HNHacker News
TopNewBestAskShowJobs

zzo38computer

1,984 karma · joined June 19, 2017

I agree to post these messages public domain.
submissionscomments
zzo38computer··on Software may be getting worse, but it used to be horrible
Improvements have been made, as well as things making it worse. There are different ways in which they can be better and worse, not only one way. Some of these are mentioned in that article, but I do not entirely agree with all of the ideas there even though some are valid.

I think that software (and hardware) should be made in a better way which combines what should be good from new and old things, instead of necessarily avoiding what they were in the past due to thinking that the newer ones are somehow inherently better even though it is not that simple.

zzo38computer··on Apple Music 404 Not Found
Yes, and I prefer to use a keyboard. (For television and something else where there isn't a full keyboard, you can use numbers. I intended to invent Movie Decimal for this purpose, and have implemented a subset of Movie Decimal (the subset involving titles, although the full Movie Decimal is supposed to allow many other search criteria as well such as year, genre, who assigned the ID (similar to OID), etc) and already found it useful. It can allow quick entry for someone who is used to Movie Decimal, and slow but understandable if you are not used to it (since the display will tell you what numbers to push next, making it easy to understand).)
zzo38computer··on Small Programs and Languages
I have written some useful small programs in uxn, such as: hex decoder in 39 bytes (which handles optional spaces and line breaks, uppercase and lowercase, etc), a program to convert JSON to NDJSON in 125 bytes, a program to convert DER to a subset of TER in 220 bytes, BLAKE2s in 1024 bytes (although some of it is padding for alignment, which is why it comes out to exactly 1024), a card game (including graphics, sound effects, fonts, scoring, etc) in 1853 bytes, etc. (These do not always check for errors (although the card game does check that you had made a valid move), which is one of the things that makes them short; since you might want such things sometimes that makes other programs longer, and this is not specific to uxn or to programs I wrote.) Other people might have also done.

The description of uxn and varvara are also small and might need only two pages (I did not write it).

I also remember reading in a book that someone made a game on Atari in 2 kilobytes, and described how they could make it fit (by making the map symmetric, etc), which was rejected because they had 4 kilobyte cartridges by then. (The article in this submission also links to a different game that (probably) someone else made in 2 kilobytes, but this time with JavaScript and HTML. Atari and uxn/varvara are much simpler systems than HTML/JavaScript, though.)

zzo38computer··on We should be more ambitious with the software we build
I think the CSS they use (which isn't much) is good enough (and "img{max-width:100%}" really ought to be the default setting even if the user disables CSS).
zzo38computer··on The United Kingdom generates less electricity per person than in the 1970s
I think 100 W incandescent are too bright; I use 5 W incandescent lights (usually only one at a time, sometimes two if one is insufficient). I also find LED lighting (and flurescent) to be irritating (and they actually use a bit more power, the LED lighting that they installed (but I removed) uses 8 W instead of the 5 W that the incandescent light uses), so I don't use them.

However, I think that often you should not need to be overly reliant on electric power. If you have enough windows then you should not need electric light in the day time, if the incandescent light in the winter time also provides heat, if you have candles when needed, moon light (depending on the phase of the moon), etc, and I can write by hand and many things can be done without a computer (including, walk to where you need to go; I do not have a car so I walk if it is close enough or car pooling with someone else if far away), there is sweater and blankets and candles (which also provide light) in case you are cold in the winter time, etc. If you learn to work things without electric power too then it avoids some of the overly reliance on it.

Getting rid of the roads for cars (and the cars) would also have some advantages (it would need more walking and others but those things can help, anyways).

