HN user

invaliduser

433 karma
Posts1
Comments128
View on HN

I understand it can be difficult to label, and there's an inconveniently large grey area here, but there is a difference between plain vibe-coded software and software built with AI under the control, direction and validation of a developer.

The distinction is probably not very important for small applications, as nobody cares if a minor script or a one-shot data processor has been vibe-coded, but for large applications it surely matters in the long term.

Steam Machine 8 months ago

Just found about this skin market/casino thing, and also that my teenage son purchased a skin for 100€, but is still pretty excited and happy about it because «its real value is around 700€». I am still processing this information.

Most people have no sense of security. They say yes to strangers if asked to plug in a USB device on their laptop. When I said no in the train to someone asking to plug their device "for charging", I was definitely the bad guy.

Just find anything plausible, for backup storage, or say, to share family photos with grand parents but it does not work on my home wifi because my ISP is blocking ports, whatever.

In the early 2000s the video field was flooded with fast paced releases of new codecs and new codecs versions, and there was codecs implementation to downloads right and left, and people were bundling them and releasing them with names sounding like a warez group. It was a little crazy to watch a video at the time.

This was mitigated by vlc and mplayer, two video players that integrated most codecs as fast as they could, and it was a breath of fresh air. You just started them and any video would play, no codec issue anymore. MPlayer has not been updated for some times, and traction was lost, but VLC, although looking a bit old on the UI-side (and a little buggy on ARM Windows) is still here and is solid when someone just wants to watch a video on any platform.

The same thing exists on Windows, developers have to code sign their binaries. It's even worse in my experience because you have to use a token (usb key with cryptographic signing keys in it) and that's impractical if you want your ci/cd to run in a datacenter. At my company we had a mac mini with a windows VM and a code signing token plugged in just for the purpose of signing our macos and windows binaries.

Another solution that is not mentioned in the article is that users of both macos and windows should be able to easily integrate the certificate of a third-party editor, with a process integrated in their OS explaining the risks, but also making it a process that can be understood and trusted, so that editors can self-sign their own binaries at no cost without needing the approval of the OS editor. Such a tool should ideally be integrated in the OS, but ultimately it could also be provided by a trusted third-party.

The main issue with this article is that it claims to be about anonymization, but reject HMAC because it's not reversible, and promotes IPCrypt because it is. Except that if it's reversible, it's not anonymization, it's pseudonymization.

Happened in France too. It was put in place in the late 70s, and ended in 2020. Called the «numerus clausus» (closed number, in latin) and it restricted the number of medicine students allowed in the country every year.

The number of students fell by 50% between 1980 and the mid 90s: 8500 new students/year in 1972, 3500 in 1993.

Of course, now the number of doctors in France is far from enough for an aging population, in every specialty and it will take at least a decade to improve. It's not uncommon to have 1-year waitlists for ophthalmology appointments, and several weeks or even months for dermatology.

Or maybe just read the commits between now and a reasonable date far enough in the past so that if there is some hostile code injected before that point in time, then at least you will share the walk of shame with a lot of people and you can play the sound of "who could have guessed?"

taglines where witty one-liners posted at the end of messages, after the signature, as a way to add a bit of humor or personality.

I think we also used them in fidonet echomail, but I don't remember for sure.

But how can it be a problem? Working on a project just for fun is totally valid. Is this not «Hacker News»?

For the record, this is the definition of being a hacker by Stallman: «Being a programmer doesn't mean being a hacker: it means appreciating playful cleverness. Now, you can program without being playfully clever and you can be playfully clever in other fields without programming.»

1. I say both somewhat 50/50. I say SSL instinctively, and TLS when I think about it and remember we don't say SSL anymore. It's been like that for around 10 years now, before that I'd only say SSL.

2. I started programming professionally in 1998 and I'm in my early 50s.

I have a similar experience with providing users with excel files, but would also like to add that in a lot of business, the number 1 competition for a web application is the good old excel file (or its modern cloud version), and it's sometimes a challenge to beat.

You are so right about computers, except from Raspberry Pi (UK) not much as been done in Europe.

Regarding the eu cloud, it is definitely about sovereignty, specially since the CLOUD Act (H.R. 4943). In the context of the global trade war initiated by the US of A, it also makes sense from a European Union perspective.

OVH (french) is very well known and I like them a lot. Used them for domains a lot, because they are very cheap and their management is nice. I also like very much ScaleWay (french also) for price and quality of service, have used them for years on my startup, can highly recommend. Also heard a lot of good things about Infomaniak (swiss), but never used them myself.

Would love to hear about european cloud providers with comments from users.

Not primarily, as primarily it was just "we're the V in MVC", and people were using classes. The hooks came when the react team got on the "functional programming" wagon, and suddenly everything was about immutability, side effects, etc. and very little about giving control to the developers on their components life cycle.

I totally concur.

I migrated most of my self-hosted services from multiple rpi (I've been using several of them for years) to a single cheap Intel N100 NUC that I purchased last year: 16GB RAM/512Gb SSD for 156€, and I've been very pleased with it.

venv + requirements.txt has worked for every single python project I made for the last 2 years (I'm new to python). Only issue I had was when using a newish python version and not having a specific library released yet for this new version, but downgrading python solved this.

Being new to the ecosystem I have no clue why people would use Conda and why it matters. I tried it, but was left bewildered, not understanding the benefits.