1. 2

    I’m sitting in an airport drinking waiting for my flight home from vacation, so I can proudly say I didn’t produce anything in the last week, but rather left behind a lot of stress.

    This next week I hope to pick up my rust CoAP library again. That’s a project I’ve been working on off and on again for quite awhile now and it’s in a state where I can kinda claim it “works”, it’s just not anything anyone would want to use. Now that the tokio updates are out, I want to actually start working on making it a useful library for others.

    At work (SmartThings), we’re preparing for the release of a rewrite of some of the LAN interface code, so I’m sure there will be a handful of coredumps from alpha hubs waiting for me to diagnose when I get back. Other than that, time will tell.

    1. 32

      I don’t see why this progress bar should be obnoxiously put at the top of the page. It’s cool if you wanna do a donation drive but don’t push it in the face of everybody who comes here. Honestly at first I thought this was a bar for site expense. Then I realised it’s to ‘adopt’ an emoji.

      1. 7

        Lobsters isn’t a daily visit for most readers, probably even for most users. They can’t see it to join in if there isn’t anything visible for it, and it has an id for adblocking if you prefer not to see it.

        1. 22

          Personally a check this site quite regularly on my mobile device… which doesn’t have an ad-blocker.

          1. 13

            That sounds awful. If you’re an android user, normal uBlock Origin works on Firefox for Android just like it does on desktop. :)

            1. 3

              Or use Block This!, which blocks ads in all apps.

              1. 3

                Oh, that’s a cool little tool. Using a local VPN to intercept DNS is a neat trick. Unfortunately doesn’t help with in this case because it blocks requests to domains and not elements on a page via CSS selectors.

                That does make me want to actually figure out my VPN to home for my phone and setup a pi-hole, though.

              2. 2

                Ohh! Good to know, thanks.

              3. 2

                Firefox 57+ has integrated adblocker nowadays, on both desktop and mobile; plus, there’s also Brave.

              4. 27

                That is still annoying that I need to setup my adblocker to fix lobste.rs. So much for all the rant articles about bad UX/UI in here.

                1. 11

                  maybe one could just add a dismiss button or sometimes like that? I don’t find it that annoying, but I guess it would be a pretty simple solution.

                  1. 1

                    I concur, either a client side cookie or session variable.

                    1. 1

                      Well, yeah… that’s how you could implement it, and I guess that would be the cleanest and simplest way?

                  2. 2

                    It’d be great to see data about that! Personally I visit daily or at least 3 times a week. Lack of clutter and noise is one of the biggest advantages of Lobsters. And specifically, I looked at the link, and I have no idea who this Unicode organization is, or their charitable performance, or even if they need the money. I’d imagine they are mostly funded by the rich tech megacorps?

                    1. 1

                      [citation needed] ;-)

                    2. 3

                      Adopting an emoji isn’t the end goal: the money goes to Unicode, which is a non-profit organization that’s very important to the Internet.

                      1. 5

                        If this bar actually significantly annoys you, I’m surprised you haven’t literally died from browsing the rest of the internet.

                      1. 5

                        Stable (even if “preview”) rustfmt!

                        1. 1

                          Is this a rewrite of the old rustfmt?

                          1. 6

                            Nah, it’s the same one.

                            What happened was that rustfmt was moved into the distribution, but this process made it nightly-only for a while. It’s back now.

                        1. 8

                          I had a lot of trouble sleeping this weekend which means I actually ended up working on something. I put a bunch of work into my Neocities CLI interface and (eventually) rust library: https://github.com/azdle/neo

                          It mostly works as is now, but it’s incredibly rough around the edges and has zero documentation. I’m now hoping to keep up the momentum on it and get at least the CLI really polished off. I’ve struggled in the past with motivating myself to work on things, even when I already really want to, and I’m hoping that having something that I’ve gotten to a solid 1.0 that I can be proud of will be addictive to me.

                          So, on that note, if you have an CLI tools that you really enjoy using, post em here, I’m looking for ideas to steal to make this a delightful tool.

                          1. 1

                            If you highlight the REDACTED “black rectangles” in the text, you can see the name of the city.

                            So author is actually using the name of the city. Uh, oh.

