Hacker News, Distilled

AI powered summaries for selected HN discussions.

Page 700 of 799

GAZEploit: Remote keystroke inference attack by gaze estimation in VR/MR devices

Nature of the Attack

  • Attack infers keystrokes from eye and head movements when typing on the Vision Pro’s virtual keyboard, especially during Persona/FaceTime-style calls where others see a realistic avatar with live eye motion.
  • Some note this is conceptually similar to watching someone’s fingers on a physical keyboard or their eyes over normal video, but the VR setup provides cleaner, more correlated signals.

Mitigation Ideas and Apple’s Fix

  • Many express surprise Apple didn’t initially obfuscate gaze during sensitive input (e.g., passwords).
  • Suggested mitigations:
    • Freeze, blur, darken, or “cloud” the avatar’s eyes while typing.
    • Show closed eyes, sunglasses, or a faint indicator that the face is in a “secure input” mode.
    • Blur the entire screen briefly with a message during password entry.
  • Thread notes Apple has since patched VisionOS so Personas are not shared while using the virtual keyboard.

Debate on Trust, Privacy, and Apple’s Practices

  • Some criticize a recurring pattern: Apple markets privacy, offers opaque security designs, then real vulnerabilities or data issues emerge later.
  • Counterpoints argue that in this specific case Apple did not expose raw eye-tracking data to apps; the leak is via the intentionally gaze-accurate avatar stream.
  • There’s concern that high-fidelity eye tracking could be abused for advertising, health inference, or voyeuristic uses, even if not currently allowed.

Comparison with Other Platforms

  • HoloLens is cited as an example where eye tracking is abstracted: apps get events (“user looked at X”) rather than raw gaze streams.
  • Some see Apple as relatively protective; others call the restrictions paternalistic and limiting for power users.

Practicality and Scope of the Attack

  • Effectiveness depends on users actually using gaze-based typing, being visible in a call, and having a stable avatar view.
  • Touch typists on physical keyboards or users who avoid gaze typing are largely unaffected.
  • Several note the attack is probabilistic and can be degraded by moving the keyboard, different layouts, or not staring precisely at each key.

Officer who ignored NYPD's 'courtesy cards' receives $175K settlement

Nature and Legality of Courtesy Cards

  • Many see the cards as “laminated corruption” or “get out of jail free” cards that create a privileged class above the law.
  • A minority argue the card itself is just speech/membership; the illegality lies in how officers act on it.
  • Some note the practice is openly normalized (even tracked in union rules), which shocks people more than the concept itself.

Selective Enforcement and Fairness

  • Core objection: laws should apply equally; favoritism based on connections, profession, or family is inherently corrupt.
  • Others point out enforcement already relies heavily on discretion and under‑enforcement (warnings, quotas, “driving while black”), so cards are a visible symptom, not the root cause.
  • Some view formalization of favoritism (physical cards) as the point where it becomes clearly prosecutable.

Scope: NYPD vs Elsewhere

  • Commenters say similar practices exist in parts of New Jersey and via special plates/plate frames (e.g., in Massachusetts, California, military plates).
  • Several from Europe and other countries express disbelief; they haven’t seen anything this explicit elsewhere, though informal “I know X” favoritism is common globally.

Whistleblower Officer and Settlement

  • Many believe $175k is too low for an effectively ended NYPD career and long‑term risk of retaliation.
  • Others note it’s roughly 1–2 years’ pay and might provide runway, but the “code of silence” could block future law‑enforcement jobs.

Police Culture, Unions, and Systemic Corruption

  • Numerous comments describe NYPD (and U.S. policing broadly) as gang‑like, cartel‑like, or an “occupying army,” with dirty cops protected and ethical ones punished.
  • The police union is seen as a key driver/enforcer of the card system and broader impunity.
  • Some argue the department is so captured it may need to be “refounded,” though scaling that in NYC is seen as practically difficult.

Analogies, Comparisons, and Reform Ideas

  • Comparisons made to diplomatic immunity (state‑to‑state bargain; still limited), military plates and medals, and “VIP” plates; many stress these are also unfair but at least more formally grounded.
  • Suggested reforms: eliminate courtesy cards entirely, tighten oversight and body‑cam rules, raise standards and penalties for police misconduct, reduce unenforced laws that enable selective stops, and require more officers to live in the communities they police.
  • Skepticism is widespread that DOJ or local politicians will seriously confront the system, given unions’ power and public fear of crime.

SpaceX Astronauts Begin Spacewalk, Putting New Spacesuits to Test

Spacesuit design and EVA execution

  • Many commenters focus on the new SpaceX EVA suits: some think they look sleek and sci‑fi; others find them “bad” or over-designed compared to Apollo/ISS suits.
  • Observations that the suits appear rigid and less flexible; tradeoff noted between higher pressure (shorter airlock time) and reduced mobility and task range.
  • Thermal limits discussed: astronauts had to stay in the spacecraft’s shadow and reported suit temps around 33–34°C, suggesting early‑stage (“v0.1 beta”) constraints.
  • Some debate whether this counts as a full “spacewalk,” since crew were constrained at the hatch rather than free-floating on a long tether.

SpaceX capabilities and vertical integration

  • Mission seen as evidence SpaceX operates like a “commercial space agency,” providing rockets, capsules, ground ops, and even suits as a single package.
  • Vertical integration partly attributed to high legacy vendor pricing and slow timelines; SpaceX reportedly builds many components in‑house to cut cost and iterate quickly.
  • Contrast drawn with “big classical aerospace” seen as slow, over-regulated, and oriented toward pork and legacy contractors.

Costs, competition, and monopoly concerns

  • Disagreement on whether SpaceX’s dominance will eventually make space access more expensive.
  • One side: monopolies raise prices; Boeing struggles and limited US launch alternatives are worrying.
  • Other side: reusability already cut costs vs Soyuz/Shuttle; higher prices would attract competitors (Blue Origin, ULA, Rocket Lab, Chinese firms); companies optimize annual profit, not price per launch.

Environmental impact and ethics of space tourism

  • Initial claim that a Falcon 9 launch emits ~28,000 tons CO₂‑equivalent sparked pushback; critics note this exceeds the rocket’s mass and violates conservation of mass.
  • OP later clarifies this is CO₂‑equivalent and sourced from a Starship analysis, but others provide papers and NASA documents suggesting Falcon 9 and Starship emissions are ~1–2 orders of magnitude lower.
  • Broader debate: whether billionaire space tourism is justifiable given climate impact. Some argue space tourism funds R&D and is negligible vs cars, jets, and power plants; others worry normalization now will make future curbs politically impossible.

NASA, regulation, and public vs private roles

  • Some say NASA should focus on science and advanced tech (reactors, engines, ISRU) rather than expensive, politically driven launchers like SLS.
  • Others emphasize that fundamental research and much of SpaceX’s success build on publicly funded work; private firms rarely fund deep, long‑term basic research alone.
  • Discussion of regulation: necessary for safety and environment, but also blamed for bloated costs and slow progress in aerospace, medical devices, and nuclear power.

Definitions and space law

  • Dispute over:
    • “Spacewalk” = merely going outside the vehicle vs free‑floating.
    • “Space” = above the Kármán line.
  • Debate about future Mars ownership: treaties ban national sovereignty in space, but some argue that de facto control (“only one who can get there/resupply”) is equivalent to ownership; others note vulnerability to blockades if not self‑sufficient.

Other technical notes

  • SpaceX’s Starlink laser links were tested during the mission for video calls, surprising some who thought this hardware was still years away.

Ergo: Erlang-inspired event driven actor framework in Go

Go vs other ecosystems & “batteries included”

  • Several comments praise Go’s rich standard library and “zero dependencies” approach; seen as simpler than Rust’s many competing crates.
  • Others argue external ecosystems can surpass stdlib quality at the top end (e.g., logging, error handling), but are fragmented and inconsistent.
  • Critiques of Go stdlib include: confusing time API and types, lack of simple date/time arithmetic, lack of guaranteed system CSPRNG access, mediocre logging levels in log/slog.
  • Comparisons note that Python/Java/.NET have more “batteries” (GUI, DI, rich collections, plugin systems), but Go’s culture resists “magic” features (reflection-heavy DI, AOP).

Ergo’s design, API, and Erlang integration

  • Ergo is an Erlang-inspired actor framework in Go; commenters like the concept and name but want clearer examples and less boilerplate.
  • Examples exist in a separate repo; the API closely mirrors Erlang/OTP concepts but with Go-style boilerplate and type-switching.
  • There is support for talking to real Erlang nodes, but some Erlang/OTP compatibility has moved to a commercial repo.
  • Some suggest for Erlang integration it may be simpler to use NIFs, ports, or plain network services rather than joining BEAM clusters.

Goroutines vs BEAM processes

  • Key differences highlighted:
    • Goroutines are not directly addressable; communication is via channels, not per-process mailboxes.
    • No built-in links/monitors, no process dictionary, no ability to externally kill a goroutine; termination is cooperative via contexts.
    • Channels can block senders and are capacity-bounded; Erlang mailboxes are unbounded and non-blocking for senders.
  • Ergo cannot fully replicate OTP semantics:
    • Kill only takes effect after the current handler returns (possible “zombie” period).
    • No hot code reloading.
    • No per-process GC; Go’s GC is global.

GC, performance, and hot code reloading

  • Per-process GC on BEAM gives fine-grained pauses and good fault isolation; Go uses a highly optimized global GC with very low pause times.
  • Some argue Go is generally faster and its GC is “good enough” for most workloads; BEAM still wins on predictable, non-bursty latency and isolation.
  • Hot code reloading is absent in Ergo/Go; Erlang uses it heavily in some domains, while Elixir commonly uses limited hot reload for development (e.g., web frameworks).

Use cases and necessity of actors

  • Supporters see actors as a fine-grained tool: parallelizing loops, isolating subsystems (logging, sessions, pools) more cheaply than separate processes + Kafka.
  • A backend engineer with stable gRPC/Kafka systems questions why actors are needed; responses suggest thinking at a smaller granularity than whole services.
  • Some feel that if you truly need robust actor semantics and supervision trees, you should use BEAM languages (Erlang/Elixir) or other actor platforms (Akka, Orleans), not Go.

Critiques: boilerplate and language fit

  • Multiple comments dislike the verbosity and ergonomics of actors in Go compared to Erlang syntax and semantics.
  • Skeptical voices claim frameworks like Ergo fight Go’s philosophy of simplicity and may be misusing the language; others are cautiously optimistic but want better docs and concrete, real-world examples (e.g., supervision trees and database interaction).

Ask HN: Does anyone use sound effects in their dev environment?

Use cases for sound in development

  • Notifications for long-running or awkwardly long tasks: builds, tests, Docker/image builds, CDK/Gradle/Maven, raytraces, data science training, SD-card flashing, remote SSH jobs, etc.
  • Error/success cues: compile/test pass/fail, shell command exit status, terminal command failure, background jobs completing, CI/CD pipeline failures, monitoring alerts.
  • Debugging/tracing: sounds on breakpoints, specific log patterns, mode switches, offscreen effects, timing/order of events, rare code paths, or to avoid switching back to logs.
  • Workflow aids: pomodoro timers, calendar/meeting reminders, network or system health checks, keyboard layout changes, device disconnects, Upwork messages, end-of-day reminders.
  • Non-dev operations: network sonification (e.g., Peep), telescope and trading alerts, syslog/icmp pings, continuity-style ping tests.

Common implementation patterns

  • Shell-level: say (macOS), espeak/spd-say, printf '\a'/BEL, beep, play/sox, simple aliases/functions (; say "done", boop-style wrappers).
  • IDE/editor: built-in sounds in Xcode, VS Code, Visual Studio; breakpoints playing sounds; JetBrains plugins (Grep Console, AnyBar, audible debug tools); Emacspeak auditory icons; Neovim plugins.
  • Services/daemons: local HTTP or FIFO-based sound daemons, background Swift/Python services, Jenkins hooks, Sonos/office-speaker integrations.
  • Specialized tools: React Geiger / audible React render beeps, keyboard-layout chords, “Geiger” allocators, ambient runtime sonification prototypes.

Perceived benefits

  • Parallel feedback channel: can look away from screen, do something else, and get pulled back when events occur.
  • Faster feedback loops: especially with TDD/continuous testing or frequent short builds.
  • Performance intuition: hearing unexpected allocation, render, or syscall patterns; “mechanical sympathy” via rhythm/tonality.
  • Motivation/“juice”: game-like feedback, humor, Easter eggs, nostalgia (RTS announcers, retro sounds) making tedious tasks more bearable.
  • Accessibility: parallels with auditory icons for visually impaired users.

Downsides and opposition

  • Strong contingent that disables all system sounds; finds them distracting, anxiety-inducing, or unprofessional, especially in open offices.
  • Concerns about noise pollution, overstimulation, and “Las Vegas slot machine” environments; horror stories of constantly beeping offices and labs.
  • Terminal bell is widely hated; many immediately disable it.
  • Design challenges: frequent sounds quickly become annoying; infrequent ones are forgotten. Poor sound design (sharp beeps, loud voice synth) is especially criticized.

Design guidance from the thread

  • Favor subtle, short, distinctive sounds (soft clicks, retro bleeps) over loud alarms or voices.
  • Reserve audio for genuinely asynchronous or important events; avoid constant chatter.
  • Consider randomness/variety for fun cues; consistent mappings (per severity/type) for diagnostic cues.
  • Headphones or solo environments are seen as prerequisites for anything beyond very discreet sounds.

Master Hexagonal Architecture in Rust

What “hexagonal architecture” means

  • Generally described as “functional core, imperative shell”: core domain logic isolated from I/O and infrastructure.
  • Related to domain-driven design, onion architecture, and “pure vs impure” separation: pure, testable core; thin, impure adapters for HTTP, DB, FS, clock, etc.
  • Ports and adapters are defined in terms of business use cases (e.g., UserFetcher, PurchasesFetcher), not specific technologies.

Perceived benefits

  • Makes the domain independent of UI, database, and transport, so logic is clearer and more testable.
  • Enables swapping adapters for tests (DB → in‑memory store, Postgres → SQLite, HTTP → CLI) without changing core logic.
  • Helps avoid domain code depending directly on low-level concerns like SQL connections.
  • Some see it as a natural fit with functional design, pure functions, and property testing.

Critiques and skepticism

  • Many view it as over‑engineering, Java/C#‑style “enterprise” patterns imported into Rust.
  • Complaints about excessive indirection, boilerplate, and “where is the actual behavior?” debugging pain.
  • Several argue that database or HTTP server swaps almost never happen; when they do, performance, semantics, and schema changes dominate, not call‑site refactors.
  • Concerns that abstractions leak, ossify implementations, and impede performance and simple JOIN-heavy or streaming queries.

Testing and dependency injection

  • Supporters emphasize decoupling to enable fast unit/integration tests without heavy DB setup.
  • Skeptics prefer end‑to‑end tests with real databases (e.g., containers) and see DB fakes as misleading and brittle.
  • Debate over DI frameworks vs. simple constructor/trait injection; some miss Go‑style simplicity, others want better Rust DI tooling.

Rust‑specific perspectives

  • Some say the “bad” example mirrors idiomatic Axum and is fine for many APIs.
  • Others warn that heavy abstraction fights Rust’s ownership/lifetime model and costs performance, pushing everything into heap‑allocated, loosely typed layers.
  • Overall theme: start simple, let real complexity justify architecture; hexagonal patterns are useful in some contexts but harmful when applied preemptively.

Why Haskell?

Perceived strengths of Haskell (the language)

  • Strong, expressive type system seen as the main draw: algebraic data types, typeclasses, sum types, and effect tracking enable “making systematic bugs into type errors.”
  • Purity and immutability make equational reasoning and refactoring easier; many describe “fearless refactoring” and more robust architectures once things compile.
  • Haskell has strongly influenced other languages (Rust, Scala, F#, C#, Java, Elm, TypeScript) even if they don’t fully adopt its model.
  • Learning Haskell significantly changes how people think about code, even when they later work mostly in other languages.
  • Good fit for some domains: compilers, static analysis, parsers (e.g., Parsec/Pandoc), some back-end services and line‑of‑business apps when teams are bought in.

Tooling, compiler, and debugging

  • Many report the current toolchain (GHC, HLS, cabal/stack) as “much better than years ago” but still behind mainstream ecosystems (C#, Java, Rust, .NET, TS).
  • Pain points: slow compile times (especially with heavy type features/macros), flaky or slow LSP startup, cabal/stack complexity, and weak IDE/debugger integration compared to JVM/.NET.
  • Debugging and profiling are repeatedly called out as poor: runtime flags are awkward, heap/space leaks from laziness are hard to track; ghc-debug is powerful but feels “pre‑alpha.”

Library and ecosystem concerns

  • Biggest criticism is libraries for “enterprise” needs: many are unmaintained, incomplete, or designed around research questions rather than industrial ergonomics.
  • Examples: HTTP/Servant ergonomics, strange gaps in error handling and content negotiation, awkward or underpowered bindings to gnuplot, pcap, regex, TLS, etc.
  • Lack of “batteries-included” frameworks (Spring/Django‑equivalents) and consistent design/UX across libraries slows MVPs and steepens the learning curve.

Language design debates

  • Laziness-by-default is divisive: praised for elegance and some optimizations, but criticized for unpredictable performance and memory behavior.
  • Error handling: Maybe/Either and explicit failure are praised vs exceptions, but some find type noise and monad stacks heavy; others argue union types (as in TS/Scala) are more ergonomic.
  • Effect systems (monad transformers vs newer effect libraries) are powerful but considered complex; guidance for newcomers is inconsistent.
  • Dependent types and totality checking are seen as the next frontier; some argue Haskell is now “less bleeding edge” than Agda/Idris/Lean.

Production experience and adoption

  • Some report long-term success using Haskell in production (web services, static analysis, fintech), emphasizing productivity and reliability.
  • Others tried Haskell for greenfield projects and abandoned it: progress was slower, hiring/teaching juniors was harder, and ecosystem gaps sapped momentum.
  • Consensus: Haskell is extremely valuable to learn conceptually; whether it’s a good production choice is highly context‑dependent and remains contentious.

Show HN: Konty – A Balsamiq-alternative lo-fi wireframe tool for modern apps

Overall reception and positioning

  • Many commenters praise Konty as a modern, smoother, less-bloated alternative to Balsamiq with a very fast startup for an Electron app.
  • Several long-time Balsamiq users say Konty “feels like an upgrade,” especially for quick lo‑fi UX work before high‑fidelity design in tools like Figma.
  • Others note alternatives they like (Excalidraw, Kinopio, Wireframesketcher, Moqups, Whimsical) and see Konty as part of that ecosystem, not a total replacement.

Platform and deployment choices

  • App is currently desktop-only and lacks Linux support, which frustrates many, especially in mixed OS teams; some argue this effectively excludes many teams.
  • The creator mentions a future web version with real-time collaboration and is open to considering Linux builds.
  • Some appreciate the “file over app” / offline, no-login start; others ask for Homebrew support and better URL handling (submitted link uses a localhost path).

Pricing and licensing expectations

  • Unclear if it’s free long term; discussion revolves around:
    • Desire for a cheaper option than Balsamiq’s $149 desktop license.
    • Strong preference from solo/occasional users for one-time, low-cost licenses over subscriptions.
    • Warnings against “lifetime free upgrades” from a sustainability and trust standpoint.

UX, features, and workflow

  • Positives: immediate main interface (no onboarding wall), rich component library, clever connector arrows, automatic grouping, hand tool, and overall responsiveness.
  • Common feature requests: snapping/alignment guides, better delete key behavior on Mac, PDF export, commenting/callouts, “push to Figma,” HTML/CSS or code generation, PlantUML/programmatic support, AI integration, XR app support.
  • Some users report bugs on Windows (drag/drop unreliable, pages clearing, occasional deadlocks).

Hand‑drawn lo‑fi style debate

  • One thread explores why “sketchy” hand‑drawn UI is valuable:
    • Helps stakeholders focus on flow and functionality instead of colors, fonts, and pixel details.
    • Clearly signals “work in progress,” encouraging feedback and avoiding unrealistic “almost done” expectations.
  • A few find the aesthetic unprofessional, but multiple replies defend it as crucial for better feedback and less bikeshedding.

Branding and naming concerns

  • Several commenters say the name “Konty” has unfortunate or vulgar-sounding associations in various languages/accents and suggest considering rebranding, especially for Western markets.

We're not going to run out of new anatomy anytime soon

DNA, Cell Context, and Developmental Information

  • Multiple commenters question the idea that “it’s all encoded in DNA,” stressing:
    • The zygote’s pre-existing structure, maternal environment, and epigenetic factors.
    • Maternal-effect molecules (mRNA, proteins) in the egg affecting early development.
    • Cell-level “navigation” guided by bioelectric fields or chemical gradients.
  • Some argue you cannot “clean build” a human from DNA alone:
    • Need an existing cell as “compiler” and maternal physiology as part of the “program.”
    • DNA may describe transformations of existing cellular structures, not how to build them from scratch.
  • Others compare DNA to compressed code, package manifests, or bindings to shared protein “libraries,” not a full blueprint.

Anatomical Knowledge Gaps and Incentives

  • Surprise that essentially no one has a full-time job “just discovering anatomy.”
  • Structural discovery is often a byproduct of surgery, imaging, or pathology, not a central goal.
  • Funding and career incentives reward work that fits into existing frameworks, not “we found a weird new thing with unknown function.”
  • Complaints that big-budget physics gets funding, while paleontology, anatomy, and fossil prep are chronically underfunded.

Bias, Neglected Regions, and Historical Oversights

  • Several note prudishness/sexism and historical religious pressures as reasons for neglected female anatomy and reproductive structures.
  • Examples: late appreciation of clitoral complexity, debate over the G-spot, reevaluation of “vestigial” organs like the appendix and thymus.
  • Others caution that current perspectives are also biased; “bias” itself isn’t inherently bad but shapes what gets studied.

Variability and the Scale of the Problem

  • Reports that major nerves (e.g., vagus) show extreme individual variability in branching and routing.
  • Suggestion that gross anatomy is far from “finished” and clinical use requires detailed variation mapping across many individuals.

Tools, Imaging, and AI

  • Suggestions that better tools, not just more surgeons/cadavers, are needed:
    • High-resolution whole-body imaging datasets shared openly.
    • Cheap, open ultrasound hardware and improved in vivo imaging.
    • Knife-edge scanning microscopes and whole-organism 3D atlases.
  • Hopes that AI could help integrate and interpret massive anatomical datasets, though details remain unclear.

Be a thermostat, not a thermometer (2023)

Overall reception

  • Many commenters found the thermostat vs. thermometer metaphor intuitive and useful, especially the “what I learned / what I’ll do” framing to show understanding and commitment.
  • Others saw the article as “obvious,” self‑help‑ish, or corporate fluff, yet still acknowledged that “obvious” people skills are often what actually fix project problems.
  • Some felt strong dissonance: content seemed sensible but packaged in a style they associate with shallow business/self‑help, which made them suspicious.

Practical techniques discussed

  • Reflective framing: “What I learned…” + “What I’ll do…” can defuse tension, but people stress that follow‑through is crucial.
  • Basic presence cues (eye contact, leaning in, facing squarely) are seen as powerful by some but uncomfortable or culturally wrong for others (e.g., “Minnesotan” sideways talking, men facing men directly).
  • Several mention therapy, CBT, journaling, and explicit “emotional logging” as ways to build self‑awareness and reframe knee‑jerk reactions.
  • Suggestions include treating certain overreactions as “irrational signals” to be investigated rather than obeyed.

Emotional regulation vs. emotional labor

  • One side: regulating your emotions and “choosing to be a thermostat” is a learnable adult skill, less exhausting once practiced. Meditation is cited as helping find a pause between stimulus and response.
  • Other side: constantly managing room vibes feels like unpaid emotional labor, often gendered, and can be draining or unrealistic to expect all the time.
  • There’s debate over what “emotional labor” means and whether it applies to normal workplace support.

Manipulation, power, and conflict

  • Some view thermostat‑style behavior and frameworks like Nonviolent Communication as manipulative, victim‑blaming, or used to suppress justified anger (e.g., around low wages, discrimination).
  • Others defend these tools as ways to surface unmet needs and de‑escalate, not to erase conflict.
  • Several emphasize that conflict, anger, and “raising the temperature” are sometimes appropriate and necessary; always de‑escalating can prolong real problems.

Neurodiversity, trauma, and sensitivity

  • Multiple commenters relate thermometer‑like hypervigilance to unstable or alcoholic parents; they automatically scan for shifts in mood and often internalize others’ bad vibes as their fault.
  • Some describe difficulty stopping instantaneous self‑blame, even when they “know better,” and share coping ideas: journaling, reality‑checking with friends, assuming neutral default interpretations.
  • ADHD and autism come up: some can’t reliably “read the room,” others over‑read it; the article’s baseline assumption of shared “spidey sense” doesn’t fit everyone.

Gender, culture, and style critiques

  • A few see the article’s tone and focus on feelings as aligned with a stereotypically “female” perspective and not resonant with their task‑focused approach.
  • Others push back, noting that desire to communicate well isn’t inherently gendered.
  • Some feel that scripted, “framework” speech styles (including NVC) sound artificial or even “sociopathic” in real‑time conversation.

Android now allows apps to block sideloading

Scope of the new feature

  • Apps can now detect if they were installed via Google Play and refuse to run if “sideloaded.”
  • Implemented through Google Play Integrity / remote attestation mechanisms in Play Services.
  • Some commenters say this capability has existed for years; this is largely a UI/API polish, not a brand‑new power.

Implications for sideloading and user control

  • Many see this as eroding a core Android differentiator vs iOS: practical freedom to install and modify apps outside the official store.
  • Concern that this will gradually become the default for major proprietary apps (YouTube, banking, social), making non‑Play installs and backups unusable.
  • On rooted or custom devices, users could theoretically patch out checks, but this breaks original signatures and weakens security guarantees.

Custom ROMs, F-Droid, and alternative app stores

  • FOSS apps distributed via F-Droid are unaffected as long as they don’t opt in to integrity checks.
  • Major worry is for users of custom ROMs / de‑Googled systems (GrapheneOS, microG): more apps may require Play integrity + Play Store install, effectively excluding such devices.
  • Some fear this will push users toward keeping a “sacrificial” stock/Google phone for banking and locked apps.

Security, DRM, and developer rights

  • Supporters frame it as DRM‑like protection against piracy and unauthorized redistribution, especially for paid or sensitive apps.
  • Critics argue it’s “DRM in different clothes,” bringing no real user benefit and mainly serving platform and publisher control.
  • Debate over whose rights prevail: developers’ desire to control distribution vs users’ claim to control devices and software they run.

Banking, mandatory apps, and social lock‑in

  • Banking and high‑risk apps already use attestation heavily; this feature strengthens their ability to refuse rooted or custom setups.
  • Examples where apps are required (banks, government, messaging like WhatsApp, region‑locked transport/banking apps) mean “just don’t use it” is not realistic for many.

Regulation, antitrust, and future trajectory

  • Some see this as Google’s “malicious compliance” with EU DMA: platform remains nominally open while delegating lock‑in to app developers.
  • Fears it will force more users into Google accounts and Play Services, strengthening Google’s ecosystem power.
  • Multiple calls for stronger regulation or structural breakups (Android/Chrome/Play separated) rather than hoping the market or a “third platform” will fix it.

Vulnerabilities in the Feeld dating app

Overall reaction

  • Many commenters describe the vulnerabilities as “criminally negligent,” especially given the app’s focus on highly sensitive sexual data.
  • The issues are seen as embarrassingly basic, the kind of security mistakes that should have disappeared a decade ago.

Security and engineering failures

  • Core problem: authorization/permission checks appear to be enforced largely on the client side instead of the backend, across many endpoints.
  • Commenters compare this to “decorative” security: easy to bypass, similar to classic front-end-only auth or plain-JS password checks.
  • Some suspect use of “automatic DB APIs” / magic GraphQL-to-SQL layers that encourage exposing too much by default.
  • Several note that such mistakes remain common in mobile and web apps, especially when written quickly, cheaply, or by juniors without oversight.

Company practices and responsibility

  • Multiple users report the app has long been buggy: broken chats, performance problems, memory leaks, UX confusion.
  • There is debate over whether founders are non-technical or simply incompetent; either way, management is blamed for underinvesting in security and engineering.
  • Some point to public financial success as evidence they had the resources to fix this but chose not to.
  • The contractor-led 2023 rewrite is cited as a turning point where things became even buggier; unclear if backend was also replaced.
  • Strong sentiment that fines, regulatory enforcement, and possible criminal liability are needed; “they don’t need charity, they need to be fined.”

Disclosure process

  • Mixed views on the researchers’ long embargo: some praise their restraint; others argue that giving 6+ months for such egregious issues rewards negligence and should be shortened.
  • People wonder how many others discovered and exploited these flaws quietly; logs are suggested as the only way to know, but their status is unknown.

User attempts to protect themselves

  • Several commenters tried to delete their data after reading the report and found the deletion flow broken or impossible.
  • Others advocate never using exact personal data (e.g., birthdate) and treating all dating-app data as effectively public.

Broader dating-app ecosystem

  • Many see this as symptomatic of the entire for-profit dating space: few viable options, heavy data collection, weak security, misaligned incentives.
  • Ideas raised include open-source or federated, non-profit / B‑Corp alternatives, possibly using ActivityPub, though network effects and moderation are seen as major barriers.

Why Oxide Chose Illumos

RFD process and transparency

  • Commenters like Oxide’s open RFDs and podcasts explaining decisions.
  • Some see value in formally documenting “obvious” choices; others think this particular RFD reads like retroactive justification.
  • Oxide staff in-thread emphasize: RFDs are internal decision records, later published, not marketing pieces.

Why Illumos as host OS

  • Illumos is viewed as a capable, coherent UNIX with strong primitives (zones, ZFS, SMF) and a culture Oxide trusts.
  • A major advantage cited is ease of landing kernel changes relative to Linux.
  • Several point out that many Oxide engineers previously worked on Solaris/illumos; critics argue this familiarity is the real driver. Oxide engineers reply that they genuinely believe it’s the best trade‑off for their use.

Linux, systemd, and ecosystem concerns

  • The RFD mentions “technological and political” issues around Linux/systemd.
  • Some say this is under‑specified and feels like FUD; others cite specific examples of contentious systemd maintainer behavior and dislike the “sprawl.”
  • Counterpoints: modern Linux distros routinely mix and match non‑systemd components; many enterprises are fine with systemd in practice.

Hypervisor choice: bhyve vs KVM/QEMU/Xen/vmm

  • Oxide chose bhyve on Illumos. There is history of KVM on Illumos and KVM/QEMU at prior companies.
  • A KVM/QEMU developer contests the RFD’s claim that QEMU is “often” unreliable/insecure, citing a relatively good recent vuln record and strong fuzzing; others counter with general C/C++ memory‑safety concerns and Oxide’s Rust‑first philosophy.
  • Trade‑offs discussed: KVM/QEMU feature richness vs complexity and maintenance burden; Xen architecture and dom0 size; OpenBSD vmm’s security‑oriented design but limited features (e.g., historically single vCPU).
  • Nested virtualization is noted as complex but not necessarily slow if tuned.

Service management: SMF vs systemd

  • Some praise illumos SMF as conceptually superior and less intrusive than systemd, though older (XML) and CDDL‑licensed.
  • Others argue systemd has long since surpassed SMF in capabilities and is the de facto standard.

Storage: ZFS, Ceph, and Crucible

  • ZFS on Illumos is seen as a natural fit for a fixed hardware appliance.
  • Ceph is criticized by some as operationally heavy and fragile at scale; others defend it with large real‑world deployments and small ops teams.
  • Oxide’s internal Crucible layer is mentioned as their actual storage service, making any ZFS vs Ceph comparison somewhat indirect.

Market and hardware notes

  • Lack of arm64 support in Illumos is a blocker for some; others note arm64 is still early in “traditional” production.
  • Some think Oxide should target VMware migration opportunities; others say Oxide’s fully integrated rack appliance is a much bigger change than just swapping hypervisors.

The first release candidate of FreeCAD 1.0 is out

Highlighted 1.0 RC features

  • Topological naming mitigations seen as the headline change; models are reported to be much more robust under edits, though not perfect.
  • New integrated Assembly workbench with a new solver, replacing the previous fragmented third‑party assembly ecosystem.
  • Major Sketcher upgrades: auto-dimension tool, polar arrays, better array controls, curved slots, offset/scale, automatic midpoint constraints.
  • Part Design gains multi‑solid bodies and the ability to apply features (pad/revolve/pocket) to selected sketch sub-shapes.
  • CAM/Path workbench (renamed CAM in 1.x) reportedly improved and ships with multiple post-processors.
  • UI tweaks: dark themes, quick transparency toggle, optional tabbed workbench bar; useful but considered secondary to core modeling improvements.

User experience, stability, and topology fixes

  • Opinions diverge sharply: some find current dev builds and 0.21.x “usable” and “night and day” better; others still “rage quit” over crashes, strange errors, and brittle models.
  • The topological naming fix is widely described as a game changer for parametric stability, especially for people who previously built large libraries of parts.
  • Persistent pain points: confusing Part vs Part Design workflows, awkward sketch orientation/attachment tools, lack of intuitive drag handles for features, finicky selection (especially on HiDPI), and inconsistent behavior when switching workbenches.

Comparisons with commercial CAD

  • Fusion 360 is praised for polish, CAM, assemblies, tutorials, and robust surfacing/fillets, but criticized for cloud dependence, feature downgrades in the free tier, and flaky export “translation services.”
  • Solidworks, Catia, Creo, and others are seen as more stable and capable for complex and organic geometry, but priced out of reach for many hobbyists; cheaper “maker” or hobby tiers have licensing and cloud caveats.
  • Onshape is repeatedly praised as intuitive and reliable, though concerns are raised about relying on a cloud-only free tier that could change.
  • Some professionals say FreeCAD (or forks like RealThunder’s) is viable for simple to moderate mechanical work but still wastes too much time compared with commercial tools, especially around complex fillets, NURBS, and assemblies (blamed partly on the OCCT kernel).

Code-based vs GUI CAD tools

  • OpenSCAD is popular for parametric, text-based modeling and simple 3D-printed parts, but criticized for:
    • Weak support for complex models (heavy trigonometry, no constraints/STEP, CSG-only).
    • Slow rendering in stable builds (nightlies with Manifold are said to be much faster).
  • Alternatives like CadQuery, Build123D, Replicad, JSCAD, and Python-enabled OpenSCAD variants are discussed:
    • They build on b-rep kernels (often the same as FreeCAD), allowing operations on faces/edges/vertices and STEP export.
    • Trade-offs include heavier dependencies and less “standard” status compared to OpenSCAD.

Learning curve and resources

  • Many find FreeCAD’s interface “opaque” or “GIMP-like”: powerful but hard to approach, especially with many overlapping workbenches.
  • Recommended learning paths:
    • Start in Part Design (sketch + pad/pocket workflow) rather than bouncing between workbenches.
    • Use recent YouTube tutorial series and a free PDF course from a maker magazine.
  • Third‑party variants (e.g., Ondsel, RealThunder’s fork) and UI add-ons are mentioned as significantly improving usability and assembly workflows, though they fragment the ecosystem.

Licensing, pricing, and ecosystem outlook

  • Strong desire for a “KiCad of mechanical CAD”: free, offline, stable, and good enough to choose over proprietary tools.
  • Thread notes that KiCad and Blender only became widely loved after coordinated UX and architectural investments; some see Ondsel’s involvement as a similar turning point for FreeCAD.
  • Many expect FreeCAD to remain behind top commercial tools for complex professional work in the near term, but see clear progress and potential—especially now that topological naming is addressed and a default assembly workbench exists.

Swiss BMW Driver Slammed with $116,000 Tailgating Fine Because He's Rich

Swiss “day-fine” system and this case

  • The fine is calculated in “daily rates”: court sets a number of days, then multiplies by an income-based daily amount.
  • For such offenses, daily rates can go up to CHF 3,000; this driver got 50 days at CHF 1,970 each.
  • The theoretical maximum fine is discussed as CHF 150k (~$175k).
  • Commenters note this system has existed for decades in Switzerland and also in some other European countries.
  • How the number of days is set (offense tables, prior offenses, judicial discretion) is raised but remains unclear from the article and thread.

Equality vs proportionality of fines

  • One camp argues law should be “the same for everyone,” opposing income-based adjustments as unequal and potentially corrosive of legal neutrality.
  • Others counter that flat fines are de facto unequal because they are trivial for the rich and crushing for the poor; proportional fines are framed as a better realization of equality.
  • There is debate over whether “equality” should be measured in money paid, impact on one’s life, or risk/damage imposed on society.

Deterrence, harm, and justice

  • Supporters see high, income-based fines as necessary to deter wealthy offenders; otherwise fines become a convenience fee.
  • Critics argue CHF 100k+ for tailgating is disproportionate to the immediate harm and veers toward retribution rather than calibrated social cost.
  • Some emphasize tailgating and speeding as genuinely dangerous, with strong penalties justified to prevent deaths and serious crashes.

Privacy, incentives, and implementation concerns

  • Some find income disclosure for traffic fines invasive; others respond that governments already know income from taxes.
  • Concerns are raised about perverse incentives for enforcers to target expensive cars, especially in systems where fine revenue funds local police.
  • Suggestions include:
    • Scaling by income with caps and minima.
    • Including assets for low-income high-wealth people.
    • Tying fines to car value.
    • Using escalating penalties for repeat offenses.
    • Offering community service or jail-time alternatives.

Swiss driving and car culture

  • Experiences differ: some call Switzerland “anti-car” due to strict rules and costly mistakes; others describe it as car-friendly but highly orderly, with relaxed, rule-abiding driving.

Why Copilot Is Making Programmers Worse at Programming

Evidence and Speculation

  • Many note the article offers no data, just plausibility arguments; some find the reasoning logical, others dismiss it as an “old man yells at cloud” rant.
  • Several ask for proper studies; one link is shared suggesting worse code quality with Copilot, but others note conflicting studies even in that article.
  • Consensus: current claims about long-term effects are mostly speculative.

Comparisons to Earlier Tools

  • Repeated analogies to calculators, Stack Overflow, Google, IDE autocomplete, syntax highlighting, ORMs, high-level languages, and even writing vs oral culture.
  • One camp says this is the same recurring panic and that the industry has always adapted.
  • Others argue Copilot is different because it produces full solutions that can be used without understanding, unlike calculators that just do arithmetic.

Effects on Skills and Learning

  • Concerns: erosion of core skills, less debugging practice, over-reliance on generated code, weaker fundamentals (already seen with SQL/ORMS, memory models, etc.).
  • Several worry especially about students and juniors: easy cheating on basic algorithm assignments, or spending hours coercing an LLM instead of thinking through problems.
  • Counterpoint: even if some low-level skills atrophy, that may be acceptable if higher-level productivity and new “AI collaboration” skills improve.

Developer Experiences with Copilot and LLMs

  • Positive reports: major boosts in routine work—boilerplate, CRUD, tests, config, migrations, regex/glob snippets, new frameworks, code translation, explanation of unfamiliar code.
  • Many use it as “super-autocomplete” or rubber duck: they still design solutions, then accept or edit suggestions.
  • Negative reports: high error rates in anything non-trivial; debugging unfamiliar AI code can cost more time than writing it; tool can encourage bloated or repetitive code.
  • Several emphasize that responsibility remains with the committer; the real risk is users blindly trusting large autogenerated changes.

Jobs, Standards, and Social Impact

  • Some fear massive cost savings will reduce engineering headcount and wages, and allow weak developers or non-developers to flood the field with low-quality software.
  • Others argue good engineering still requires judgment, empathy, and design skills that tools don’t replace.
  • There is broad agreement that LLMs are here to stay; disagreement is about whether they mostly help, hurt, or just shift which skills matter.

Algorithmic Wage Discrimination (2023)

Definition and Scope of “Algorithmic Wage Discrimination”

  • Discussion centers on algorithms setting individualized wages for similar work using granular behavioral and contextual data.
  • Several commenters stress this is different from traditional variable pay or bonuses: pay can vary per worker for identical gigs, based on opaque, ever-changing criteria.
  • Others argue this resembles standard economic “price discrimination” and isn’t inherently illegal or necessarily tied to protected classes.

Gig Platforms and Individualized Wage Setting

  • Rideshare/delivery platforms cited as prime examples: workers report seeing different pay offers for the same job and large volatility in pay.
  • Some describe algorithms “hunting” each worker’s minimum acceptable wage via repeated experiments, creating “many markets of one worker.”
  • Commenters differ on whether this is just market dynamics or a qualitatively new mechanism to push wages toward each worker’s reservation wage.

Dynamic Pricing vs. Traditional Practices (Tips, Shift Differentials)

  • One camp equates surge pay or variable shifts with long-standing practices like tips or higher pay for undesirable hours.
  • Others argue key differences:
    • In gig work, the employer/platform sets opaque, personalized compensation, rather than many independent customers.
    • Workers often cannot infer rules, compare with peers, or understand how to improve pay.
  • Tipping is debated as an analogy; some see it as already discriminatory/noisy, others emphasize the added opacity and coordination of platform algorithms.

Power, Transparency, and Exploitation Risks

  • Strong concern about information asymmetry: firms have data scientists, most workers are price-takers with little visibility or recourse.
  • Lack of transparency makes it impossible to know whether protected-class discrimination occurs, though the article does not prove it.
  • Some frame this as part of a broader shift toward “techno‑feudalism,” where surveillance and data give corporations structural power over labor markets.
  • Others are skeptical of dystopian interpretations, noting that dynamic pricing can also increase earnings during high demand.

Proposed Responses and Open Questions

  • Suggestions include salary/wage transparency mandates (e.g., EU-style), unions, cooperative platforms, regulation of algorithmic pay, or open-sourcing wage algorithms.
  • Some ask what concrete alternatives to dynamic wages in gig work would look like (e.g., flat hourly pay vs. peak pricing).
  • Overall: consensus that algorithms materially reshape bargaining power; disagreement over whether they are primarily efficiency tools or instruments of exploitation.

Techniques I use to create a great user experience for shell scripts

Spinner, Progress, and Output Styling

  • Several commenters like simple spinners for long‑running scripts; progress bars are seen as harder because you often don’t know total work up front.
  • Many advocate conditional color: only if stdout is a TTY, NO_COLOR is unset, and sometimes TERM isn’t dumb. Techniques: tput, cached escape sequences, or simple POSIX checks.
  • Others warn colors can make output unreadable with some themes and are unnecessary noise; some “typesetting” advice says avoid color entirely.
  • Examples shared: tiny color helpers, an awk-based “theme” filter, and TUI helpers like Glow/Gum (with some criticism of past network behavior).

Error Handling, set -e, pipefail, and Safety

  • Strong push to avoid classic footguns: unquoted variables, missing --, not checking emptiness before rm -rf, and unsafe command detection.
  • Exit codes: several note that usage errors should conventionally use exit 2, not 1.
  • Heavy debate around set -e / pipefail:
    • Pro side: good defaults that force fail‑fast behavior instead of silently continuing on errors.
    • Con side: confusing semantics (e.g., functions used as predicates, pipelines) and hard‑to‑diagnose failures with little context; some prefer explicit $? / PIPESTATUS checks and guardrails instead.
  • Examples show how set -e -o pipefail can terminate scripts mid‑pipeline without clearly indicating where or why.

Linters, Style, and Boilerplate

  • Many recommend ShellCheck as essential for catching shell footguns; others find it noisy or wrong in places and prefer to rely on experience, treating it as an optional “typed subset” of shell.
  • Google’s shell style guide and frameworks like bash3boilerplate and bash‑modules are cited for consistent logging, argument parsing, and error handling.
  • Some advocate structured argument specs that auto‑generate help and parsing.

Shell vs. Other Languages / PowerShell Debate

  • Recurring view: shell is ideal for “command glue” and pipelines; once you need complex logic, data structures, math, or concurrency, switch to Python, Go, Rust, etc.
  • Others highlight bash’s portability and longevity vs. dependency and version churn in Python or other runtimes.
  • Length thresholds vary: some say anything over ~50 lines shouldn’t be shell, others are comfortable into hundreds or more.
  • Big sub‑thread contrasts Unix text pipelines with PowerShell’s object pipelines; proponents praise PowerShell’s typing, parameter validation, and tooling; critics cite performance, complexity, Windows‑centricity, and niche ecosystem.

Misc UX Tips

  • Suggestions include: robust OS/command detection, better help handling (-h/--help and interactive prompts when args are missing), clear logging with levels, isatty checks, and using sh -x or set -x for debugging.

A Uruguayan company teaches people how to turn regular cars into EVs

Perceived benefits and target markets

  • Many see retrofitting as especially valuable in developing countries where new EVs are unaffordable but old ICE cars are plentiful.
  • Uruguay is cited as relatively wealthy but with cars costing 1.5–2× US prices due to taxes, making retrofit kits an important niche.
  • Some city drivers say they’d gladly buy simple, low‑range, analog‑style EVs or convert existing cars to avoid modern “feature bloat” and privacy issues.

Economic context and feasibility

  • In low‑wage countries, labor‑intensive conversions can be cost‑effective; parts can be sourced cheaply (e.g., Chinese batteries).
  • In high‑wage countries, several argue conversions are usually more expensive than buying a used EV or efficient hybrid.
  • Tariffs and import restrictions in South America inflate prices and are criticized as protecting no real domestic industry while enriching intermediaries and customs.

Technical approach and standardization

  • Core EV components (motors, inverters, chargers) are mostly standardized; custom work is mainly mounts, adapter plates, and battery boxes.
  • Some want bolt‑in kits per model with documented steps and safety math; others say geometric differences between cars make full standardization hard.
  • Conversions often keep battery packs small due to cost and space, limiting range but easing weight/safety issues.

Safety and regulation

  • Concerns include altered crash behavior, weight distribution, braking performance, and fire risk from poorly placed batteries.
  • Some commenters are strongly opposed to ad‑hoc battery placement (e.g., in crumple zones), calling it dangerous.
  • Others note that fuel‑system conversions already happen and that many developing countries have little budget or political will for strict safety enforcement.
  • Regulation is a double‑edged sword: some countries have banned passenger‑car retrofits; others have inspection regimes so strict that even LED bulb upgrades fail.

Charging, grid, and infrastructure

  • Most conversions support only AC charging: cheaper electronics, simpler software, and fewer thermal constraints.
  • DC fast charging is seen as technically possible but too complex and costly for low‑budget projects.
  • For many use cases (short daily trips, home or workplace charging), commenters argue AC is sufficient.
  • Grid impact is debated: night charging may help utilize surplus wind/hydro in Uruguay, but large‑scale adoption interacts with local mixes (e.g., growing solar) and infrastructure limits.

Broader market and politics

  • Retrofit growth is seen as constrained by OEM incentives (they prefer selling new cars), strong auto lobbies, and protectionist EV policies (e.g., EU tariffs on Chinese EVs).
  • Some view EV conversions and cheap imports as climate‑friendly but politically blocked to protect domestic jobs and industries.

Uber drivers in Kenya are ignoring the app and charging their own rates

Reversion to Taxi-Like Behavior

  • Many see Kenyan Uber drivers’ off-app pricing as a return to old-school taxi bargaining, but with riders now captive inside an app ecosystem.
  • Several commenters argue this is not unique to Kenya: similar behavior (selective cancellations, off-app deals, fare manipulation) is emerging in many markets, making Uber more like pre-app taxis.

Kenya-Specific Market Dynamics

  • Multiple ride apps operate, and most drivers are on all of them; riders often check several apps for the cheapest price.
  • Because it’s often literally the same car across apps, rides are treated as a commodity, driving intense price competition.
  • Drivers and repeat customers frequently bypass apps entirely, paying directly (often via mobile money) at a discount, while drivers earn more without the platform’s ~30% cut.
  • Some argue Uber is effectively just a matchmaker now, with little control once drivers and riders connect.

Why Uber Doesn’t Simply Raise Rates

  • One view: raising rates would be “giving in” to driver collective action and would encourage competitors.
  • Another: Uber already prices at the maximum it thinks customers will accept; true cost-covering prices (including fair wages) would reduce demand.
  • In many international markets, Uber is already the premium-priced option relative to local services.

Global Driver Workarounds and Passenger Frustrations

  • Reports from various countries: drivers call to check destinations, cancel unprofitable trips, ask for extra cash, or propose off-app payments matching or undercutting Uber’s quoted fare.
  • Some riders accept these arrangements; others refuse to “undermine” the platform, fearing a slide back to opaque taxi pricing.
  • People describe scams: longer routes, manipulated meters, fake accounts, mismatched plates, and drivers starting trips without passengers.

Safety, Regulation, and Power

  • Safety concerns include locked rear doors, violent enforcement by taxi interests, and kidnapping fears; others say such risks are rare and suggest vetting vehicles and drivers via the app instead of carrying tools.
  • Several comments compare outright bribery in some countries with “legalized” influence via lobbying in others, arguing both shape which companies (Uber, taxis, or state-tied firms) dominate local markets.