HN user

splix

471 karma

- https://github.com/splix - https://twitter.com/splix

Posts3
Comments243
View on HN

Exactly. The commit message is supposed to be for the future developer, not to generate changelog.

And the main case when that developer reads the commit message is when he doesn't understand _why_ that commit exists. Not what it changes, but what is the purpose of certain lines. So he runs "blame", sees commits, the original developers are not with the company anymore, the old JIRA may not exist too, and the only hint is the commit message.

https://dev.to/splix/the-why-behind-the-code-2bb1

That may sound strange, but it turns out I don't use WASM as well. Last time I touched this part was ~8 month ago, and WASM was just one of the experiments, and I forgot about this. Just remember it was hard to find a right approach initially, on how to execute JS without NodeJS environment. But with a right set of polyfills it works now.

Anyway, I see we have a bit different approaches on how to handle JS part, and I could get some ideas from that.

Nice project, thank you for working on it. I was trying to figure out the architecture, and I understand that it runs a Deno VM to execute JS on the backend?

I was working on something similar, but for JVM backends [1]. And it seems there are a lot to learn from your project. For example, I'm using GraalVM that executes JS on the server. But I have to compile JS to WebAssembly because otherwise it produces a lot integration issues on the backend. Do you do the same?

[1] https://github.com/emeraldpay/double-view

I'm curious why you can't legally pay in crypto? I heard a few times about companies paying in crypto to their remote workers. In fact I heard that a US company was paying in BTC withing the US, though I'm not sure I trust this particular story. I also see that Deel accepts USDC, and to my understanding they convert to local currency of the remote worker. Is that all illegal? Truly want to understand.

I had a bad Cloudflare experience. So, my card on file got no balance one day (my bad, I forgot to update to a new card), and they just turned off the services.

They somehow managed to charge partial amount (like 80% of the bill), but decided to turn off everything anyway, even the services that could be covered by those 80%. They turned off what they offer for free, and we were unable to change the setting, like instead of their CDN point traffic to an S3 bucket, etc.

When they do that they basically freeze your account. I mean you cannot provide a new card to pay the outstanding bill, or do anything at all actually. You're not welcomed here anymore. Locked out. That's is a terrible way to react to a payment failure after being a paying customer for a few years.

It was hard to reach the support, and it took multiple days until I found someone on Reddit who looked at our ticket and it eventually helped.

PS I had much worse experience with GCP after being a loyal customer of them for like 15 years, so Clouflare is good.

We made a script to avoid such situations. It checks the dependencies, just by parsing the package.json (or the lock file), checking the relevant time on npm registry, and returns error if it finds a too fresh package added.

We run it on CI for each commit/PR, and if a developer tries to commit a change that updates a JS dependency to a too recent it prevents the build from running, and so on. Basically we expect that a Supply Chain attacks on NPM would be noticed in a couple of week, and we enforce this time window to our code.

See https://github.com/emeraldpay/paranoid.js

AFAIK the recommended way is to open a bank account through smaller banks (aka neobanks). They just send you a card to address specified and once you activated it you (first) get a bank account for payments and (second) can use it to prove address for others. Also, if you legally rent then you get the council tax documents, though it takes roughly a month for them to send. This is another proof of address. And the bills of course, but again it takes a month or so to receive the first letter.

So it's unclear how a digital ID solves anything in regarding the proof of address.

Fintech dystopia 12 months ago

In the world where the non-questionable financial organizations decide who can access them or not, based on the place they were born at. I.e., the current world.

In the times of AI it's really easy to verify the question above. I had literally just copied it to the chat and made a research (also asked to cite and manually verified the links).

So it says there are 57 billionaires in UK with total worth of £182 billion. Non-billionaire wealth is £10.13 trillion, btw, so it's definitively not 50%. UK population is 68.3 million people. So everyone gets their £11,311 and that's it.

