<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: pianoben</title><link>https://news.ycombinator.com/user?id=pianoben</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Fri, 24 Apr 2026 21:35:20 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=pianoben" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by pianoben in "Axios compromised on NPM – Malicious versions drop remote access trojan"]]></title><description><![CDATA[
<p>The semantics are very relevant, since you presented it as a supply-chain attack.  If you call a library vulnerability a supply-chain attack, then your argument has lost coherence.<p>> The OC is somehow under the illusion...<p>Avoiding package managers with shitty policies <i>is</i> the silver bullet for this attack vector.  I get that it can be useful in the moment to retract published artifacts, or update them in-place, or run some code after your artifact is downloaded, but all of these are false economies in our hostile environment.</p>
]]></description><pubDate>Tue, 31 Mar 2026 15:14:26 +0000</pubDate><link>https://news.ycombinator.com/item?id=47588561</link><dc:creator>pianoben</dc:creator><comments>https://news.ycombinator.com/item?id=47588561</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47588561</guid></item><item><title><![CDATA[New comment by pianoben in "Axios compromised on NPM – Malicious versions drop remote access trojan"]]></title><description><![CDATA[
<p>Log4Shell was hardly a supply-chain attack - just a latent bug in a widely-used library.  That can happen anywhere.<p>Maven to this day represents my ideal of package distribution.  Immutable versions save <i>so much trouble</i> and I really don't understand why, in the age of left-pad, other people looked at that and said, "nah, I'm good with this."</p>
]]></description><pubDate>Tue, 31 Mar 2026 05:13:30 +0000</pubDate><link>https://news.ycombinator.com/item?id=47582997</link><dc:creator>pianoben</dc:creator><comments>https://news.ycombinator.com/item?id=47582997</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47582997</guid></item><item><title><![CDATA[New comment by pianoben in "Our commitment to Windows quality"]]></title><description><![CDATA[
<p>As if Apple doesn't berate you with unskippable notifications to sign up for iCloud, buy more space, etc etc?</p>
]]></description><pubDate>Fri, 20 Mar 2026 21:09:02 +0000</pubDate><link>https://news.ycombinator.com/item?id=47460592</link><dc:creator>pianoben</dc:creator><comments>https://news.ycombinator.com/item?id=47460592</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47460592</guid></item><item><title><![CDATA[New comment by pianoben in "Illinois Introducing Operating System Account Age Bill"]]></title><description><![CDATA[
<p>I don't see the incongruity.  It's one thing to mandate that retailers not sell alcohol to children, but it's quite another to require that all computers must report on the identities of their users just so that children don't see porn.  The proper analogy would be require verification on the part of the porn sellers.</p>
]]></description><pubDate>Tue, 17 Mar 2026 22:26:55 +0000</pubDate><link>https://news.ycombinator.com/item?id=47419206</link><dc:creator>pianoben</dc:creator><comments>https://news.ycombinator.com/item?id=47419206</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47419206</guid></item><item><title><![CDATA[New comment by pianoben in "Illinois Introducing Operating System Account Age Bill"]]></title><description><![CDATA[
<p>If parents want that solution, then the proper thing is for someone to build that solution and make a fortune selling it, IMO.</p>
]]></description><pubDate>Tue, 17 Mar 2026 21:49:02 +0000</pubDate><link>https://news.ycombinator.com/item?id=47418802</link><dc:creator>pianoben</dc:creator><comments>https://news.ycombinator.com/item?id=47418802</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47418802</guid></item><item><title><![CDATA[New comment by pianoben in "Illinois Introducing Operating System Account Age Bill"]]></title><description><![CDATA[
<p>> while ignoring the fact that these laws provide tools allowing parents to do just that<p>These tools are called "parental controls" and <i>already exist</i> - we don't need laws to compel their production.<p>...unless, of course, the true aim is to use this as a beachhead for further expansion of privacy-violating requirements.<p>You write this off as a "slippery-slope" argument, but given that there are already quite a few tools that do what this law aims for, what's the point?</p>
]]></description><pubDate>Tue, 17 Mar 2026 18:59:23 +0000</pubDate><link>https://news.ycombinator.com/item?id=47416723</link><dc:creator>pianoben</dc:creator><comments>https://news.ycombinator.com/item?id=47416723</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47416723</guid></item><item><title><![CDATA[New comment by pianoben in "Illinois Introducing Operating System Account Age Bill"]]></title><description><![CDATA[
<p>Or, and hear me out, _maybe our computers shouldn't spy on us in the first place_?</p>
]]></description><pubDate>Tue, 17 Mar 2026 18:53:14 +0000</pubDate><link>https://news.ycombinator.com/item?id=47416642</link><dc:creator>pianoben</dc:creator><comments>https://news.ycombinator.com/item?id=47416642</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47416642</guid></item><item><title><![CDATA[New comment by pianoben in "Perlsky Is a Perl 5 Implementation of an at Protocol Personal Data Server"]]></title><description><![CDATA[
