HN user

jpab

157 karma
Posts0
Comments33
View on HN
No posts found.

I recently had an exchange with someone that reminded me how important trust and mutual respect is and how the lack of such tends to cause problems to escalate.

What feels like a breakdown of trust in society has been on my mind a lot recently. Without trust, it seems communication and collaboration becomes impossible. How can society solve any of its problems when people can't discuss anything about those problems or potential solutions without it turning into a fight?

But tech companies want to talk to the humans they're hiring, so race and gender are (almost) always available as information inputs during the hiring process.

This is actually kind of funny to me, because in the open source world plenty of people have extremely productive working relationships without ever seeing or hearing each other, and in many cases without even knowing what country the other person lives in, how old they are, or what their legal name is.

So while there are definitely arguments that face to face communication is "higher bandwidth" or has other advantages, it doesn't seem out of the question to me that the hiring process could be "blinded" to a similar extent to orchestra auditions, without any significant reduction in hiring accuracy.

(Ok, maybe not quite the same extent; language fluency and style of speech are still significant signals even if everything is done over text)

According to Google maps, Southam is about 25 minutes drive to Coventry or 15 minutes to Leamington Spa. It's not in the "middle of nowhere" in any important sense.

And Leamington is quite attractive - not a bad place to live. Coventry is probably ok too. Personally I would much rather be in a town like Leamington Spa than Birmingham or Milton Keynes. In general, small and medium size towns in the UK are far nicer than the big cities.

With asset build pipelines that do lots of preprocessing, compress everything, and pack things with a layout that tries to minimise disk seek time while playing, it's conceivable that relatively small changes in the source data can result in touching large amounts of the final compressed assets.

But I don't work in the industry, so read my statements as just the ramblings of an interested amateur.

Regardless of the technical reasons for them, I personally dislike the reliance on day-0 patches.

Origami Simulator 6 years ago

For viewing objects I find a turntable style view best in most circumstances. For landscape or architecture (where you're in the scene), mouselook with WASD + vertical up/down.

Neither of these control styles are 6dof; they don't provide a roll control, only elevation, azimuth and position. Roll is rarely useful IMHO and including it in the normal control scheme makes things hard to use. Put roll behind an explicit modifier key, and have a reset-roll action somewhere.

The fences aren't a locking mechanism, at least not on their own. The lower (hardware) level locks are the steps in the cache coherency protocols (potentially including explicit cache line locking signals) that allow an execution unit to, eg, perform a correct atomic compare-exchange operation on a 32/64/128-bit piece of data.

See also, eg, the LOCK prefix on x86 instructions.

(disclaimer: I only have approximate knowledge of anything, I'm not an expert)

Trump on twitter is literally just Donald Trump, not the president.

There has been a specific legal battle about almost exactly this question. So far, the US court system disagrees with you.

"These tweets are published by a public official clothed with the authority of the state using social media as a tool of governance and as an official channel of communication on an interactive public platform," [2nd circuit] appeals court Judge Barrington Parker wrote.

Trump is appealing that outcome though.

https://eu.usatoday.com/story/news/politics/2020/08/20/donal...

Neocities.org seems ideal for this. I personally use the free tier of netlify at the moment, but I'm considering switching to neocities instead since I just have simple personal stuff to serve and I like the neocities ethos.

The purpose of sponge is that you can do this:

grep foo file.txt | sponge file.txt

If you do this with redirections then file.txt will be truncated before it's been processed, leaving you with an empty file instead of what you wanted. Sponge collects its input first and then writes everything out at the end, so you can output to a file that was used as an input.

(Parent updated while I was writing. Oh well)

On Using Twitter 6 years ago

I follow several artists and get lovely art that I wouldn't otherwise have seen, and wouldn't have sought out.

I follow several people in the game development industry, and historically used to see a lot of interesting technical articles being shared on Twitter within this community. That seems to have declined unfortunately, though there is still some.

I follow various people who have a habit of posting dumb funny jokes (usually puns) and memes. Not everyone likes that style of humour, but I do.

I mute or unfollow people if too many of the things they choose to share are things I don't want to see (like outrage bait).

Unless it's also a non-cryptographic hash then I don't see how a timing attack does anything interesting here. Timing will potentially tell you how many bytes of the hash match. But finding a password that produces a hash that matches the first N bytes does not help you find a password that matches the N+1th byte, so you're still just left with a brute force attack.

What am I missing? (Genuinely curious - I'm not a crypto expert)

You can still gain efficiency by centralising services. If you have centralised services you need some mechanism to coordinate them and make decisions about how they should work, and those decisions should ideally take input from the people using the services. Even in a no-bad-actors world you still have many different competing interests to balance due to different people's needs and preferences, so you probably want some kind of polling/citizens forum/whatever to gather input for making decisions, and an organisation that looks at all the details and makes the decisions on behalf of the collective.

