Threads for jussi

  1. 5

    To some degree, the article feels like an advertisement

    1. 2

      Looking at IPinfo website, the database seems to be shared under CC-BY-SA, no matter if you’re a commercial or free user. Not sure if this can be considered an advertisement. Some good stuff shared for free!

      1. 1

        Am I missing something on mobile? All I see is a page about $1k/month or custom quotes?

    1. 4

      Nice, I also love AHK on Windows. For macOS, there’s Keyboard Maestro that can be combined with Alfred and Karabiner.

      1. 4

        The algorithm of those product keys from Windows 98 on would also be interesting to see

        1. 2

          For Windows license keys, I think it was the same Mod7.

        1. 39

          I guess I remain the only one who actually wants native to not just stick around, but thrive. I don’t like the way the Web has evolved under Google’s stewardship, and I regularly find myself desperately trying to find native apps for services I rely on. I’m in the planning stages of starting a business around writing native apps for some of these services, and from my early studies I’m not alone in the desire to get the Web back to being an information platform instead of a software delivery platform.

          Also: I was quite happy with Safari’s twice-yearly releases. I can live with releases eight times a year. But one of the reasons I switched from Firefox to Safari in 2021 was because of how often Firefox was releasing and how many changes I had to endure. I had serious upgrade burnout.

          Lastly, I don’t want or need any of the features outlined in this article: Web Push is far too easy to abuse; custom elements are either useless or a great way to implement dark patterns; screen wake/lock APIs are going to enable even more privacy invasion; SIMD has, IMO, no place in the browser; etc, etc. Hopefully the Develop menu will allow some/most of those to be disabled.

          1. 22

            I guess I remain the only one who actually wants native to not just stick around, but thrive.

            There are dozens of us!

            1. 6

              I’m in the planning stages of starting a business around writing native apps for some of these services, and from my early studies I’m not alone in the desire to get the Web back to being an information platform instead of a software delivery platform.

              Wow, this sounds very nice. I very much belong to these people. Good luck with your endeavors! I’ve only witnessed abuse of the latest features, like some sketchy news sites wanting to deliver push notifications.

              1. 2

                The problem with native apps is that they already have even more of the privileges that web apps are gaining: the ability to keep my phone awake and active, digging around my desktop’s personal information, and so on. I agree with wanting the web to be information-first, but I also reject installing a native app just to interact with a CRUD API.

                1. 4

                  So an unhealthy browser monoculture means what we have now. People building tiny apps that maybe talk to a crud api and instead ship an entire browser rendering engine. Then Google pushes what system level access a browser should have (File API, USB API, etc). So instead of 5 small compiled apps that maybe talk to a CRUD API (something that is for a browser only? What?), you have 5 google browsers on your machine slowing it down.

                  I reject the idea of installing 5 different chromium browsers to talk to 5 different CRUD APIs.

                  1. 3

                    Wow! You heard “native app” and immediately thought of the smart phone. I heard “native app” and immediately thought of a home computer.

                    1. 1

                      For clarity, I purposefully left that as “native app” to include both desktops and smartphones.

                1. 13

                  I think the last line on the Gist should’ve been the first:

                  As one might have guessed, this is not an essay. It’s a transcript of the following talk by R. Martin with some substitutions made (SmallTalk -> Haskell, Ruby -> Rust, and others). You are free to make any conclusions from this.

                  1. 4

                    The section where they said it was used in a big payroll project is the bit that give it away for me. I enjoyed coming to that realization on my own without having it spoon-fed to me, but I understand that it would certainly drive away a certain class of reader.

                  1. 2

                    Very nice! Though, shows a bit odd numbers for my location (61,23.8). Shows 3 °C - 2 °C, even though the temperature doesn’t go below 20 °C during the day.

                    1. 2

                      I have a computer which I run Plex on, it is impossible for it to auto-login and recover from a sudden boot. Even when it auto-logins, it gets the blue screen telling “Finish setting up your PC” and one has to manually click “skip” button 2-3 times. Repeat this multiple times every month. I’ve tried just about everything but it usually always tries to get my consent for some personalized ad and location sharing policies.

                      1. 4

                        I never use NodeJS for scripting, either Python or Babashka.

                        1. 4

                          Company: Reaktor

                          Company site: https://www.reaktor.com/

                          Position(s): Senior software developers

                          Location: Amsterdam, Finland, New York, Stockholm, Tokyo. Remote/onsite positions.

                          Description: We work on strategically critical projects that are at the core of our clients’ businesses and our society. We’ve built satellites, won emmys with the HBO, designed Adidas e-commerce experience and many more world-class digital products.

                          Tech stack: TypeScript, Elixir, Clojure, Python, Scala, Haskell, Java, Go

                          Contact: https://www.reaktor.com/careers/

                          1. 2

                            Your remote positions seem to all be due to Corona. Has the company decide whether they will return to their offices?

                            Reaktor seems a fascinating consultancy.

                            1. 1

                              We established a remote office to Finland yesterday. And most likely going to expand this outside of Finland when we get it first working here.

                          1. 3

                            Use what you are the most familiar and feel productive with, then work on it to be horizontally scalable.