<p>In the finest of artistic traditions.<p>Reminds me of the story of one of my favorite pieces of classical music, 'Scarbo' by Maurice Ravel.  It's one of the most technically difficult pieces played today.  Ravel wrote it because he 'wanted to make a caricature of romanticism. Perhaps it got the better of me.'.</p>
]]></description><pubDate>Tue, 17 Mar 2026 16:42:12 +0000</pubDate><link>https://news.ycombinator.com/item?id=47415077</link><dc:creator>pianoben</dc:creator><comments>https://news.ycombinator.com/item?id=47415077</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47415077</guid></item><item><title><![CDATA[New comment by pianoben in "Kotlin's rich errors: Native, typed errors without exceptions"]]></title><description><![CDATA[
<p>Maybe I'm wrong about the state of Java in Android today - it's been a few years since I did that work full-time.  But I do remember when Kotlin broke on to the scene in 2015, and most of us were <i>thrilled</i> to finally move beyond Java 7!  The embrace of a non-Java language was grassroots and genuine; Google's adoption came several years later.<p>J++ though, now <i>that</i> is a blast from the past!  I think I still have a J# book from my student days, somewhere :)</p>
]]></description><pubDate>Fri, 23 Jan 2026 22:38:24 +0000</pubDate><link>https://news.ycombinator.com/item?id=46738955</link><dc:creator>pianoben</dc:creator><comments>https://news.ycombinator.com/item?id=46738955</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46738955</guid></item><item><title><![CDATA[New comment by pianoben in "Kotlin's rich errors: Native, typed errors without exceptions"]]></title><description><![CDATA[
<p>Android folks have good reason to have anti-Java bias.  Their bias, as it happens, is against <i>old</i> Java, which they are constrained to use as fallout from the Oracle lawsuits of yore.  Kotlin breathed new life into Android in a meaningful way.<p>On backend teams, I've not personally encountered much anti-JVM bias - people seem to love the platform, but not necessarily the language.<p>(yes I <i>know</i> there's desugaring that brings a little bit of contemporary Java to Android by compiling new constructs into older bytecode, but it's piecemeal and not a general solution)</p>
]]></description><pubDate>Fri, 23 Jan 2026 21:35:10 +0000</pubDate><link>https://news.ycombinator.com/item?id=46738250</link><dc:creator>pianoben</dc:creator><comments>https://news.ycombinator.com/item?id=46738250</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46738250</guid></item><item><title><![CDATA[New comment by pianoben in "Kotlin's rich errors: Native, typed errors without exceptions"]]></title><description><![CDATA[
<p>> what about interop with Java?<p>From the proposal discussion[0], the runtime representation on the JVM will just be `Object`.<p>[0]: <a href="https://github.com/Kotlin/KEEP/discussions/447#discussioncomment-14230662" rel="nofollow">https://github.com/Kotlin/KEEP/discussions/447#discussioncom...</a></p>
]]></description><pubDate>Fri, 23 Jan 2026 18:23:37 +0000</pubDate><link>https://news.ycombinator.com/item?id=46735841</link><dc:creator>pianoben</dc:creator><comments>https://news.ycombinator.com/item?id=46735841</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46735841</guid></item><item><title><![CDATA[New comment by pianoben in "Two recently found works of J.S. Bach presented in Leipzig [video]"]]></title><description><![CDATA[
<p>complexity in software is invisibly-preceded with "unnecessary", and usually indicates software that is difficult to maintain or even to verify its behavior.  A really cool software architecture can scratch a similar itch as a good fugue, but that's not its typical function nor is it the way we usually engage with software professionally.<p>Bach's complexity, incidentally, is seldom "for its own sake" - the pieces all fit together beautifully and without extraneous movement.  Contrast that with some lesser works by later composers like Liszt, where you often get the sense that a given passage could be reduced or removed without harming the work.</p>
]]></description><pubDate>Thu, 20 Nov 2025 22:48:34 +0000</pubDate><link>https://news.ycombinator.com/item?id=45998942</link><dc:creator>pianoben</dc:creator><comments>https://news.ycombinator.com/item?id=45998942</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45998942</guid></item><item><title><![CDATA[New comment by pianoben in "Project Gemini"]]></title><description><![CDATA[
<p>Gemini was so much fun during lockdown - I loved the distraction of a new simple protocol, and the challenge of writing a gui client for it.<p>Can't say I'm surprised that it hasn't taken the world by storm, but it's still a cozy part of the Internet.</p>
]]></description><pubDate>Mon, 17 Nov 2025 16:55:16 +0000</pubDate><link>https://news.ycombinator.com/item?id=45955428</link><dc:creator>pianoben</dc:creator><comments>https://news.ycombinator.com/item?id=45955428</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45955428</guid></item><item><title><![CDATA[New comment by pianoben in "How we replaced Elasticsearch and MongoDB with Rust and RocksDB"]]></title><description><![CDATA[