zzo38computer··on AI is mass decompiling games. That's both awesome and scary
You can duplicate the functionality of computer games (and other computer programs) without decompiling them, in some cases. However, this can require a lot of testing to figure out the working. Having a reimplementation (whether due to decompilation or due to figuring out the behaviour without decompiling it) can be helpful to explain the game rules better too, which many computer games don't explain very well in their documentation, so this means it is possible to write a better documentation (one example where this is helpful is Pokemon). (I have figured out the working of Hero Hearts without decompilation, and making it (at least in my opinion) better than the original, without needing any LLM/generative-AI to do this. Some people (including myself but mostly others) have guessed at (and tested) some behaviours of ZZT, both by testing and by partial decompilation, but eventually someone did rewrite the source code which produces the same executable file than the original, so it is known that it is the correct implementation.)
zzo38computer··on Beauty in DVD Menus
I agree that there are advantages of the usability of VHS; the menus should not be needed (even if they are helpful on some DVDs, they shouldn't be required). There are disadvantages as well, such as being slow (to rewind back to the beginning) and being damaged (although DVDs can be damaged too). Index searching is possible with VHS but I think it is mostly only used when recording TV shows and is not used with movies, even though I think can sometimes be helpful with movies.
zzo38computer··on Beauty in DVD Menus
Where a menu might help is a list of the titles and chapters, although such things can also be printed on the box and selected directly by numeric entry (in which case the menu is not needed, but can be helpful in case you do not have the box). Subtitles, audio, etc can usually be selected by other functions in the DVD player. (Sometimes there are other functions as well, but mostly it should be good enough to just select titles and chapters by numeric entry. DVD players ought to have the option that you can disable unwanted functions in order to just play the selected title directly.) VHS also has index marks but those are mostly used for making your own recording rather than movies.
zzo38computer··on What even is an OS now?
I think that it should not need to be mutually exclusive. You can make it you can enter the programs yourself (if you prefer to do for whatever reason, including, it does not work well (like you mention), or because of Dijkstra objection or other objections to the use of AI for programming the computer or AI in general), but that AI can also be possible.
zzo38computer··on What even is an OS now?
> At home, I use software that is well-crafted to do some thing. Or I write a series of scripts to do narrow things that for some reason aren't in Aptitude or Snap, for example "copy all the photos off my iPhone and rename them and sort them by date in my filesystem".

> Perhaps I have no imagination, but I don't feel like having an LLM make applications on my phone. I want good software that someone that I trust wrote.

I do not use LLM either, and do not intend to do. I can write my own programs. Even if someone does want to use LLM, it should neither be required nor expected nor the default (and there are also reasons why I think that it should be discouraged to use LLM too much); you should be able to write the scripts and programs by yourself if you want to do it that way (and the computer made to make this possible to do without LLM), even if some people can make LLM to do it at their option, but it should not to require LLM and AI.

I also think that the computer that can start with a programming language such as BASIC or Forth (without first needing menus and GUI to access all of the programs) is useful, and that it is not as good that many modern computers do not do like that.

zzo38computer··on 2DWillNeverDie
I think that 2D graphics and games is not bad. For some things, 3D graphics might be helpful, especially if there is also 3D physics, but many games should not need 3D.
zzo38computer··on Ideas on modernizing the open-source desktop
I have different ideas about the UI. We don't need the AI and fancy graphics (animations can be limited to showing where an object is moving to, and a setting can be added to control the animation speed including to disable it entirely). Being able to use programs and data together is helpful (something mentioned in the article), and then to be able to use Command, Automation, and Query Language to do queries and batch operations with them as well. You could put multiple data in one file, and include one kind of data in the other one, etc; it is not plain text but is many types of data. I made a repository with some of my ideas about computer and operating system design (this would be a part of improving it, since the existing systems have limits) and would write more in future. UI and UX is not the only issue, but also security and many other things.
zzo38computer··on Prompts aren’t Real
If the interface is documented and can also be used without AI, and you can write your own software instead if wanted, then that will be more helpful, I think. (Someone who does want to use it with the AI can still do so, without forcing everyone else to also do.)
zzo38computer··on Prompts aren’t Real
You shouldn't need LLM and AI to do such things. Even if such things might be useful to some people, I might want to use the API without LLM/AI and just to read the API documentation and then to make my own, and some other people might want to do similarly. In the specific case of e-commerce, I had been making my own specification of a file format for e-commerce (which is independent of the protocol), which is not intended to use with LLM/AI, but instead is intended to avoid many kind of dishonest business while also being flexible and that you could make and use your own software or some other implementaiton instead of being forced to use their UI/UX.
zzo38computer··on Keys Not Included: recovering the signing keys for US driver's license barcodes
> namely both "private" and "public" key are the same thing; the labeling "public" vs. "private" reflects your arbitrary choice of which of one you give away, and which one you keep for yourself.

