Hacker News: furstenheim

New comment by furstenheim in "We shouldn't have needed lockfiles"

furstenheim — Wed, 06 Aug 2025 19:28:22 +0000

> But if you want an existence proof: Maven. The Java library ecosystem has been going strong for 20 years, and during that time not once have we needed a lockfile. And we are pulling hundreds of libraries just to log two lines of text, so it is actively used at scale.

Maven and Java is simply broken when dealing with transitive dependencies.

I've been hit so many times with running time exception "MethodNotFound" cause two libraries have the same transitive dependency and one version gets picked over the other one.

New comment by furstenheim in "Show HN: I made an online Unicode Cuneiform digital clock"

furstenheim — Wed, 18 Jun 2025 10:34:05 +0000

Sumertime! Great naming choice!!

New comment by furstenheim in "Don't Bother with Vibe Coding"

furstenheim — Wed, 02 Apr 2025 15:29:21 +0000

It ends up with AIs chatting between them over the phone in like 1 year top

New comment by furstenheim in "Show HN: Nue – Apps lighter than a React button"

furstenheim — Tue, 01 Apr 2025 08:14:42 +0000

Not the discussion, but SPAs are fundamentally safer against XSS, in the sense that data and code have different paths.

New comment by furstenheim in "Hidden Messages in Emojis and Hacking the US Treasury"

furstenheim — Tue, 18 Mar 2025 06:43:35 +0000

100%.

Btw, even using psql directly allows binding parameters https://www.postgresql.org/docs/current/app-psql.html

My Fears about AI

furstenheim — Sun, 09 Mar 2025 16:03:47 +0000

Article URL: https://medium.com/@furstenheim/my-fears-about-ai-f174f9bacbbe

Comments URL: https://news.ycombinator.com/item?id=43310380

Points: 1

# Comments: 0

New comment by furstenheim in "How Much Are LLMs Boosting Real-World Programmer Productivity?"

furstenheim — Sat, 08 Mar 2025 21:08:52 +0000

I find it useful to find esoteric APIs, like reflection, which normally has 100 methods and hard to find the right one

New comment by furstenheim in "Postgres Just Cracked the Top Fastest Databases for Analytics"

furstenheim — Sat, 08 Mar 2025 15:02:38 +0000

ACID is good and it has an implementation cost (vacuum for example). When doing analytics you do not care for ACID

New comment by furstenheim in "An Ode to TypeScript Enums"

furstenheim — Sun, 02 Mar 2025 19:17:03 +0000

Lack of LSP support looks really bad in the article proposed solution :/.

But const enum seems to have several pitfalls. https://www.typescriptlang.org/docs/handbook/enums.html

New comment by furstenheim in "Time Warp: Delayed-choice quantum erasure"

furstenheim — Thu, 27 Feb 2025 15:10:38 +0000

It "can" be done. Some photons leaving the earth a thousand years ago. Bouncing off a mirror in some distant planet and allowing us to see two thousand years into the past

New comment by furstenheim in "Frequent social media use tied to higher levels of irritability"

furstenheim — Thu, 23 Jan 2025 14:41:16 +0000

Yeah, I want a phone like that. There's definitely a market

Making rat skin transparent with safe chemical

furstenheim — Wed, 11 Sep 2024 16:42:54 +0000

Article URL: https://francis.naukas.com/2024/09/10/un-colorante-alimentario-vuelve-transparente-la-piel-de-un-animal-vivo/

Comments URL: https://news.ycombinator.com/item?id=41513044

Points: 1

# Comments: 0

New comment by furstenheim in "My Favorite Algorithm: Linear Time Median Finding (2018)"

furstenheim — Thu, 25 Jul 2024 10:20:04 +0000

Floyd Ryvest also does the job . A bit more efficient IIRC.

However I never managed to understand how it works.

https://en.m.wikipedia.org/wiki/Floyd%E2%80%93Rivest_algorit...

New comment by furstenheim in "Don’t try to sanitize input, escape output (2020)"

furstenheim — Sun, 14 Jul 2024 07:49:14 +0000

Wasn't there this case of a security issue coming from abusing different parsers, in different places? Server, client, or different browsers

New comment by furstenheim in "Don’t try to sanitize input, escape output (2020)"

furstenheim — Sun, 14 Jul 2024 07:37:41 +0000

There's another one that works 100% of the time.

Do client server rendering. Send HTML, then query backend for content. Something like p.textContent = ... It's safe.

It's pretty much the same as what a prepared statement does in SQL, send data and code in different channels

New comment by furstenheim in "Bun is much faster than Node.js 22 at decoding Base64 but both rely on same lib"

furstenheim — Thu, 20 Jun 2024 11:30:04 +0000

Curious, does that affect the complexity of string concatenation? As far as I remember V8 "uses" ropes, so string concatenation was constant time. Not O(n) like java. Which saves a lot of headaches

New comment by furstenheim in "Here comes the Muybridge camera moment but for text"

furstenheim — Mon, 03 Jun 2024 05:03:34 +0000

100%, maybe intelligence is not as mysterious and extraordinary as we thought

New comment by furstenheim in "CEOs could easily be replaced with AI, experts argue"

furstenheim — Mon, 03 Jun 2024 05:00:28 +0000

that could be replaced with an AI...

New comment by furstenheim in "Fear makes you a worse programmer (2014)"

furstenheim — Mon, 08 Apr 2024 21:49:50 +0000

Take a look at hexagon pattern from Spotify. Once you start testing the user contract of your services against real databases (testcontainners is a good option), then you can change all the internals and be sure that the externals will work.

https://engineering.atspotify.com/2018/01/testing-of-microse...

New comment by furstenheim in "Xzbot: Notes, honeypot, and exploit demo for the xz backdoor"

furstenheim — Mon, 01 Apr 2024 21:50:41 +0000

I actually wondered how many packages they harassed until they got access to one such