<p>Lol I "love" that the first benefit this company lists in their jobs page is "In-Office Culture".  Do people actually believe that having to commute is a <i>benefit</i>?</p>
]]></description><pubDate>Sat, 09 Aug 2025 06:32:40 +0000</pubDate><link>https://news.ycombinator.com/item?id=44844510</link><dc:creator>pianoben</dc:creator><comments>https://news.ycombinator.com/item?id=44844510</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=44844510</guid></item><item><title><![CDATA[New comment by pianoben in "Parse, Don’t Validate – Some C Safety Tips"]]></title><description><![CDATA[
<p>The trouble I have with this approach (which, conceptually, I agree with) is that it's damned hard to <i>do</i> anything with the parse results.  Want to print that email_t?  Then you're right back to char*, unless you somehow write your own I/O system that knows about your opaque conventions.<p>So you say, okay, I'll make an `email_to_string` function.  Does it return a copy or a reference?  Who frees it?  etc, etc, and you're back to square one again.  The idea is to keep char* and friends at "the edge", but I've never found a way to really achieve that.<p>Could just be my limitations as a C programmer, in which case I'd be thrilled to learn better.</p>
]]></description><pubDate>Sun, 13 Jul 2025 05:15:48 +0000</pubDate><link>https://news.ycombinator.com/item?id=44547721</link><dc:creator>pianoben</dc:creator><comments>https://news.ycombinator.com/item?id=44547721</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=44547721</guid></item><item><title><![CDATA[New comment by pianoben in "How long it takes to know if a job is right for you or not"]]></title><description><![CDATA[
<p>I don't mean to say one of us has better bona-fides, only that there is an existence proof to the contrary of your post.  You claim that rails' lack of discipline promotes unmaintainable code shepherded by empire-builders; I claim that this is not always so.  I gave the numbers I did to emphasize that rails (and rails shops) can succeed even at that scale.<p>Not sure what I said that came off as an attack on you or your standing.  Not my intent.</p>
]]></description><pubDate>Thu, 12 Jun 2025 05:29:48 +0000</pubDate><link>https://news.ycombinator.com/item?id=44254551</link><dc:creator>pianoben</dc:creator><comments>https://news.ycombinator.com/item?id=44254551</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=44254551</guid></item><item><title><![CDATA[New comment by pianoben in "How long it takes to know if a job is right for you or not"]]></title><description><![CDATA[
<p>One of the largest codebases I've ever worked on, generating billions in revenue every year to this day, is in Rails.  Over a thousand hands have touched it, and none of the original people are still around to hold an empire.<p>I'm with you on the general lack of discipline <i>enforced</i> by Rails; this codebase isn't fun to maintain, precisely for that reason.  All the same, I don't think your critique is fair or even that accurate.<p>But that's from my POV working at bigger companies.  Maybe it looks different as a freelancer for smaller shops.</p>
]]></description><pubDate>Thu, 12 Jun 2025 04:55:50 +0000</pubDate><link>https://news.ycombinator.com/item?id=44254419</link><dc:creator>pianoben</dc:creator><comments>https://news.ycombinator.com/item?id=44254419</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=44254419</guid></item><item><title><![CDATA[New comment by pianoben in "Microsoft Office migration from Source Depot to Git"]]></title><description><![CDATA[
<p>Of course that's only half the story - Microsoft invents amazing things, and promptly fails to capitalize on them.<p>AJAX, that venerable piece of kit that enabled <i>every dynamic web-app ever</i>, was a Microsoft invention.  It didn't really take off, though, until Google made some maps with it.</p>
]]></description><pubDate>Thu, 12 Jun 2025 04:47:21 +0000</pubDate><link>https://news.ycombinator.com/item?id=44254388</link><dc:creator>pianoben</dc:creator><comments>https://news.ycombinator.com/item?id=44254388</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=44254388</guid></item><item><title><![CDATA[New comment by pianoben in "Microsoft Office migration from Source Depot to Git"]]></title><description><![CDATA[
<p>I don't know that they <i>ever</i> used it internally, certainly not for anything major.  If they had, they probably wouldn't have sold it as it was...<p>Can't explain TFS though, that was still garbage internally and externally.</p>
]]></description><pubDate>Thu, 12 Jun 2025 04:37:56 +0000</pubDate><link>https://news.ycombinator.com/item?id=44254359</link><dc:creator>pianoben</dc:creator><comments>https://news.ycombinator.com/item?id=44254359</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=44254359</guid></item><item><title><![CDATA[New comment by pianoben in "From: Steve Jobs. "Great idea, thank you.""]]></title><description><![CDATA[
<p>Yep!  A formative experience of my childhood was working out how to type SMTP commands over telnet and sending mail from billg@microsoft.com to my dad.  Such "opportunities" vanished decades ago.<p>Fun times :)</p>
]]></description><pubDate>Thu, 08 May 2025 19:38:31 +0000</pubDate><link>https://news.ycombinator.com/item?id=43930447</link><dc:creator>pianoben</dc:creator><comments>https://news.ycombinator.com/item?id=43930447</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=43930447</guid></item></channel></rss>