News for hackers. Stuff that matters.

fraktl

Re:Choose your browser carefully (2021) on Sunday January 23, 2022 @07:20AM (#30045624)
I agree with you on everything you wrote, thanks for taking time to explain it.

The situation is not great, it's true that for regular users Chrome is basically spyware and battery drain.

I've been waiting for Mozilla to create a better webdev console (or even copy Chrome's) and I'd move instantly.

I do use more than just Chrome (ungoogled Chromium, Edge, Firefox) and I also experience the "regular user" problem when a site is fine in Chrome but not in Firefox so I'm split between two worlds as well, and believe me - I feel your frustration.

Re:Choose your browser carefully (2021) on Sunday January 23, 2022 @04:59AM (#30044969)
I don't like Google, but Chrome is a better browser - especially if you're frontend dev. I'd love for Firefox to be better but it's way slower and its developer console is no match for Chrome's.
Re:PHP in 2022 on Tuesday January 11, 2022 @10:52AM (#29892955)
You could have googled and hated better. Why bother trolling if you won't even give it 40 seconds of using search engines?
I'm thinking of an alternative title: "Developer works for free for decades, gets cancelled promptly."
Re:You don't need that CORS request on Monday January 03, 2022 @04:32AM (#29778927)
No, it's not ugly. It's necessary. And we don't need any additional tooling around it or yet another thing that "fixes" what doesn't need to be fixed.

If you control domain.com and api.domain.com, then you can create a proxy that glues the two to the same domain, getting rid of any CORS annoyances forever. And you use the tech that exists. The whole problem takes less than 1 minute to type, test, deploy and there's no need for yet another big thing invented to solve a small problem that occurs due to ignorance of self-proclaimed "developers".

Re:Writing New System Software on Saturday January 01, 2022 @07:59AM (#29757938)
They aren't. But make yourself believe the fairy tale.
Re:Writing New System Software on Saturday January 01, 2022 @06:52AM (#29757571)
> I mean, C is probably the simplest tool to write fast software with

The simplicity is the hard part. Fishing for compliments by "pretending" it's so trivial to you shows immaturity.

The author definitely knows what he's talking about. Perhaps it's you who's doesn't?

Re:Writing New System Software on Saturday January 01, 2022 @06:49AM (#29757556)
From what you wrote, it appears you don't know the meaning of "reasonably", "decent", "exception" and that you set your mind to disagreeing with the author before even fully comprehending the post.
Re:Twitter acquires Quill on Tuesday December 07, 2021 @10:58AM (#29473923)
I'll translate the text to honest one.

> We started Quill with the goal of increasing the quality of human communication

We started Quill with hope someone buys us one day.

> Together with Twitter, we will continue to pursue our original goal — to make online communication more thoughtful, and more effective, for everyone.

We sold our data to Twitter so they can make more money.

> We’d like to thank everybody who has used Quill — if you came on board during our beta, or if you just sent your first message last week. We can’t wait to show you what we’ll be working on next.

We can't wait to use the data you supplied us for free to get even more money from Twatter.

Re:Leaving MySQL on Monday December 06, 2021 @08:41AM (#29459588)
- Works 5 years on something he hates - No proof (links, anything) that prove what he's stating - Quits and supports the other vendor, knowing there's internet quarrel between <insert-db-name> vs <insert-other-db-name>, nice going there. Real grown up. - Leaves to work for largest spyware company on the planet

This sounds like one of those people everyone on HN say to avoid in job environment.

Re:How to win at CORS on Friday October 15, 2021 @05:57AM (#28876060)
Out of curiosity, how come you dared to make this comment without ensuring you've got all your facts straight?

No, it isn't security through obscurity. Yes, it protects and it protects a lot.

Thank you for contributing to lack of knowledge, do keep up.

Re:How to win at CORS on Friday October 15, 2021 @05:31AM (#28875894)
This.

But hey, with so many impostors around - they're not capable of fathoming how golden this advice is.

Sad truth is, since "developers" don't use this, they genuinely don't understand browsers and HTTP and that's what 's dangerous.

Re:How Laravel Livewire works on Wednesday October 13, 2021 @06:12AM (#28850336)
As a Laravel user, I agree with you completely. Laravel for API, Next.js/Nuxt.js to handle the frontend. It avoids depending on Laravel-<insert-name> frontend tool/framework/you-name-it.
Re:Nano98: Windows 98 that boots and runs under 5MB (2003) on Monday September 20, 2021 @06:54AM (#28592331)
Instructions are not complex, they're the opposite - they're extremely simple.
Re:TrackerControl on Friday September 10, 2021 @03:28AM (#28478698)
NextDNS won't show you companies behind tracking and where your app sends the data to.
Re:Helm is a personal server that lives where you do on Monday August 30, 2021 @07:52AM (#28354712)
Saw subscription, instantly closed the window. Didn't waste time reading further.
Re:Is GitHub Copilot a blessing, or a curse? on Tuesday July 20, 2021 @03:56AM (#27891065)
> Anyone who uses Copilot is implicitly endorsing this theft.

Just like you're endorsing being sponsored and effectively stealing GitHub's bandwith? :)

> We have a duty as practitioners in the industry to call it out when we see something wrong.

It's wrong both ways. You accepted the service from GitHub, the free one where you get to open your account, host your code, share it etc.

What exactly did you expect? To be served for free for your entire lifetime?

Please, get off the moral highground. You ate the devil fruit, now you're whining about it. You should be smart enough to know that this kind of whining will get you nowhere. Just quit.

Re:Fastly CDN is down (affecting Reddit, GitHub, SO, ...) on Tuesday June 08, 2021 @07:32AM (#27433718)
Looks like Fastly engineers fixed the problem... Slowly.
Re:Althttpd: Simple webserver in a single C file on Tuesday June 08, 2021 @04:58AM (#27432057)
You missed the date in the comment of the C file: 2001-09-15

Back then, there weren't bazillion web servers out there. A patchy server was still.. patchy. And engine that solves problem X (c10k) was not created yet :)

(for whoever reads my comment, I am referring to Apache and nginx)

Re:Why I Work on Ads on Thursday May 06, 2021 @10:14AM (#27063523)
I hate ads. I always hated them.

It doesn't mean I hate people who work on ads / ad software. It doesn't mean I want to cancel them. You, and the others in that field, don't have to justify yourself. You don't have to donate to charity to feel better about what you're doing (it doesn't mean "stop donating NOW", it's just.. do what you feel is good, like you are doing now).

There's a lot of bad going on in the world. Ads are shady-grey area. I know how to fight it and have my internet ad-free. You're ok, don't let negative comments get to you. Cheers!

Re:PHP in 2021 on Friday April 16, 2021 @05:02AM (#26831391)
Reasons why to use PHP:

- You know how to use it (syntax, what it can do etc.) - You've learned its ecosystem, package management, standards - You can achieve results using PHP and complete projects while adhering to deadlines

Ruby doesn't offer anything substantial that would justify the switch. I'm all for developers honing their skills, but business does not exist to cater to developer's whims. Business exists to provide value to clients and put food on employee's table. Being nitpicky about the language and doing language swap is very expensive, especially when you swap language A with language B and gain literally nothing. For smaller businesses or one man shows, it's trivial to start a new project and use a different language.

I've seen fair share of superficial analysis and loud comments made by people who are not engineers, judging by their behavior. Like any language, PHP can be misused; and often is misused. It became a rite of passage to belittle PHP. Reading or hearing comments that attack certain technology without objective reasons merely means the person doing it is toxic and should be avoided in general. I dislike plenty of things in PHP / Python / Golang, but I would never dream of whining about it; instead, I try to reach out to maintainers and make suggestions to help make improvements.

Having written a few things, here's why you PHP is still appealing (this does not mean other languages cannot do this):

- it's sufficiently fast for CRUD-y applications. Bottleneck is usually I/O, but scaling horizontally is not an issue anymore, therefore performance doesn't have to be an issue. - it's feature rich, type system received massive improvements and continues to improve - it has more than 1 framework to choose from (Symfony, Laravel, CodeIgniter, Phalcon, Aphiria, Yii, Zend Framework and the list goes on) - there's an async framework available, called swoole. It's an extension to PHP written in C++ and it brings async capabilities to the play. It's sufficiently quick and allows for building different types of applications: like web socket server or communication-oriented servers. - new Foreign Functions Interface allows for experienced / polyglot developers to extend their apps in an easier manner opposed to writing extensions in C

With technologies like containerization, it became trivial to distribute PHP applications and avoid long setup times and reading the manuals on how to make something work. Not everyone use those technologies, but it's what's available and end result can be that you distribute a container image, which for all intents and purposes, means that you deal with a single "file" (thought I want to get across is that app distribution can be made extremely simple).

Question that poses itself is this: what reason is there to move away from PHP? Personal preference - I understand it, and this is what pushed me to try other languages and technologies out.

If you've got substantial performance, mature ecosystem, plenty of libraries, plenty of frameworks to choose from, great language features, async capabilities and ability to use the language for things other than CRUD-y applications - why use a different language that will ultimately merely let you do the same?

I run Bitwarden official on a Hetzner dedicated box, the machine costs ~40€ a month, Bitwarden usage does not even register as statistical error, therefore resource consumption is really not such a concern.

There's really no objective reason to use bitwarden_rs. Subjectively - we can do whatever we like, I'm not trying to challenge anyone into providing their reasons or into justifying their decisions, there's no right or wrong here.

> It's a trust issue. I don't trust my passwords on someone else's server.

They don't have your decryption key, therefore they save encrypted blobs and have no means to obtain your password. This takes care of trust issue - it simply is not an issue and never will be.

Even if malicious employee does something out of the ordinary or "hacker" gets the database, they still have the impossible task of breaking the encryption (which for all intents and purposes is impossible as of right now).

This returns us back to my starting point - there's *no objective* reason to use bitwarden_rs, apart from curiosity and/or convenience. I'm not saying it SHOULD not be used. We are all free to make choices as we see fit and don't need to justify them, however the reasons you listed are not reasons at all because the concerns you have don't exist.

I love Bitwarden. It's a great piece of software and it's reasonably priced. We use it at my place of work (I pushed to install and use Bitwarden on the company level). I also tried the Bitwarden_RS, it does the same work however it's not suited for company use as it lacks the feature to create groups. There's an open issue that provides a workaround, however that workaround proved to be unusable. I tried to reach out to maintainers to see whether the feature could be implemented and paid for their effort but.. let's just say the answer was "No.".

Long story short - we use official Bitwarden and are paying for it and couldn't be happier. Bitwarden_RS looks like a cool toy, but I can't see any reason why anyone would run it. It's good for personal passwords, but Bitwarden itself offers free service so there's no need to venture down the self-hosted road.

Re:“I will slaughter you” on Friday February 19, 2021 @07:11AM (#26192275)
Judging by what transpired and how the other person behaves, it sounds like he got what he deserved. Such a rotten personality shouldn't be allowed around people, let alone computers.
Re:“I will slaughter you” on Friday February 19, 2021 @07:10AM (#26192251)
Haha, this is exactly what I thought too, well put :)
MySQL has pluggable storage engines. TokuDB does what you're after (adds indexes on the fly, as well as alter tables on the fly without overloading the server).
Re:The Architecture of IMGZ on Monday December 07, 2020 @03:52PM (#25337342)
I sent this to every person I know and that I appreciate. Both of them.

I couldn't stop laughing, I miss stuff like this. Stavros - you are a god among mortal men, thank you for this :)

Re:PHP RFC: Enumerations on Saturday December 05, 2020 @10:49AM (#25315385)
I'm sorry, but it seems like you haven't used PHP and are actually in the dark about what language features there are. I wrote "most languages at my disposal", I didn't want to go down the path where I basically throw buzzwords and brag in front of someone I don't even know.

Don't get me wrong, but you don't seem interested in discussing, you rather appear to want to show how right you are without iota of PHP knowledge.

Since there's no dialogue here and you appear to be yet another code plumber, I'll bid you farewell and I wish you all the best in your career.

Re:PHP RFC: Enumerations on Saturday December 05, 2020 @07:23AM (#25314021)
When I read comments coming from people who don't use PHP which are always negative or condescending, I wonder - how do you imagine programmers who use PHP are like? Do you immediately draw parallels in your mind that makes us PHP-ers incompetent and basically dumb, while having a language that lets you mash the keyboard and it works?

Honestly, after having used most of the languages at my disposal for past 22 years I've been doing this job - they were nothing special compared to PHP (or PHP compared to others).

You still have to figure the problem out before solving it with algorithms. No language or framework will help you do that.

I'm keen to hear why there are comments that demean one tool and elevate the other, when in reality - they're all just programming languages.

Older »