It is not quite arbitrary. With RSA, you could potentially store only the modulus and the exponents, publishing one exponent and keeping the other one private (or making each privately known to different people, with both having the modulus). However, the way it is commonly stored is with the private key file includes both exponents and several other numbers, and the public exponent is usually 65537 which makes it easy to guess so you cannot effectively keep it secret. With some other kinds of cryptography (other than RSA), you can figure out the public key from the private key even without doing things like this.

zzo38computer··on Anecdotally, programmers dislike "reduce"
In some programming languages with RPN you can avoid this problem, because it makes sense to put it in the stack as the initial value, and then you can as easily have multiple initial values; and then the callback function can read that from the stack that you had put there, like anything else you will push into the stack to read it back later. For example, in PostScript you can write something like:

  0 exch {add} forall
However, this is not as good if you want to use the first element as the initial value instead, but still it can be done but it is then not as simple (unlike in programming languages that do not use RPN but instead with function call with arguments, in which case it might be simpler).

I guess names as SELECT and WHERE are like SQL (although SQL works differently than other programming langauges).

zzo38computer··on Things That Annoy Me About Cars
Something that bothers me (even though I do not drive a car and do not intend to, but sometimes am a passenger) is windows that require electric controls to operate and cannot be operated manually.
zzo38computer··on Iranian banks' SSL certificates are being revoked due to OFAC sanctions
It doesn't load for me, but I have read the other comments.

There is the problem of TLS and X.509 being used with centralized authorities like this, even though it is not inherent to TLS nor to X.509 (although they were designed to be used in this way). In some circumstances, you can get a copy of the certificate (which might be self-signed) from somewhere else and then check that it matches in this circumstances. In other circumstances there are other things that can be done (e.g. TOFU, which has a different set of problems, but also has advantages in a different set of circumstances). What the security requirements are will depend on the circumstances, which can also depend on the user's intentions; they should not have to depend on a centralized authority.

(There is the issue that a single X.509 certificate cannot have multiple issuers, though. There is also the issue that X.509 certificates cannot contain unsigned extensions (they could be added after the signature, but an implementation might check for additional fields after the signature and reject a certificate that has any). Although an alternative schema can be made (I have done so), it would not work with the existing protocols.)

zzo38computer··on Iranian banks' SSL certificates are being revoked due to OFAC sanctions
I think it would be a good idea. TLS and X.509 would work better that way. Actually, both sides should have a certificate (the bank might issue a certificate to the customer).

It won't do for all circumstances (as some other comments mention), but when it is possible, it would be a good idea.

zzo38computer··on Iranian banks' SSL certificates are being revoked due to OFAC sanctions
One possible alternative might be to add the ability for user configuration to substitute one certificate for another one (both will need the same public key and subject name, but the substitute will not be self-signed (since you do not have the private key)), and to use the data in the substitute certificate instead of the original. If the name constraints extension is implemented, then it would make this and other things possible. Since the substitute certificate will be considered trusted, it is not necessary for the substitute certificate to have a signature (if it does (e.g. because you got it from somewhere else instead of making it yourself), then the signature can be ignored), nor is it necessary for the substitute certificate to be issued by anyone (this applies even if it is the end certificate being substituted).

I think some servers do not send a copy of the root certificate to the client. In this case, what I described above might already be possible even if that feature has not already been added to existing implementations, as long as it does not require the installed certificate to be self-signed.

zzo38computer··on AI Robots – When will they be in our homes
I also don't like the idea of putting cameras all over my house and having ad companies surveil my intimate space, and I also don't like to add further things that require electrical power, and/or that make noise, etc. This is in addition to the security ramifications that you describe and that you don't describe, and other issues.
zzo38computer··on AI Robots – When will they be in our homes
If you disable JavaScripts then you will get a non-interactive version (with a note that says you can enable JavaScripts for the interactive version), so you might try that.
zzo38computer··on LG denies TV spying claims, says tracking and snooping concerns 'not true'
I mostly agree, although if the manufacturer has a catalog of software (which they have managed to check for quality, classification, etc) that you can optionally use for installing software (which others can also choose to do, e.g. in the case of Android there is also F-Droid), but that you can also install anything that you want to do by yourself (including software that you wrote by yourself) without needing to be able (or willing) to contact (or have anything further to do with) the manufacturer (for any reason), then it can be helpful.

Also, if someone provides a service (e.g. Netflix) that some might want to use and some might not, then you have the option to use that service might be helpful but even that should not require any relationship with the manufacturer unless they are also providing the service. If the manufacturer is separate then they should not have anything to do with it (e.g. they should not add a button on the remote control specific for Netflix; if they have user programmable buttons that you can add your own labels, then it would be possible to use such a thing like that if the end user decides to install Netflix). (There are other problems with Netflix too but I am ignoring them for now because that would be a separate discussion.)

zzo38computer··on Copyright does more harm than good and should be abolished
(If the message is not displayed, try appending ".json"; in my experience, this works on some Mastodon servers (and some others too) but not others, and works on this one. However, I will repeat it here because it is short enough.)

