News for hackers. Stuff that matters.

imdoor

I'm wondering what's the situation like in EU. Seems like, under GDPR, I should be able to not consent to tracking and still have the connected functionality remain working. I haven't had the experience of setting up any new cars in EU, does anyone know whether you're provided with an explicit choice regarding data collection? Whether it's then honored might be a different question though.
Re:Why I Still Reach for Lisp (& Scheme) Instead of Haskell on Thursday April 30, 2026 @05:23AM (#47960071)
I think I much prefer Haskell DSLs over Lisp macros as the basis for APIs in foreign code. That might be due to my relative inexperience with Lisps, but macros just seem to make all the bad aspects of dynamically typed langues much worse. Looking at some piece of code in isolation, not only is it often impossible to tell what is the type/shape of data that are coming in (as is common with dynamic type systems) but with macros added to the mix I also can't tell what the control flow is. So to understand what a single piece of code is doing, I find myself chasing for hints that are scattered throughout the entire codebase.

Contrast this to Haskell's use of DSLs – although they really can be quite dense sometimes, I feel like, when I get stuck, I can always just dig into the documentation on Hackage, and figure out things from the type definitions (even when explanations in docs are lacking). Though it does require being comfortable with the abstractions being used (monads and such). Rust is similar in this manner but to a lesser extent.

But again, maybe the macro critique stems from my inexperience with them.

Re:Fedora Asahi Remix first impressions on Sunday August 13, 2023 @06:50AM (#37108661)
> You’re aware Arch its policy is to release packages in a broken state and just put it in the release log? They even very publicly state that.

Can you please provide some sources/examples?

Re:Fedora Asahi Remix first impressions on Saturday August 12, 2023 @05:21PM (#37104329)
I use Nix on an ARM single-board computer to host a personal Matrix homeserver (and a bunch of bridges), and I absolutely love it. It's invaluable to have a reproducible specification of the whole system, including custom software to build, in a single place.

That being said, for day to day stuff Arch (and Nix standalone) works well enough for me, to be weary of switching my daily driver PC to Nix, out of the fear of dealing with unforeseen issues and maybe encountering less well maintained packages (there's always something broken on Nix unstable, but maybe it's not an issue for more popular stuff). So I'm sticking to Arch for non-servers for now.

Re:Fedora Asahi Remix first impressions on Saturday August 12, 2023 @03:54PM (#37103655)
There would definitely be issues with the keyring being outdated which you have to know/search how to work around. And from time to time Arch also requires some manual interventions in the package update process (that are posted on archlinux.org) – you'd have to deal with those all at once if Arch wouldn't have been updated for a very long time. But, other than that, I can't think of other reasons why having a less often used Arch installation would give you trouble.

Then again, I haven't used Arch in such a manner, so you might as well be right.

Re:Fedora Asahi Remix first impressions on Saturday August 12, 2023 @03:22PM (#37103367)
Doesn't match my experience at all. I love that packages are always up to date. Also, in my experience, having a rolling release cycle leads to significantly fewer issues than having to upgrade everything at once. Using Arch has been a net time saver for me compared to something like Ubuntu where I've wasted a lot of time fighting package upgrade issues and trying to get newer package versions than the distro provides.
Latvian eID also provides cryptographic signing, and it's widely used when communicating with governmental institutions, because it's mandated by law that they must accept such digitally signed documents, and they have the same legal power as regular documents. I believe the situation in Estonia and Lithuania is probably similar. Many businesses also accept them but it's not universal.
Re:Firefox has surpassed Chrome on Speedometer on Tuesday July 18, 2023 @02:04PM (#36776782)
Most of the times when I've tried finding stuff in (Firefox) history, I wasn't able to. Unless it's in the last week or so. In my experience, history filtering and search options are too basic to be useful. Once I was even desperate enough to try to load some Firefox sqlite file directly, hoping to query history entries, but that didn't work out.

The only reliable way that I've come across for finding stuff after a long time has passed is saving every sightly interesting webpage to Zotero and using fulltext search afterwards (including webpage body).

I'm curious, do you find the builtin browser history facilities sufficient for your needs, or are you using some third party tool for that?

Re:Framework Laptop 16 on Thursday May 25, 2023 @02:47AM (#36067749)
I wanted to preorder the updated 13 inch model but it turned out that in EU Framework sells their products only in a selected few countries (also they are actively preventing people from using forwarding services so there's no good way to sidestep this). It would be great if they had a distributor somewhere in the EU or something that could resell their products otherwise it might be a very long wait till they're available where I'm at.
Re:Update on Sharing on Thursday May 25, 2023 @02:08AM (#36067533)
I feel like many of the issues people are complaining about here would instantly dissapear if there was regulation preventing content producers and content distributors be the same entity. There's even precedent for a similar thing in USA https://en.m.wikipedia.org/wiki/United_States_v._Paramount_P....
What is the context here? What are the mentioned standards that the open source developers will need to comply to?

