HN user

contrahax

485 karma
Posts0
Comments87
View on HN
No posts found.
[GET] "/api/user/contrahax/stories?hitsPerPage=30&page=0": 500 Failed to fetch user stories

Really good internal security practices by the people who make the OS :) I don't think an attacker would be able to pull off disabling features like secure domains, secure enclave, etc. in macOS without anyone noticing seeing as it takes months of approvals, testing, etc. for a single build to even hit the beta channel.

This ultimately needs to get addressed at the OS level. Why is a random JS file on disk allowed to read my browser cookies without my awareness? Why is a native extension downloaded from S3? This goes across all package managers (npm, pypi, cargo).

I think security controls on macOS have been trending in the right direction to tackle these types of things comprehensively with secure domains, sandboxing, etc. but there is always a war of how much friction is too much when it comes to security.

We saw the same thing with 2SV where people were vehemently against it, and now many are clamoring that it should be the only way to be able to do things like publish packages (I agree! I have no issue jumping through some extra hoops when I publish something a million people will install).

This might be a hot take but I think a lot of loud mouths with their personal preferences have been holding security in this space back for a while, and recently people seem to be getting tired of it and pushing through. The engineering leadership that won't just make these types of high impact security decisions because it might irritate a handful of highly opinionated workflows is unfortunate!

Retro68 is indeed very cool, I started writing some Think C and it is fun to code on such a tiny screen but Retro68 allowing you to code on your regular dev environment using more modern C has been great. I've been playing around with it last week to make some applications (not a plug because these projects suck!) - If anyone wants a simple Retro68 application boilerplate to start off with:

- Chatbot: https://github.com/yocontra/macintosh-ai/

- Game: https://github.com/yocontra/maccraft (Doesn't work very well atm, making a game run well on a macintosh plus is hard!)

I wasn't even alive when these computers were out but enjoying coding for them - something to be said about the simple interfaces (both in C and UI) and challenge of making things work with the constraints of the hardware.

Retro68 community has some really neat stuff like MacHTTP (https://github.com/antscode/MacHTTP) as well so you can offload some work to services (assuming you buy one of the many SCSI Wifi thingys).

You can’t use those extensions on almost any cloud like AWS, GCP, Aiven, etc. - I think Azure is the only one offering a citus product because they acquired them. Also extension updates are a major pain point in hosted DBs - always lagging behind. Having some solution in core would resolve this, even if it was just bundling some best in class extensions out of the box to bypass these cloud providers very selective extension support.

Most of the 1-10M+ homes in NYC, SF, etc. were built 100+ years ago. I know a number of people who live in perfectly nice homes built in the 1700s in rural areas that have consistently kept their values. Homes don’t depreciate and need demolition “within a few decades” if you just keep up with basic maintenance. If you don’t believe my anecdotal evidence, you can do a basic Zillow search and filter by price over 1M and built before 1980 and see how many results you get all over the country.

I wish this were true legally - my property tax bill on my 40 year old house would be 0, but sadly it increases every year as my home value appreciates.

Currently working on Android + iOS apps that handle the ipfs:// protocol natively and allow users to upload files as well. I think you're right on target RE: more protocol adoption and hopefully something as simple as making the links work natively and letting people upload with a simple interface will help out. The IPFS extension exists for Chrome/Firefox/Opera for similar functionality.

Out of my hands but getting more browsers than Brave to add support seems like the next place to start pushing IMO.

Notes on Web3 5 years ago

Outside of Manhattan, certain streets in San Francisco, and some parts of Chicago it is life changing.

Seeing the same - I have projects in us-east1 that went offline first, then us-west1 went offline a few minutes after. Everything green on their status page and nothing in the dashboard - everything returns a 404 so I'm assuming a really high level LB just took a dump.

If you use Aiven for a cloud PG instance you can do both Timescale + PostGIS installed.

I also really wish ClickHouse would prioritize PostGIS support - IIRC it has been on their roadmap for a while but keeps getting kicked around every year or so. Same thing with CockroachDB - PostGIS support kicked down the road every year.

The information in the article posted by the person you're responding to answers your questions - J&J knew their product had high levels of asbestos and hid it from regulators while doing nothing about it. There absolutely was evidence of this, if you would read any of the information posted above. If I sold you a bottle of water with enough asbestos in it to give you cancer, knew about it, and didn't tell you: that would be illegal - it is pretty straightforward.

I think there is a case for the opposite trend as well - anecdotally I and many others I know moved from NY to another state after responding to the census as a resident of NY. From what I observed (and when I responded) most of the census outreach in NYC was early in 2020 before the pandemic really hit. USPS published some data using change of address information that shows NY lost a good number of residents during 2020, how many of those responded to the census before or after they moved is a toss up though. No conclusion, just adding some context.

PostgreSQL 13 6 years ago

Aiven does this and usually has the updates available within two weeks of release. We've gone 10 -> 11 -> 12 seamlessly (and fully online).

GCP also has this, but it usually takes them a year or two to have newer versions of PG (and by that time they are already outdated).

I would recommend looking at Aiven if you want to deploy Timescale on AWS (we use it to deploy on GCP, which is also missing the extension in their CloudSQL offering).

Nice! Some feature ideas after using it:

- It would be great if you could use your webcam as your face, in addition to the emojis.

- Ability to send messages in the room and have them appear above your head would be a nice feature.

- Being able to set your username would be nice so you know who is who.

- It would be cool if there was multiple room types, and the creator of the room can pick one (A theatre, a grassy field, a living room, etc.).

"Powered by Aiven" + nearly identical interface, so this is kind of a reselling arrangement? Aiven supports timescale on postgres, so what additional features does Timescale Cloud provide?

I also got started programming writing RS bots, private servers, cheat clients, and eventually reverse engineering the game client (and sometimes other people's scripts) to write bot frameworks. I remember talking smack to the article author in the private RSBots script authors forums as a 13 year old and getting banned a few times. Good memories of a great community, with lots of people who ended up in solid careers doing impressive engineering work. Every so often I get a DM from somebody who wants to meet up IRL to grab a coffee almost 15yrs later. If anyone reading this remembers Bomb/Contra/RFTO/RECoders hit me up!