                            1. 3

                              Wow! And my homelab for the last 9 years has been an old beat up Lenovo laptop with the cheapest external usb-hard drive available..

                              1. 2

                                Old laptops are the best, they even have a built in battery backup that’s already tightly integrated with the OS!

                                1. 1

                                  3 months ago I had a similar setup to yours, a ThinkPad X201 with a nice SSD and a USB3 HDD over a USB2 port.

                                  Yesterday I had one of the things I learnt with that laptop solve a 2-week partial outage at $WORK.

                                  Never underestimate what one can learn from hobbying. Keep it up!

                                1. 15

                                  This post uses GIN indexes, one of their authors (Oleg Bartunov) strongly suggested to use RUM indexes (https://github.com/postgrespro/rum) when I spoke with him at PGCon in Ottawa (2019).

                                  Other things that would be nice:

                                  • show us your PostgreSQL config
                                  • show us your query plans
                                  • use ts_vector column type instead of functional indexes
                                  • avoid using OR in the query by using ANY - this would likely improve query plans a lot (if we were able to see them)

                                  For a moment I thought there is enough information to actually reproduce the test but I think there is a fundamental flaw in this whole experiment. The datasets are not the same for both systems!

                                        JSON.stringify({
                                          key: `${faker.lorem.word()} ${faker.lorem.word()}`,
                                          val: faker.lorem.words(),
                                          valInt: Math.floor(faker.random.float()),
                                          valDate: faker.date.past()
                                        })
                                  

                                  Please correct me if I am wrong as I don’t know the ‘faker’ used here but I would assume that it’s building a randomised lorem ipsum document. This depending on the actual distribution of words would greatly impact how the index is build and would affect the execution times of queries used against it. This means that one system could have gotten a much worse execution path with a document biased differently than the other system.

                                  Regardless of word distribution - is elasticsearch really working on the same initial data and are it’s documents split into equivalent logical chunks? PostgreSQL is searching over 1.5M entries, is the data loaded into elasticsearch also split into 1.5M documents?

                                  Am I really not understanding something fundamental? I only see one iteration (Iterations = 1) of the faker for Elasticsearch:

                                  const faker = require("faker")
                                  const { writeFileSync } = require("fs")
                                  const Iterations = 1
                                  writeFileSync(
                                    "./dataset.ndjson",
                                    Array.from(Array(Iterations))
                                      .map(() =>
                                        JSON.stringify({
                                          key: `${faker.lorem.word()} ${faker.lorem.word()}`,
                                          val: faker.lorem.words(),
                                          valInt: Math.floor(faker.random.float()),
                                          valDate: faker.date.past()
                                        })
                                      )
                                      .join("\n")
                                  )
                                  
                                  1. 4

                                    Lorem ipsum text also makes it impossible to evaluate search result quality (unlike, say, the Wikipedia dataset).

                                    1. 1

                                      what is the wikipedia dataset? url?

                                      1. 1
                                        1. 1

                                          Wikipedia offers full database backups : https://en.m.wikipedia.org/wiki/Wikipedia:Database_download

                                    1. 10

                                      Maybe people will reconsider using MiTMflare if we get a few more outages like this.

                                      1. 7

                                        Can you suggest some comparable services with better uptime or, failing that, better postmortems?

                                        1. 6

                                          What’s the use case you have?

                                          I just use … “my web host” (which happens to be Dreamhost, which does offer optional Cloudflare integration, but I intentionally leave it off). It has survived all the HN traffic news spikes just fine, as well as spikes from Reddit, lobste.rs, from an O’Reilly newsletter, and from what I think is some weird Google content suggestion thing (based on user agent).

                                          It has worked fine for 10 years. The system administration seems very competent. I don’t know the details, but they have their own caches.

                                          I noticed this guy said the same thing about Dreamhost: https://www.roguelazer.com/2020/07/etcd-post-follow-up/ i.e. that it’s worked for 15 years.

                                          I feel like a lot of people are using Cloudflare for some weird “just in case” moment that never happens. I’m not saying you don’t have that use case, but I think many people talking about and using Cloudflare don’t.

                                          To me Cloudflare is just another layer of complexity and insecurity. I would consider using something like it if I had a concrete use case, but not until then. Computers are fast and can serve a lot of traffic.

                                          1. 3

                                            The use case is free caching, and free bandwidth if you use some services for hosting (like backblaze). Which cuts down a lot of costs depending on the website you’re running.

                                            1. 3

                                              Where is the original site hosted? Why does it need caching?

                                              (I’m not familiar with Backblaze – is it a web host or is it an object store or both?)

                                              My point is that, depending on the use case, you probably don’t need caching, so it doesn’t matter if it’s free. There is a downside in security and complexity, which is not theoretical (as this outage shows, and as MITM attacks by state actors and others have shown.)

                                              1. 2

                                                (I’m not familiar with Backblaze – is it a web host or is it an object store or both?)

                                                Backblaze has a backup service, as well as a service called “b2” which is basically an s3 like object storage service.