Edit: from the linked article https://berthub.eu/articles/posts/eu-cra-secure-coding-solut...

> The extremely short version: The EU is going to task a standardisation body to write a document that tells everyone marketing products and software in the EU how to code securely. This to further the EU Essential Cybersecurity Requirements. For critical software and products, EU notified bodies (which until now have mostly done physical equipment and process certifications) will do audits to determine if code and products adhere to this standard. And if not, there could be huge fines.

Re:The World is Built on Probability [1988/2023] on Sunday May 14, 2023 @10:55AM (#35938473)
Say there is a quantum system – a particle or something – that has an equal probability to collapse in either of two classical states if measured. Say there are two scientists in a laboratory who perform a measurement on that system. If your hypothesis is true, how do they agree on what they perceive when looking at the result of the measurement? Each brain would have to make an arbitrary decision on which of the two equally likely outcomes to perceive.
Re:The World is Built on Probability [1988/2023] on Sunday May 14, 2023 @10:26AM (#35938249)
Do you account for the fact that probability distributions can have multiple peaks with equal probability? If multiple brains were involved, they'd somehow have to coordinate on what they deem the most likely outcome.
Re:FBI Advising People to Avoid Public Charging Stations on Wednesday April 12, 2023 @10:04AM (#35539842)
I'm curious, shouldn't the "charge only" mode, that's the default, when connecting usb stuff to Android phones, be enough to protect users? Is it really that difficult to implement a "don't read data pins, only charge" mode on a phone and not have vulnerabilities in it?
Re:I Fell 15,000 Feet and Lived on Wednesday October 26, 2022 @06:04PM (#33350201)
The "pure utilitarian" viewpoint never made much sense to me because it seems to usually imply accounting for only first order effects, when calculating some costs and gains, and stopping there. I think the secondary effects of not saving people might go far beyond some saved fuel and time in such situations (especially in war, as some have mentioned here).

In other words, optimizing some aspects of a very complex and well functioning system, such as society, locally is likely to mess things up globally.

Re:Mastodon.technology Shutdown on Friday October 07, 2022 @11:29AM (#33122659)
I think you could create a system that's resilient to such issues even with federation (not saying it's easy, though), and Matrix actually has a solution in the works for this – decentralised user accounts [1].

And all of this makes me wonder – maybe it's better to re-implement something like Mastodon on top of Matrix. If Matrix adopts decentralised user accounts, that would seemingly solve such issues automatically. There was a POC Matrix based Twitter clone demonstrating this, actually [2] (but without the decentralised accounts yet).

[1] https://github.com/matrix-org/matrix-spec/issues/246

[2] https://github.com/hackervera/freebird

Re:Ask HN: Anyone hosting their own videos? on Monday September 12, 2022 @07:57AM (#32808826)
NSFW
Re:F# Good and Bad on Thursday December 16, 2021 @07:38AM (#29577534)
I've seen a lot of praise for F# but trying it out left me somewhat disapointed. Overall, it was nice to program in but there was a constant feeling of awkwardness which, it seems, was caused by F#'s ties to the rest of the .NET world. I don't remember the details too well but some of the examples are:

- NULL values still are a problem because they can be introduced any time you interact with the .NET framework. I got hit by this almost right at the beginning when first using the language – i defined some data type with non-optional fields and used it as an argument to an ASP.NET Core controller method only to realize that my non-optional fields don't enforce anything and ASP.NET will happily set them to NULL when data aren't present.

- There are multiple slightly different ways to define data types – classes, records, discriminated unions – and it's not immediately clear what are the consequences of using which. I remember having to switch some of my datatype definitions to classes because otherwise i couldn't make ASP.NET Core automatically deserialize them.

- You still have to learn in detail how all of the C# and .NET concepts map into F# to work with .NET and other libraries, e.g., there is a weird duplication of collection types, sometimes you have to do a weird casting dance with the :> and :?> operators when working with interfaces, dealing with out parameters also took me quite some time to figure out.

- Namespaces, classes and modules also seem to have some confusing redundancy.

I've tried out F# only once for a single project so a lot my complaints are probably due to my inexperience with the language, but all in all it seems that a lot of the suffering is inflicted by the association with .NET and the language could have been a lot nicer if it wasn't tied to it (I'm not dismissing the benefits of it, though).

Re:The Insecurity Industry on Tuesday July 27, 2021 @03:42AM (#27969707)
> Fixing the hardware, which is to say surgically removing the two or three tiny microphones hidden inside, is only the first step of an arduous process, and yet even after days of these DIY security improvements, my smartphone will remain the most dangerous item I possess.

What's the purpose of these microphones? Do they pose more threat than the standard non-hidden microphone?