UPDATE there are £772.8 billions if you include non-UK citizens, but happen to live here. If you seize their money as well that will give you the total of £11K

That's different because in Bitcoin's case there was a clear violation of the specification, of how it supposed to work. So the bug was fixed to make the software working as it intended to be. If there were two node implementations then one would just stop to work until fixed.

In Ethereum's case there were no violation of any specification. In fact there were no bug in the blockchain itself. Just someone took founder's money, they didn't like it and so they decided to get them back. And note that after that, there were bugs in the nodes code that were breaking the spec (which you should compare to the bitcoin's bug), but because of multiple node implementations only some of the nodes stopped and so we don't care about those issues.

I think you're referring to the Winston Churchill's "on Land Monopoly".

I don't remember exact details and may miss something, but the work is very short so please check it. In short, he described, I believe, a real situation when a major of people in a town got extra extra money because a toll on the bridge to the fabric was eliminated. But in a short time the town's rental cost grew up by exactly this amount.

I'm trying to understand if it works with an Electron (or Tauri) app on desktop? Cannot find any mention on the website. And how it works with apps that are not bases on React Router or anything similar, so it cannot learn all the possible screens.

As someone who have been living in a couple of countries under a temporal residence I can say it's not that simple. In many cases the temporal residence is simply not accepted, or not in the list of standard docs, etc. Private companies don't really care about all those non standard cases, and they ask either for a passport of the country or a permanent residence at least.

So legally yes, you can pass a KYC, but in practice you're an edge case no one cares about

I'm sure they do it at the first place. It seems to be p.2 here, but it even less acceptable by many, as it's just "greedy people multiplying their wealth." Speaking of "fixing outside world," I'm not sure why it's the better than paying to a tradesman?

I'm wondering what should be the right way here. Taking the doorframe trim for £10K.

I see there could be like 3 options: 1) hide wealth / do not spend this money; 2) distribute to economy / i.e. pay a tradesman to curve the frame; 3) donate money to a fund or throw from a balcony to the crowd.

It doesn't seem that 1 cold be helpful to anyone. We see 2 in those examples, but it seem you imply that it's not the best way. So we have the only the 3rd option left, with donations. Is that what is considered as the best option? Is it sustainable in a long term?

Yes, I understand they looked at the source and re-implemented a bunch of it when they started 10 years ago. But in the result it's a very different code. I mean, it's 45K commits so I believe they implemented things by themselves in majority of those commits. I guess we just have different understanding of the copycat term.

Copycat is a bit of a stretch here imho, considering it's in different language, and even the general architecture. But I agree they are very compatible on the protocol level, which they used as an advantage as people don't need to rewrite their code when they migrate.

I would say it's opposite. No one contributes to open source and the developers have to make money on the side to work on the project (i.e., do consulting/tech support/etc). Or more often companies with money come to fork an open source project from the developer, and continue pretending it's their own now.

I like Scylla and we use it, so I wish them well. But what I don't understand with this announcement is how it supposed to work if they don't publish the pricing model. Just "contact us to get a quote". How people are supposed to make advance plans without clear pricing?

I don't think that Java serialization is designed for such a small object with just two fields. It's designed for large and complex objects. Obviously it would be slower and much larger in size that a columnar implementation designed and heavily optimized for this scenarios. It's not a fair comparison and too far from a real use case.

Try with nested objects and at least a dozen of fields across this hierarchy. And different structure for each row. It's still not a use case for Java serialization, but at least closer to what a real code would do.

Same for Protobuf, I guess. Also the JSON serialization plays the same role more or less.

Maybe something like Avro Data Files is better for a comparison with columnar formats.

CORS Is Stupid 2 years ago

You definitely could. But I guess it should be secure by default. Even if you didn't implement any check on the server.

Because people are lazy or they may forget to implement the security checks, or simply be unaware about them.

Ex., when you hacked up a super simple script to display a number of today's users of your startup to display on the big screen in your office. You would probably want something as simple as possible. This page is just 3-5 lines of code. Maybe one-liner even. No authorization or other security, as it's for the office intranet.

Without CORS any website that is visited by people from your office could fetch that number on screen.