below depending). There are a lot of great languages which either compile to JS perfectly or have been built with that purpose in mind.
← PreviousPage 2 of 6Next →