Re:Physical Warp Drives on Friday May 28, 2021 @12:36PM (#27317500)
I don't know enough to think that violation of causality is not possible. It just just seems very unlikely. I can't imagine how the world would look like if it wasn't the case because of the paradoxes it would imply.

You seem to imply that you think differently. Care to elaborate?

Re:Physical Warp Drives on Friday May 28, 2021 @12:15PM (#27317221)
Ah, i somehow read the subluminal as superluminal in the abstract and got all excited. But the subluminal restriction makes the paper's findings make more sense.
Re:Physical Warp Drives on Friday May 28, 2021 @11:33AM (#27316598)
Does an Alcubierre warp drive violate causality? From my understanding, it's no different than regular FTL travel, which implies time travel, which implies violation of causality.

To me that would indicate that an Alcubierre warp drive still shouldn't be possible despite the negative energy requirement being lifted.

Re:A future without passwords on Friday May 07, 2021 @04:22AM (#27073642)
In principle, there is a way for you to have U2F backup keys. Here's a great write-up https://dmitryfrank.com/articles/backup_u2f_token

The basic idea is to have two U2F devices with with the same device_secret but one of the devices (the backup) is pre-programmed to add a large offset to the so called counter value. Upon login the service must check the counter value and ensure that the received value is greater than the one it's seen previously. If you happen to lose the first key, you can use the second key to log into all of the affected online services and upon doing so, the service would accept the new larger counter value and thereby invalidate the lost key.

I managed to get 5: ௬চІݪݹටຽࠇ௨රІݪشॴເເƕؿ٠ܥ౻ഡϿߢ௧กȤڥƐඨɱݺƔقහݹࠉඦТ൫௮ࡄරࢲԥට༥ݹࠔقฮݹஓپଈKƐൽЫݚɷಪІݎ౫ඨIƬޛගƸݰಏஶເםݮقไࡨறۊసໃ௧Οࠕࠄېୱ೦ݶћؾƔݷɘ੬ÐԴযϺƛԾతࡕ
Re:A rabbit hole full of Lisp on Thursday January 14, 2021 @02:42PM (#25781350)
Emacs is available on Windows so just install it and then clone the Spacemacs GitHub repository to C:\Users\<username>\AppData\Roaming\ and rename it to .emacs.d\ As i remember, though, i think it was slower than on Linux, but might be something else was going on with my setup back then.

I've also tried running it from WSL. Running it in cli mode was sufficient for me, but i was also able to use GUI mode by installing an X Server (VcXsrv i think) on Windows and making WSL work with that. It makes sense to use it from WSL, if you do your development work there as well. Also, it was before WSL 2, so i don't know if anything's changed now.

Re:A rabbit hole full of Lisp on Thursday January 14, 2021 @03:44AM (#25773790)
In Spacemacs i essentially have the sought after experience. It goes something like:

0. Know i will be working with C, expect that a C layer should exist

1. Open the docs for the C layer with SPC h l <search for C>,

2. In there, search how to set it up to use a lsp backend

3. add (c-c++ :variables c-c++-backend 'lsp-ccls) and lsp to the list of layers

4. install ccls with my distros package manager

5. restart emacs and get to work

Sure, there are some more steps, but i don't really see it as a burden. And oftentimes it's even easier than that - open a file, get prompted to automatically install the appropriate layer, wait a bit while it does it's thing and you're ready to go. Ok, you should also uncomment the git layer in the configuration but it's already there.

So yeah, i do recommend Spacemacs to the developers i know if they think they might be into a keyboard-centric experience to using the editor and other benefits that Emacs brings (buffer management is a big one for me). It was easy enough for me to jump on using it, without being familiar with Emacs beforehand and without knowing elisp. You do have to know basic vim, though.

Re:Emacs Symbolic Integration on Wednesday January 06, 2021 @10:56AM (#25658800)
> "a great operating system, lacking only a decent editor"

I've seen this thrown around when people joke why vim is better than Emacs and i think it's funny. But, seeing that Emacs has evil-mode, which is basically an implementation of vim on top of the said "operating system", i'd say it's false. Or ironic :D

Re:Is Stupidity Expanding? Some Hypotheses on Thursday October 15, 2020 @05:54PM (#24794565)
Or maybe it could be that, given their prior beliefs, the reactions to your arguments are, in fact, _rational_ in a Bayesian sense?

I think, with Bayesian probabilities, you can have a setup where, given the same data and two different prior distributions, you end up with two wildly different posteriors after updating the initial beliefs. Unfortunately, i don't have an example at hand but i remember there is a very interesting passage on this phenomenon in E. T. Jaynes "Probability Theory: The Logic of Science". Can anyone else expand on this?

Yeah, there are still a lot of reasons to use lenses. But to rephrase - i was wondering if lenses and the proposal somehow "interact". Actually, I just found some of what i was after in this comment [1].

[1] https://github.com/ghc-proposals/ghc-proposals/pull/282#issu...

Older »