HN user

white-flame

3,219 karma
Posts1
Comments912
View on HN

The real problem is deeper than this. The actual question to ask is:

"What if we just stopped distributing and blindly executing untrusted binary blobs?"

A trusted compiler in the OS, and some set of intermediate representations for code distribution would solve a massive amount of security issues, increase compatibility, and allow for future performance increases and disallowing suspect code patterns (spectre, rowhammer, etc). Specializing programs at install time for the local hardware makes way more sense than being locked into hardware machine code compatibility.

I think it's more a case that browsers take security into account at the feature design phase, whereas other applications don't. That's actually a huge step in the right direction. Same thing with mobile OSes, which have a very preferable decision to sandbox individual applications, instead of running them with full user permissions & full user data access, like desktop OSes do.

Now, whether the browsers or mobile OSes actually are secure because of that, is a separate thing, but those are good steps to take.

REU is a bit of a cheat, and for some releases people are using cartridges with far higher capacities than ever sold back in the day. Cross-platform tools and emulation are also huge dev speedups.

But a big thing is that back then, games were often made on a timescale of months, and with a budget. Hobbyist dev has no limits to how much time they want to sink into doing something properly. Ideas & techniques have had many years/decades to percolate into existence.

I use onion addresses to have basically a hash-addressable socket on the internet, which can be relocated without any additional configuration. It can even work without any inbound ports on the firewall.

However, I haven't done any serious roaming with such a configuration; has anybody tried it?

I don't even have a Facebook account. But with my relatives that do, this stuff leaks in from seeing their coworkers' & acquaintances' posts and escalates over time once there's even the slightest hook with the algorithm. Any reasonable political opinion they might have in thumbs-upping some innocuous content eventually routes into the algo feeding more extremist content.

Most people don't outright block offtopic material, they just gloss over it, and it still ends up with influence because that's what Facebook optimizes for. Plus people will still take the occasional click of curiosity to see what some posts are all about, even if they're not really into that content.

Yes, if you do have the discipline to take a zero-tolerance personal policy and immediately block even inoffensive things that just touch into the realm of polarizing, you can probably keep your feeds clean. But most people (eg, non-HN types) don't understand what Facebook is doing and don't think to actively defend against it, and just absent-mindedly consume the feed with no click discipline.

What do you define "social media" as? If it's communication kept within circles of family, friends, colleagues, and enthusiast/interest groups, I really don't see much problem with it, just as forums/blogs/etc before it.

The two big problems poisoning this well are:

1) monetization usually reaches for manipulating people's personal socialization stream, and

2) public broadcast of personal content to the feeds of strangers, usually the most inflammatory subset because of point 1.

Forget the rest of the trash on Facebook

The thing is, Facebook actively pushes the trash at you, because trash content monetizes the best.

The only effective avoidance mechanism is to not use it (unless there's some facebook-specific browser plugin that strips it all out).

full stack web developer

I think this is par for the course in that subfield.

Part of it is the speed at which things change, both in the software ecosystems and in the change requests to sites. The reliance on comprehensive frameworks (which often need tons of workarounds and glue anyway) also reduces people's desire or experience in actually constructing good abstractions.

Compound this with the fact that startup environments generally don't care about anything other than shipping & pivoting, and want to defer all aspects of longevity.

The same problems exist all over the place, but I think are pretty prominent in these situations in particular.

Even if you like one, you should (_after_ you finished learning the first) also go through the other alternatives, for perspective. And even though you found one that worked for you, doesn't mean that others won't click even better.

The only way you can truly evaluate the choice between tools is to be familiar with all of them, but yes just start with one arbitrary one that seems fine, instead of trying to learn them all before deciding. But at the end you should know something about all of them.

Yes, Freenet. IPFS is basically Freenet with all the anonymity and privacy stripped out, and claiming it's some new innovation.

Freenet allows connecting only to peers, and is the same sort of p2p hash-based storage cache. It's about as old as Tor.

Well within the last hour or so on #freenode, root (Andrew Lee) went off on a completely unhinged tirade about BIG FOSS and his perceived victories over it, as well as his totally "FOSS" irc client, which has no source code available (at least as of now), and he doesn't even know the license.

His is apparently the Kiwi IRC client rebranded in an iOS app, but who knows what's in the app itself unless his actual source is released.

Some lines I happened to capture:

  20:41 < root> Big FOSS is no more.  The fossils are gone.  It's now time for the future.  We will FOSSter a new era of FOSS.  freenode is FOSS.  freenoe is IRC.  freenode is freedom.  freenode is for you!
  20:44 < root> freenode hasn't been liberated from FOSS.  FOSS has been liberated of Big FOSS!
  20:45 < root> FOSS IS FORK. FOSS IS FOR YOU.  FOSS IS FREENODE.  FREENODE IS FOSS.  FREENODE IS FREEDOM!  GOODBYE TO THE FOSSILS!  HELLO TO FOSSTERING COMMUNITy AND PROJECTS!  FREENODE WINS!  THE FOSSADES LOSE!  WE DID IT FOR YOU!

The policy basically changes on a daily basis, depending on which action he needs to quickly justify.

Generally speaking, mentioning anything about libera.chat in the topic is counted as "spam" or "advertising" or whatever, even if you were keeping a presence on both networks, or only considering the possibility of a move.

That puts the decision on where to put public good will and non-profitable money sinks solely into the machine of government bureaucracy, which I don't think would be very effective.

Currently we incentivize private individual donations, and that lets a lot of things happen quickly and without the requirement of soliciting the permission of a bottlenecked council for anything to happen.

Conversely, I'm sitting at a computer for the majority of my waking hours. My productivity happens there.

For a phone, having calls/texts, web access (and most "apps" of any importance have a web version), calculator, clock/alarm, camera, and weather info is fine. I don't need tons of applications installed on it anyway; I have my real computer for that. I don't lose any convenience to go to a more security-minded phone.

And besides, it's nice to be actually away from the computer when you're away from it, instead of having the phone being a constantly nagging ball and chain of your entire digital life. It's got to be socially & mentally healthier, too.

The non-burning natural decomposition of wood also releases the carbon into the atmosphere, as CO2, methane, etc. It's a neutral cycle, as plants are recently grown from atmospherically-sourced carbon.

Deforestation and pulling old oil & coal out of the ground and into the atmosphere is what tips the balance.

There's RPG-ish & enchantment mechanics to build up better tools & armor, different biomes to get different resources from, NPC villages to trade/upgrade/protect, and various enemies with varying drops, including in bases/dungeons/strongholds.

The common game loops are "I want to build X, so I need to find area Y to defeat mob Z to get the resources", and "I need to mine resource X, so I need to get resource Y to build tool Z to be able to do so", as well as building resource farms and some rudimentary automation.

So there is enough structured activity to drive actual gameplay beyond just having a pile of virtual blocks to stack, but it contains an additional unrestricted sandbox mode as well.

There's also the moving goalposts of what's considered "extremist", especially where it's reduced around extremely small confines of acceptability, and invoking long-tail assumptions as direct accusations of intent against people.