HN user

jbrechtel

245 karma

Developer.

http://www.keithalexanderisreadingyouremail.com

http://www.mobilemagicdevelopers.com

Email: My gmail username is the same as my HN one.

Posts2
Comments118
View on HN

No, you're not alone.

To be explicit about why, for others, this means your shell will search for executables in a 'bin' sub directory of whatever directory you happen to be in BEFORE it searches your normal path.

This allows for common commands like 'ls' to be executed from ./bin, if they're present, instead of /bin (from your system).

Once you've done this you've opened yourself up to an attack where you download a zip from the internet, extract it, cd into the directory and type 'ls' and you may have potentially executed something from that zip which you didn't intend to do.

tldr - relative paths in your $PATH is a bad idea.

Is TDD dead? 12 years ago

| There's a difference between a few people arguing and a controversy.

Only on average. We are fully capable of being irrational as large groups...

Depends on what the product itself is and from which perspective you're asking the question. At any rate, those are almost never the only two choices...

Neovim 12 years ago

I don't see tinco saying it is simple to replace these things. Where do you see that? I suspect you're unconsciously framing tinco's position this way...

Another possible way to interpret the 'ashamed' statement is that tinco is simply saying we should be trying harder to move forward when we are using such old technologies with such warts. Why can't we get rid of the warts? We should try harder. Perhaps this is what tinco is saying? I think at least equally plausible to the naive position you're projecting onto tinco...that it's 'simple' to replace these things.

Kudos to Neovim for making the effort! It is certainly appreciated.

Why do you think that?

The top sellers of mining hardware that I could find on Google (Butterfly Labs, Advanced Miners, Cointerra) all accept Bitcoin for payment.

Are you referring to some group upstream of the hardware sellers? I'm curious where you're getting this information from...

Why the "Yeah, but so what?" rhetoric?

This is an important point, regardless. Sometimes new projects are started and it's not a matter of switching. Sometimes verbosity, and the things it negatively impacts, are worth switching. That's what.

It doesn't have to be explicit "use X% of your time to contribute to open source" to count as getting paid to do it.

When using OSS libraries on commercial products I've found the need to fix bugs or other problems and have sent pull requests with those changes afterwards. Granted not all clients approve this, but I wouldn't describe it as "few-to-no other companies" that allow it.

The servers in this example were configured to be asynchronous. The clients were not. You may still be using asynchronous clients in your code but James's argument is that Java developers don't tend to do this because it requires a lot of boilerplate. Scala developers do this because it's very low syntatic overhead and frameworks+libraries embrace it.

I don't think it's the treatment one way or the other of those that write C# code. I think it's just the Microsoft Bubble at work. I think there are just fewer .NET developers here than the other ecosystems.

I personally shy away from .NET shops because they seem to be such a mono-culture.

--- This is totally off-topic so feel free to downvote into oblivion...

Sorry, I wasn't clear. I understand SNI and SSL without SNI.

What I'm not seeing is why it's a problem when a host such as DO doesn't allow multiple IP addresses on a single machine.

Is it because you may want to host multiple sites on that machine and use one IP address for SSL?

Oh, nevermind. It's because you may want to support multiple SSL sites on the same box without requiring your clients support SNI. That makes sense.

We really need to just EOL everyone who has a browser without SNI. People like to say that there's still a lot of XP users out there but surely even a reasonable chunk of them are using Chrome or Firefox with SNI support, right?

I don't think it's at all obvious or universally true that it's better to get an 'Unable to connect' error message than a certificate warning (btw, the default site could tell the user they arrived there by accident should they continue past the warning). Depends on the context.

I'd still say it's definitely not true that you "have to" get an SSL cert for all virtual-hosted domains on one IP address if that IP address is responding to SSL requests on 443.

Isn't the problem that the end of the day never comes? A site is never 'done'. It always needs to be changed and this is why 'clean code' matters. It reduces the cost of change.

Definitely true that estimates can be improved from some hypothetical floor of quality..

Estimates still come with a cost in themselves though. They're not an end, merely a means. So we should consider alternatives.

An alternative approach I've heard from some teams, though haven't had the pleasure of trying myself, is to break your work into similarly sized small chunks and measure team speed over time in terms of these chunks. This sounds a lot like relative point based estimation often seen on agile teams. However, the difference is that once you establish this sizing rhythm during analysis (with the help of estimation early on to hone in on sizing) then you skip estimation altogether.

I suspect this needs to be calibrated from time to time ("our stories have gotten too big") and exceptions need to be made (e.g. "there's just no way to split this work up and keep it releseable") but those scenarios are exceptions, not the norm.

A world without estimates sounds great to me.

Where my mouth is 13 years ago

Natural Language Processing libraries

https://opennlp.apache.org/ http://nlp.stanford.edu/

Cloud provider automation libraries

http://jclouds.incubator.apache.org/

Distributed stream computing

https://incubator.apache.org/s4/

Asynchronous event driven IO, battle tested, mother recommended

http://netty.io/

In-process webserver

http://www.eclipse.org/jetty/

....to name a few. It's probably useful to take some thing that you'll need and look in ecosystem X for it (say... .NET) and then compare what's available there to what's available on the JVM. In my experience, the JVM wins out almost every time when it comes to number of options and maturity of options.

Where my mouth is 13 years ago

Neither my intuition nor experience lead me to the same conclusion as you.

My intuition says that complex algorithms get even more advantage from more expressive languages. Java and C++ are usually not counted among the more expressive languages.

My experience on two* different projects in very complex domains...one where we used Java and another Clojure was that the Clojure code was more approachable and modeled the domain in an easier to understand way.

Just my 2 cents.

* One project was in the field of power systems, modeling and predicting power flow through the distribution end a power network.

* The other project was doing personalized treatment recommendations based on analysis of genetic data.

Why are so many people wary of third party libraries? I can understand some random, unmaintained gem on RubyGems but in this case we're talking GLib, right?

I guess I mean, shouldn't the stigma be attached to unmaintained or immature libraries not simply third party ones?

Well, then it installs an app. And yes, it's the same restrictions as apps for jailbroken devices....and they can take over your phone pretty easily (as described in the article). Sounds like you have the specifics right but may not understand the implications?

While I agree with the sentiment and conclusion I don't think you can build a convincing argument by just looking at numbers of deaths.

Terrorism has no value but vehicles do.

Unchecked terrorism, ostensibly, begets more terrorism. This is unlikely to be true with vehicle deaths.

Terrorism also has effects beyond the deaths and injuries it causes and I'd argue those effects are much larger than the same number of deaths in a vehicle accident.

As psuter pointed out there is Evil mode for Vim. There's Viper mode too, which I believe is older. This isn't a new thing. Vim as an editor isn't anything special....infact it kind of sucks. The script/plugin/extension ecosystem is nice but that seems to be in spite of vimscript. Evil mode in Emacs is pretty nice.

Evil mode is one of the better Vim emulation layers for non-Vim editors...and there are quite a few.