1. 1

    It would be nice to have native ZFS encryption. I currently use ZFS on Linux on top of a LUKS container. I’m not quite bold enough to add in the encryption patches and use that on my primary data store yet. :)

    1. 2

      Someone should make an equivalent that allows communicating with axolotls through your screen, Cortazar style.

      1. 2

        We are working with the community to make the game and platform (very close to a Dreamcast) run in a emulator. The touch screen functionalities will probably be the most challenging.

        1. 1

          That would be pretty awesome and a great way to preserve that history. You might want to consider contacting The Living Computer Museum in Seattle to see if they’d be willing to put up am exhibit around simulated version.

          1. 2

            Indeed. Actually, we will try to have it in our own exhibition. But obviously, our preservation work can be reuse by other institutions.

          2. 1

            Is it on a Naomi board?

            1. 1

              It is closer to a regular Dreamcast I would say.

              1. 1

                Seriously though, I understand its importance for computer history, but I’m not sure if I understand who would buy it at the time. Is it a very advanced platform for this day made into a single-purpose computer? What’s unique about it other than the early use of touchscreen? Anyone knows what the list price was?

                1. 1

                  I searched for “Sega Fish Life” on duckduckgo and found Fish Life at Sega Retro which says ¥498000.

                  1. 1

                    Software was sold at 19800¥. The platform was, as indicated on SEGA website, targeting public places: “Perfect for use in the following locations:

                    • Restaurant Lounges
                    • Aquariums
                    • Hotel and Bank Lobbies, etc.
                    • Libraries
                    • Hospital Waiting Rooms
                    • Halls and Event locations”
                    1. 1

                      ¥498000 sounds like an obscene price that could hardly justify the purchase even for businesses. The software sounds affordable though, and if it was meant to be a platform for interactive displays, I definitely can see the appeal.

        1. 2

          There’s one on eBay for $10k without the monitor or software. There are no completed ones on eBay so who knows how much one of these would actually go for. I had never heard of this until now.

          1. 3

            We (Musée Bolo) have one of the 5 pieces of software that were released and the main unit. We do not have the touch screen however.

          1. 2

            If I thought that the advertisers who keep trying to buy space on my blog (for link spam mostly) actually read my blog I might consider doing this.

            1. 3

              I get e-mails like that too. I got one from Casper to write a review. I think and I gave them some outrageous number (like $5,000) and never heard back.

              Also the post you linked to from that post about e-mail and small business, I’ve got a pretty similar story:

              https://penguindreams.org/blog/how-google-and-microsoft-made-email-unreliable/

              There are services out there now like Sendgrid and Mailgun to at least help small businesses get mail out without it going to spam, or of course MailChip for mailing lists. I should really do a part II to that post at some point.

              1. 2

                I run my own mail server and I have seen all the problems described in the post. From a German law perspective, the behaviour shown by Google and Microsoft probably qualifies as illegal under § 4 Nr. 4 UWG (Act against unfair competition, English translation). If anyone reading this runs an e-mail-based business in Germany, you should consider challenging them for the sake of the free e-mail exchange.

            1. 2

              I haven’t had ads on my blog in over a decade. I’ve been meaning to remove the Facebook Page/Twitter widgets too when I get around to my redesign, since I’m pretty much giving both companies free information with them.

              1. 4

                There’s a lot of implementations that load the widget once the user want to use them. They are pretty common in Germany and pretty much work by having the button “primed” with one click, which loads and activates the JS and the widget.

                1. 1

                  I think thats how most privacy extensions make them work. Disabled until you click them.

                2. 3

                  I have such buttons that work without Javascript. Just normal links.

                  1. 1

                    You might consider using these or similar social sharing buttons without javascript or tracking.

                  1. 12

                    If you feel paralyzed when an interviewer asks you how you see yourself in five years, remember she doesn’t want you to read the future, she wants to learn about your motivation and goals.

                    And yet, she doesn’t ask you “what’s your motivation and what are some goals?”. Also, she’s looking out for red-flags like “well, my mother-in-law is getting old and we might have to move back across the country next year to look after her, so I’m just looking for something in the interim”. Which is a totally, 100% legit (and compassionate, and honest) thing to tell the interviewer. But, let’s be honest: don’t tell the interviewer that, they all want to hear that you’re looking to make a long term impact working on whatever BS run-of-the-mill project/team/company they’re interviewing you for. Tell them the mother-in-law story and you won’t be making it to the next round.

                    Edit: Very little of this, to me, is “how to pretend you have social skills”. It covers some specific interactions with some people you might encounter in a software job, in situations that are highly-specific to software jobs and in particular (I think, from the article) junior developers.

                    Edit edit: I feel I have been a bit snarky. I don’t want to knock the post too hard: clearly effort and thought went into it. But I’m not sure what the takeaways are. Some of it’s “don’t be nervous in interviews”, some of it’s “I (the author) am a good interviewer”, some of it’s “understand the dynamics of working with the angry senior tech lead” (which is good advice). But… coulda been bullet points?

                    1. 10

                      I agree the title is inappropriate, but for different reasons. If you could act as the author proposes in all of the four situations described, you’re not pretending to have social skills: you actually have social skills.

                      1. 3

                        I’ve always hated the 5 year plan question. In interviews I’ll usually say, “Well I expect to not be answering canned interview questions,” if it’s a job I’m not really interested in. If it’s a job I want, I tend to say, “There’s no way to know what will happen in 5 years. Scientifically, we don’t even understand why we can only move forward in time. In space you can move in any six directions, but with time, we all move forward at a constant rate (unless you’re very rich and have a very fast space ship, and even then you can only slow down your time travel relative to everyone else).

                        “So it’s not useful to think about regrets or what you would have done. Our decisions only affect our present and our future.”

                        I’ve gotten job offers answering that question both ways.

                        In general I agree with you on this. I hate this idea that most engineers don’t have social skills. We certainly do. I’ve had to deal with clients in many different industries. Articles like this are more about teaching people to be less truthful and tell people what they want to hear to get your goals.

                        You don’t get great jobs that way. It’s good advice if you just need a job. Once you have a job, it’s bad advice when you’re trying to switch to a job you actually want.

                        1. 3

                          Without comment in regards to how you approach answering this question, one of the reasons people ask it is that they want to know if you have a future. And further they want to know if they can be a part of it. The thinking goes that if you don’t have a future or your future won’t include them then there is no opportunity for a relationship to develop that will work for everyone. I suppose that can be said, as in the article, as “learn about your motivation and goals.” I certainly consider that framing of the question to be weak and, as you allude to, potentially disingenuous.

                          1. 3

                            I think asking if you will stay with the company for five years at a job interview is equivalent to asking for marriage plans at a first date.

                      1. 3

                        When I was in University, I remember our server room in the CS department had those massive/think books on X11 programming.

                        It’d be interesting to see a minimal X11 window manager vs a minimal Wayland composer. Although the compose is a lot more, correct? It’s not only the wm, but drawing/buffering to the screen right?

                        1. 4

                          One out of many problems is that you can’t abstract away the window management details to a comparable set of mechanisms in the way shown in the article - coarse window management policies are encoded into the protocol (that’s the “shell”) and just the high level semantics of popup windows alone span reach into hundreds of lines of code.

                          1. 3

                            Someone reposted the link on HN, and there seems to have been a conversations just exactly about wayland/X11: https://news.ycombinator.com/item?id=17765851

                          1. 2

                            Thanks for painting the picture. I knew about the same bits and pieces of this problem but never really grasped it.

                            This should be fixable, no? I might hack at it this weekend. Or this evening because it’s bugging me now.

                            1. 1

                              There are two bugs really.

                              1. SpamPD shouldn’t lose its flags on HUP. So that should be as simple as finding that signal handler in the Perl code and making sure the new process has the same argv. SpamPD still seems maintained (they had commits 4 months ago) so I went ahead and creates an issue since I didn’t see it in the closed list:

                              https://github.com/mpaperno/spampd/issues/19

                              1. Why is OpenBSDs rc system sending SpamPD a hangup signal? Does it send every process a hangup signal? Why does that happen on boot and not when you call rcctl directly? There’s gotta be a reason for that behaviour. That’d probably involve hitting up their mailing lists or getting on IRC. I might jump on IRC later today.
                              1. 2

                                1, SpamPD is pretty small and doesn’t explicitly do anything with HUP. The processing, and the logging of the restart, is happening somewhere in Net::Server(::PreForkSimple). SpamPD might need to capture HUP to control the restart of the server.

                                1. I don’t know what’s going on there. The rc scripts don’t send a HUP. Maybe something in the handoff from rc and the resulting login tty.
                            1. 6

                              If you want secure and rather fast x86, look at Opterons 62xx and 63xx. They are still pretty fast and not vulnerable to many CVE’s. Coupled with Coreboot, they make for a nice desktop or a server.

                              If you want something faster, more secure and are not limited to x86, POWER9 with Talos II motherboard is a great choice.

                              1. 8

                                It looks like a new single CPU Talos board is still $2500. I mean, that’s far cheaper than they were last time I looked, but still not entirely practical for many enthusiasts.

                                One biggest issue with other architecture is video deciding. A lot of decoders are written in x86_64 specific assembly. Itanium never had a lot of codecs ported to EPIC, making it useless in the video editing space. There are hardware decoders on a lot of amd/nvidia GPUs, but then it comes down to drivers (amdgpu is open source and you have a better shot there on power, but it’d be interesting to see if anyone has gotten that working).

                                1. 2

                                  You can hardware decode but you generally don’t want to hardware encode for editing. HW encoders have worse quality at the same bitrate vs. software.

                                  Mesa support for decode on AMD is good, encode is starting to work but it’s pretty bad right now (compared to windows drivers).

                                  1. 2

                                    Decoding isn’t the problem. All modern lossy codecs ate strongly biased towards decode performance, and once you’re at reasonable data rates, CPUs handle it fine. Encoding would be misery, because all software encoders are laboriously hand tuned for their target platform, and you really don’t want to use a hardware encoder unless you absolutely have to.

                                  2. 3

                                    The only reason you’d be stuck with x86 is if you’re running proprietary software and then chip backdoors are the least of your concerns.

                                    1. 4

                                      The only reason you’d be stuck with x86

                                      When I last saw it debated, everyone agreed x86 stumped all competitors on price/performance, mainly single-threaded. Especially important if you’re doing something CPU-bound that you can’t just throw cores at. One of the reasons is only companies bringing in piles of money can afford a full-custom, multi-GHz, more-work-per-cycle design like Intel, AMD, and IBM. Although Raptor is selling IBM’s, Intel and AMD are still much cheaper.

                                      1. 2

                                        Actually, POWER9 is MUCH cheaper. You can get 18-core CPU for a way better price and it has 72 threads instead of 36 threads (like Intel).

                                        1. 2

                                          That sounds pretty high end. Is that true for regular desktop CPU’s? Ex: I built a friend a rig a year or so ago that could do everything up to the best games of the time. It cost around $600. Can I get a gaming or multimedia-class POWER9 box for $600 new?

                                          1. 2

                                            No, certainly not. But you can look at it otherwise - the PC you assemble will be enough for you for 10-15 years, if you have enough money to pay now :)

                                            $600 PC will not make it for that long.

                                            1. 2

                                              “But you can look at it otherwise - the PC you assemble will be enough for you for 10-15 years, if you have enough money to pay now :)”

                                              The local dealership called me back. They said whoever wrote the comment I showed them should put in an application to the sales department. They might have nice commissions waiting for them if they can keep up that smooth combo of truth and BS. ;)

                                              “$600 PC will not make it for that long.”

                                              Back to being serious, maybe and maybe not. The PC’s that work for about everything now get worse every year. What they get worse at depends on the year, though. The $600-700 rig was expected to get behind on high-end games in a few years, play lots of performance stuff acceptably for a few years more, and do basic stuff fast enough for years more than that. As an example (IIRC), both tedu and I each had a Core Duo 2 laptop for seven or more years with them performing acceptably on about everything we did. I paid $800 for that laptop barely-used on eBay. I’m using a Celeron right now since I’m doing maintenance on that one. It was a cheaper barter, it sucks in a lot of ways, and still gets by. I can’t say I’d have a steady stream of such bargains with long-term usability on POWER9. Maybe we’ll get it after a few years.

                                              One other thing to note is that the Talos stuff is beta based on a review I read where they had issues with some stuff. Maybe the hardware could have similar issues that would require a replacement. That’s before considering hackers focusing on hardware now: I’m just talking vanilla problems. Until their combined HW/SW offering matures, I can’t be sure anything they sell me will last a year much less 10-15.

                                      2. 2

                                        Even though I’d swap my KGPE-D16 for Talos any minute, I simply can’t afford it. So I’m stuck with x86, but it’s not because of proprietary software.

                                    1. 1

                                      I recently setup my own tt-rss instance after getting tired of the commercial natures of Newsblur and Feedly (I even had a Newsblur subscription at one point).

                                      tt-rss is pretty nice and I even get all my YouTube channel subscriptions through it.

                                      1. 4

                                        There’s also feed.json that serves the same purpose but using JSON instead of XML

                                        https://jsonfeed.org

                                        1. 20

                                          In my opinion, jsonfeed is doing active harm. We need standardization, not fragmentation.

                                          1. 2

                                            Well as long as people are just adding an additional feed, xml/rss + json. You can have two links in your headers. Over the course of time, all readers will probably add support and then it shouldn’t matter which format your RSS feed is in. That’s kinda how we got to where we are today.

                                          2. 10

                                            How far spread is support for this in feed readers? RSS and Atom have a very broad support among feed readers, so unless there’s a compelling reason a working and widely supported standard shouldn’t be replaced just because of taste.

                                          1. 23

                                            Isn’t ublock origin independent from ublock ?

                                            Aren’t they two vastly different tools ?

                                              1. 18

                                                I just found that uBlock Origin even blocks ublock.org by default ;):

                                                https://github.com/gorhill/uBlock/wiki/Badware-risks#ublockorg

                                                (Not that I disagree, ublock.org is a borderline scam.)

                                                1. 4

                                                  I noticed that too when clicking on the link. It’s kinda funny. It’s hard to keep everything straight these days, but use, uBlock/AdBlock/AdBlockPlus all are a little shady in how they monetize their development, either by letting it white-list “non-intrusive” ads or by collecting usage data.

                                                  As far as I know, the uBlock Origin project is currently uncompromising in this regard. Still, they all use public and community maintained blacklists/greylists.

                                            1. 10

                                              This is just the most amazingly Sisyphean project I’ve ever encountered. They’re never, ever going to hit their goal; and yet, they keep cranking away.

                                              1. 4

                                                I felt that way about Haiku, and it’s actually turning into a fairly pleasant little desktop that can run some significant applications. It’s almost to the point that if I didn’t need to run VMs and videoconference in Google Hangouts, it could be my full-time desktop.

                                                1. 1

                                                  The three things that kept me from going Haiku as a real desktop the last time I looked were a lack of drivers, general instability, and a lack of a good modern web browser. Have any of those been addressed? I don’t honestly need VMs or video conferencing, but being on a super old version of Firefox or WebKit were definite blockers.

                                                  1. 1

                                                    It seems pretty stable. Driver-wise, it handles everything on my reasonably recent laptop; it can load FreeBSD wifi drivers. WebPositive has I think been updated to WebKit 2.

                                                    Really, I wish Haiku had simply targeted source code compatibility and not binary compatibility with BeOS. Binary compatibility shackled them to a custom version of GCC and binutils, which took a lot of engineering resources. They also added a lot of features, some of which are better than any other extant desktop OS (e.g. PackageFS), but which again took resources away from basic stability.

                                                    At the end of the day, they’ve accomplished amazing stuff and Haiku is really a usable and pleasant environment. I just think they would’ve hit usability ten years ago if they’d made a few decisions differently.

                                                    (This is not to disparage their work, which is really awesome. I was never in their shoes, so I’m armchair quarterbacking.)

                                                    1. 2

                                                      To the extent you’re armchair quarterbacking, I’ve said the same thing. Sounds like it might be worth me taking another gander, though, so I’ll check things out this evening. Thanks for the inspiration!

                                                2. 3

                                                  There has been a lot of work recently on this. I dunno man, what if in three years we have a version of ReactOS that runs Vulkn drivers and can play AAA title games?

                                                  1. 2

                                                    I’ll happily eat my words! But i think it’s unlikely, as they are aiming at a target 15 years old!

                                                1. 6

                                                  Yeah, I know someone who runs a keyserver and they are getting absolutely sick of responding to the GDPR troll emails.

                                                  Love the idea to use activitypub (the same technology involved in mastadon) for keyservers. That’s really smart!

                                                  1. 16

                                                    Offtopic: Excuse me.

                                                    I think it depends on some conditions, so not everybody is going to see this every time. But when I click on medium links I tend to get this huge dialog box come up over the entire page saying some thing about registering or something. It’s really annoying. I wish we could host articles somewhere that doesn’t do this.

                                                    My opinion is that links should be links to some content. Not links to some kind of annoyware that I have to click past to get to the real article.

                                                    1. 11

                                                      Use the cached link for Medium articles. It doesn’t have the popup. Just the content.

                                                      1. 1

                                                        Could you give an example? That sounds like a pleasant improvement, but i don’t know exactly what you mean by a cached link.

                                                        1. 3

                                                          There is a’ cached’ link under each article title on lobste.rs

                                                          1. 1

                                                            Thanks.

                                                      2. 7

                                                        I started running uMatrix and added rules to block all 1st party JS by default. It does take a while to white list things, yes, but it’s amazing when you start to see how many sites use Javascript for stupid shit. Imgur requires Javascript to view images! So do all Square Space sites (it’s for those fancy hover-over zoom boxes).

                                                        As a nice side effect, I rarely ever get paywall modals. If the article doesn’t show, I typically plug it into archive.is rather than enable javascript when I shouldn’t have to.

                                                        1. 2

                                                          I do this as well, but with Medium it’s a choice between blocking the pop-up and getting to see the article images.

                                                          1. 6

                                                            I think if you check the ‘spoof noscript>l tags’ option in umatrix then you’ll be able to see the images.

                                                            1. 1

                                                              Nice trick, thanks!

                                                        2. 6

                                                          How timely! Someone at the office just shared this with me today: http://makemediumreadable.com

                                                          1. 4

                                                            From what I can see, the popup is just a begging bowl, there’s actually no paywall or regwall involved.

                                                            I just click the little X in the top right corner of the popup.

                                                            But I do think that anyone who likes to blog more than a couple of times a year should just get a domain, a VPS and some blog software. It helps decentralization.

                                                            1. 1

                                                              And I find that I can’t scroll down.

                                                              1. 3

                                                                I use the kill sticky bookmarklet to dismiss overlays such as the one on medium.com. And yes, then I have to refresh the page to get the scroll to work again.

                                                                On other paywall sites when I can’t scroll, (perhaps because I removed some paywall overlay to get at the content below,) I’m able to restore scrolling by finding the overflow-x CSS property and altering or removing it. …Though, that didn’t work for me just now on medium.com.

                                                                1. 1

                                                                  Actually, it’s the overflow: hidden; CSS that I remove to get pages to scroll after removing some sticky div!

                                                            2. 3

                                                              What is the keyserver’s privacy policy?

                                                              1. 5

                                                                I run an SKS keyserver, have some patches in the codebase, wrote the operations documents in the wiki, etc.

                                                                Each keyserver is run by volunteers, peering with each other to exchange keys. The design was based around “protection against government attempts to censor keys”, dating from the first crypto wars. They’re immutable append-only logs, and the design approach is probably about dead. Each keyserver operator has their own policies.

                                                                I am a US citizen, living in the USA, with a keyserver hosted in the USA. My server’s privacy statement is at https://sks.spodhuis.org/#privacy but that does not cover anyone else running keyservers. [update: I’ve taken my keyserver down, copy/paste of former privacy policy at: https://gist.github.com/philpennock/0635864d34a323aa366b0c30c7360972 ]

                                                                You don’t know who is running keyservers. It’s “highly likely” that at least one nation has some acronym agency running one, at some kind of arms-length distance: it’s an easy and cheap way to get metadata about who wants to communicate privately with whom, where you get the logs because folks choose to send traffic to you as a service operator. I went into a little more depth on this over at http://www.openwall.com/lists/oss-security/2017/12/10/1

                                                                1. 5

                                                                  Thanks for this info.

                                                                  Fundamentally, GDPR is about giving the right to individuals to censor content related to themselves.

                                                                  A system set out to thwart any censorship will fall afoul of GDPR, based on this interpretation

                                                                  However, people who use a keyserver are presumably A-OK with associating their info with an append-only immutable system. Sadly , GDPR doesn’t really take this use case into account (I think, I am not a lawyer).

                                                                  I think what’s important to note about GDPR is that there’s an authority in each EU country that’s responsible for handling complaints. Someone might try to troll keyserver sites by attempting to remove their info, but they will have to make their case to this authority. Hopefully this authority will read the rules of the keyserver and decide that the complainant has no real case based on the stated goals of the keyserver site… or they’ll take this as a golden opportunity to kneecap (part of) secure communications.

                                                                  I still think GDPR in general is a good idea - it treats personal info as toxic waste that has to be handled carefully, not as a valuable commodity to be sold to the highest bidder. Unfortunately it will cause damage in edge cases, like this.

                                                                  1. 3

                                                                    gerikson you make really good points there about the GDPR.

                                                                    Consenting people are not the focus of this entirely though , its about current and potential abuse of the servers and people who have not consented to their information being posted and there being no way for removal.

                                                                    The Supervisory Authority’s wont ignore that, this is why the key servers need to change to prevent further abuse and their extinction.

                                                                    They also wont consider this case, just like the recent ICANN case where they want it to be a requirement to store your information publicly with your domain which was rejected outright. The keyservers are not necessary to the functioning of the keys you upload, and a big part of the GDPR is processing only as long as necessary.

                                                                    Someone recently made a point about the below term non-repudiation.
                                                                    Non-repudiation this means in digital security

                                                                    A service that provides proof of the integrity and origin of data.
                                                                    An authentication that can be asserted to be genuine with high assurance.
                                                                    

                                                                    KeyServers don’t do this!, you can have the same email address as anyone else, and even the maintainers and creator of the sks keyservers state this as well and recommend you check through other means to see if keys are what they appear to be, such as telephone or in person.

                                                                    I also don’t think this is an edge case i think its a wake up call to rethink the design of the software and catch up with the rest of the world and quickly.

                                                                    Lastly i don’t approve of trolling, if your doing it just for the sake of doing it “DON’T”, if you genuinely feel the need to submit a “right to erasure” due to not consenting to having your data published, please do it.

                                                                  2. 2

                                                                    Thank you for the link: http://www.openwall.com/lists/oss-security/2017/12/10/1, its a fantastic read and makes some really good points.

                                                                    Its easy for anyone to get hold of recent dumps from the sks servers, i have just hunted through a recent dump of 5 million + keys yesterday looking for interesting data. Will be writing an article soon about it.

                                                                2. 3

                                                                  i totally agree, it has been bothering me as well, i am in the middle of considering starting up my own self hosted blog. I also don’t like mediums method of charging for access to peoples stories without giving them anything.

                                                                  1. 3

                                                                    I’m thinking of setting up a blog platform, like Medium, but totally free of bullshit for both the readers and the writers. Though the authors pay a small fee to host their blog (it’s a personal website/blog engine, as opposed to Medium which is much more public and community-like).

                                                                    If that could be something that interests you, let me know and I’ll let you know :)

                                                                    1. 2

                                                                      lmao you don’t even get paid when someone has to pay for your article?

                                                                      1. 1

                                                                        correction, turns out you can get paid if you sign up for their partner program, but i think it requires approval n shit.

                                                                      2. 2

                                                                        hey @pushcx, is there a feature where we can prune a comment branch and graft it on to another branch? asking for a friend. Certainly not a high priority feature.

                                                                        1. 3

                                                                          No, but it’s on my list of potential features to consider when Lobsters gets several times the comments it does now. For now the ‘off-topic’ votes do OK at prompting people to start new top-level threads, but I feel like I’m seeing a slow increase in threads where promoting a branch to a top-level comment would be useful enough to justify the disruption.

                                                                    1. 6

                                                                      Huh. Why do people think open offices are meant to increase interaction? The only reason for open offices is a lack of floor real estate. I’ve been stuck in them for over six years because I’ve only really taken work in cities.

                                                                      Do managers actually believe the lie that it makes people more productive? I use to hate the cube, so much, but open offices are a new layer of hell.

                                                                      1. 7

                                                                        I think people (including managers) are, on average, pretty poor at empathising with different levels of tolerance for social interaction. If the manager finds the open office level of interaction tolerable or even enjoyable, on balance I expect they will project this onto their staff as what they perceive to be a reasonable expectation.

                                                                        Not everybody is this way, but it seems quite common – not just in office layout decisions, but in weighing the cost of additional meetings or even in planning for team social events. In contrast I’ve known people that are themselves comfortable with a lower level of interaction, and their lower level tends to influence their targets for others too.

                                                                        1. 8

                                                                          I have met in every open office a vocal fraction of colleagues who said they enjoyed it. “here I csn stay informed on what is going on in the department”, a small office would be isolating, et etc.

                                                                          So managers will find people who share their opinion.

                                                                          Also typically middle management doesnt decide on this stuff but more higher ups who either have their own office or spend their days in meeting rooms.

                                                                      1. 3

                                                                        I really hate this as well. I still drive a 5spd … in America. I feel like that’s becoming incredibly rare. There is something that feels really good about using every appendage, and driving being a fully engaging experience.

                                                                        My favorite in-dash units are probably the Pioneers. They have decent navigation and they have the most useful functions (volume, switch track) as physical buttons. A friend of mine had a Cherokee and her stock in-dash unit was awful. There is no fucking reason air-con and the heated seats should be in a touch screen interface. Those should be physical buttons you can reach for without fumbling.

                                                                        I also hate the Audi climate controls … buttons to move the temperate up and down?! .. and you have to look down to watch it? Compare that to the Subaru’s where is’a physical dial you can adjust super fast once you’re use to it.

                                                                        1. 9

                                                                          AC seems like an application that would really benefit from always-listening voice control.

                                                                          Instead of switching on and off with commands like “AC on” and “AC off”, it should be programmed to respond to either “fuck me it’s hot” or “aaaaa the day-star it burnsssss” to switch on and and “brrrrr” to deactivate.

                                                                        1. 4

                                                                          Any example of a situation in which creating commits like this helps?

                                                                          1. 3

                                                                            Let’s say you have some complicated history pattern with merges and so on. Lots of different developers doing lots of different things. After a bunch of merges and merge conflict resolutions you have a history of sorts, but you want to clean it up. This allows you to make a single commit where the end result is the tree matches the complex history you’d like to throw away.

                                                                            Very useful for keeping dev history clean.

                                                                            1. 1

                                                                              Ah, that makes sense. So like a squashed merge, but without the merge. I guess it’s what git merge --squash --strategy=theirs would do if that merge strategy existed.

                                                                              1. 1

                                                                                Well, now that I think about it, wouldn’t saying –strategy=theirs be specifying just how conflicts are handled? My tool is saying, forget about conflicts, merging, everything, take the entire tree from the other commit wholesale. Don’t even try and merge things together.

                                                                                1. 1

                                                                                  No, that’s what --strategy=recursive -X theirs does. The existing “ours” strategy just throws away the other commit and takes the tree from the current one. A fictional “theirs” strategy would do the same with the other tree.

                                                                                  Merge strategies and their options are pretty confusing.

                                                                              2. 1

                                                                                Wait… you use it to delete history? But… having that history around is the reason I use git?

                                                                                1. 1

                                                                                  The last thing I want to do when fighting a production fire at 3am is be sorting through 12 merges of commits that look like:

                                                                                  • add feature
                                                                                  • whoops
                                                                                  • small fix
                                                                                  • review comments
                                                                                  • doh maybe this time.

                                                                                  squash that crap together! What commit broke the build is infinitely harder to figure out when the problem is in some chain of merges titled “whoops”

                                                                                  I decidedly prefer having my git history serve as a neatly curated form of documentation about the evolution of the codebase, not chaos of immutable trial and error

                                                                                  1. 2

                                                                                    I constantly bring this up in pull requests when I see shitty commit histories like that. Squash your damn commits! If you’ve already pushed a branch, create a new one with a new name, pick your commits on top of it, rebase -i and squash them into succinct relevant feature sets (or try to get as close as you can).

                                                                                    I realize this is once that’s already gone and it’s too late (history with a ton of “squishme: interum commit” bullshit in there) and that’s the purpose of tools like yours, but teaching people good code hygiene is pretty important too. :-P

                                                                                    1. 1

                                                                                      So I agree with you on this approach, but I think I’m still not grasping what your tool accomplishes. Couldn’t the situation you’re outlining here be accomplished by squashing?

                                                                                      1. 1

                                                                                        Yeah that last comment was really more of a discussion about why you might want to clean up git history. That’s a poor example for this tool.

