News for hackers. Stuff that matters.

SuperCuber

Re:The Harness Is the Thing on Thursday August 27, 2026 @10:14AM (#49465277)
what do you mean? the agent can't do it anymore if there's no bash permission
It's hilarious that this figure keeps getting quoted with a link to a source that directly contradicts it.

> Armed conflicts have indirect health implications beyond the direct harm from violence. Even if the conflict ends immediately, there will continue to be many indirect deaths in the coming months and years [...] In recent conflicts, such indirect deaths range from three to 15 times the number of direct deaths . Applying a conservative estimate of four indirect deaths per one direct death to the 37 396 deaths reported, it is not implausible to estimate that up to 186 000 or even more deaths could be attributable to the current conflict in Gaza.

The text is not claiming that 200,000 people at the point of publishing have died, it is estimating the number of deaths attributed to the conflict in the coming years.

Re:Show HN: Lnk – Git-native dotfiles manager on Saturday May 24, 2025 @10:35AM (#44081407)
Funny that I see this post right after refreshing the documentation on my own project, Dotter[1]

It offers a more involved approach to managing the dotfiles, but (imo) addresses the need to have differences between dotfiles on different machines.

[1]: https://github.com/SuperCuber/dotter

Re:Weird Lexical Syntax on Saturday November 02, 2024 @01:00PM (#42027592)
lisp's syntax is simple - its just parenthesis to define a list, first element of a list is executed as a function.

but for example a language like C has many different syntaxes for different operations, like function declaration or variable or array syntax, or if/switch-case etc etc.

so to know C syntax you need to learn all these different ways to do different things, but in lisp you just need to know how to match parenthesis.

But of course you still want to declare variables, or have if/else and switch case. So you instead need to learn the builtin macros (what GP means by semantics) and their "syntax" that is technically not part of the language's syntax but actually is since you still need all those operations enough that they are included in the standard library and defining your own is frowned upon.

Re:Coding interviews are stupid (ish) on Tuesday May 07, 2024 @06:42PM (#40292388)
> A skilled interviewer is easily able to ascertain breadth and depth of the candidate's experience [without a coding test]

And yet, many interviewers' experience shows that there are people that would pass a discussion-only interview and fail at basic coding tasks. There's plenty such people holding down jobs for a while, so even that may not be a sure indicator of skill.

> The intentional ambiguity is deceitful. The expected dependence and expected deference is so patronizing and manipulative.

I'm ~1.5years into my first job as a Backend Dev so I can't speak much about the industry, but based on my experience and what I hear from others, asking questions and clarifying unclear requirements is part of the job description. I almost never get my tasks in a precisely defined way and a lot of my job is gathering information and asking the right questions to build the right thing, often making my own choices and judgement calls. I assume that these skills are what GP comment is trying to test.

> They don't really care, nor should they, about your product, or your customers.

You can hardly blame a company for preferring someone who does. Or at least, pretends to.

Re:How to keep engineers out of meeting hell on Friday February 16, 2024 @12:24PM (#39400062)
"Software Engineer" is a pretty commonly used title for programmers
Re:Deadcode: Finding unreachable functions in Go on Tuesday January 23, 2024 @02:44PM (#39108659)
That'd still be a bit too tolerant for my tastes. It should also scan your future commits.
Re:Stop using JSON Web Tokens for user sessions on Saturday November 25, 2023 @06:44AM (#38412900)
This post is about XSS, not JWTs...

> For security reasons, it is advisable for users to log out from a web application once they have completed their tasks

No, the application should be resistant to XSS instead. Online banking and such are automatically logging out to prevent someone stepping away from the device and another person abusing the logged in session.

> Frequently, when a Logout function is present in the application and is implemented with JSON Web Tokens, the application stores the JWT in an insecure location, such as the JavaScript code itself or the local storage in the user’s browser

This claim is as valid as "Frequently, when a Logout function is present in the application and is implemented without JSON Web Tokens, the application stores the plaintext password in an insecure location". The storage location is completely independent of whether it's a JWT or not.

What things are you talking about? I haven't used chrome outside of work for years, so forgive my ignorance
Re:I think I need to go lie down on Thursday November 16, 2023 @10:17AM (#38290570)
i like Xitter and Xcrete
Re:Hacking ADHD: Strategies for the modern developer on Wednesday November 15, 2023 @05:46PM (#38283672)
I'm definitely NOT attending an interview where this kind of tech is used. My heart rate is irrelevant to whether someone should hire me - and I say that as someone who doesn't even get anxious or nervous during interviews.
Re:The Negative Impact of Mobile-First Web Design on Desktop on Thursday October 26, 2023 @11:58AM (#38027408)
In uni, a couple students had those tablet/laptop reverse foldable devices as a fancy notepad, used with a stylus.
Re:Kafka as an Antipattern on Monday September 25, 2023 @02:27PM (#37648408)
too little
Re:EU’s War on Behavioral Advertising on Saturday August 26, 2023 @05:33AM (#37271085)
"opt-in by default" kinda makes sense as a combination of words, but you're right that people just usually call it "opt-out" (and vice versa)
Re:They Bypass YouTube Video Download Throttling on Monday August 14, 2023 @09:00AM (#37120533)
Interesting. I ran the script to extract the json - that part was almost instant, then i used the first `url` field of `streamingData.adaptiveFormats`. I then ran

    curl 'https://...googlevideo.com...' --output video.mp4
for me the download is throttled to "768k", i assume thats in bits per second and not bytes which is very low: the random video i tried would take 8 minutes.

on the other hand,

    yt-dlp videoIdHere
does its processing then downloads the whole thing in about 5 seconds.

Does that curl command run much faster for you? Or do you do something else?

Re:They Bypass YouTube Video Download Throttling on Monday August 14, 2023 @05:57AM (#37119202)
Looks interesting. In the post, the author does

    echo -n '{"videoId":"aqz-KE-bpKQ","context":{"client":{"clientName":"WEB","clientVersion":"2.20230810.05.00"}}}' | 
      http post 'https://www.youtube.com/youtubei/v1/player' |
      jq -r '.streamingData.adaptiveFormats[0].url'
which is very similar to what you do, but runs into an issue of throttling to ~70Kbps. Is the difference just the "key" parameter? Do you get no throttling?
Re:Keyboards and web apps, my post/rant for the year on Friday July 14, 2023 @03:32PM (#36728827)
default ctrl-f will only search through the current page while the site-provided one can search through all content... this is not really an argument against it existing
Re:Amateurs obsess over tools, pros over mastery on Friday July 14, 2023 @05:08AM (#36721334)
I guess in the way I use it, choosing a data structure is about the complexity/performance of operations you're going to do with a collection of objects, and choosing a data model is more about the meaning of fields, and what entities and relations between them you have in the first place, sort of like `CREATE INDEX` vs `CREATE TABLE`
Re:Amateurs obsess over tools, pros over mastery on Wednesday July 12, 2023 @06:43PM (#36702667)
Unfortunately HN doesn't notify of replies need to go digging for then in "threads"

I'll give you an example from a ongoing side project of mine: https://github.com/SuperCuber/facto_rs/blob/master/src/model...

Hopefully the Rust syntax is not too much of a distraction here, but enough to focus on the `struct` and `enum` parts (an enum in rust can be "one of" the variants, like tagged union or sum type in other languages, or | operator in typescript). The project is a live wallpaper/screensaver that is a simulation of something like a combination of the games Factorio and Mini Metro.

I had in mind what I wanted to happen - a grid containing a rail network with trains running between different nodes.

What I call the model is the representation of the things in the code: I could store the train's position in terms of [float,float] and a facing Direction, but instead I choose to store it in terms of List<[int, int]> of grid tiles that it plans to go through, then an int for its current position in the list, and then a single float between 0 and 1 representing how far into the tile it's moving.

The two possible solutions have pros and cons, and there are other solutions as well that are equally valid I'm sure. In my mind, the process of "modeling your domain/problem space" is about deliberately thinking about these things and choosing what you think is the best.

Re:Amateurs obsess over tools, pros over mastery on Sunday July 09, 2023 @06:01PM (#36659400)
"modeling your data" is terminology that I encountered before, not sure why you find it unusual /shrug
Are you complaining about the lack of dark patterns that push you to accept all cookies? When that cookie banner opened for me, I thought "finally, one of the moral ones" because all the non essential cookies are turned off by default, and you have two options with the same visual weight to either accept or reject the others.
Re:Gmail is showing ads in the middle of the inbox on Monday May 08, 2023 @10:57AM (#35862253)
another enthusiastic +1 comment here.

Moved to them from gmail, set up *@firstnamelastname.com and the ability to send and receive emails from my old gmail, then moved all my accounts over (pretty easy if you have a password manager)

Works amazingly :)

I work in adtech. Terms like "Targetted advertising" and "Retargeting" are very common.
> it's much cooler to have it automated

heh

Re: on Friday April 21, 2023 @03:58PM (#35659169)
my contract has a month notice, but if I don't work then they don't have to pay me. One month notice is pretty standard in my country, but the wording also gives me an effective way of "no notice" quitting, obviously that's far from the norm here so it burns quite a lot of bridges.
Re:Rust's Poor Composability on Thursday April 06, 2023 @11:12AM (#35469412)
Re:The Anti-Productivity Manifesto on Sunday March 26, 2023 @05:33PM (#35319873)
That was a good comment for me to read. I like to think about myself that I am of a similar mindset to you but now that I think of it I very often discount others' opinions because of how I view them and don't catch myself often enough. Here's hoping I remember this comment next time it happens :)
Re:Emacs Is Not Enough on Saturday January 14, 2023 @06:33AM (#34379449)
What do you think about treesitter? https://github.com/tree-sitter/tree-sitter

The idea is to sync changes in the text to a tree structure, then have all the structure manipulation functions built on top of it. See the gif here for a visual representation: https://github.com/nvim-treesitter/playground

Re:Dotfiles Management on Sunday January 08, 2023 @02:43PM (#34302355)
I was unhappy with existing solutions, especially I wanted the ability to handle differences between machines. So I built my own! You're welcome to see if you like it :)

https://github.com/SuperCuber/dotter

Older »