                            1. 6

                              At the very end there’s also a button to un-redact those, so the author obviously doesn’t really think there’s an issue using the name.

                              1. 3

                                However, the chance that the city will actually go against a civilian for his usage of the city’s name still seems a little ridiculous, doesn’t it?

                                Except, this actually happened to an owner of a Facebook page with ~14k page

                                And, yes, there is a button, along with:

                                Since this decision defies all logic, and since I have already broken this decision unintentionally a lot of times, I have decided to add a button on the bottom of this article. By clicking on it, this article will no longer be censored, which will make me break the city’s decision exactly 38 times.

                                Completely aware of the possible legal consequences of me mentioning the word […], I encourage you to click that button. After doing so, this article will stop being censured.

                                Therefore, I think the author there is an issue with the law, and defies it at his scale.

                            1. 5

                              I really like everything in this post except for the fact that the author tries to coin “Sensible Disclosure”. Partly because I don’t feel that is distinct enough from Responsible Disclosure and partly because it has the same problem, it uses a “good” word. (As opposed to a word like “coordinated” which is neutral.) I think it would have been better off advocating for not using a term like responsible at all.

                              However, that’s a really small part of the post and I think the rest of the points made a important.

                              (Meant to submit this comment sooner, got distracted trying to track down a bug in lobsters before realizing I don’t understand rails.)

                              1. 24

                                It’s important to note that this article refers to the Docker company being dead as opposed to the software. It would be quite the overstatement to say that the software is dead given how many people use Docker for deployment, CI and development.

                                Personally, I’m not worried. Even if the Docker company went under there is too much momentum behind the software. If the company stopped supporting the software, there’d be a hard-fork, a new Dockerhub and things would go on.

                                1. 4

                                  It’s important to note that this article refers to the Docker company being dead as opposed to the software.

                                  The blog title is Docker, Inc is Dead, which is accurate. However, I think, OP did not do same while submitting on Lobsters. I requested a title change suggestion.

                                  1. 9

                                    I’m fairly certain that the article’s title also was different a while ago.

                                    1. 2

                                      The blog post’s title definitely was just “Docker is Dead” when this was first submitted, I checked when I was debating suggesting a different title here earlier.

                                  2. 2

                                    Yeah. Stuff like rubygems.org lives on sponsorship from many companies, rather than a backing company. It’ll be fine. I can’t see how Docker the company matters anymore either.

                                    1. 1

                                      There’s no mention of what will happen with all the OSS code and docker hub. I realize this isn’t an official press release, but I wish it was still mentioned. Do the current Docker owners plan on moving all their public/oss assets into a non-profit like Mozilla and keep it community driven? Do various industries plan on funding it as an open source initiative? What does this mean for Open Container and what working group will agree on the future of docker/containers?

                                    1. 12

                                      Why oh why does this article require JavaScript to display images? HTML has a perfectly useful tag for that: img.

                                      Pages like this are breaking the Web.

                                      1. 4

                                        Interestingly it seems to work if you have JS fully disabled, just not when you block scripts from loading via addons. For each image it has:

                                        <noscript><img src="[...]"  /></noscript>
                                        
                                      1. 3

                                        So, silly question, has anyone published actual production metrics before/after switching to/from Oracle recently?

                                        That’s not a benchmark, right?

                                        1. 12

                                          Any interest in a crustacean private leaderboard?

                                          1. 9

                                            I guess competition is healthy, but I have an additional suggestion: crustacean private help board: I don’t know how we’d do it, one big “ask” story/thread would be difficult, we could set up a github project for it and have questions as “issues” perhaps? We could have a wiki on it too.

                                            EDIT:

                                            Also, the idea of a lobste.rs joint github additionally appeals to me because I know we all dabble in various esoteric languages and we could have a “rosetta code” type of project where we solve the problems in different languages, and it would be fun to compare these solutions across languages.

                                            EDIT:

                                            https://github.com/a-red-christmas

                                            In case anyone thinks its a good idea … please join up

                                            1. 4

                                              Sounds like fun to me, I’m azdle on github too if you’re adding people.

                                              I agree with @gerikson about not having a daily thread and I think one monster thread would quickly get unwieldy. I created a #lobsters-advent on freenode that we can for discussion.

                                              1. 3

                                                The AoC subreddit is a good place to look for help and tips.

                                                I don’t like the idea of “polluting” Lobsters with a daily question thread.

                                                I love the idea of a shared code repo.

                                                1. 3

                                                  Please add gustafe on Github!

                                                  1. 3

                                                    yumaikas on github. I’d love to join.

                                                    1. 3

                                                      Count me in. trevmex on GitHub.

                                                      1. 2

                                                        The github web interface doesn’t seem to have a ‘request to join’ button. I think you have to add people manually.

                                                        1. 4

                                                          JKowalsky on Github as well, I’d love to join as well!

                                                          1. 4

                                                            tftio

                                                            1. 3

                                                              daveloyall

                                                              1. 3

                                                                NattyNarwhal, not sure if I’ll do it, but I’d definitely consider it.

                                                              2. 2

                                                                Would you mind adding bpollack?

                                                                1. 2

                                                                  Cool. I’ll add my Haskell solutions :)

                                                                  1. 1

                                                                    (Or at least I will if you add PhilArmstrong to the project :) )

                                                                  2. 1

                                                                    I’d love to join! My username is Vaelatern.

                                                                    1. 1

                                                                      I’ve invited you!

                                                                      1. 1

                                                                        And I’ve contributed my clojure solutions!

                                                                  3. 2

                                                                    I’d be up for it!

                                                                    1. 1

                                                                      Post your ‘join code’?

                                                                      1. 1

                                                                        Will do asap!

                                                                      1. 9

                                                                        Also PostmarketOS, which I’m really hopful for.

                                                                        1. 5

                                                                          Also microG, but still it seems further parts of the OS are talking to Google, cf. a forum post on heise.de (in German).

                                                                      1. 4

                                                                        Work has a release in customer beta and we’ve found a few bugs, so mainly working on squashing those mixed with triaging other incoming reports, and hopefully squeezing in some cleanup stuff for a later release.

                                                                        I recently found out that https://webscript.io is shutting down, which I think is a really big shame, when I went to go re-enable my account. So despite it probably being a bad plan, I’m working on a “clone”. Not yet sure if I’m going to try to get money out of it, or just run it for myself and release it as opensource. I had already started working on something like this before I found webscript, so I’m a bit familiar with the idea. I’ve already got a skeleton of the script runner stuff setup with basic sandboxing.

                                                                        1. [Comment removed by author]

                                                                          1. 2

                                                                            There’s nothing in the post you’ve linked that isn’t debunked later in the thread as far as I can tell. Which arguments linked do you think people need to consider?

                                                                            1. [Comment removed by author]

                                                                              1. 2

                                                                                An isolated baseband modem is an important feature. Did you see the Samsung Galaxy “backdoor” discovered by the Replicant project? The modem has full I/O access to the phone’s storage. Not cool. A properly isolated modem would be proprietary, but at least you’re somewhat insulated from it.

                                                                                The Neo900 project is taking the same route as Purism:

                                                                                Isn’t a non-free baseband firmware a privacy issue?

                                                                                We’re going to address privacy concerns of non-free modem firmware by ensuring that the modem has access to no more data than absolutely necessary, so it won’t be able to spy on anything that’s not already available on carrier side. On Neo900 one can be sure that the modem is actually turned off when requested, not just pretending to be. Users will be notified in case of the modem wanting to do something without their consent.

                                                                                Unlike some other smartphones do, Neo900 won’t share system RAM with the modem and system CPU will always have full control over the microphone signal sent to the modem. You can think of it as a USB dongle connected to the PC, with you in full control over the drivers, with a virtual LED to show any modem activity.

                                                                                1. 3

                                                                                  Yeah, and the claim being made and/or refuted is that it’s common for the baseband to exist on a separate chip. (Or core, since everything is one die these days, but it’s isolated.) All of these privacy phones keep bringing this up as a selling point, but they’re actually very vague about which phones aren’t isolated.