> Copyright does far more harm than good and should be abolished. It doesn't protect the livelihood of individuals and small businesses in practice. Instead, it's a weapon wielded by large corporations to protect their monopolies. It's abused to take down content that's not in violation of copyright and to restrict people being able to use/repair/modify/backup their property. Large corporations getting special exceptions from it didn't start with LLMs.

I agree that copyright should be abolished, and have said such thing in the past, and other people have said such things too. These are some of the significant problems with it, but not necessarily the only problems. Even if there are some cases where it is beneficial, I think that they would generally work better if copyright were abolished and then such cases would become unnecessary.

Patents should also be abolished.

zzo38computer··on Authentication Is Largely Solved. Authorization Isn't
Neither authentication nor authorization is solved very well in general, although in some specific cases they are partially solved.

For working on a single computer, I think capability-based security with proxy capabilities is helpful for both. This won't do alone; however, you can add a user account database and you can handle permissions made out of such a capability-based security, which can be flexible because each process can have different permissions, and with proxy capabilities it is possible for the permissions to do things other than the fixed set of permissions.

For working on multiple computers, I think X.509 certificate chains is helpful for both. You can check that the user can authenticate with the key in the end certificate, and can look in the certificate chain for a recognized authority and know what permissions it has, and then check if the required permissions are granted either by all certificates leading to and including the end certificate, or only the end certificate, depending on the type of permissions (e.g. extended key usage might only be needed by the end certificate, while such things as what files it is allowed to access and how it can access them must be permitted by the entire chain in order to be granted). Extensions can be added to specify any additional details required by the authorization and/or authentication needed by your application. (The use of X.509 certificate chains also means that you would not need API keys, nor passwords (the private key can be passworded if you want to, but the server never sees the password, and therefore cannot steal it).)

zzo38computer··on 216M Spy TVs – The LG Smart TV Problem [video]
I think that the fines should be the amount per crime that is being fined, plus the total amount of all revenue from whatever the fines are related to (including indirect, but only counted once).
zzo38computer··on 216M Spy TVs – The LG Smart TV Problem [video]
Most TV sets should not normally need microphones, and if they have that in some models (as long as there are models without), then there should be a hardware switch to disable them. However, "continuously sweep home networks, map secondary devices, and log microphone audio while appearing to be turned off" is also stealing and wasting your power.
zzo38computer··on Windows 11's "special" developer edition looks like another marketing misfire
> I have gone and ticked the “stop hiding file extensions” since they were introduced in ~98 (or was it Windows 95?)

I think Windows 95, although even selecting that option still hides some file name extensions (such as ".lnk"). However, I have found that it is possible to use the registry editor to force all file name extensions to be displayed.

zzo38computer··on The moral panic over data centres is foolish
People have managed (and sometimes do manage) to do without golf courses and refrigerators and dishwashers and cars (and roads for cars) etc, and should learn to be able to manage to do without such things, for multiple reasons.
zzo38computer··on Why do so many tools have JSON config files?
> for UTF-16 you've already got UTF-8 and given that even Microsoft have abandoned BMP strings I doubt any attempt to reintroduce it will get much traction

This is not reintroducing anything; the BMP type is already there, although its meaning is expanded (the existing BMP type is effectively a constrained subtype of UTF-16). Although most applications probably will not use UTF-16, it might sometimes be useful in some applications where it is more useful to store UTF-16 instead of converting to/from UTF-8.

> relative OIDs already exist

Yes, although I have given a standardized name and semantics to something that is allegedly already a common use (and is one that I often use in my own projects), which the official specification from ITU admits. It uses the existing OID and relative OID types (and the same type numbers as them), and is like a CHOICE between them (implementations may treat it as such).

> BCD strings are just constrained PrintableStrings

The abstract meaning matches that of constrained Visible (not Printable) strings, but the encoding is more compact.

> UTF-8 won for all of the string types

Although it is common (and some other formats don't support other string types), I disagree, and I think that one character set cannot be useful for all purposes, and furthermore that Unicode is not that good and has many problems.

> Reference sounds like an EXTERNAL, OOB sounds like an ANY DEFINED BY

I don't think so. It seem like different to me.

Page 1 of 34Next →