Hacker News: afiori

New comment by afiori in "DOJ wants to scrap Watergate-era rule that makes presidential records public"

afiori — Fri, 10 Apr 2026 22:23:03 +0000

Pardon power competes with governors (at least NY) being able to edit laws before signing them for most anachronistic/dystopian feature of the US state.

New comment by afiori in "DOJ wants to scrap Watergate-era rule that makes presidential records public"

afiori — Fri, 10 Apr 2026 22:20:35 +0000

yes, with a but, rephrased as "crazy that you can't use a private service without payment or otherwise contributing to its profitability" sounds less so crazy.

I agree on the excess.

New comment by afiori in "DOJ wants to scrap Watergate-era rule that makes presidential records public"

afiori — Fri, 10 Apr 2026 22:18:24 +0000

Don't forget about pardon power.

New comment by afiori in "Iran strikes leave Amazon availability zones "hard down" in Bahrain and Dubai"

afiori — Fri, 03 Apr 2026 22:37:44 +0000

Considering how hard US military bases and radar systems have been hit (and those are not city-sized target) I am unconvinced that even AMZN's pocket change could realiably protect against the kind of attacks we see in this war

New comment by afiori in "The future of version control"

afiori — Sun, 22 Mar 2026 22:57:46 +0000

being able to customize the chunking/diffing process with something analogous to an lsp would greatly improve this. In my experience a particularly horribly handled case is when eg two branches add two distinct methods/functions in the same file location (especially if there is some boilerplate so that the two blocks share more than a few lines).

a language aware merge could instead produce

>>>> function foo(){ ... } ===== function bar(){ ... } <<<<<<

New comment by afiori in "The future of version control"

afiori — Sun, 22 Mar 2026 18:59:37 +0000

iirc ours is always the commit the merge is starting from. the issue is that with a merge your current commit is the merging commit while with a rebase it is reversed.

I suspect that this could be because the rebase command is implemented as a serie of merges/cherry-picks from the target branch.

New comment by afiori in "JPEG Compression"

afiori — Wed, 18 Mar 2026 10:39:55 +0000

With Cathode ray TVs only a single pixel at a time is on, it relies on our eyes having bad enough temporal resolution, if you have Superspeed eyes you will see just a coloured line/pixel moving on screen

New comment by afiori in "Recursive Problems Benefit from Recursive Solutions"

afiori — Sat, 14 Mar 2026 11:28:56 +0000

Just like many languages have annotations for inlining functions they could have annotations for tco. From an usability pov i would like annotations for must, must not, should, and should not. Where the "must" versions error if the compiler can't do the optimization

New comment by afiori in "White House plan to break up iconic U.S. climate lab moves forward"

afiori — Thu, 12 Mar 2026 23:06:53 +0000

based on recentish interviews (or book?) it was likely genuine in the sense of not being performative, but apparently she knew it was both false and the wrong thing to say but said it anyway out of loyalty to Biden.

New comment by afiori in "White House plan to break up iconic U.S. climate lab moves forward"

afiori — Thu, 12 Mar 2026 23:02:40 +0000

Intra-party elections should definitely be some variant of ranked-choice voting. To at least try to avoid the current fractal polarization.

New comment by afiori in "Making WebAssembly a first-class language on the Web"

afiori — Thu, 12 Mar 2026 06:22:35 +0000

The web part is the security model and the tradeoffs between security and performance. PNaCL was in browsers but not "web" for this reason.

Like the assembly part means low-level and meant as a compilation target, not CPU instructions.

So websssembly is an assembly language for the web, like webgl is opengl for the web and webgpu are gpu APIs for the web. And behold none of those can access DOM APIs

New comment by afiori in "Temporal: The 9-year journey to fix time in JavaScript"

afiori — Thu, 12 Mar 2026 04:31:00 +0000

{"$temporal_type":"PlainYearMonth","$data":"........"}

New comment by afiori in "Iran war wreaking havoc on shipping and air cargo, could create global delays"

afiori — Thu, 05 Mar 2026 08:08:30 +0000

The us is indeed very interested in how many innocents its enemies kill.

70 years of bombing random coutries an causing caos and military dictatorships show that is might not apply inward.

New comment by afiori in "Iran war wreaking havoc on shipping and air cargo, could create global delays"

afiori — Thu, 05 Mar 2026 08:06:13 +0000

> Why would the US and Israel resort to X?

> That’s how you end up with wide scale civilian deaths.

Has Israel ever shown restraint wrt civilian deaths?

New comment by afiori in "RFC 9849. TLS Encrypted Client Hello"

afiori — Wed, 04 Mar 2026 19:33:24 +0000

Then they would drop the connection with esni

New comment by afiori in "TikTok will not introduce end-to-end encryption, saying it makes users less safe"

afiori — Wed, 04 Mar 2026 08:33:34 +0000

Agree, but a significant point missed in the article is that of data vulnerability. with E2EE the company db is useless to an external attacker.

For some companies (eg facebook, google, tiktok) i would be mostly worried about the company itself being untrustworthy. For others I would be mostly worried about the company being vulnerable.

New comment by afiori in "TikTok will not introduce end-to-end encryption, saying it makes users less safe"

afiori — Wed, 04 Mar 2026 08:08:34 +0000

because most implementations are not going to be like that.

New comment by afiori in "Don't use passkeys for encrypting user data"

afiori — Sat, 28 Feb 2026 06:30:36 +0000

Also a password could be the passkey, the passkey protocol is basically a way to send to a server an authenticated public key. The client could deterministically convert passwords to key-pairs and authenticate with those

New comment by afiori in "What Is OAuth?"

afiori — Sat, 21 Feb 2026 20:11:26 +0000

Imo the need to register an app with an oauth provider is a plus

New comment by afiori in "Farewell, Rust for web"

afiori — Fri, 20 Feb 2026 09:27:51 +0000

not really in-topic but constant-time crypto primitives are considered hard for any compiled language with a lot of optimizations