HN user

feb

247 karma
Posts5
Comments82
View on HN

That one actually looks more like a real kernel with services like memory management, syscalls, processes and context switching. Nice work.

Filippo describes how evolutions in the source code and hidden assumptions caused a bug in a special case implementation he kept for performance reasons. This is a great example of how the incompleteness of the old Weierstrass curves multiplication formulas still bites us and how he uses the opportunity to get valuable lessons from this accident. It also shows again how optimizing for performance can cost security and hurt maintainability.

And it's also illegal in EU. The GRPD imposes to have the choice to reject tracking cookies. And it must be easy to reject, not hidden somewhere or requiring one to manually delete the cookies with the browser mechanisms.

It seems like a decent guide, though like others mentioned, you should download and run the code most of the time, except for trivial changes.

Actually, that's not true at all. Code review is not a replacement for automated builds and testing. That's what Continuous Integration is for. Let humans concentrate on what they do best (understanding and comment on code) and don't lose their time and patience with things that can be automated.

Projects often enforce that by running CI on code submitted for review and it cannot be accepted as long as a CI fails. It also reduces breakages for other devs of the builds of the code base.

The README is a bit optimistic about it the security model. Like the parent said the room UUID is a very critical asset and should be handled as a critical secret. Sadly, users may not know that.

In addition, the README says one can audit the full code and the assets used. For example, it suggests to audit the gh-pages branch for the static assets. But when hosting with github, that branch could change at any time and deliver non-audited content. Powerful attackers like government could do it easily, and less powerful ones too.

Impressive work by GAMI who are working on it since decades. AVWeb made 2 videos on the subject of leaded avgas and on how hard it is to get it approved. In addition, the FAA launched several failed attempts with the industry at large.

  * https://www.youtube.com/watch?v=9F-WngVMJBQ The Long, Twisted And Slightly Ridiculous Story of Avgas Part 1
  * https://www.youtube.com/watch?v=Mvse4Xhzwuk The Long, Twisted And Slightly Ridiculous Story of Avgas Part 2
When reading the announcement, it looks like some municipalities in California started banning the sale of leaded avgas and I suspect that helped to push the FAA to finally move in approving G1000UL. Not surprisingly, they will start providing it to the California market before the other states. In the announcement on avweb.com (https://www.avweb.com/ownership/fuel-news/gami-unleaded-avga...), they also credit Mark Baker from the AOAP to encourage the FAA to complete the project.

On the other hand, there are some niches where compression tension, aka tensegrity, may have a practical utility. For example, the current lightest hammock stands are inspired by it. The HandyHammock stands [1][2] use cords to reduce the weight of the poles. Sadly, that model is not manufactured nor sold anymore. The small company Tensa Outdoor makes and sells the Tensa4 [3] which is based on an equilibrium with poles and guy lines. They also have plans for a DIY version [4], called tensahedron stand. The DIY 3-person Hammock Stand from The Ultimate Hang is also inspired by tensegrity [5]. The 3-Pole, 3-Person Tensegrity Stand (DIY) is even more impressive [6].

Although none of them are floating like in the sculptures, the concept and the art inspired some practical constructions.

[1] https://www.ddhammocks.com/images/products/_ALL_PRODUCTS/Ham... [2] https://theultimatehang.com/2012/12/11/handy-hammock-stand-r... [3] https://www.tensaoutdoor.com/product/tensa4-hammock-stand/?v... [4] https://www.tensaoutdoor.com/make-your-own-tensahedron-stand... [5] https://theultimatehang.com/2013/04/02/3-person-hammock-stan... [6] https://sectionhiker.com/portable-hammock-stands-for-camping...

The proposal consists in filtering out crappy or scoring sites based on how much affiliate links and ads they use. In addition, it could also penalize:

  * GDPR popups
  * excessive JavaScript
  * presence of modal dialogs requesting email
It's an idea I've been thinking about since a long time. It should also include filtering out "scraping" websites which republish content from other websites (like pinterest) and websites which make block content behind pay- or login-walls (like again pinterest).

The more one dives into the relationship between society and energy, the more it appears energy sources and availability mold society, like transport, food, architecture, politics, urbanization, philosophy or medicine. The book "Oil, Power, and War: A Dark History" by Matthieu Auzanneau (Or in French: "Or Noir") shows that quite well.