HN user

afiori

3,735 karma

This about had been empty long enough; I will use it for a book recommendation: Unsong, by Scott Alexander

http://unsongbook.com/

My guess is it will be the weirdest book you will have ever read.

If it is not, please, I am curious about what is your weirdest book :)

Posts40
Comments2,904
View on HN
www.astralcodexten.com 9mo ago

What Is Man, That Thou Art Mindful of Him?

afiori
1pts0
www.astralcodexten.com 2y ago

Book Review: Elon Musk

afiori
3pts0
astralcodexten.substack.com 3y ago

Book Review: Cities and the Wealth of Nations/the Question of Separatism

afiori
2pts0
www.hpmor.com 3y ago

Harry Potter and the Methods of Rationality

afiori
2pts0
en.wikipedia.org 4y ago

Jury Nullification

afiori
9pts0
news.ycombinator.com 4y ago

Ask HN: Did you ever meet a Unicode Normalization Bug? How did it happen?

afiori
1pts0
telegra.ph 4y ago

Open Source is Charity; It should not be poison

afiori
3pts1
astralcodexten.substack.com 4y ago

Whither Tartaria? Why are modern and traditional buildings so different

afiori
5pts2
www.ribbonfarm.com 5y ago

A Quick (Battle) Field Guide to the New Culture Wars (2018)

afiori
1pts0
www.theatlantic.com 5y ago

The polarization of place and the depolarization of race in American politics

afiori
9pts15
www.rangevoting.org 5y ago

Warning Voting reform trainwreck approaching

afiori
2pts0
sscpodcast.libsyn.com 5y ago

Meditation on Moloch [audio]

afiori
2pts0
ourworldindata.org 5y ago

Excess mortality during the Coronavirus pandemic

afiori
3pts2
wiki.c2.com 5y ago

The Expression Problem

afiori
96pts45
wiki.c2.com 5y ago

The Expression Problem

afiori
3pts0
sqlite.org 6y ago

SQLite as an Application File Format (2014)

afiori
567pts301
www.bbc.com 6y ago

The '3.5% rule': How a small minority can change the world

afiori
4pts0
theredpillmovie.com 6y ago

The Red Pill – A Cassie Jaye Documentary

afiori
2pts0
en.wikipedia.org 6y ago

The Murder of Junko Furuta

afiori
1pts1
www.warpconduit.net 6y ago

Generate Easy-to-Remember Passwords

afiori
2pts0
keeweb.info 6y ago

Free cross-platform password manager compatible with KeePass

afiori
1pts0
developer.mozilla.org 6y ago

JavaScript Tagged Template Literals

afiori
1pts0
jamstack.org 6y ago

Jamstack – JavaScript, APIs, and Markup

afiori
1pts0
slatestarcodex.com 6y ago

Against Tulip Subsidies: A College Loan Crisis Analogy

afiori
2pts0
slatestarcodex.com 6y ago

Who by Slow Decay

afiori
1pts0
slatestarcodex.com 6y ago

Slate Star Codex

afiori
1pts0
news.ycombinator.com 6y ago

Emacs is too Big and Complex: Where do I start from?

afiori
2pts3
www.atmail.com 6y ago

JMAP Make Email Better

afiori
2pts0
keeweb.info 6y ago

Free cross-platform (including Web) password manager compatible with KeePass

afiori
1pts0
arp242.net 7y ago

Flags Are Great for Configuration

afiori
2pts0

yes but no... most database allow for at least as many parallel and concurrent writes as there are tables at a minimum.

The "lock on write" problem is that in MySQL i could run a OLAP pipeline for a few hours and have a fully functioning database with degraded perfomance, on SQLite the same pipeline would lock the database for the full hour. (there are surely ways to solve this (eg using the main db as read-only and a secondary db for writes or splitting the writes in incremental transaction), but it is not a "myth".

What I mean is that unsafe code allows you to eg break std invariants (set invalid length to Vec, unlock a locked mutex, etc.) in ways that can be UB, which of these are UB and which can be used "safely" is sort of unknown.

For better or worse they are much more well understood in C as they are front and center of the language semantics

To be pedantic the ad hominem fallacy is about trying to deny an argument by attacking the author, so in a discussion about zig Vs rust if Andrew isn't trying to enter the discussion and just argue "that guy was stinky, glad he is gone" is not really an ad hominem, just not classy let's say.

I agree with your point, but for completeness:

How is not having to mark your unsafe code as unsafe a good thing?

The problem with unsafe code in Rust is that IIRC nobody actually figured out yet the "rules" of unsafe i.e. which invariants you can stretch and which can cause UB. My (not super up to date) understanding is that this is an active area of research and progress is being made and also that in practice there are many well understood usages.

In short unsafe rust is somewhat worse than C++ as the boundaries of UB are less well understood/defined

The issue is that many modern DOM APIs assume js semantics and types (eg promises, iterables, etc) so you need to "reimplement" some js semanthic in wasm; sorta like how apple added a few custom instructions on the M1 chip specifically for the type of floating point operation required by js.

Stop Using JWTs 1 month ago

This does not address how much the JWT header is a security footgun (eg you can inline remote keys into the header). if you are doing something simple you can disable all "advanced" features and be pretty safe but if you are doing something a bit more complex it is not so easy.

The only case where JWTs are actually useful is when the producer and consumer do not share a DB (eg OAuth/OIDC, iot deployments, heavy microservice architectures) otherwise a good cached session store should handle well up to a few orders or magnitude below google scale.

Your ePub Is fine 1 month ago

Conceptually maybe you can compile flash to SVG+js but this has nothing to do with the point. Many insist (I have no direct experience) that the flash ecosystem (especially the editor) was and is unsurpassed as a publishing platform for interactive experiences.

Today with the current focus on mobile+low latency+e-commerce optimizations flash would probably have shown a lot of limitations, yet JavaScript, SVG, canvas, http webgl etc still fail to provide a "competitor" to what flash used to be.

The web simply went in a different direction, one that left many unsatisfied

Because Java was doing nothing similar, a better comparison would be .NET CLR that actually tried to be a decent compilation target.

Also security, Java has reflection so you cannot reliably sandbox java libraries

federations are the only decentralization model that scales, the issue is that most "federated" systems are actually just "distributed centralization" eg mastodon.

In cryptosystems there is a difference between things that can be changed and not, eg passwords/keys are a secret that can be easily charged. Algorithms not so much.

"Security through obscurity" refers to the practice of using an hard to change "thing" as a secret, which is indeed bad practice