                                                                                        This tool is useful when there’s multiple merges along two divergent branches of history and you want to make a commit that essentially contains the entire diff from your commit down to the merge-base of another commit combined with the diff from the merge-base back up to that other commit.

                                                                                        1. 1

                                                                                          Hmm, I guess I just can’t picture in what kind of situation that would happen. Could you explain the example chronologically?

                                                                                          1. 1

                                                                                            I think @jtolds is on significantly more complicated code bases than I’ve worked on. There was an earlier post about Octopus commits:

                                                                                            https://www.destroyallsoftware.com/blog/2017/the-biggest-and-weirdest-commits-in-linux-kernel-git-history

                                                                                            and here is a visual for what that would look like:

                                                                                            https://imgur.com/gallery/oiWeZmm

                                                                              1. 12

                                                                                I understand that this might be serious, but it seriously reads like a parody of techie gear-obsession. GUIs (including vi) were invented for a reason, and though you don’t need to like them, when I read that “the file system is likewise adequate for organizing ones work if the user works out a reasonable naming convention” I can’t help but think of someone who exclusively uses a typewriter or someone else who uses only paper and fountain pen saying the exact same thing. And of course such people do exist, which makes the entire idea of claiming something extremely high up on the ladder of relative complexity is “adequate if the user is reasonable” rather silly.

                                                                                1. 3

                                                                                  Reading through the original message, I found myself wondering if this were real or not as well. It seems like it’s a different form of hipsterism, based in computers instead of something more analogue.

                                                                                  I guess it’s nice if he actually enjoys that flow, but I find it hard to believe it’s more productive than opening a modern text editor.

                                                                                  1. 3

                                                                                    I mean, there have been other posts about how a lot of big authors still use WordStar. Maybe this was a parody of some kind? It kinda gets into Poe’s Law territory.

                                                                                  2. 2

                                                                                    Neal Stephenson wrote ‘Cyphernomicon’ and the Baroque Cycle books with a fountain pen for the first drafts and then used Emacs for the revisions and polishing up.

                                                                                    Edit: Neil Gaiman uses fountain pens exclusively for his writing, and has said that using computers actually reduces his productivity.

                                                                                    1. 2

                                                                                      My favorite quote by Patrick O’Brian was when he was asked what word processor he used:

                                                                                      I use pen and paper, like a Christian.

                                                                                  1. 4

                                                                                    Here is the blog post on their main page:

                                                                                    https://gentoo.org/news/2018/06/28/Github-gentoo-org-hacked.html

                                                                                    Doesn’t seem like anything major was compromised for people who run Gentoo (like myself ^_^).

                                                                                    1. 11

                                                                                      I worked in Identity Management for a University at one point in my life. There are several things wrong going on here.

                                                                                      Looks like he had a peaceful termination (contract just ended) so the systems locked him out slowly. That seems right, but the fact that this was irreversible is insane. Contractors came and went at the University, as well as associate professors, adjuncts, etc. We had a pretty complex system for ensuring no person got two accounts. If anyone left, the account is always disabled and always kept.

                                                                                      Even if they are just a student and graduated 8 years ago, so long as HR gets the same SSN and DOB as their old student account, we just reactivated their old student account (although it would have had student removed and alumni added) and add a staff or faculty role to it. If a new account had the same name and birthday of another account, but different SSN, it’d get flagged for us to look at it manually (we had rules for similar names, reversed months/days on birthdays and other rules to try to catch things). Sometimes we’d find someone got two accounts by accident and we’d have to go through the painful process of trying to merge them.

                                                                                      If someone was fired, we used a “kill bit,” which would lock them out of nearly everything in less than an hour. It was something we were very careful with, because if that happened, you lost your SIDs and all your roles on most of the systems. That was a bitch to reverse if we needed to, but it was still doable (although you’d probably be requesting all the permissions you needed for about a week).

                                                                                      We used Novell’s IDM to push things downstream, but all the actual identity management integrations and services we wrote ourselves, and we’d always be able to reverse a situation like this in less than a day.

                                                                                      I’m glad the author left that shop. Big companies have so much garbage like this; probably a bunch of off-the-shelf garbage where they handle none of the integration work and have no real IDM team to deal with accounts. There was no reason for this to happen. They should have paid him for those weeks off. He’d have a good case if he went to a labor lawyer. The company would probably just settle.