0xABADC0DA

vor 13 Jahrendiscuss

And you're reading Hacker News why? I knew I would get hellbanned eventually for not being in the clique, but I didn't expect it from a +6 point comment. This community is a definition of degenerate.

0xABADC0DA

vor 13 Jahrendiscuss

What I like about Duck Tales is its morality and ethics. Sure Scrooge is a greedy miser, but like the unquoted part of Nixon's "I'm not a crook" speech he earned every cent of it. Unlike his arch-enemy Flintheart Glomgold, Scrooge doesn't cheat or steal he got rich by "working smarter, not harder".

This show really teaches fairness, honesty, and empathy and it's simply a cut above other kids cartoons. Several cuts above.

0xABADC0DA

vor 13 Jahrendiscuss

> Compare Rust where, unless you have explicitly used the unsafe features of the language, all pointers are guaranteed non-nil and valid. .... The type system guarantees you have considered both possibilities so there's no such thing as a runtime null pointer dereference.

On the other hand, you end up with deeply nested code and it is hard to follow. I did some grepping on clang and rustc, and in clang the rate of blocks within other blocks decreases (the deeper the nested block, the less chance of it having a sub-block in it). In rustc the rate is constant, no matter how deep the nesting you have the same rate of having sub-blocks.

Not having NULL and using pattern matching can eliminate NULL pointer exceptions, but the cost is code that is harder to read. The memory ownership in Rust is great, but I doubt it will ever be popular by common folk due to this ML stuff.

0xABADC0DA

vor 13 Jahrendiscuss

> [Android] provide the isolation by creating a new user account for each app and by default apps get no permissions.

That's ok, but if the app ever manages to get more permissions then it may be able to keep them (set-uid shell for example, or keeping a socket open past being permitted to use the network, or holding some token, etc). I don't know how much of that you can do with Android per se, but in general it's not enough to use programmatic permissions like that.

Another factor necessary for security is non-interceptable input. This is part of why iPhone has a physical button for going to the home screen, so that it is not possible to fake a home screen. With a software button some app could go fullscreen and present a bogus button and then use a fake home screen to trick users (it wouldn't be easy but possible).

So a huge missing factor on desktop OSes is missing hardware support for input to the OS. Windows kind of has this with ctrl-alt-del, where you can log in without any possible fake login screen. Instead of "caculator" or "play/pause" there should be special buttons that only input to the OS and are not readable by applications. For instance instead of a Gnome dialog box asking for your password to approve some change the user should press the "secure ok" key on the keyboard.

0xABADC0DA

vor 14 Jahrendiscuss

Another way not mentioned yet to get normal URLs is to just use noscript. If you block scripts from google.com then you get normal links.

0xABADC0DA

vor 14 Jahrendiscuss

The timer still exists and leaks memory until the timeout expires. For instance if you write an interactive command-line tool reading one character at a time from stdin with a 5 minute timeout it works fine when used interactively, but if you cat a file to it then it explodes memory (because a timer exists for 5 minutes for every byte read).

This is a language designed for concurrency where there's no way to have an efficient timeout for blocking operations. Blocking operations and timeouts go hand-in-hand (select(), poll(), pthread_cond_timedwait(), etc) so why doesn't "select{}" have a timeout clause? It makes no sense. Not even to mention what happens when the system time changes by a lot (your app probably gets hosed).

0xABADC0DA

vor 14 Jahrendiscuss

> The people responsible are representatives (in one way or another) of the United States of America. Land of the free. Home of the brave.

I don't get this at all... Harvard fellow uses MIT's network surreptitiously to violate the terms of service to download a nonprofit's entire database and then give it away for free, putting them out of business. Gets busted and charged with crimes. Where's the problem here?

Ok the prosecutor may have been overzealous, but we do have an adversarial system and it was Swartz's bad decisions that brought the hammer down. They didn't plant drugs on him. He wasn't doing it to feed his family. Sorry to all the people here that knew him personally, and to whom this is a personal tragedy, but this is not the kind of travesty of justice that you are making it out to be.

0xABADC0DA

vor 14 Jahrendiscuss

If you think you can do asyncMap in Google Go, without casts and without manually collecting multiple return values, by all means show us the code. I would find that really interesting.

0xABADC0DA

vor 14 Jahrendiscuss

Even so why would you write that boilerplate code out each time?

Something like this would work even better:

    result = src.asyncMap { |e| dowork(e) };

Except Google Go returns several values instead of tuples, so you can't just collect all the results as-is. And with no generics it would be annoying to actually use e and the result, since they would need casts. Too bad.

0xABADC0DA

vor 14 Jahrendiscuss

In IE10 the JavaScript is multithreaded... there's a separate thread for JS parsing, compiling, and garbage collection. As far as I know this is the only browser with a threaded JavaScript VM. So the skipping frames is probably because the rendering can be done independently from running JavaScript, and the core in use is probably some quirk like the benchmark creating a few objects on a timer, causing the GC to run on another thread -- that kind of thing can be fixed pretty easily, either by tweaking the benchmark (if it were publicly available) or by Microsoft fixing IE.

I haven't actually used IE10 yet, but I think you'll find this new architecture makes overall browsing more responsive and smoother than Chrome.

0xABADC0DA

vor 14 Jahrendiscuss

The real problem is the software libraries are just as hard.

Take OpenSSL for example... it's almost easier to learn the crypto than to figure out the API. Here's a good one: an SSL read/write operation can fail with more than one error, and if you don't clear or loop through all the errors then the next operation will fail because of the previous errors -- even if it succeeded. Or just try getting it to work with non-blocking sockets, you finally believe it is working and surprise it fails only once the network gets saturated. Or hours later when it renegotiates the crypto.

And you still have to know all the crypt terms to use it. What's a PEM? A BIO? PKCS? DHparams? What's "ASCII armor"? X509? Did SSL_library_init() add weak algorithms? Why do I have to know this just to create a secure connection?

Most of blame for crypto problems belongs to the libraries not the developers using them.

0xABADC0DA

vor 14 Jahrendiscuss

> P4 would have to be running at over 20GHz to match what the i7 is doing on a per-core basis.

Seems to me memory getting 10x more bandwidth and cache getting 8x larger probably accounts for the majority of the performance differences between these processors not instructions per cycle, which I think has gone up by more like 2x.

So a Pentium 4 with current memory and cache would need to be more like 8 Ghz if it scaled linearly like that (P4 had ~3 instructions per cycle, i7 ~7-8).

http://en.wikipedia.org/wiki/Instructions_per_second

0xABADC0DA

vor 14 Jahrendiscuss

The only actual proper thing in this whole affair was Apple's lawsuit. As Samsung was copying them right down to the shape of the charger Apple felt they had a real case. They lost, but disputes are supposed to be settled in court when the parties can't come to an understanding.

- Samsung slavishly copying Apple's designs

- The Judge issuing a order designed to embarrass Apple

- Apple posting a snarky letter of the law notice

- Hacker News posters like in this thread

...these things are childish and immature. Grow up.

0xABADC0DA

vor 14 Jahrendiscuss

> Sure you can. Spawn a child process ...

This is exactly what I was talking about. You can't even admit facts like that Java has dynamic loading and a security model and that Google Go does not. You're simply delusional in this respect.

0xABADC0DA

vor 14 Jahrendiscuss

> > On the other hand, there are plenty of things you can do in Java that are simply impossible to do in Go.

> Depending on what you mean by "do" ...

Oh, I don't know, maybe dynamic code loading or secure sandboxing of code? For instance you can compile a custom Google Go without disk IO, but you can't have an app that loads plugins much less one where the app can do IO but the plugin can't.

These may not be the wisest or most useful of features for "systems" programming, but you have to admit that there are real things Java can do that Google Go cannot.

I think Google Go advocates put blinders on like agentS because if they actually objectively looked at the situation they would have the same thing to say as others do about Google Go: "meh".

0xABADC0DA

vor 14 Jahrendiscuss

Thanks for the help. I see now you can get the URL by using the source browser then clicking 'checkout' to get the svn checkout URL.

I just wanted to check out the source, but setting up an Ubuntu VM to isolate gclient and that other nonsense was way too much work.

0xABADC0DA

vor 14 Jahrendiscuss

I don't get it why they make it so difficult to get the source code.

TypeScript:

    typescript.org
    click "Get the source code"
    click "Download"

Dart:

    dartlang.org
    click "Download now"
    click "Check out" the source code
    click PreparingYourMachine
    wget http://src.chromium.org/svn/trunk/src/build/install-build-deps.sh
    bash install-build-deps.sh
    install 32-bit dev libraries
    svn co http://src.chromium.org/svn/trunk/tools/depot_tools
    export PATH=$PATH:`pwd`//depot_tools
    install jdk 1.6
    gclient config http://dart.googlecode.com/svn/branches/bleeding_edge/deps/all.deps
    gclient sync

Seriously just to get the source you have to run two downloaded programs, any linux besides Ubuntu requires extra work, and even still it comes with some pre-built 32-bit binaries which apparently are compiled as part of another project. It's madness.

They say it's so complicatd because Dart is part of Chromium, but Firefox has a direct hg link -plus- hg bundles (repository snapshot).

0xABADC0DA

vor 14 Jahrendiscuss

- Slashdot has the best moderation to show you the best posts.

- Reddit has best conversation because the red envelope tells you of replies.

- Hacker News has the best audience.

If these were combined into one site it would be hella cool, but unless HN evolves the tech I can tell you what site I won't expect to be around many years from now. Blacklisting unsavory contributors and deleting posts is only going to work to maintain standards for so long.

0xABADC0DA

vor 14 Jahrendiscuss

Yes. Your filter bubble won't let you know that anybody else finds it creepy. "If you like, you can repeat the search with the omitted results included."

0xABADC0DA

vor 14 Jahrendiscuss

How would this be different in a different concurrency model?

That was actually the point. You have the same space considerations. Being coroutine instead of native thread is just a small constant factor... if this factor is important then you are almost certainly doing it wrong.

comments