Hacker Newsnew | past | comments | ask | show | jobs | submit | at0mic22's commentslogin

With rails you'd always have to pay for absence of strict types with extensive testing where you'd basically have to verify that data structures match.

I don't buy it anymore


This is where I landed too.

Type system support, and the tooling around that support, has gotten SO much more powerful in the last decade or so.

Lots of the warts also got burned off with better support for smart typing, auto vars, duck typing for inputs, etc.

That tooling covers a HUGE swath of bugs that I just don't have to worry nearly as much about, and it makes quick refactoring less painful and less risky.

Going back to Rails feels like stepping back into the dark ages. So many stupid repeated tests/specs for things that should just be in a type system. The tests are slower to write, cover less ground, and are much more brittle.

My tooling isn't as capable, my feedback loop is slower (hard to beat instant type hinting for errors/mismatches right in my editor as I type), and I feel like I'm working with a blindfold on.

---

Yes, parts of Rails are great, yes - if you know it already it's a very productive environment. But man do I absolutely hate the lack of interest in type systems from the majority of Rails devs.

It's hard to overstate how valuable it is to be able to change a data structure and have all 29 places you might have broken immediately presented to you with basically no effort on your end outside of some minor type work.

I will pick it every time over having to write 29 specs in rails to get even close to the same safety.


Ruby guys have made an attempt to introduce type system few years ago, but they found it nearly impossible to infer types from metaprogrammed code - which makes sense. So they came with the suggestion that you write types for dynamically generated methods yourself. Comeon!


Every few years someone discovers FOR UPDATE SKIP LOCKED and represents it. I remember it lasting for 15 years at least


The "someone" in this case happens to be Michael Stonebraker, the creator of Postgres and CTO of DBOS.


So glad someone else chuckled reading this. Two thumbs up for knowing better than the creator of the thing they're talking about!


Yup, some features are timeless and deserve a re-intro every now and then. SKIP LOCKED is definitely one of them.


with a nice NOWAIT when appropriate


This one is not using webdrive, but raw chrome debugging protocol


cloudflare captcha can be easily passed with browser extension, not much different from the suggested bypass


Yes, I was imagining never seeing a captcha on any device without needing extensions though.

I think it exists already, found this randomly today: https://github.com/FlareSolverr/FlareSolverr


Ime cloudflare captcha just requires moving a bit the mouse around, at worst clicking a box. It is reCaptcha that's the most annoying.


Think it should be explicitly stated that it is not available on Mac OS as procfs does not support it


Readme only mentions linux, so why bother mentioning Mac OS?


README also leads with a screenshot that has macOS window styling. So, "works on Mac" is a reasonable first impression to draw.


Before you get to that screenshot, you have to get past the big, bold sentence that says "A human-friendly alternative to netstat for socket and port monitoring on Linux.".


There are MacOS-like themes available. Eg: https://www.gnome-look.org/p/1275087/


Nobody is questioning what themes are available on gnome. Including a screenshot of the software running in a window that very much looks like macOS X is simply misleading.


Linux is DEs support themes


Cause it's obviously a Rust crate, you would kinda hope that it might compile at MacOs. In 99% of cases that works.


If a Rust crate uses anything from the OS, and doesn't mention that OS, I wouldn't expect it to work on that OS, regardless if it's Windows, Linux or macOS. Just like graphical crates state what APIs they support, and if Metal is not mentioned for example, it is most likely not supported.


You wouldn't know unless running crate install.

I use lsof -i a lot on Mac, its not that I'm criticizing, but mostly disappointed.


The title `A human-friendly alternative to netstat for socket and port monitoring on Linux` is pretty clear.


Nah, homebrew made apple guys believe they get pretty much everything Linux has. Who would expect an exception?


because "Linux" != "MacOS"


sorry for the confusion about the macos like screenshot, I changed it to look more like Ubuntu


AI is great for hit'n'go, but in the long run it brought us more trouble than help. It gets very inconsistent, does not track the context (especially if it is a common-sense context), brings in some weird architectural patterns by default, avoids updating current components preferring to write new almost exactly the same ones alongside with similar existing ones, e.t.c, e.t.c.

It's definitely a great tool to quickly bootstrap something, but I find myself thinking "I should have better done that myself" more and more.


Russia has 50 nuclear submarines, of which 14 are ballistic missile carriers. Every couple of years they produce a new one, think its clear where the bets are on


All of them are probably being monitored closely by US submarines, with them being ready to take them out should that be necessary.


I doubt it. The USSR / Russia concept of operations for nuclear missile submarines is way different from NATO countries. They don't typically conduct wide-ranging strategic deterrence patrols out in the open ocean. Instead they tend to stay in or near their own territorial waters, protected by surface warships and land-based aircraft. While US attack submarines have occasionally violated Russian territorial waters for special missions they don't do so on a regular basis because it's so dangerous.


Subs are very hard to track or to locate, which is why Washington has been deploying two thirds of their strategic warheads (the ones that are ready to use as opposed to being in cold storage or in disassembled state) on subs and why Russia, China, Britain, France and India all decided incur the substantial expense of deploying nukes on subs, too.


US attack subs are doing their best, but it's never 100%.

Nuclear missile subs are very good at hiding (they've been doing it for 60+ years) and the ocean is a big place.

1 Borei is what, 96 MIRVs?

Which is the point... even one missed is unacceptable.


It is a game you can play together


And not a single strategist on either side actually believes that to nullify the threat. A single boomer launching might not be outright MAD, but it would be too many warheads to defend against, and several major cities would be hit.


I would assume having supply chain in place and aircraft manufacturer's like antonov, Ukraine is hiding its supersonic bombers somewhere.


Ukraine has no large supersonic bombers the size of the TU-95/TU-160/TU-223m. They do have a very small fleet of SU-24, but those are tactical bombers, not strategic bombers.


Ukraine actually has inherited 19 TU-160s from USSR. 8 of which were transfered to Russia as a payment for natural gas, and 11 were disassembled.


> and 11 were disassembled

In exchange for security promises (Budapest Memorandum).


In exchange for $500M from Nunn-Lugar programme


That was funds for the scrapping operations.


Right, the US payed to scrape the military equipment.


As I wrote, Ukraine has no large bombers in this class...


I would assume this event was a one-time hack, it does not scale. Actually most of the “miracle weapons” from the very beginning of the conflict have faded away.

Bairktars? Gone. Sea drones? Haven't heard of them in a while. What else?

Russians in comparison are great at scaling. Rockets flying daily, vespa-drones - daily, FAB bombs got wings and flying daily. That's the consistency what wins wars, not the greatest talent.


> Sea drones? Haven't heard of them in a while.

You haven't heard as much about sea drones because Russia was forced to stop naval operations close to Ukraine by them, after losing 1/3 of the Black Sea Fleet.

Though they still occasionally manage to make headlines doing other things, https://www.wsj.com/world/europe/ukrainian-naval-drones-shoo...


You havent heard this absolutely crazy thing about their sea drones that happened not even a month ago? https://www.reuters.com/world/europe/ukraine-says-it-shot-do...


This incident only shows the mistake of SU-30 crew which detected the sea drones from the long distance and for some reason got into the shooting range. Usually those drones are destroyed with something like X-38MT missiles, from the 50-70km range. Otherwise you would have seen a lot more interceptors taken down


> Sea drones? Haven't heard of them in a while.

They shot down an Su-30 with a naval drone around a month ago: https://www.newsweek.com/drone-naval-sukhoi-jet-2067633


Starting July 1st all SIM cards in Russia need to have the owner register his biometry and passport details, otherwise the number is blocked. Ukrainians had a window to perform this operation but I doubt they'll have the same approach possible in future.


I think that as far as a security measure this is really up there with the form the US makes you fill out when you visit the country that asks you to tick the box if you are a terrorist.

There are countless ways around this beginning with just asking someone to buy a sim card on your behalf.


You think hacking SIMS is not possible in Russia?


No hack needed. You just give some change to poor people and register the cards in their name. This just raises the price a bit but does not prevent anything.


It will work for sure, anything can be managed with the money.


What do you mean by that? Stealing someone's sim? Doable, but detectable.


Detectable after the attack is not very useful. They could even clone high ranking officials’ sims cards or the sims of just any regular folk…


Quite easy to track though, like double sign-ins from different devices, uncommon locations, location and speed matching - like phone going 25mph in the forest.

And you don't need to permablock it, few minutes would be enough.


Implementing what you are proposing would be very disruptive nation implementing them.


Oh it’s already implemented since 2000, with SORM system. Think they are to extend it to give direct FSB access without pre-request starting from 1st of september


An LLM explains that "SORM (System for Operative-Investigative Activities) is a Russian system of lawful interception used in telecommunications. SORM is mandated by Russian law, requiring all telecommunications providers to install interception equipment".


Pretty much yes. Basically FSB can perform MITM attacks any time they want, but it still requires an order.

It does not help a lot with end-to-end encryption though


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: