Hacker Newsnew | past | comments | ask | show | jobs | submit | worksonmine's commentslogin

> "Dont trust google" imo is the wrong response here.

Straw man. The argument is that by installing random extensions you trust anonymous developers *because* Google doesn't audit. I'll cite the parent to spare you the effort of reading it again:

> The Chrome Web Store is basically unregulated and Google doesn't care.

Yes, I trust the contents of the medicine I buy at the drug store more than I trust the drug dealer on the corner. That's why they hand out test kits for free at raves.


Debian stable. If you need something to be on the bleeding edge install it from backports or build from source. But keep most of your system boring and stable. It has worked fine for me for years.

As long as you do regulary updates of your debian stable, you are not secured against supply chain attacks.

I don't think you understand Debian. There's a new release every 2 years. A few months before every release there's the so called package freeze on the testing branch. The version the packages are on at that point that's the version they will have for the next stable release. Between releases the only updates are security updates.

Do you mean I should worry about the fixed CVEs that are announced and fixed for every other distribution at the same time? Is that the supply-chain attack you're referring to?


Please elaborate, what's so complicated about it?

Cool, but I wonder how many of those the website call developers are actual developers writing production code vs managers who believe they wrote the next big thing.

It would be interesting to try to dig deeper and categorize the comments. Not everyone on HN is a developer.


Thank you, much appreciated.

Of course, not everyone who appears on HN's front page is an experienced developer, and I'm not a statistician. I should note that the data underwent filtering and ideally it didn't count the managers' fluff.

This task is inherently impractical, even with comments, nobody should care about averages. If you want the real experts' opinion, go to the experts. https://youtu.be/-0MD3Jn60fw?t=130

I hope people understand that it's a meme website lol.


Does this apply to creators that aren't even in the Apple ecosystem or is it only for the patreons paying through the iOS app? What if everyone moved to the website?


> Just about everything I'd want to do in a startup appears illegal or otherwise infeasible in the EU because of the morass of data and AI and energy regulations.

Sounds like you're doing some shady, disgusting bullshit or you're exaggerating the regulations. I hope it's the latter.


i understand it from a neutral perspective.

building a simple business in south east asia is drastically easier. there are effectively no privacy laws, no class action lawsuits (a big US problem not EU), no gdpr, energy is cheaper, no punitive labour courts, much looser zoning laws. almost no restrictions on international trade, no withholding taxes, no major issues with transfer pricing, no capital gains taxes, relaxed packaging laws. of course, there are different challenges.

When you go from an open market to EU mode it is insanely stressful having to suddenly deal with these enormous regulatory regimes that simply dont exist anywhere else, and to figure out how to deal with them. this stress is an energy cost, which becomes a capital cost, which makes it much more difficult for small businesses to be created. I also find supranational regulatory regimes difficult to understand, unlike other parts of the world where each country has its own law and thats it. I think its generally a good thing for the people who live there though!

when i am driving around in ASEAN i don't look at my speed. in EU i am anxiously making sure i am 1km/h below the limit to avoid a fine in the mail.


ok bro I think you might want come down off your high horse and mingle amongst the people again


I'm on a high horse because I like that the EU tries to regulate big tech? I wish they went further and actually enforced it. Some of you seem to live in a parallel universe.

Elaborate what's so bad about the EU instead of assuming who I am or how I live. I'm criticizing your ideas, not your person. Make some effort and do the same, "bro". Don't be such a stereotype.


Would you still use your car if you ended up in the wrong destination half the time?


Yes, because I can drive to the other end of the state in an afternoon. Then if I get lost, I can just course correct.


Generating lots of pollution, cost, jams, noise and accidents globally. Not all cities need to be made for cars, right tool for the job etc.


Have fun getting stuck in a loop when it insists your destination exists in a place it doesn't.


Would you use your car if you ended up in the right destination 100% - epsilon of the time? Yes, you would.

Or do you suppose this is the best AI will ever get?


Parent wasn't referring to a possible future, but present time. If we get AI I can trust 100% that's another discussion. For now I don't see it and I don't think LLMs are the solution to that problem, but we'll see.


Sometimes there are reasons to separate projects. I wouldn't put a scraper or pdf generator with the main application.

There are benefits to keeping some things small and isolated. Teams that have problems with micro services are doing it wrong.


> I wouldn't put a scraper or pdf generator with the main application.

I would. It can be in the main executable just under a different subcommand.

> There are benefits to keeping some things small and isolated.

Nobody is saying otherwise. It's just that the downsides are almost always bigger.

> Teams that have problems with micro services are doing it wrong.

How so? Some of the disadvantages are inherent to the idea of microservices, e.g. the additional orchestration complexity.


> I would. It can be in the main executable just under a different subcommand.

Executing user code (pdf generator) could potentially be a security concern, isolating it has it benefits.

> the additional orchestration complexity.

This would be an example of doing it wrong. A healthy microservice fails gracefully and latency can be minimal.


You mean the browser where the result was mostly faked and exaggerated?


Last time I did it in around 2020 the reasoning behind every package, and the meaning of most compilation flags was explained. It was a good experience. Yes it works in a VM. A tip is to create regular clones as checkpoints if you fuck something up along the way.


I did LFS on hardware for advanced operating systems in college. After messing up an early step and having to torch it midway and start over, I made the entire LFS build directory into a local git repo. It was not the best use of git and there are better tools, but it did allow me to revert a mistake later and saved me time. So I call it a success.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: