mpk

PlantUML supports this https://plantuml.com/handwritten

Add this to any diagram to get the effect you want,

  skinparam handwritten true
  skinparam monochrome true

Demo: https://tinyurl.com/ycdu7owa

mpk

10 年前議論

The EU has restrictions on this kind of stuff - http://ec.europa.eu/justice/data-protection/data-collection/...

mpk

10 年前議論

Yes, that would be normal. During an acquisition the future is unknown so you don't have a reliable roadmap you can use to set or update development goals. Other activities that take away from development could be developers working on capability demonstration or participating in technical due diligence.

(I don't know anything about the rethinkdb situation, I'm just speaking generally here)

mpk

10 年前議論

Ember is fantastic, the oldest projects I have are about 4 years old and have been (more-or-less) painlessly upgraded every now and again. Everything is ember-cli and ember-cli-deploy now. Time and time again it shows that Ember is a community project that has a strong focus on scalability and maintainability over time.

I also do a lot of work in Angular and React (this year) and all the tooling, build, best practices change every couple of months.

A lot of people complain about Ember's learning curve, but the things you learn _stay relevant_. Personally I'd rather invest in that kind of knowledge than learning yet another arbitrary build system.

mpk

12 年前議論

That works very well combined with RFC 6902 - JSON-PATCH for partial changes to JSON objects, which in turn works nicely with HTTP PATCH method, RFC 5789.

mpk

12 年前議論

Uh, Gates not a programmer? You might want to check your history. By all accounts he is, or was, an excellent programmer who definitely got his hands dirty.

[edit add refs] Joel's Bill interview - http://www.joelonsoftware.com/items/2006/06/16.html

Pancake problem - http://archive.today/20120916031916/http://www.npr.org/templ...

mpk

13 年前議論

Needs an active FB session to read.

mpk

13 年前議論

Not to rain on anybody's parade here, but for first-time vim users I recommend not using any plugins and only selectively adding them one at a time after the basics (buffers, navigation, some ex mode, etc) are at least somewhat familiar.

Getting started with plugins enabled makes it hard to understand where vim stops and plugins begin and make switching to a different (someone else's) vim setup confusing at best.

It also tends to feed the 'make it work like the last editor I used' syndrome, which is completely counter-productive.

Otherwise, nice work and good job open-sourcing it!

mpk

13 年前議論

That depends on how long it's been in the codebase. As this case is covered in the Rails security guide _and_ the Ruby security reviewer's guide I'd expect it to be quite old and now being found because it hasn't been properly audited before or indicate that the review process needs some work.

mpk

14 年前議論

This article contains a number of fallacies. Storing sessions on disk? Over NFS? In the database? Please - no-one does that. And random MySQL bashing? What's that based on? MySQL is used by many high-volume shops to handle huge amounts of data. (See - I don't have to quote examples either!) And magic Oracle scales to infinity? For the kinds of database setups you need with high-performance web apps you can throw the same amount of money at percona.com and get there as well.

[Edit - didn't notice this was a 2004 article]

mpk

14 年前議論

I'd like to know too, but I'm not skeptical of the 200k figure. If this is going to work then it's not going to be a solo effort, so let's say one or two more devs and someone to do QA or support or design or whatever and this budget is looking pretty tight.

mpk

14 年前議論

If I'm on hacker news and I see the word cracking, I immediately hope this'll be some old school "let's open up IDA and see what's what here" article.

mpk

15 年前議論

"And a Basecamp user uploaded the 100,000,000th file (It was a picture of a cat!)"

Aren't you supposed to treat user data as confidential and not examine the contents?

mpk

15 年前議論

example.com is protected by RFC 2606 ("Reserved Top Level DNS Names") for special use (with example.org and example.net - along the same lines as the reservation for 127/24, 192.168/16, etc).

The domain is owned by ICANN and has no MX record. Where the mail goes depends on your site-local MTA configuration. On the public internet it goes (or should go) nowhere and bounce back immediately with an appropriate status code from your provider's MTA.

mpk

15 年前議論

Actually you're both wrong and a little right.

I think you both imagine that transfusions are 1 on 1. (1 donor, 1 recipient). In this case, the numbers you present kind-of work out. And sure, a risk of HIV (or whatever) infection versus certain death is worth it in any scenario. (Especially now that HIV/AIDS is chronic and treatable rather than terminal).

Many scenarios involve heavy blood loss and require more than what is normally given by a donor in a single donation. This means drawing on the pool of available blood, so multiple donations will be used of the same type, but they won't be from the same donor.

This raises the risk of transfusing infected blood significantly which is one of the reasons that the screening for blood donation harshly excludes anyone who fits in one or more higher risk groups.

I'm a donor and where I live you can't donate blood if you've received blood (inter-species tissue exchange), lived in UK in the 90s (mad cow disease risk), were born in sub-Saharan Africa (HIV risk) and a couple of others. This includes ever having had male/male sex (very high risk group). Ever been paid for sex? Out. Ever exchanged drugs for sex? Out. The list goes on and on.

The 'in the last 12 months' items are again a form of risk management (they include new partners, tattoos, piercings, infections, illness, surgery, travel to risk countries, etc).

All blood gets tested and though false negatives are still possible, most infections are statistically close enough to 100% detectable after 6 months.

Where I live it's also illegal to sell parts of your body (which includes your blood). The idea behind that is that legalizing this would create a predatory market between people with money and those on the bottom rung of the ladder (poor, addicted, high-risk, all of the above). That's not a hard sell, but it also acts as a filter in the blood donation system. People who are most likely to sell blood are the people you don't want giving blood in the first place.

A detail in my country is that the donation forms don't ask about your sexual orientation, which is irrelevant. If you identify as homosexual (male/male or female/female) but have never had male/male sex, you're good to go.

Blood donation is a region where you're just harshly subjected to selection based on statistics which place you in one risk group or another. Discrimination doesn't factor into it.

mpk

15 年前議論

This is a preview article that isn't even 2 paragraphs long and requires subscription to read the whole thing. How did this make the front page?

mpk

15 年前議論

I run FF on linux for dev work (not on FF itself, but for JS heavy web apps). Actually, I run a whole bunch of different FF versions with different profiles for testing a huge variety of things.

My main gripe is that some of the extensions (NoScript, Firebug and friends) sometimes break things, hog the CPU in one way or another or just plain eat up the heap.

I am fine with this. These are extensions, after all and it's for dev stuff, which I judge by a slightly different standard than 'normal user' stuff.

The latest FF releases especially make me happy because they're adding modern web features and working on UX and performance. And it shows and feels.

I don't care about bookmarks because I don't bother storing those in the browser anymore. Was the choice for storing 'stuff' in SQLite a good one? Yes of course it was. It's the best cross-platform way to store structured data on disk, which is why everybody and his/her dog has made the same choice. Are there inefficient ways in which it is being used? Maybe. Probably? I haven't looked into this, but this is hardly an insurmountable problem.

Sure it felt like FF was lagging behind once the WebKit browsers started coming out (with better JS engines) but the Mozilla Team is back in the game with its new release cycles and updates.

And this makes me very happy.

mpk

15 年前議論

I recently started coding Obj-C in XCode and was very surprised that it's far less polished than what you expect from an Apple experience. That is mostly because an Apple experience is consumer-facing and much more time goes into making that a better experience.

XCode feels like a GUI for GCC, which it is. It's a whole pile of flags that you can set, tweak, etc. If you don't have some GCC experience, this is a bit of a hurdle. Project settings sometimes break (especially around code-signing), so keep your text editor handy. When things break the error messages can be cryptic and there's usually no 'double-click to get to the error in the IDE'. Obj-C is obviously C, but it's also obviously not and also not syntactically similar to, say, C# or Java (or Ruby, JavaScript, Python, etc). I found the step to Obj-C to be fairly trivial, but I thank time spent with C, GCC and Makefiles for that.

After this it's mostly the same as anything else - which is diving into massive amounts of APIs and best-practices.

iphoneos-simulator is brilliant. Much, much better to work with than Android simulators (mostly because of the insanely faster startup time and the ability to change hardware on the fly). Another brilliant piece to find was Instruments, which is an Apple GUI for DTrace. Profiling and tracing execution on simulators and devices is a breeze.

I think memory management is a bit of a non-issue and I'm surprised that's even being brought up. That many programmers only know one language / IDE and judge everything else as inferior/bad/etc is a reasonable observation (if not a totally obvious one), but that's not going to change anytime soon.

TL;DR

    - XCode has warts
    - Obj-C is different than Java/C#
    - Errors can be a pain
    - iphoneos-simulator is brilliant
    - Instruments is fantastic
    - Easy to pick up if you're familiar with GCC

mpk

15 年前議論

My guess is yes, they do.

If you read a bit deeper into their announcements you'll notice that this is not just 'the government taking over'. The breach post-mortem was handled by a private sector security company (Fox IT) and the SSL cert management was moved to another private sector firm (Getronics). Judging by the announcements this was overseen by the Ministry of Security and Justice, which has its own well-funded divisions of security specialists.

The Dutch government sees digital infrastructure as crucial and invests a lot of time and money into it. Components such as PKI government, etc are initiated by the government but then sourced to the private sector (a fairly common practice). This allows the government to revoke contracts or otherwise intervene if the contractor is in breach of something (bad management, bad governance, failure to comply with security standards, failing audits, etc). I'm guessing that this is also the legal basis for taking over operations from DigiNotar at such short notice.

Also, the Dutch government is a world-class player in the eavesdropping, interception, wiretapping and traffic monitoring game. That implies at least a basic in-house competency in network and crypto matters.

mpk

15 年前議論

> [..] it is a sure way of getting employment especially if one is studying a field in which employment is scarce outside of academia, say, philosophy.

Just a random observation, but having philosophers with an educational background teaching kindergarten is probably not such a bad thing.

投稿

Ask HN: If you play an instrument, which is it?

Fravia died on Sunday, 3rd May 2009

JavaScript is adequate (and not that bad)

コメント