                                            2. 1

                                              For the use cases I’ve had, I have (we have) used Fastly, a local Varnish/Apache/Nginx, or Rails middleware. The goals were some combination of a) overriding the backend’s declared cache lifetime b) speeding up page response c) letting the client cache various things even if not cachable by intermediates.

                                              Cloudflare combines all that with good DDOS protection and good performance globally. I can see how that’s an attractive feature set to many people, and while it’s a shame that VCs haven’t funded three dozen copycats, suggestions like that of @asymptotically that people just shouldn’t use it are stupid. It’s a fine combination of features, and telling people to just not want it, without suggesting alternatives, is IMO offensive and stupid.

                                            3. 4

                                              I don’t think so. I think that Cloudflare’s offerings are very good, they got this whole thing fixed in 30 minutes and explained how they’re making sure nothing similar happens again.

                                              The main problem I have with Cloudflare is their size. What good is a decentralised internet if we just connect through the Cloudflare VPN, resolve a domain via Cloudflare DNS and then get our requests proxied through Cloudflare?

                                              I also hate the captchas that you are occasionally forced to do.

                                              1. 3

                                                the captchas that you are occasionally forced to do

                                                Or all the time when connecting through Tor. Privacy Pass barely works :/ and it’s really silly that you need captchas to just view public pages! If they want to prevent comment spam and whatnot, why not restrict captchas to non-GET requests by default >_<

                                              2. 1

                                                DNS or anti-ddos? Doesn’t OVH have anti ddos-servers for example.

                                                1. 6

                                                  Cloudflare is a CDN with DDOS features (and has some related products, such as a registrar). It offers quick page access anywhere in the world, excellent support for load spikes, and DDOS protection.

                                                  A lot of ISPs offer anti-DDOS features for their products (which may be a product like Cloudflare’s or a different one, like OVH), but the feature is often one that displeases the victim: Dropping packets to the attacked IP address until the attacker grows bored and goes away. I don’t know what OVH means by anti-DDOS and they description page sounds a little noncommittal to my ears.

                                                  1. 3

                                                    OVH’s anti-ddos will trigger on legitimate traffic and then people will say your website has been “hugged to death” when it’s just OVH that shut down all incoming connections.

                                                    1. 2

                                                      OVH, the service from which 1/3 of my current bot-attacks come..

                                                      1. 1

                                                        Okay. Never used their services myself and don’t know how bots affect their anti-ddos or DNS.

                                                  2. 2

                                                    My impression was BGP problems (specifically BGP leaks, I think) were not just a problem in a CDN like Cloudflare, but also allowed mistakes by small players to make huge numbers of people to temporarily lose internet access.

                                                    Is there a difference in what happened here, and if so, is it a difference of scale, or some other kind of difference?

                                                    1. 3

                                                      This incident is related to internal BGP, not eBGP, and could’ve happened with any internal routing protocol.

                                                  1. 3

                                                    The link seems to go into your post on some other website? This is the correct link, https://www.itworldcanada.com/slideshow/xerox-parc-50-years-of-innovation

                                                    1. 4

                                                      Why remap to enter key? It’s so far placed. I remapped my ‘a’ key to control as I pretty much always hover over ‘a’ key already.

                                                      1. 1

                                                        I agree with you, but the author shared their motivations in an older post, http://emacsredux.com/blog/2013/11/12/a-crazy-productivity-boost-remap-return-to-control/

                                                        1. 1

                                                          I guess I can see it, but the advantages seem pretty minor, certainly not what I would call “crazy”. Also, having used the “dual function” key that is described, is can be pretty finicky sometimes. Hitting Enter instead of Control can be rather disruptive.

                                                          If it works, great. It just feels unnecessary.

                                                          1. 2

                                                            Well, back then this type of keyboard remapping seemed pretty novel to me, probably today I wouldn’t use the adjective crazy to describe it. :-) Still, Enter is definitely easier to press than the actual left CTRL with a pinky on most ANSI keyboards, and not having to move my hand off the home row is quite nice. I did play at some point with using SPC as control, but I typing several spaces in a row becomes quite problematic with this arrangement. :-)

                                                            1. 1

                                                              One more thing - I came across this idea when I was working on a Mac keyboard without a left control to begin with and it was the only way I wouldn’t lose any other key (e.g. one of the Options) in exchange for the left control I desperately needed. With Linux and a normal Win keyboard that’s not as big of an issue, but I still prefer that arrangement over a control on the bottom row of the keyboard.

                                                      1. 3

                                                        The webpage seems to be down, is there a working mirror?

                                                        1. 2

                                                          It’s back up. I need to move it over to my new server; will probably do that this weekend.

                                                          1. 2

                                                            What solution pleroma solves in contrast to Mastodon? Can you elaborate a bit more? Edit: because I thought Mastodon and Pleroma both use ActivityPub and can interconnect that way.

                                                            1. 3

                                                              Yep both use the same protocol. I suggested pleroma because I think meta-federation is important, meaning that not all instances should run mastodon and also instances running different software should be able to talk between each other.

                                                          1. 1

                                                            CaptureOne, Synology NAS and JottaCloud

                                                            1. 5

                                                              It’s a shame that Deno’s community feels hostile. An example of when somebody suggested they should use a code of conduct,