Or by example: You still want someone to organise weekly garbage collection efficiently and equitably. The government does that.

Why is cancer pathological?

Because cancerous cells prioritize their own growth over the health of the wider system in which they exist.

Companies with this mindset do not reach a point at which they say "ok, we're big enough now". There is no target size they're trying to reach, there is only a target year-over-year multiplicative growth rate. They prioritize growth over providing value to the users they have. They grow without regard for the effect it has on social dynamics within the system (changing what the product is good for and what it's bad for), or the effect it has on social dynamics beyond the system.

It's the Paperclip Maximizer approach to business. And, of course, it's the stock market approach to business too.

Do you mean Chrome OS?

Google is a web company; they want people to use the web. They made a laptop/desktop operating system built around their web browser, because they want everything to be on the web. It does most of the things you list, including synchronizing between devices since your data is all "in the Cloud".

As for market share, I'm not sure what power you think Google has, but getting 10% of the desktop OS market has got to be pretty difficult for anyone. I do not know what share of the market Chrome OS has.

I posit that whether a search should be "local" or "global" is much more a factor of what is being searched for than who is searching. If I search for a barber I want local results, and I expect that that would be true for most people. If I search for a weird error message I saw while using my computer I want global results, and again I expect that is true for most people.

If true, then DDG could apply the same heuristics about location-sensitivity for everyone's searches and improve the results for everyone, without any tracking of detailed individual preferences.

You referred to it as "the single most cost effective way to speed up math and physics research". I don't think it's so surprising that people are interpreting that to mean you think LaTeX is a bottleneck in the research process.

I guess you intended emphasis on the "cost effective" part of the statement, but not everyone will read it like that (I didn't).

Google Drive is a consumer product (+), not really the same use case or target market as S3. Consumers probably don't want to deal with variable charges on their card depending on how many people they shared a file with. Certainly I (as a consumer) wouldn't want to deal with a complicated price model like that.

(+) And business productivity suite product, but I think the same mostly applies there.

From my perspective here in the UK, where the health secretary is making threats to ban all outdoor exercise [1] because some people aren't following the social distancing rules, the Swedish approach sounds far better. At least in Sweden the citizens are being treated as adults, given the data and allowed to use some personal judgement.

Note that I haven't seen any claim from the UK government that the existing rules aren't sufficient as long as they're being followed - a claim which I might find hard to believe but at least would be consistent with threatening a broader ban on outdoor activity. The quote from Matt Hancock is: "If you don't want us to have to take the step to ban exercise of all forms outside of your own home, then you've got to follow the rules." As though we're all school children being told that we'll all get detention if the trouble makers in the class keep acting up.

It feels like the purpose of the lockdown - to reduce transmission rate of the virus - is being forgotten and there is increasing focus on having a list of Allowed Activities and Forbidden Activities, rather than trying to make a consistent trade-off between cost (risk of transmission) vs benefit (health - including, very importantly, mental health effects of retaining or losing freedom, not to mention the more ideological desire to keep some semblance of civil liberties).

[1] https://www.bbc.co.uk/news/uk-52172035

A Sad Day for Rust 7 years ago

I would prefer to see a positive badge for "this project doesn't directly use unsafe" or similar, which maintainers can choose to put in their README in the same way that they currently put build-status, test-status and other badges. The actual badge state is produced by tooling (a CI system) so it stays up to date and you can follow a link to a (tooling generated) report with more info, so it's relatively easy to verify.

Maintainers that don't care don't have to use the badge (even if their project does in fact avoid unsafe), but the choice to include the badge acts as an implicit signal of intent. When I see a crate with green CI status badges (or in this case a green safety badge) that's a signal I can use to help judge whether I want to depend on the crate.

No one needs to be flagged or called out if they're not interested in that aspect of maintainership.

I think the hard part is that actual quality is a spectrum and no-unsafe-at-all isn't necessarily the best goal for many crates. So ideally the badge would show some more granular safety score. But scoring effectively is difficult, and the so is correctly interpreting a heuristic score.

You can't make a sphere entirely out of hexagons; the math doesn't work [1]. In the article they note that they include 12 pentagons too, to solve this problem. Neatly, they arrange to have all the pentagons in areas of water where they presumably won't have to analyse traffic patterns for a while.

(I mention it mostly because I think it's an interesting little mathematical factoid.)

[1] https://math.stackexchange.com/q/2121175

I assume the data storage is on a separate chip which - in the context of this attack - is untrusted. That is, the firmware could try to wipe the data storage too, but that would be relatively easy to bypass and doesn't really gain you anything anyway.

Or from the opposite direction: Only the keys are stored within the trusted part of the hardware; they're the only thing you can reliably wipe.