Hacker News, Distilled

AI powered summaries for selected HN discussions.

Page 638 of 797

Did scientists revive an extinct animal or just breed a less stripey zebra?

Uncertainty About the “Quagga” Revival

  • Thread notes the project’s own admission: only upcoming genome sequencing of the re‑bred animals can show how close they are to real quaggas.
  • Several argue this is more “less‑stripey zebras” than true de‑extinction; genetically they’ll remain much closer to modern zebras than to historical quaggas, limiting scientific value.

Motivations for De‑extinction

  • Strong skepticism that mammoth/quagga efforts are driven by ego, spectacle, and money, with climate or conservation framed as retroactive justifications.
  • Others defend “doing cool stuff” as a core driver of science and technology, comparable to space exploration, and see nothing wrong with mixed motives (curiosity, fame, funding).

Climate and Ecosystem Arguments

  • Proponents: resurrected mammoths could help restore Siberian grasslands and sequester carbon; similar logic used for reintroducing beavers, bison, and wolves elsewhere.
  • Critics: see this as a “solution in search of a problem,” doubt mammoths’ survival in altered climates, worry about poaching, untested ecological impacts, and availability of cheaper, targeted climate interventions.
  • Disagreement over whether suitable “mammoth steppe”–like habitats still exist.

Conservation Priorities and Resource Allocation

  • One side: de‑extinction risks diverting money and attention from protecting existing species and habitats; better to stop ongoing extinctions first.
  • Other side: calls this a false dichotomy or “lump of labor” fallacy; funding sources and motivations differ, and high‑profile megafauna can amplify support for broader conservation.

Ethical and Welfare Concerns

  • Worries that revived, intelligent social animals could suffer (poor adaptation, isolation, “endling” scenarios).
  • Others argue animals can be raised and trained; uncertainty is inherent in experimentation.

Genetics, Selective Breeding, and Dogs

  • Long subthread on poodles, inbreeding, and “hypoallergenic” claims used as analogy: selective breeding can create unhealthy bottlenecks, and phenotype similarity doesn’t equal genetic or ecological equivalence.
  • Applying similar narrow selection to recreate quaggas may reduce genetic diversity rather than increase it.

Biodiversity, Extinction, and Modeling

  • General agreement that biodiversity has value, but debate over how to quantify it and how reliable extinction‑rate models are.
  • Examples (bananas, chestnut trees) used to show long‑term economic value of genetic diversity, supporting robust conservation—even if de‑extinction remains costly and speculative.

Voyager 1 breaks its silence with NASA via radio transmitter not used since 1981

Feasibility of a “Voyager 3”

  • Consensus: we could build a more capable outer‑solar‑system probe, but not one that “catches up” quickly to Voyagers with current tech.
  • Gravity assists from the giant planets — especially Jupiter — provided most of Voyager’s speed; similar rare alignments for a multi‑planet “Grand Tour” won’t recur until the 22nd century.
  • Some argue we could slightly beat Voyager’s speed using optimized Jupiter assists, ion propulsion, or future solar‑sail / near‑Sun Oberth maneuvers; others say gains wouldn’t justify the cost or delay.

Propulsion, Gravity Assists, and Speed

  • Gravity assists vs Oberth effect were clarified; Voyagers used assists without big burns at closest approach.
  • Ion engines have very high specific impulse, but their low thrust makes them poorly suited to classic high‑impulse Oberth maneuvers.
  • Nuclear propulsion concepts exist on paper; main obstacles are cost, regulation, launch safety, and politics more than basic physics.

Power Systems and Nuclear Tech

  • Voyager uses Pu‑238 RTGs: long‑lived, no moving parts, but low power and decaying output (from ~470 W to ~210 W).
  • Stirling radioisotope generators could quadruple electrical efficiency but add moving parts and potential wear; long‑duration reliability is debated.
  • Longer‑lived isotopes (e.g., Am‑241) trade half‑life for lower power density; combining them with Stirling engines might extend mission lifetimes.
  • RTGs are constrained by Pu‑238 scarcity and safety/political concerns; many newer missions use large solar arrays instead.

Engineering Philosophy and Longevity

  • Several comments highlight Voyager and Apollo hardware as examples of extreme reliability engineering: parts selected and tested for maximal lifetime, with significant redundancy.
  • Debate over whether older engineers were “smarter” or just operating under tighter constraints that forced rigor and simplicity.
  • Some see modern software/hardware practices (abstraction, rapid change, cost focus) as less reliability‑oriented; others note that you don’t want every system engineered to deep‑space standards.

Planetary Alignments and Mission Design

  • The 1970s outer‑planet alignment enabled a single spacecraft to visit four giants using chained gravity assists, drastically cutting fuel needs.
  • Without such an alignment, you can match Voyager’s final speed with clever trajectories or multiple separate missions, but not easily exceed it by a large margin.
  • More exotic multi‑pass orbits (e.g., adding Pluto) are theoretically possible but would require prohibitive time, reaction mass, or dangerously close flybys.

Why We Don’t See a Fleet of Deep‑Space Probes

  • Launch costs are now lower, but major expenses remain in probe design, testing, operations, and scientific data analysis.
  • Launch windows and trajectory complexity limit how many “good” missions can be flown.
  • There’s disagreement over whether mass‑produced, largely identical probes could radically cut costs, or whether mission‑specific designs and complexity limit such economies of scale.

Nuclear vs Solar for Landers (e.g., India’s Vikram)

  • Questions about why some landers use short‑lived solar power instead of RTGs.
  • Answers: Pu‑238 is scarce and politically sensitive; RTGs are heavy, low‑power, and expensive; solar is cheap, light, and sufficient where sunlight is available, especially for short‑lived missions.

Cultural Reflections and Scientific Value

  • Many express awe that 1970s hardware still works and can be “rebooted” after decades, calling Voyager one of humanity’s greatest experiments.
  • Others note disappointment that broader spaceflight (e.g., human expansion into the solar system) has advanced far less than 1960s expectations.
  • Current data return is modest but scientifically “invaluable” because Voyager is our only instrument in that region of interstellar space.

The Silurian Hypothesis

Context and Prior Threads

  • Multiple past HN discussions and the original Silurian Hypothesis paper are referenced; this topic recurs every few years.
  • The linked piece is treated as speculative but fun: “most interesting hypothesis likely to be false,” yet worth exploring.

What Counts as “Civilization” and “Intelligence”

  • Strong disagreement over definitions: cities vs. complex societies vs. mere intelligence.
  • Some argue urbanization and economies of scale are key; nomadic or pastoral groups are disputed cases.
  • Ant and bee colonies, lichens, prairie dogs, and ant supercolonies are raised as “city-like” but usually not granted full “civilization” status.
  • Several note that many definitions boil down to “sufficiently like humans.”

Fire, Energy, and Technology Bootstrapping

  • One line of argument: mastery of fire is the crucial divider, because it unlocks external energy, smelting, chemistry, and later tech.
  • Others counter that there may be alternative paths (e.g., biotech-first civilizations) and that no single “line” is definitive.
  • Language, abstract thought, and long lifespans are also suggested as key ingredients.

Cephalopods as Candidate Civilizations

  • Octopus “cities” (Octopolis/Octlantis), tool use, group hunting, and problem-solving are cited as evidence of impressive intelligence.
  • Limits highlighted: short lifespans, semelparous reproduction (dying after reproduction), mostly solitary behavior, and uncertain cultural transmission.
  • Some argue color-pattern communication could be as information‑rich as speech; others doubt it currently supports abstract, cumulative knowledge.

Detectability in the Geological Record

  • Broad consensus: fossils and preserved structures are extremely rare relative to all organisms/structures that ever existed.
  • Earth’s surface is constantly recycled by tectonics, erosion, and sea‑level change; most cities and infrastructure would vanish over millions of years.
  • Debate over whether worked stone, reinforced concrete, or isotope anomalies would still be detectable; some say yes, others say erosion and subduction win.
  • Comparison with dinosaur fossils: a few preserved individuals from vast populations; similar rarity could hide a short‑lived civilization entirely.

Ancient Climate Events and Prior Civilizations

  • The Paleocene–Eocene Thermal Maximum is mentioned as a speculative analogue to anthropogenic warming, possibly from an earlier industrial civilization.
  • Counterpoints: fossil fuels we burn formed long before that; prior large‑scale hydrocarbon use should leave distinct depletion and chemical signatures.
  • Thread generally treats this as an entertaining but very low‑confidence idea.

Messages to Future Civilizations

  • Multiple creative proposals: encode messages in DNA, radioactive patterns in crust, large‑scale lunar engineering, or durable lunar artifacts.
  • Acknowledged challenge: millions of years is an extremely long timescale; survival and recognizability are both uncertain.

Space and Orbital Artefacts

  • High‑orbit satellites might last millions of years, but not billions; impacts, radiation, and orbital evolution erode evidence.
  • Existing Earth–Moon dynamical changes are cited as evidence that nothing in orbit is truly permanent.

Alternative Earth Civilizations “Right Now”

  • Some speculate that non‑human civilizations (e.g., ants, bees, octopus colonies) might already exist under broader definitions.
  • Others insist humans would likely end up in conflict with any comparable civilization, given historical patterns.

Meta: Skepticism, Conspiracy Thinking, and Discourse

  • Several comments lament that playful speculation (Silurians, Atlantis) now gets entangled with flat‑earth–style conspiracies and “professional debunking.”
  • Others argue vigorous fact‑checking is necessary because many people now genuinely believe such ideas.
  • There’s tension between wanting open, imaginative discussion and resisting misinformation.

How Chordcat works – a chord naming algorithm

Context-free chord analysis & its limits

  • Many argue that analyzing chords in isolation is inherently weak.
  • Good chord notation is seen as contextual: it should reflect key, progression, voice leading, and even genre.
  • Baroque and modal examples are mentioned where vertical “chord at a moment” analysis fails; function comes from voice leading instead.

Slash chords, inversions, and bass context

  • The algorithm is said to mishandle slash chords (e.g., G/C), often relabeling them as suspensions.
  • Several comments stress that the bass line and voicing strongly affect how a chord should be named.
  • Debates arise over whether some voicings are better seen as slash chords (C/E, G/B) vs reinterpreted triads with altered intervals.

Chord naming ambiguity & enharmonics

  • A recurring criticism: mapping an unordered set of notes to “the” chord name is ill-posed.
  • The same pitch set (e.g., C–E–G–A or A–C–E–G) can legitimately be multiple chords (C6 vs Am7), with the “right” name depending on key and function.
  • Enharmonic spelling (e.g., B# vs C) matters for theoretical correctness and implied scales, but the algorithm ignores this.

Jazz, altered chords, and the “Hendrix chord”

  • Extended and altered chords expose notation ambiguities (e.g., #9 vs b10, or labeling the Hendrix chord).
  • Some prioritize scale implication and functional role (dominant vs minor) over conventional labels.
  • There’s disagreement on which chord symbols best communicate improvisational context.

Beyond chords built on thirds

  • Several point out that chords are not always tertian: cluster chords, quartal/quintal harmony, polychords, and barbershop-style 7ths complicate any “built on thirds” assumption.
  • Debate over whether thirds have a deep physical basis (via harmonic series) or are mainly historical/cultural.

Keys, scales, and 12-tone structure

  • Some suggest that at minimum the algorithm should infer or take a key to disambiguate roots and common spellings.
  • Side thread on why the 12-tone system and diatonic patterns (2212221) matter; some see largely historical reasons, others point to consonance patterns and global parallels.

Algorithmic extensions & tools

  • Ideas proposed: wrap the chord-namer in a Hidden Markov Model or similar probabilistic model to use chord-to-chord transitions.
  • Others suggest factoring in note spacing to detect bass notes and distinguish add9 vs sus2, etc.
  • Existing chord-identification libraries and curated chord sets are referenced as more robust or more narrowly-scoped alternatives.

Language and notation side-discussion

  • A long subthread debates punctuation and comma usage in the article; it morphs into descriptivist vs prescriptivist views on language and readability.

Visual Basic 6 rebuilt in C# – complete with form designer and IDE in browser

Project behavior and limitations

  • Runs a VB6-like IDE and form designer in the browser via C#/Avalonia compiled to WebAssembly; everything is drawn into a canvas.
  • Initial versions lacked syntax error reporting and some control events (e.g., Label Click), and some users couldn’t get simple MsgBox handlers to fire; the author quickly patched these.
  • The language is an interpreter with only a subset of VB6 implemented; no compile-time errors yet.
  • Some menu items are inert or lead to disabled dialogs; no ActiveX/custom controls, add-ins, or full debugging/single-stepping.
  • Load times are long, especially in Firefox or with stricter privacy/fingerprinting settings; some report it appears broken until it finally loads.

Nostalgia and educational value

  • Many recount VB3–6 as their entry into programming and professional work, especially for quick business utilities and small games.
  • VB6’s visual form designer and RAD workflow are widely praised as uniquely productive and beginner-friendly.
  • Several note that this project instantly evokes strong nostalgia, and some want to try running decades‑old coursework or projects in it.

Comparisons to modern stacks and tools

  • Common theme: today’s mainstream stacks (web/JS frameworks, .NET/XAML, Rust/C++ etc.) are more powerful and cross‑platform but far more complex and less approachable than VB6.
  • People lament the loss of simple visual desktop RAD tools; current “low‑code/no‑code” platforms often feel more constrained, locked‑in, cloud‑bound, and expensive.
  • Some argue modern C# WinForms in Visual Studio still offers a very similar drag‑and‑drop experience, though others find .NET as a whole much more complex than classic VB.

Browser vs. desktop debates

  • Some criticize the trend of putting everything in the browser, citing poor ergonomics, heavy runtimes, and fragile behavior under privacy protections.
  • Others counter that browser delivery is what makes people try such demos at all, and Avalonia also allows full desktop builds from the same codebase.

Why VB6-style RAD “died” (as discussed)

  • Explanations offered: rise of the web and SaaS, cross‑platform needs, shifting screen sizes, security/IT lockdown of desktops, piracy concerns, and cultural disdain for “visual” tools among developers.
  • Several point out that businesses often now buy SaaS rather than build small bespoke desktop tools that VB6 once made trivial.

Apple courier may have stolen 2 MacBooks, ... Apple is not going to help

Core incident and responsibility

  • Thread centers on Apple using Uber-style couriers; two MacBooks allegedly stolen in transit.
  • Many argue Apple, as seller, is contractually responsible to deliver or refund, not the customer.
  • Some recount Apple stepping up in similar cases (replacements/refunds), others say Apple stonewalls or ghosts them.

Chargebacks, account lockouts, and consumer protections

  • Key fear: issuing a credit card chargeback may lead Apple to block the card and possibly lock iCloud / Apple ID.
  • Several posters say this undermines the consumer-protection intent of chargebacks.
  • Experiences with chargebacks vary: some report easy, customer-friendly outcomes (often outside the US), others say in Canada decisions skew toward merchants.
  • Some note in UK/EU‑like jurisdictions, law clearly puts delivery risk on the seller; small-claims and trading-standards bodies are mentioned.

Delivery logistics and courier incentives

  • Multiple anecdotes of UPS and other couriers:
    • Packages left without signatures; forged signatures; “delivered” scans without actual delivery.
    • Misdelivered or stolen expensive items (Macs, GPUs, phones) sometimes only resolved after heavy escalation or police involvement.
  • Posters blame quota-driven, underpaid logistics work leading to corner-cutting and occasional theft; firms treat resulting losses as a cost of doing business, often externalized to customers.

Cloud lock‑in and digital dependence

  • Significant concern that loss of an Apple/Google/Meta account can be life-disrupting (email, photos, app stores, health data).
  • Some advocate “de-cloudifying”: personal domains for email, self‑hosted or alternative photo storage, local IoT control, and tested escape hatches from major platforms.

Legal recourse and practical steps

  • Suggested avenues: chargeback, small claims court, consumer regulators, sometimes involving police.
  • Some Canadians express pessimism about the effectiveness and speed of local courts and police.

Trust in Apple, buying patterns, and OS debates

  • Several say they will only pick up Apple gear in-store going forward; others sworn off Apple entirely.
  • Some defend Apple based on positive support experiences; others see a pattern of poor accountability.
  • Side debate: whether Apple’s ecosystem lock-in justifies its problems vs. moving to Linux/other platforms; disagreement over Linux’s suitability for average users and setup/maintenance burden.

I sent an Ethernet packet

Hardware-level Ethernet and Bit-Banging

  • Several commenters discuss the dream of “bit-banging real protocols” at very high speeds, pointing to practical limits once signals reach tens or hundreds of MHz.
  • FPGAs are repeatedly cited as the realistic answer for flexible high-speed I/O; above ~1 GHz, transceivers become expensive and complex.
  • RP2040/RP2350 PIO is highlighted as powerful for high-speed output (100–300 MHz), but commenters note serious limitations for reliable high-speed input due to lack of clock recovery and instruction-cycle constraints.
  • Examples include attempts to bit-bang Ethernet, FM radio sampling, and ad‑hoc video output (VGA/DVI/HDMI) on microcontrollers.

Frames vs Packets vs Datagrams

  • A long subthread debates terminology: Ethernet frames, IP datagrams, TCP segments, and generic “packets.”
  • Some argue for strict correctness; others note that in common practice “packet” is used loosely for “whatever is on the wire,” especially since typical deployments map 1 Ethernet frame ≈ 1 IP datagram.
  • The tone ranges from pedantic to playful, with some meta-discussion about whether such nitpicking is useful or off‑putting.

Microcontrollers, Ethernet Chips, and Alternatives

  • Many suggest MCUs with built‑in Ethernet MACs (e.g., STM32F4, ESP32 variants) instead of external ASICs like W5100/W5500, generally for performance and simplicity.
  • Others defend external chips as great for hobby projects and for learning, even if not “state of the art.”
  • Some report reliability issues with W5100-based Arduino setups; others share success with ESP32-based Ethernet modules (e.g., WT32-ETH01).

Learning Networking “From Scratch”

  • Multiple commenters share experiences implementing Ethernet/TCP/IP in FPGAs, 8-bit MCUs, or Linux using raw packet sockets, AF_PACKET, AF_XDP, or tun/tap interfaces.
  • Recommended learning tools include Wireshark, classic RFCs (e.g., router requirements), and hands-on experiments like custom routers or bare-bones echo servers.
  • There’s debate over whether low-speed or hobbyist projects meaningfully prepare one for 10 Gbit/“hard mode” designs; some say fundamentals transfer, others say high-performance work is a different discipline.

Tool-Building, 10x Developers, and Process Tension

  • A large subthread centers on the value of building custom tools and exploratory projects (like a hand-rolled stack) versus sticking strictly to tickets and existing libraries.
  • Many see tool-building as a core “superpower” that pays off in debugging and productivity; others argue employers rarely want to fund it directly.
  • There’s disagreement over “10x developer” narratives, burnout, and whether exploration should be explicitly sanctioned or quietly done in the margins.

Behaviors reveal sophisticated tool use and possible “pranking” among pachyderms

Elephant tool use, memory, and social behavior

  • Elephants using hoses as showers and kinking them to interrupt others’ showers is seen as advanced tool use “by animal standards,” even if trivial for humans.
  • Commenters note elephants’ strong emotions and memory: stories include herds grieving for human caretakers, an injured elephant seeking help from rangers, and elephants allegedly targeting a former poacher’s funeral and home.
  • Some see these “revenge” stories as evidence of planning and scouting; others are skeptical, pointing to collateral damage and more mundane explanations.

Animal emotions, humor, and play

  • Many argue animals clearly enjoy “pranking” and play: magpies teasing a fox, crows sledding or thrill-seeking, gibbons taunting tigers, penguins throwing stones, dogs manipulating other dogs to reclaim toys.
  • Several suggest at least some animals understand humor or comic effect, especially social, intelligent species (elephants, dogs, corvids, parrots, horses, cats, some birds).
  • One view: acknowledging how sentient animals are would make our treatment of them (e.g., farming) morally uncomfortable—but many admit they won’t change habits.

Consciousness and intelligence debates

  • Some claim humans are “not that different” from other animals and that most emotions are shared; others emphasize that human uniqueness remains plausible and contested.
  • There is disagreement over how much language and “inner life” non-humans have, and whether intelligence tests are anthropocentric.
  • Discussion extends to whether animals (and even plants) might have underappreciated consciousness or cognition; skeptics insist some form of neural network is needed, while others highlight forest communication networks and slime molds solving mazes and “farming.”

Play and evolution

  • One camp views play as an evolved training mechanism for hunting, escape, and environmental mastery; another warns that assigning adaptive “functions” to every behavior easily becomes unfalsifiable just-so stories.
  • Some suggest play may be partly or wholly an unintended byproduct, even if it can be co-opted for survival.

Lateralization and handedness

  • The idea of “left-trunked” and “right-trunked” elephants prompts discussion of lateralization across species, from snails to fundamental physical chirality, though links between molecular chirality and behavioral handedness are disputed.

Meta and miscellany

  • Brief side threads cover zoo elephants being kept indoors in German winters, repost/title norms on HN, and comparisons between human and animal difficulties with hypotheticals and humor.

Apple threatened workers over their talk about pay and remote work, feds charge

Access to the Article

  • Original Mercury News link is hard paywalled.
  • An MSN mirror is shared so others can read the content.

Worker Rights vs Company Communication Channels

  • Several commenters agree that in the U.S. workers have a legal right to discuss wages and work conditions (referencing NLRB guidance).
  • There is disagreement over whether this implies employers must allow or support such discussions on company-owned tools (email, Slack, etc.).

“Not Facilitating” vs “Threatening”

  • One side argues:
    • Employees are free to talk, but employers are not required to facilitate those conversations on company systems.
    • Company resources are for work; using them for pay/union talk can be restricted, as long as workers have other ways to communicate.
  • Others counter:
    • Discussions about pay and work issues are inherently “work-related.”
    • Even if companies can set rules about tools, they cannot threaten or retaliate against employees for such discussions.
    • Distinction is made between simply not facilitating and actively threatening, with the latter being the alleged problem in Apple’s case.

Interpretation of NLRB Rulings

  • One camp cites a decision upholding bans on using company email for union organizing, arguing employers need not provide any tools for organizing.
  • Another camp argues the same and prior rulings imply workers must have some practical means to organize, and that courts disfavor purely technical “you could do it if you broke policy” arguments.
  • Debate becomes heated over whether participants are presenting law vs. advocacy, and over where to “draw the line” on using company assets.

Power, Enforcement, and Context

  • Example is given of smaller companies resolving wage complaints constructively when advised of NLRB rules.
  • Large firms like Apple are portrayed by some as more likely to ignore the spirit of the law because fines are too small to deter them.
  • A long-running, separate legal battle involving another Apple critic is briefly referenced as related context.

Recovering from a kidney donation

Motivations for Living Kidney Donation

  • Several commenters say they donated (or are scheduled to donate) after realizing that many people say they “would” donate but never act, and seeing how low the medical risks are relative to the benefit.
  • Some describe donating to a loved one, others to an anonymous recipient or as part of a chain; both are framed as life-extending for recipients.
  • A few people explicitly prioritize current known need (tens of thousands on waitlists) over hypothetical future needs in their own family.

Experiences of Recipients and Donors

  • Multiple stories of relatives or spouses whose lives were dramatically extended or normalized by kidney or liver transplants.
  • Donor recoveries vary: some report pain controlled mostly with mild analgesics and 4–6 weeks of fatigue; others describe longer-term energy loss or complications that require ongoing monitoring.
  • Dialysis and waiting for a match are portrayed as brutal and uncertain, making successful transplant feel transformative.

Medical Risks, Recovery, and Physiology

  • Kidney donors typically leave hospital within 1–2 days (for laparoscopic surgery) and face lifting/weight restrictions and fatigue for weeks.
  • Some note that the remaining kidney hypertrophies and overall function can end up around ~70% of original; one person worries about long‑term “wear out,” which is left unanswered.
  • For liver donation, commenters cite nontrivial donor mortality (~2% in one report) and explain that “regrowth” is compensatory enlargement, not perfect regeneration, limiting repeat donation.
  • Claims about organ rejection risk conflict: one commenter’s doctor says modern drugs make rejection rare; another recounts someone who stopped meds and still did well, but this is anecdotal.

Systems, Matching, and Legal Constraints

  • The National Kidney Registry is praised for: priority listing for donors and up to five family members, lost‑wage reimbursement, and starting donation chains.
  • Questions about how long priority lasts are answered: as long as the registry exists, with some constraints on which family member benefits.
  • German rules allowing live donation only to close relations are criticized as overly restrictive; committees exist to check for coercion.

Ethics and Incentives

  • Strong gratitude and moral praise for donors coexist with skepticism about relying on rare altruism.
  • There is a long debate about legalizing compensated organ donation:
    • One side argues current bans cause preventable deaths and that consensual sales (or large tax credits, lifelong healthcare, or high fixed prices) could be ethical.
    • The other side warns of exploiting the poor, power imbalances, coercion, and “selling kidneys to pay bills,” preferring incentives like modest payments for post‑mortem donor registration.
    • No consensus is reached; both see current scarcity and suffering as unacceptable.

Psychological and Social Dimensions

  • Some readers with chronic illness or genetic risks say the thread gives them hope.
  • One commenter reflects on how depression and past exploitation limit their ability to act on strong empathy, and finds validation in seeing others’ altruism without self‑blame.
  • Several emphasize the importance of donor support networks, paid leave, and clear information to make donation viable and less exceptional.

Standing desk might be as bad as sitting all day

Scope of the Study vs. Hype

  • Thread emphasizes the study only assessed cardiovascular risk, not overall health.
  • Many argue the headline “as bad as sitting” is misleading: lack of benefit for heart disease ≠ no benefits at all.
  • Several note that static standing and static sitting are both sedentary; the core issue is prolonged immobility.

Posture, Pain, and Musculoskeletal Effects

  • Numerous anecdotes: standing (or sit–stand alternating) substantially reduced lower-back and neck pain.
  • Others report foot/knee issues or worsening pain from overdoing standing, especially early on.
  • Some prefer high-quality chairs or stools; others find standing more naturally promotes upright posture.
  • Consensus: what feels better is highly individual; posture/comfort benefits are separate from cardiovascular ones.

Movement, Breaks, and Productivity

  • Repeated theme: “the best posture is the next posture.” Frequent change beats any single ideal position.
  • Suggestions include: short walks, stairs, stretching, squats, fidgeting, pacing during calls, and “desk yoga.”
  • Cornell-style advice (sit, then stand and move every 20–30 minutes) is seen by some as health‑protective, but others call it unrealistic and disruptive to deep work.
  • Several claim walking or moving improves thinking and problem solving; others fear regimented breaks would destroy focus.

Walking/Treadmill/Other Active Desks

  • Many advocate treadmill desks, walking pads, under‑desk bikes, wobble/balance boards, and similar tools.
  • Experiences vary: some report big gains in daily steps, weight loss support, and energy; others find typing/mouse accuracy drops, or they injure themselves by doing too much too soon.
  • Under‑desk bikes are mentioned as easier to combine with typing than treadmills.

Work Culture and Systemic Constraints

  • Some argue individuals must build movement into commutes or routines; others counter that car‑centric infrastructure and “butts in seats” culture limit options.
  • Remote work is praised for enabling natural movement: errands between work bursts, walking meetings (when not forced on video), dog walks, etc.
  • Several conclude that no desk configuration alone fixes a fundamentally sedentary work style; regular, enjoyable physical activity outside desk time is still needed.

Australia's 3G Shutdown – Why your 4G/5G Phone is now Blocked

Technical background & rationale

  • 3G does not inherently have better range than 2G/4G/5G on the same frequencies; in some cases it’s worse due to “cell breathing.”
  • Main driver for shutdown is spectrum re-use, not just security. 3G needs dedicated bands, while 4G/5G can share spectrum via Dynamic Spectrum Sharing.
  • Some argue 4G/5G are security improvements over legacy tech like SS7, though SS7 still underpins parts of networks where older layers exist.
  • Others say the move is more about cost/profit than genuine security or service improvement.

VoLTE, emergency calls, and whitelists

  • Voice on 4G/5G relies on VoLTE/VoNR; the spec and implementations are described as under-specified, fragile, and compatibility-prone.
  • Many 4G devices previously used 3G “fallback” for calls, including emergency calls; with 3G gone, they must use VoLTE for all calls.
  • Regulators require that if a handset shows network coverage, it must be able to make emergency calls. Carriers respond by whitelisting only models they certify for VoLTE + emergency calling and blocking others entirely.
  • Some devices can make ordinary VoLTE calls but still fall back to 3G for emergency calls only, making detection and policy complex.
  • Critics argue these are largely software/interoperability issues that could be fixed, but blocking handsets is the cheapest way to avoid liability.

User and infrastructure impact

  • Many non-“legacy” 4G phones, imports, and grey-market devices now show “No Service” despite working previously, including high-end models.
  • AT&T-like whitelisting policies elsewhere are cited as precedent; users lose working phones despite technical compatibility.
  • IoT, POS terminals, smart meters, public transport ticketing systems, and bus/tram/bus tracking have been caught out, in some cases failing when 2G/3G disappeared.
  • Data-only devices are inconsistently handled: some modems are fine; others may be blocked depending on carrier.
  • Tourists may roam successfully on foreign SIMs but can run into issues with local SIMs and emergency calls; behavior is inconsistent and unclear.

Regulation, governance, and comparisons

  • Many blame weak, captured regulators and late, poorly planned policy rather than “too much government.” Others blame capitalism and corporate incentives.
  • Suggested remedies include: long multi‑year transition plans, mandated device support/updates, government-funded handset upgrades, or data‑based emergency apps.
  • UK model: strict rule that if a phone shows signal it must be able to call 999/112, plus VoLTE‑only access to certain LTE bands, which pushed widespread VoLTE support and avoided many of these problems.
  • Germany, US and others kept 2G as a low‑bandwidth voice/backup layer while shutting 3G, seen as a more graceful path.

Broader sentiment

  • Strong frustration at opaque whitelists, lack of notice, and perceived anti‑consumer behavior.
  • Some see this as another example of long‑running telecom and infrastructure mismanagement; others view it as painful but inevitable modernization.

California's gas prices to increase 65 cents per gallon with new fuel standards

Impact of Higher Gas Prices & Equity

  • Many argue a sudden ~$0.65/gal increase is regressive, hitting low‑income and rural drivers with few alternatives.
  • Others counter that current gas prices are artificially low, externalities are large, and higher prices better reflect true societal costs.
  • Some note gasoline is a relatively small part of total car-ownership costs; those too poor for cars mostly rely on transit and are less directly affected.

Electric Vehicles: Adoption, Costs, and Range

  • EVs are already ~20–25% of new CA sales; some point to generous subsidies and used EVs (e.g., Bolt, Model 3) being price‑competitive with comparable ICE cars.
  • Critics respond that many can’t afford any new car, subsidies have been reduced or hard to access, and EV range/charging constraints remain an issue, especially in the US context.
  • Debate over “range anxiety”: current 200–300+ mile ranges are seen as ample for most daily use by some, while others worry about long trips, charge times, and sparse infrastructure.
  • Concerns raised about EV externalities (mining, child labor, heavier vehicles, battery supply geopolitics, tracking/telemetry).

Public Transit and Urban Form

  • Strong support from many for using higher fuel costs to fund robust, safe, and clean transit; comparisons to Tokyo/NYC.
  • Others argue most California metros are low‑density and car‑oriented, making transit unviable without massive, long‑term rezoning and redevelopment.
  • Proposals include ending single‑family zoning, upzoning around transit, and government purchase of low‑density land; skepticism about feasibility and rural relevance.

Taxes, Externalities, and Policy Design

  • Repeated theme: internalizing externalities (CO2, health impacts, pollution) via fuel standards, carbon pricing, or “sin taxes” (parallels to cigarettes and sugary drinks).
  • Counter‑view: once you start taxing every negative externality (sugar, electricity, etc.) you risk runaway complexity and higher cost of living; some urge instead lowering taxes and improving government efficiency.
  • Concern that fuel taxes can create perverse incentives for states to keep gasoline use high to preserve revenue.
  • Suggestions for more targeted schemes: odometer×weight taxes (including for EVs), or taxes tied to electricity pollution.

Electricity Costs, Power, and Utilities

  • Tension noted between discouraging gasoline and California’s very high electricity prices, which can undermine EV economics.
  • Explanations offered: wildfire‑driven grid hardening (burying lines), historic utility mismanagement, and costly nuclear decisions.
  • Some advocate heavy nuclear investment and even socializing utilities; others argue nuclear is uneconomical and would slow a solar/battery‑driven transition.

Health, Environment, and Long-Term Benefits

  • Cited analyses (e.g., Clean Air Act) claim pollution controls’ benefits dwarf costs; participants expect similar health gains from tighter fuel standards.
  • Air quality improvements are valued, especially in smog‑prone basins like Los Angeles, though some note US gains partly came from offshoring dirty industry.

Information Quality and Uncertainty

  • Multiple comments state the “$0.65/gal” figure is speculative, not a formal tax, and rooted in assumptions about how refineries respond to the new fuel standard.
  • Overall impact on prices, driving behavior, EV adoption, and transit use is viewed as significant but quantitatively unclear.

IMG_0416

Overall reaction

  • Many found the project “magical” and moving: a rare look at unedited, non-performative life moments from the early smartphone era.
  • Several compared the experience to pre‑“enshittified” internet: homepages, early YouTube, early TikTok/Vine, pre‑influencer social media.
  • Some felt sadness or nostalgia, seeing it as evidence that the old, less commercial web is gone or fading.

Authenticity, commercialization, and social media

  • Strong theme: contrast between candid, low‑view “just for us” uploads and today’s highly edited, monetization‑driven content.
  • People recall past phases of the web (Usenet, blogs, early YouTube, early TikTok, Periscope, Bambuser) as more playful and less optimized.
  • Discussion of “enshittification”: algorithms, ad pressure, influencer culture, and walled gardens (YouTube, X/Twitter, Reddit) degrading user experience and developer access (APIs, third‑party clients).

Privacy and ethics

  • Some see no issue: videos are explicitly public; responsibility lies with uploaders.
  • Others feel unease or call it a “voyeuristic” breach of privacy, especially given likely misunderstandings of “Share to YouTube” and the ease of accidental public uploads.
  • Debate over consent extends even to historical documents and dead authors; some argue everything eventually becomes cultural record, others emphasize consent as a principle.

Discovery tools and long‑tail content

  • Multiple tools and tricks mentioned:
    • astronaut.io and similar “default filename” explorers, /r/DeepIntoYouTube, random‑video sites.
    • Searching camera filename patterns (IMG_XXXX, DSC_XXXX, MVI_XXXX, GoPro GX01…, etc.).
    • YouTube search operators like before: / after:.
    • yt‑dlp / ytsearch as a lightweight alternative to the official API.
  • Several note that the vast majority of YouTube videos have almost no views; huge cold long‑tail suggests opportunities for storage optimization and new discovery experiences.

Technical details: filenames, copyright, APIs

  • Discussion of the DCF filename standard (8.3 names like IMG_0001, DSC_0001) and camera‑brand conventions; wraparound at 9999 and new folders.
  • Mention of odd/non‑standard schemes (e.g., Pixel timestamp offsets, GoPro’s multi‑file numbering quirks).
  • Clarification that Content ID usually monetizes or tracks rather than outright removes videos; behavior varies by rights holder and region.
  • Complaints that YouTube’s and other platforms’ APIs have become restrictive, pushing people toward scraping.

AI and “IMG_XXXX” prompts

  • Several note that text‑to‑image models often produce realistic, amateur‑style photos when prompted with filenames like IMG_1234.jpg.
  • Debate over whether YouTube videos like these are part of training data; consensus leans toward still‑photo sites (e.g., Flickr equivalents) being more likely, with video frames seen as low‑value training data.

Preservation and “data archaeology”

  • Many express a desire to archive these candid videos before copyright policies or platform changes remove or hide them.
  • Some foresee a role for future “data archaeologists” exploring forgotten online personal media as cultural artifacts.

Web Locks API

Performance & benchmarking

  • One user asks for performance benchmarks, especially vs Rust’s Tokio mutex in WASM.
  • Others suggest writing custom benchmarks and recommend a JS microbenchmarking tool (mitata).
  • Point made that many existing uses aren’t time‑critical, so users may not have measured performance in detail.

API design & ergonomics

  • Several comments criticize the callback-based navigator.locks.request(name, async (lock) => ...) and the lack of an explicit release(); they find “hold until callback resolves” awkward when you want to keep a lock across wider scopes.
  • Others defend the design as safer in a language without RAII, reducing the chance of forgetting to release.
  • Multiple patterns are proposed to emulate acquire() / release() via promises and wrappers; some find these clumsy.
  • Debate over hypothetical using / RAII-style syntax: some view it as clearer, others find RAII “too clever” and prefer explicit blocks or the existing callback.

Relation to Atomics and single-threaded JS

  • Some argue the existing Atomics + SharedArrayBuffer APIs already cover low-level synchronization.
  • Counterpoint: Web Locks are higher-level, origin-wide, and coordinate across tabs/workers without manual postMessage or shared memory, which is less error-prone.

Use cases discussed

  • Coordinating OAuth refresh tokens across multiple SPA tabs so a one-time refresh token isn’t used twice.
  • Guarding IndexedDB writes where transaction isolation is seen as insufficient.
  • Sharing a single WebSocket/SSE connection via a worker.
  • Preventing multiple crypto-mining tabs from competing for CPU.
  • Preventing Edge “sleeping tabs” by holding a lock.

Locks vs leases and deadlocks

  • One view: leases (locks with time limits) are preferable to avoid stale locks.
  • Others argue timeouts introduce non-determinism and unsafe “stealing” of locks; better to detect and handle long waits explicitly.
  • Concern raised that giving JS developers locks may increase deadlocks; response notes these locks don’t block threads, just leave promises unresolved, though affected app code is still broken.

Security, scope & naming

  • Locks are origin-scoped and require secure contexts; commenters link this to modern “secure by default” design and to preventing MITM from abusing same-origin APIs.
  • Worry about DoS if common lock names become well-known and pages intentionally hold them.
  • Some think global lock names are risky; others say global naming matches the “super-global resource” concept.
  • Questions about behavior across separate browsers or private sessions remain unanswered in the thread.

Procrastination and the fear of not being good enough

Fear of judgment and sharing work

  • Many relate to wanting to write or publish more (blogs, HN, social media) but stalling due to fear of criticism or indifference.
  • Several note that most people don’t care or won’t remember; work is ephemeral and should be treated more like a sandcastle than a monument.
  • Some suggest reducing exposure to “opaque masses” (HN, X) and instead sharing with friends, a small community, or not promoting posts at all.

Perfectionism, ego, and “not good enough”

  • Perfectionism is framed as a major driver of procrastination: if only “great” output is acceptable, starting becomes dangerous.
  • A recurring idea: you must accept you will initially produce bad work; even experts have mediocre output mixed with good.
  • Several comments tie this to people-pleasing and fear of conflict; others to ego maintaining a self-image that only “great work” is worthy.
  • Some push back on medicalizing normal insecurity (e.g., “impostor syndrome”) and see over-labeling as a way to excuse avoidance.

Practical strategies for writing and coding

  • Break tasks into very small steps (paragraphs, functions, bullet lists) so the next action feels concrete and non-threatening.
  • Use habit loops: fixed cues (coffee, morning routine), short timed sessions (Pomodoro), and small rewards.
  • Lower the publication bar: write daily, publish frequently, accept that most pieces will be “meh.”
  • Write privately first (notes to self, local journals) and selectively promote only the few pieces you truly like.

Psychology: anxiety, executive dysfunction, and cognitive distortions

  • Some see procrastination as largely about executive dysfunction/ADHD, not “laziness,” citing stimulants, exercise, and dopamine.
  • Others emphasize anxiety as a bodily–emotional loop, or as rooted in earlier experiences of conditional love and perfectionist parenting.
  • Cognitive distortions (catastrophizing, “should” statements, personalization, all-or-nothing thinking) are highlighted as patterns to audit and challenge.

Body, drugs, and lifestyle

  • Several recommend breathing exercises, movement, and outdoor time.
  • There is a detailed but contested discussion of psychoactive substances (alcohol, shrooms, ketamine, MDMA, stimulants): some see them as historically normal coping tools; others stress risks, side effects, and non-sustainability.

Broader reflections

  • Some link school cultures of single-shot, 100%-or-nothing grading to lifelong perfectionism.
  • Others describe “ego dilution,” spiritual or meditative practices, and reframing life around process and contentment rather than achievement.

What's New in F# 9

Perception of F#, C#, and .NET

  • Many commenters praise F# as a beautiful, productive, and readable language, especially for backend, algorithms, and data-heavy work.
  • C# is seen as underrated: productive, easy to teach (especially to JS/TS devs), with strong tooling and cross‑platform support.
  • Some criticize “enterprise-style” C# culture (DI-heavy, reflection, complex frameworks like EF/Spring-like stacks) for over‑abstraction and poor readability, while others argue that’s a team/culture issue, not the language.

Ecosystem, Jobs, and Microsoft Support

  • Major F# downside: few jobs, smaller ecosystem, fewer libraries, and less marketing from Microsoft.
  • Some worry about long‑term dependence on Microsoft, though others point to open-source status and the F# Software Foundation.
  • F# is often used in niche or high‑leverage teams inside .NET shops rather than as a widely advertised primary language.

Tooling, Platforms, and Deployment

  • F# works well on Windows, Linux, and macOS via .NET; parity with C# for non‑Windows-specific APIs.
  • Ionide (VS Code) and Rider are cited as strong F# environments; tooling has improved significantly in the last decade.
  • .NET deployment options discussed: shared runtime, self‑contained single binaries, trimming, and NativeAOT (including for F#).

Language Features and Interop

  • F# strengths: discriminated unions, pattern matching, records, type inference, REPL, pipeline operators, and scripting (.fsx).
  • F# 9: nullable reference interop (T | null) to align with C# nullable reference types; some disappointed this introduces null rather than mapping more strictly to options.
  • Async interop between F# async and C# Task is seen as historically painful; newer task computation expressions and helpers improve this but edge cases remain debated.
  • Tail-call attribute and TCO enforcement are welcomed for correctness.

GUI, Web, and WASM

  • GUI options: Avalonia-based libraries, Fabulous, and others; usage in production seems niche.
  • Web frameworks and WASM options (e.g., Bolero) exist; maintenance activity is mixed but still ongoing.

Learning Curve and Experience Reports

  • Functional newcomers (from JS/Python/Go) often adapt well; OO veterans (C#/Java) may need to “unlearn” patterns and initially find F# less discoverable.
  • Some report F# code as easier to read than Python or C#; others find it visually “ugly” or hard to get into.
  • One long case study describes abandoning a large F#/Fable-based system in favor of TypeScript+Rust due to complex multi-target interop and dependency management.

OpenID Connect specifications published as ISO standards

OIDC servers and real‑world implementations

  • Several implementations are discussed: Keycloak, Apereo CAS, ORY Hydra, Zitadel, Authentik, Gluu, Dex; commercial/self-hosted options like FusionAuth, ADFS; hosted providers such as Okta/Auth0, Google, Microsoft, GitHub, Amazon.
  • Keycloak is widely used but described as a “mixed bag”: powerful and extensible, good for complex policy/certification-heavy environments, but with rough edges.
    • Pain points: inconsistent REST API, weak docs, tricky multi-tenancy, complicated flow customization UI, fragile email templates, non‑trivial branding, storage model making zero‑downtime upgrades hard.
    • Some see it as risky for very small teams without in‑house expertise; others say smaller teams can operate it fine if use cases are simple and someone understands OAuth/OIDC reasonably well.
  • CAS is used as an OIDC provider but supports only a single issuer per deployment; defaults to a rarely supported “nested” claims format.

OAuth, OpenID, and OpenID Connect

  • Multiple comments clarify: OAuth 2.0 is a framework for delegated access; OIDC is a profile on top of it that adds identity and authentication; older OpenID 1/2 (URL-based identity) are largely unrelated and mostly obsolete.
  • Debate over the common slogan “OAuth = authorization, OIDC = authentication”:
    • Some argue it’s useful shorthand.
    • Others say it’s misleading: OAuth 2.0 doesn’t standardize actual authorization models; OIDC is more like a standardized way to attach identity to OAuth flows.

Security, complexity, and evolving standards

  • OAuth 2.0 is criticized as too flexible and historically under-secure (implicit flow, password grant).
  • Newer guidance: OAuth 2.1 drafts, security best current practices, and FAPI 2.0 aim to narrow options and encode safer profiles (authorization code + PKCE, sender‑constrained tokens, PAR, etc.).
  • GNAP (now an RFC) is presented as a modernized successor for certain use cases, but adoption is unclear.

ISO standardization and paywall worries

  • Many object to ISO’s paywalled model, calling it harmful to progress and “law-like” documents that should be free.
  • Others note: in this case OIDC specs remain freely available; the ISO stamp mainly helps in jurisdictions or procurement processes that require ISO-recognized standards.
  • Some fear a PDF‑like scenario where a free vendor spec later becomes paywalled as an ISO-only version.

Identity philosophy and usability

  • Discussion contrasts original OpenID’s decentralized URL identity with OIDC’s more provider-centric model.
  • Some argue “identity provisioning” by large providers is conceptually flawed and fragile (account bans, domain lapses); prefer models closer to attestations or WebAuthn.
  • Others value having a widely adopted, interoperable standard even if it trades off some decentralization.

Salary expectations questions – How should you answer them? (2020)

How to Answer “Salary Expectations”

  • Many advocate not giving a number first; let the employer anchor and then negotiate up if possible.
  • Others prefer stating a firm number or range early to avoid wasting time if bands don’t overlap.
  • Some say to state what you want (or need to live comfortably) rather than what you currently earn.
  • Several warn never to reveal past salary unless it was well above market; it’s seen as a trap that caps you.

Recruiters’ Incentives and Behavior

  • Third‑party recruiters get paid on successful, lasting placements and a percentage of salary, so in theory they want you placed and paid well.
  • Multiple commenters note the stronger incentive is “close quickly and maintain client relationship,” not maximize your pay; a small commission delta isn’t worth risking a lost placement.
  • There is disagreement over how much they will actually push for higher comp in practice.

Negotiation Tactics and Anecdotes

  • Multiple stories of huge jumps (e.g., 90k → 250k → 400k+) by refusing to name expectations, waiting for offers, then asking for more or leveraging competing offers / unvested equity.
  • Others report the opposite: offers always near expectations, no upward movement, or rescinded offers after mild negotiation in the current weak market.
  • Advice recurs: don’t lie about prior salary; use competing offers, strong project stories, or explicit value instead.

Market Conditions and Leverage

  • Several note today’s market (post‑2022) is much tougher: fewer offers, rescinded negotiations, and less room to push.
  • Some argue vertical movement is rare and titles often change without real advancement; others counter that big‑tech promotions to high comp levels are common for a minority.

Location, Remote Work, and Pay Levels

  • Debate over whether hiring in lower‑cost regions (e.g., Poland, Warsaw) is primarily about cheap labor vs. accessing talent.
  • Strong disagreement on location‑based pay for remote roles: some call it pure supply/demand; others call it exploitation and a red flag.
  • Americans paying US‑level rates in Europe are prized; some seek non–location‑adjusted US contracts but are warned about time‑zone and leverage issues.

Comp Structure: Salary, Bonuses, Equity

  • Some hiring managers say they always pay the band maximum but still ask expectations to “position” offers and sell non‑salary aspects (remote, hours, title, equity).
  • Opinions diverge on bonuses: company‑wide vs. individual, and whether they are a good way to reward outsized contribution.
  • Equity at startups is widely viewed as statistically low value for ICs compared to big‑tech or trading compensation.

Legal/Privacy and Data Sources

  • Several mention salary‑history bans in parts of the US; asking “current salary” may be illegal in some jurisdictions, but “expectations” is still allowed.
  • Background‑check products (e.g., salary databases from payroll providers/credit bureaus) let employers verify past pay; this makes lying risky.
  • Opting out is possible but can complicate future credit / large purchases.

Attitudes Toward the “Salary Game”

  • Many see the whole process as adversarial and “stupid,” with employers hiding budgets and employees trying to avoid underselling themselves.
  • Some hiring managers dislike overly aggressive negotiators and will walk away if candidates behave as if it’s a high‑stakes geopolitical negotiation.
  • A recurring theme: know your minimums, factor in non‑salary costs/benefits (commute, housing, risk, WLB), and be willing to walk from lowball or opaque employers.

Hackers use ZIP file concatenation to evade detection

Non-malicious and historical uses of ZIP concatenation

  • Technique predates the current wave of attacks: used for hybrid files (e.g., JPEG cover + ZIP of eBooks; ZIP in JPEG ICC profiles).
  • Some communities reportedly abandoned it after being abused for illegal content, leading platforms to block ZIP-looking images.
  • Related ideas go back to at least the 1990s (zip bombs, JAR/GIF hybrids).

Bypassing scanners in real-world workflows

  • Encrypted ZIPs are a long-standing way to evade email/content filters.
  • Workarounds include: embedding payloads in DOCX/XLSX (ZIP-based formats), base64-encoding binaries, and compress+split+encrypt pipelines (“shred/unshred”-style).
  • Corporate security often blocks “dangerous” extensions but allows opaque or split archives, leading to security theater while still being easy to bypass.

ZIP format ambiguity and parser behavior

  • Core issue: two structures (local file headers vs central directory) can disagree.
  • Some tools scan local headers; others treat the central directory as the sole source of truth. Behavior differs between WinRAR, 7-Zip, and Windows Explorer.
  • Debate over what the spec “really” intends:
    • One side: only central directory entries are valid; extra headers are garbage except for recovery.
    • Other side: spec implicitly allows “islands” of opaque data and append-only modification, for media spanning and streaming.
  • This ambiguity has already led to real vulnerabilities (e.g., hidden add-on files, APK modification without breaking signatures).
  • Several argue for a “strict ZIP” spec with explicit parsing rules.

Format design, splitting, and philosophy

  • Some criticize ZIP for violating single-source-of-truth principles, preferring simpler formats like tar (+ separate compression).
  • Others defend integrated features (central directory, file spanning) as historically necessary and still useful for large or unstable transfers.
  • There’s a Unix-style argument for separating archiving, compression, and sharding vs a pragmatic argument for combining them for random access and usability.

Defensive strategies and limitations

  • Suggested defenses include recursive unpacking vs simply rejecting “weird” archives that don’t match a straightforward forward-scan/central-directory view.
  • Some warn that making tools “smart” (deep recursive unpacking, auto-processing) increases attack surface; only AV should unpack deeply, regular tools should stay “dumb.”
  • Email/HTTP perimeter scanning is justified as defense in depth, but multiple commenters note that trivial transformations (encryption, base64, simple XOR/ROT) already defeat signature-based detection.
  • VirusTotal and many AV products reportedly struggle with nested archives and complex ZIP structures, often for performance reasons.