                                                                                  If you read your link carefully, you’ll notice that the backdoor only works with driver side support on the host OS. That’s because it already is isolated. The modem does not have full access. It can make requests to the host OS, which the host can accommodate or not, but that’s nowhere close to being the same thing as full access.

                                                                                  This is kind of like how Chipotle brags about serving hormone free chicken, but the USDA prohibits feeding hormones to chickens. All chicken in the US is hormone free. But people read the sign and are tricked into thinking its somehow better than the chicken elsewhere. (Yeah, sure, it could be, but not for the cited reason.)

                                                                                  1. 1

                                                                                    Ah, that makes sense. Still, I think an isolated modem is a requirement even if it’s not unique to the Librem 5.

                                                                                    The phone has other goodies too. For instance it uses the free graphics driver Etnaviv. That’s an improvement over Copperhead’s Pixel phones, which use binary blob Adreno graphics drivers.

                                                                                2. 1

                                                                                  The first reply addresses all the points, to paraphrase (and add commentary):

                                                                                  “CPU separate from Baseband”

                                                                                  Yes, there are no opensource basebands, that’s the whole point behind saying that they’re going to isolate it to something where the CPU can purposefully communicate with it rather than just giving it full access to the CPU’s memory.

                                                                                  “World’s first ever IP-native mobile handset”

                                                                                  First this seems like a weird thing to pick on, all it means (obviously) it that they don’t intend to make use of any non-IP based communication, no voice, no sms, just IP.

                                                                                  1. 2

                                                                                    And AFAICT they plan to support carrier voice and SMS, but the Matrix support will be “native”.

                                                                                    So long as I can install my own stuff to keep using JMP, I’ll be fine with just data, though :)

                                                                                    1. [Comment removed by author]

                                                                                      1. 2

                                                                                        Look, I’m all about being shown that I’m wrong, but simply responding to me with “you’re wrong” (effectively) isn’t helping anything.

                                                                              1. 4

                                                                                Work is the same as last week.

                                                                                At not work, I’m still mostly focusing on figuring out NixOS. Right now the version if Rust/Cargo is quite old, so I’m trying to learn as much as I can to see if I can help with packaging the latest. I’ve decided that I’m going to stick with NixOS until at least the end of October to give it a fair chance, and not just drop it because it’s unfimilar to me.

                                                                                    1. 6

                                                                                      Done.

                                                                                  1. 4

                                                                                    At work I’m switching off my (supposedly) main project for the second time to start working on re-writing the integration for █████ because they’re releasing a new API and we need to check a box to make some agreement and they’ll only check that box if we use the new API and not the old API. (Although AFAIK the old API was super unreliable, so this really is a good thing.)

                                                                                    For kinda work, I’m writing a Rust library to interface with TP-Link smart devices, just working on figuring out the right way to do everything in tokio and figuring out how to properly test it automatically with real hardware.

                                                                                    Although the first part of this week will be me not doing much of anything because my laptop just died. That will then be followed by setting up NixOS on the Dell XPS 13 that I have coming tomorrow. It’ll be my first time using NixOS for real; I’ve played around with it in a VM the last few days, but have never tried to use it for a real system before.

                                                                                    1. 1

                                                                                      Is it time to move back to jQuery and Prototype.js? If these mysterious patents are about things like “virtual DOM”, comparing trees of state or something derived from FRP, then using Vue, Preact, Angular 2, Cycle, Riot, Elm, reflex-dom will infinge them too.

                                                                                      Then let’s wait 20-30 years until these patents expire and everyone finally can use these nice state-management things.

                                                                                      1. [Comment removed by author]

                                                                                        1. 1

                                                                                          social contract of open source

                                                                                          This is something new.

                                                                                          1. 5

                                                                                            New? Not really. Debian has a well-stated social contract: https://www.debian.org/social_contract

                                                                                            1. 3

                                                                                              Huh. It’s Debian’s “social contract”. Do you see the difference between somebody publishing “a set of commitments that we agree to abide by” and a non-existing unspecified thing that the poster above requires Facebook to abide by just because they published and maintain some open source code?

                                                                                          2. 1

                                                                                            So, the issue is that they deliberately added this “patent clause” to induce fear to everyone who thinks about suing Facebook? And not that using React is risky?

                                                                                          3. 3

                                                                                            Does Facebook actually have patents covering React? I’ve looked around a few times and have never seen a link to an actual patent covering it. I would assume there’s gobs of prior art for anything going on in there.

                                                                                            1. 5

                                                                                              AFAIK they’ve never stated public which ones, if any.

                                                                                              Submarine patents are a thing, sadly.

                                                                                            2. 2

                                                                                              And yet, there are a number of big companies which undoubtedly have big legal teams, and which seem to be okay with using React somewhere. Just cherry-picking some from the list [0]

                                                                                              Airbnb, American Express, Chrysler, Atlassian, eBay, Expedia, Microsoft, NHL, Netflix, New York Times, Salesforce, Twitter, Visa, Walmart… At least some of these companies must have had their legal teams look at the license and decide it was okay to use to use React. Which makes me wonder if the hysteria (this is a bit of hyperbole, but it does seem to have some people really worked up) is justified.

                                                                                              [0] https://github.com/facebook/react/wiki/sites-using-react

                                                                                              1. 8

                                                                                                You’re assuming they’re using the “off-the-shelf” license. There’s nothing preventing them from negotiating a different license with Facebook. Now, I haven’t seen anything showing that this has happened, but it’s a fairly common practice to have individualized contracts with traditional commercial software, so it wouldn’t shock me.

                                                                                                1. 3

                                                                                                  It would surprise me, though - why would Facebook enter into an agreement with these big name companies that altered the React license out of Facebook’s favor? I don’t think all these companies did that (and I didn’t list every large or well-known company that’s on that link, by the way), and unless they’re paying FB to use React I just don’t know why FB legal would bother with all the work. Individual negotations with legal teams at all these big companies to reach a mutually agreeable license, just so a dev team can use React? It seems really unlikely. Just as unlikely as all these companies paying FB to get some kind of commerical license for React - when there is no suggestion that such a thing exists.

                                                                                                  1. 2

                                                                                                    I assume they are paying. Just because things don’t have a price list or an explicit offer of a commercial license doesn’t mean you can’t get one.

                                                                                                    1. 2

                                                                                                      Right, I get that. I just don’t think it’s actually happening. Since there’s no evidence either way I guess we won’t be able to figure it out!

                                                                                            1. 2

                                                                                              Hi, are there any brief instructions on how to use it? I see the shortcuts defined in the settings but they don’t seem to work. Is it modal? This is probably obvious stuff, but I could use a little direction. :)

                                                                                              1. 4

                                                                                                You have to reload a page before the addon works in it. I don’t really know if there’s a way to work around that, but it’s like that for now at least :)

                                                                                                Also, keep in mind that add-ons don’t work on addons.mozilla.org.

                                                                                                1. 2

                                                                                                  Thanks for the info. I also had to select the preset. Which should be obvious from the control label, but I was thinking it would default to qwerty.

                                                                                                  1. 2

                                                                                                    No, it should default to QWERTY. What version of Firefox are you using?

                                                                                                    1. 1

                                                                                                      Nightly - 57

                                                                                                  2. 1

                                                                                                    I had the same problem you need to manually refresh any already open tab before you can use it on that tab. Or just restart the browser.

                                                                                                  1. 1

                                                                                                    On laptops, I use knuckles for modifier keys. On other keyboards, I just use my palm for the control key. Save caps lock for the escape key.

                                                                                                    1. 1

                                                                                                      I like having a tap on caps mapped to esc, and a press mapped to ctrl.

                                                                                                      Actual ctrl key I map to ctrl+opt+cmd and press with the palm for custom combos.

                                                                                                      1. 1

                                                                                                        That sounds interesting, how did you acomplished that?

                                                                                                    1. 16

                                                                                                      One person at work put it best: “layers are only ever added, never removed.”

                                                                                                      That just stings so painfully true.

                                                                                                      1. 7

                                                                                                        Every problem in computers can be solved with another level of abstraction–except for the problem of too many levels of abstraction!

                                                                                                        1. 5

                                                                                                          Nonono, I don’t need to care about those five layers there. By using a layer of abstraction to hide that those layers exist, I can make it look like there are only three layers instead of seven.