Hacker News: adql

New comment by adql in "Ointers: A library for representing pointers where bits have been stolen (2021)"

adql — Wed, 08 May 2024 14:14:42 +0000

I dunno, pointers were kinda small on 8/16 bit platforms

New comment by adql in "Ointers: A library for representing pointers where bits have been stolen (2021)"

adql — Wed, 08 May 2024 14:14:15 +0000

Any example ?

New comment by adql in "Ointers: A library for representing pointers where bits have been stolen (2021)"

adql — Wed, 08 May 2024 14:13:23 +0000

Plenty of niche ways that are limited enough to not require program wide architecture change

https://muxup.com/2023q4/storing-data-in-pointers#some-real-...

New comment by adql in "Why use ECC? (2015)"

adql — Wed, 08 May 2024 14:05:43 +0000

> What’s the best price/performance for a home lab server running Linux with ECC these days? Bonus points if it is rackable.

Old used enterprise server. None of them will be great at power/performance in typical (i.e. mostly idle) home use tho. Intel ones usually far better here

New comment by adql in "Show HN: We built PriceLevel to find out what companies pay for SaaS"

adql — Wed, 10 Apr 2024 16:17:53 +0000

> However, as a provider I can totally see a situation where I (proverbially, I'm not in this business) sue you for disclosing what amounts to a trade secret (depending on what's in the fine print) and compel you to give up all documents so I can go after my loose-lipped client too.

I don't see this holding in court aside from the company needing to remove that info from the site.

You are not beholden to NDA you have not signed, and it woudld be employee that shared it breaking any agreements, not the company that then shared it.

New comment by adql in "Twitter's pivot to x.com is a gift to phishers"

adql — Wed, 10 Apr 2024 16:15:08 +0000

> The destruction of the Twitter branding seems more out of spite than business development goals

Or just incompetence. Plenty of that. Assuming just because he is billionaire that he's competent at everything related to any company and the reason for failure is something else is silly.

He had no idea what the fuck he is doing and he fucked up.

New comment by adql in "Twitter's pivot to x.com is a gift to phishers"

adql — Wed, 10 Apr 2024 16:11:11 +0000

Well, admitting otherwise would be admitting failure of managing that company and we can't have that!

New comment by adql in "Multimillion-dollar L.A. heist was seamless, sophisticated, stealthy"

adql — Wed, 10 Apr 2024 15:56:36 +0000

Actually, why there is not? Company should be able to just get cert for wifi.company.com and then be allowed to just call its network wifi.company.com...

New comment by adql in "Multimillion-dollar L.A. heist was seamless, sophisticated, stealthy"

adql — Wed, 10 Apr 2024 15:53:58 +0000

> Even in the US the Afroman raids show the police about to rip drives out of the security system .. if there'd been a decoy box | real time cloud backup there'd be more footage of the raid for his songs and court case.

I think bigger problem is people that think they can do that in first place still being employed in police...

New comment by adql in "Multimillion-dollar L.A. heist was seamless, sophisticated, stealthy"

adql — Wed, 10 Apr 2024 15:50:46 +0000

They are also often on switch with single uplink to the recorder so if cameras are connected with 1gig you could just flood recorder itself, downing every camera connected to it.

New comment by adql in "Show HN: I made a discrete logic network card"

adql — Wed, 10 Apr 2024 14:14:07 +0000

Funnily enough modern machines have ISA in form of LPC bus used for few of the common peripherals (TPM) that can be used in ISA-compatible mode, and you can get LPC to ISA adapters.

New comment by adql in "Client libraries are better when they have no API?"

adql — Wed, 10 Apr 2024 13:38:30 +0000

Returning CSV is an api thought. A terrible one, as "CSV" means a dozen ways of how to encode the special cases/escaping in the column

New comment by adql in "Avoid blundering: 80% of a winning strategy"

adql — Wed, 03 Apr 2024 14:35:43 +0000

Designing does. Building and using it is for confirming or revoking any prior assumptions you had about the initial design to improve it.

Most of the thinking should be put into designing and then revising the design, the "building" should be the simplest part.

New comment by adql in "Avoid blundering: 80% of a winning strategy"

adql — Wed, 03 Apr 2024 14:32:06 +0000

Yeah but getting consistent is the bar you need to get to first before you can even be considered decent.

Being 1s faster than everyone best lap but having ~2s lap-to-lap inconsistency will make you lose every time.

New comment by adql in "Cups vs. grams: why can't American and British cooks agree on food measurements?"

adql — Wed, 03 Apr 2024 11:48:39 +0000

I agree that grams are inconvenient to use for flours and liquids, so litre/desilitre/millilitre just seems the logical option.

It works for fluids but it is complete mess for any compressible solid (flour), and even non-compressible one that comes in different grain size(salt).

On side note it would be nice to have tabletops with builtin scale...

New comment by adql in "Cups vs. grams: why can't American and British cooks agree on food measurements?"

adql — Wed, 03 Apr 2024 11:46:37 +0000

They are eyeballing everything, then have to make a recipe out of it. The recipe didn't include all of the "fixing" of the spice/salt balance they do during cooking.

New comment by adql in "Reflections on Distrusting xz"

adql — Wed, 03 Apr 2024 11:35:06 +0000

> Why not get rid of xz completely?

... you mean compression package used by most big distros to make their packages? Do you really need to ask

> Hoe about using a simpler piece of software, which could be maintained by more people?

It's not a complex piece of software. Lib itself is ~15k lines of code.

It does it's job well and it needs little work. It didn't had any outstanding bugs lingering unfixed for years

Complexity have nothing to do with the problem, it's just... uninteresting enough that there is no reason for contribute.

New comment by adql in "Reflections on Distrusting xz"

adql — Wed, 03 Apr 2024 11:24:15 +0000

The start of the attack was few fake accounts trying to shame the maintainer for not "developing" it constantly and so give maintainer rights to someone else.

And there wasn't really anyone to say "nope, it's fine, fuck off"

New comment by adql in "Reflections on Distrusting xz"

adql — Wed, 03 Apr 2024 11:22:05 +0000

Pretty much; updating say libssl in a "traditional" system running app, or maybe 2-3 dependent apps fixes the bug.

Put all of them in containers and now every single one needs to be rebuilt with the dep fixed and instead of having one team (ops) responsible, you now need to coordinate half of the company to do so. It's not impossible but in general much more complex, despise containers promising "simpler" operations.

...that being said I don't miss playing whack-a-mole game with developers that do not know what their apps need to be deployed on production and for some retarded reason tested their app on unstable ubuntu while all of the servers run some flavour of stable linux with a bit older libs...

New comment by adql in "Reflections on Distrusting xz"

adql — Wed, 03 Apr 2024 11:18:51 +0000

> Agreed, as a developer: minimize your dependencies while providing your core function. Don't grant dependencies permissions they don't need. Be granular about it. Austral lets you select what filesystem, network, etc. access each library gets.

Still wouldn't help for this particular exploit.