Hacker Newsnew | past | comments | ask | show | jobs | submit | kvuj's commentslogin

There is probably greater joy in quickly making a tool to solve a problem you face than spending months if not years trying to convince glibc maintainers that your redesign will help a majority of users all the while conforming to their demands.


Of course it's more fun to create a new micro-library, that's the main reason for me to respect the people who maintain the old libraries instead of just writing ,,it sucks''.


The cargo.lock file is 2200+ lines long. Did they spend a reasonable amount of time auditing these dependencies?


That's 238 dependencies (counting multiple versions of the same crate).

* Many of them are part of families of crates maintained by the same people (e.g. rust-crypto, windows, rand or regex).

* Most of them are popular crates I'm familiar with.

* Several are only needed to support old compiler versions and can be removed once the MSRV is raised

So it's not as bad as it looks at first glance.


What would be a reasonable amount of time to audit the dependencies?


I would let them decide based on their security policy.

If Microsoft states that they don't have any for a project like this, I would be wary of taking it too seriously.


They ran it through Copilot which gave it the all-clear.


[flagged]


Nope, that's a very fair poke at MS. They've gone so far into AI adoption that it's become absurd.

- They have VPs posting on Linkedin about rewriting existing code using AI and adhering to arbitrary metrics of a x% rewrite and laying off y% of engineers that used to work on it.

- Renaming one of their major flagship product lines (MS Office) to (MS Copilot Apps 365).

- Forcing AI features on users despite not wanting it, and overriding OS configuration that should turn it off.

- Executives publicly shaming the general public for not wanting "all the AI all the time".


  grep 'name = ' ms-litebox-Cargo.lock | wc -l
     238
edit:

  grep 'name = ' ms-litebox-Cargo.lock | sort -u | wc -l
     221


I've always done 'sort | uniq'. Never bothered to check for the the unique flag to sort. Although 'uniq -c' is quite nice to have.

       -c, --count
              prefix lines by the number of occurrences


Yeah, to see the packages with multiple versions:

  grep 'name = ' ms-litebox-Cargo.lock | sort | uniq -c | grep -v '1 name' | sort -n
Package windows-sys has the highest number of versions included, 3: 0.59.0, 0.60.2, and 0.61.2.

Edit: Also, beware of the unsorted uniq count:

  cat <<EOF | uniq -c
  > a
  > a
  > b
  > a
  > a
  > EOF
   2 a
   1 b
   2 a


grep -v '1 name' excludes 11, 21, etc., but I take your point.


Given, you know, Microsoft, I'd demand proof even if they said they did.


And get a salary that is 1/3 my current with lower purchasing power? No thank you, I'm able to select healthy food from a grocery store.


I think you're being disingenuous. The author could have made this tutorial for the 90% of people that do not have these concerns. Time isn't free and projects people work on in their spare time shouldn't have these snarky comments in response.

> Am I being harsh? Well where's the tutorial that teaches people how to do it properly? Where do people actually learn the right way if not here?

I would love to read your blog post on how to do so! After all, since you seem to imply that time is free for everyone, you shouldn't have any problem making that blog post.


Leaving accessibility out of an UI library tutorial is like leaving security out of an API tutorial. It’s perfectly possible to build something that’s probably not a problem if you’re building a toy application, but if you haven’t done it right from the start it will absolutely bite you hard, and it’ll broadly be quicker to start over from scratch than try to fix the mess.


The math: There are N tutorials written per year. There are M accessibility experts willing and able to write tutorials. N >> M by orders of magnitude. The ask is for M people to produce N parallel accessible versions of everything, forever, as a prerequisite for being allowed to point out the gap exists.


This doesn't make sense. Why do M people need to write N accessibility tutorials to point out the gap in accessibility support? The same isn't true for localisation for example.


The same Ukraine that has taken 175 billion USD in aid from the US?


Been given aid*, they didn't rob your banks.


And is now getting betrayed?

Yes.


Awesome! Finally putting back "Hacker" in "Hacker News".


> That's the very force of the reddit hivemind. I have no interest in /r/antiwork nor their ideologies, but they kept popping up on /r/all, so they get a constant influx of people aligned with the reddit mean opinion, which in turn changes the original community.

That's what I like about 4chan. In a sea of ungodly acidic garbage lies a golden heart of contrarianism. The posters will argue for a side one day, and 2 hours later will vehemently adopt opposite arguments. Some of the best leftist arguments I have ever read came from /pol/.

4chan argues for the sake of arguing, and I think that is absolutely beautiful in today's environment of everyone taking everything so seriously.


It probably has to do with the post incentives. On Reddit, if you get downvoted into oblivion, your post disappears even if you get thousands of comments. On 4Chan, the more active the post, the more it gets bumped to the top. So being inflammatory on one makes your post disappear, and on the other it sends it to the top of the feed.


Reddit is grossly overmoderated. You have a vote system that enforces a hivemind by itself, on top of a normal moderation system that deletes an enormous amount of content, on top of automated moderation banning posts if you use this or that word, on top of a shadowban system on top of a global content policy system.

The result is that only stuff that the majority of users allow will get displayed.


> Reddit is grossly overmoderated

I think bigger problem is poor moderation. Most of the mods are driven by some agenda and even propaganda.

Instead of focusing on quality, they focus on how their subreddit content can be aligned to their agenda.

Any user who doesn't comply, gets banned. Since roughly only 1% user actively engage in a subreddit, update macha end with Eco chamber.


This explains Twitter too. Even before the infamous trend-boosting algorithms get involved, being more controversial gets you more retweets and more chances to be seen. Tumblr used to be the same way and its users had similarly controversial/aggressive politics.


That's why controversial and new are the only worthwhile comment sortings on Reddit.


I used to love the 4chan-style contrarian attitude until, in high school people I knew were killed in Iraq. Then I started to realize that those kinds of nihilist attitudes have real-world consequences. Since then, that attitude has become mainstream (or perhaps just my awareness of it) and following has been a constant trail of death and misery. I can't not take it seriously anymore when my friends and loved ones are dying and turning on each other.


If we're assigning blame for nihilism and Iraq, let's not forget that WaPo, NYT, CNN, ABC, FOX and the rest of the pro-war media bear orders of magnitude more responsibility than fucking 4chan.


Oh I fully agree, that's what I mean by that attitude becoming more mainstream. Just growing up I saw that expressed more fully on 4chan before I saw it being adopted elsewhere.


4chan didn't even exist when we invaded Iraq. And the justification for invading Iraq was anything but nihilism, it was a bunch of patriotism and xenophobia wrapped in religious crusade. By the time we invaded we had killed (and acknowledged killing) a million children due to sanctions.

I can't make the connection you make. When people were protesting against the Iraq War, they were told that they didn't believe in anything. I don't understand personal tragedy as an argument against 4chan; everybody you know is going to die eventually, and virtually everybody you're speaking to has known two people who died prematurely and preventably. I, in particular, don't understand people who traveled to kill instead being killed as an argument against humor.

The idea that a 4chan that didn't exist created Judith Miller is bizarre.


iPhone September filled the internet up with people that never had "don't believe a single thing you read there" driven into their skulls. 4chan posting was and is a performance act. The attitude isn't the problem, pretending like context isn't a thing is the problem.

When the internet media and regular media merged one of two things had to happen. Either expose how much of a performance act the old school media was from jump street. Or make the idea of believing everything online at first pass a reasonable position to have.

Q anon grew and continues to exist precisely because it is in the best interests of "respectable" media outlets to not teach media literacy to their consumers.


I feel like contrarian techniques adopted by sane mind at cooperatively manageable scale (of zero) is great, but IMO users of reactive contrarianism that eventually emerges just deserve downvotes as external means of value judgement. However that leads to communal polarization, and to solve that, regular exposure events would be necessary ... I admire Reddit, at least for its architecture.


As far as I can tell, 4chan is vehemently against the current neoliberal wars. They laughed their asses off at the US abandoning Afghanistan and are questioning why the NATO has to be in Ukraine at all. Perhaps I misunderstood your tone.


That definitely wasn't the impression I got back when I frequented it but I'm glad if they're more antiwar now.


I am not familiar at all with 4chan and its functioning, but if I remember correctly there is no "they" in 4chan, similar to the "Anonymous" group... everyone can go into 4chan, sometimes a radical leftist will go there, next day a radical rightist will post. Is there actually a "cultural leaning" in that site?


Of course there are a cultural leanings at every "place". What kind of people frequent that place?

HN is no different. Anyone can come here and make any argument.


> 4chan is vehemently against the current neoliberal wars.

I'm sorry, what exactly makes the current wars neoliberal?


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: