Hacker Newsnew | past | comments | ask | show | jobs | submit | a_random_canuck's commentslogin

100%.

Even just loading files off the old spinning disks took ages. Loading screens for a game could take 5-10 minutes.

Even just booting into my Linux box took 3-5 minutes and optimizing the boot time was a whole thing you spent a lot of time on.

I remember the day I received my first SSD and installed it in my computer, it was like Christmas morning. Things are way faster now.


I had a friend who supported a Windows desktop environment in the 90's. He would constantly complain about how rebooting a workstation would take over 20 minutes. The amount of scripts and other tooling was nutz.

My Macbook goes off when I shut the lid and right back on when I open it up. Try doing that on my early 90's Toshiba Satellite.

We live in a magical world now of high speed, multi-core and NVMe hardware. I have no desire to ever go back.


> My Macbook goes off when I shut the lid and right back on when I open it up. Try doing that on my early 90's Toshiba Satellite.

Even the first Mac Portable[1] had fast sleep/wake. As did the Radio Shack Model 100[2] from the early 1980s. Early Apple laptops could spin down the hard drive (vs. modern Macs where you can't easily shut off I/O-intensive background daemons like mdworker, syspolicyd, photoanalysisd, etc.; fortunately SSDs mitigate the issue somewhat.)

[1] https://en.wikipedia.org/wiki/Macintosh_Portable

[2] https://en.wikipedia.org/wiki/TRS-80_Model_100


That reminds me that 10 years ago, I could close a (Windows, Linux) laptop and open it a couple of days later and it would instantly turn on, using the amazing S3 sleep. Doing the same these days and... the laptop doesn't turn on at all, because the battery is dead (caused by modern standby). Yay, progress!


It honestly gives me a warm fuzzy feeling thinking about how blazing fast personal computers are these days.

It's instantaneous compared to the 90s and even the 2000s. It wasn't until 2010-2012 that I remember switching to SSD, which is when I feel the turning point was.


I had a netbook around this time and putting an SSD in it was a HUGE upgrade (similarly the upgrade from 2 to 4GB RAM).

I still have it, and when I put an 32bit version of Debian on it a couple years ago, it was molasses. Somehow I used it for years with no complaints.


When I upgraded my Windows laptop (running Windows NT) from something like 64 MB to 128 MB, it made a huge difference. Most of the benefit was that it stopped using swap. Sadly, I was borrowing the the DIMM from my boss and I had to give it back. It was like flying back on coach after getting there in first class.


I think this is a major (the only?) reason these internet companies are even successful. Because they just ignore all these costs that don’t scale well that ordinary companies should have.


I think that is a touch strong. Though, I agree that largely nobody really factors in costs of scale, as absurd scale just isn't something that makes sense. This is true in physics as much as it is in economics. Things that work in one scale do not in another. Things that work in changing scale don't work in fixed scale.


In my experience for medium sized services it’s still better to have everything talk to the same authentication database.

Postgres has insanely good read performance. Most companies and services are never going to reach the scale where any of this matters, and developer time is usually the more precious resource.

My advice is always, don’t get your dev team bogged down supporting all this complicated JWT stuff (token revocation, blacklisting, refresh, etc) when you are not Facebook scale / don’t have concrete data showing your service really truly needs it.


Alternatively, just don't worry about token revocation and all that complicated stuff? So you have a window of 5 minutes (or whatever your access token expiry is) that you can't revoke - is that a big deal?

A simple JWT implementation isn't that complicated, but you have to accept some limitations.


If it only adds disadvantages, better not to use it though.


+1

For mostly-read flow like authentication, a centralized database can scale really well. You don't even need postgres for that.

If you have mutable state, JWT can't help you anyway.

JWT start make sense only when you are doing other hyperscaler stuffs and you can reuse part of those architecture


Funny, people used systems like JWT in the late 1990s. Back then you couldn’t really trust the session mechanism in your language because inevitably these had bugs and would toss your cookies for “no reason at all”.

I was inspired by https://philip.greenspun.com/panda/ circa 2001 to develop a complete user management framework based on that kind of cookie which had the advantage over other systems that the “authentication module” it took to get authentication working in a new language was maybe 40-100 lines of code. Software like PHPNuke that combined second or third rate implementations of apps all in the same codebase was the dominant paradigm then, the idea that you could pick “best of breed” applications no matter what language you were using was radical and different.

I used the framework for 10+ projects, some of which got 350,000+ active users. As an open source project it was a complete wash. Nobody got interested in user management frameworks (as opposed to writing your own buggy, insecure and hard-to-use auth system in a hurry) until around 2011 or so when frameworks based on external services all of a sudden popped up like mushrooms. Seemed like the feature I was missing was “needs to depend on an external service that will get shut down with the vendor gets acquired”


They need to. Honestly we need a way to completely segregate Chinese and Russian networks off, as well as anyone who peers with them. They are using our open networks to brazenly attack us in broad daylight… it’s time to fight back.


How many ways do they have to transmit to Western networks? Proxies, tunnels, rooted machines, sending balloons with 5G modems that dwell in our airspace for days? I would much rather see a 100:1 defensive effort in operating system security. Lockdown mode in macOS is like Spinal Tap's amplifier that goes to 11. Why not just have 10 be the most secure, and make it go up to 10?


Because lockdown mode makes a lot of compromises for user experience that most people don’t need to worry about — disabling JIT, for example.


You only need one weak link in the chain. Computer security is effectively an oxymoron.


This is my take. Consciousness is overrated and probably just an emergent phenomena of the brain processing external stimuli into memory, moving memories around, etc etc, in a continuous and never ending flow. Free will is just an illusion of our deterministic but fundamentally random reality.

There isn’t even an agreed upon definition for what consciousness is from a scientific perspective.


And the reason that it is overrated, is because it has to feel special for the bearers because it makes them prioritise their survival.

Consciousness is largely a way to have a reward function for set of behaviours that keep you alive through reason.

It appears at a level where reasoning is intelligent enough that you need a more complex reward function.


This might be an interesting reason for it to feel special, but I'm not entirely convinced, and I probably don't fully understand what you mean.

It seems that not everyone values the having of a consciousness as something special. Survival works pretty well with a good appetite, some muscle for clobbering enemies, and a good sex drive. How does (thinking about) consciousness add an advantage here?


This seems like the secular version of "the devil made me do it". We can't be accountable for any of our actions because we are all just molecular machines playing out their predetermined outcome.


We are molecular machines and although the outcome is predetermined, the only way to find out the outcome, is for the machine itself to follow through its course. So this is exactly opposite of "devil made me do it" because you do something not because of external force or because of random chance but because of initial state of the machine which makes you who you are.


So when a person commits a crime, they can just say: "the initial state of my molecular machine made me do it!" ...?

To me that is exactly the same as saying "the devil made me do it!"

i.e. both things are euphemisms for "I'm not accountable for my actions"; "I'm not at fault"; "It was beyond my control", etc.

And if you truly believe there is no such thing as free will and that everything is predetermined, then you'd have to agree. Hitler can't be held accountable for his choices; his actions were all predetermined and his fate was sealed at the big bang; he just got an unlucky "initial state".


Since you are exactly the molecular machine, nothing more and nothing less, saying "the initial state of my molecular machine made me do it" is same as saying "the initial state of my self made me do it". So it does not mean that you should not be accountable, on the contrary it means that the action was caused by your essence, what makes you you, and not some outside entity or random chance.

As for the free will, it means that the behavior of a molecular machine depends on machine itself, not on far away stars or a random number generator. One can't say that he got unlucky initial state, because he _is_ that unlucky state. Any change of the state would create someone entirely different. Moreover Stephen Wolfram's computational irreducibility principle implies that despite all the information being contained in initial state, only way to extract predictions from that state is to run the molecular machine and observe its behavior.


Where did GP use this view to argue for the abolishment of the criminal justice system?


I feel like this announcement could use a more clear summary of the key point at the top.

It sounds like Remix will be discontinued and anyone using it will need to upgrade to React Router? Is that not going to be super super confusing?


I have the same question/confusion. I'm not sure what the benefit is of merging the projects? I get they are very close feature wise but why physically combine and make Remix features an opt in vite plugin vs just keeping the projects separate repos?


Remix is already essentially a Vite plugin + React Router. That change was started at least 9 months ago and went stable 3 months ago.

https://remix.run/blog/remix-heart-vite

https://remix.run/blog/remix-vite-stable

At this point the separation between the two projects is seeming more and more like a lot of rigmarole for nothing. Imagine running two projects that are 90% the same, and every time you change one you have to make a release and update the other, etc etc.


They do. My wife lost her 10-year-old Instagram account to a well crafted phishing attack against an email she had published…

Instagram/Meta’s customer support is absolutely atrocious and disgraceful on this front. They basically treat my wife like she’s also a spammer and there’s no way to recover the account or undo any of the changes the spammers made.

It’s hilarious how they ask you to “appeal” a ban by clicking a single button without giving any chance to rectify what the spammers did to her account. Of course their automated bots just reject your appeal almost instantly. Shameful.


Clicking the appeal button is like a trap to permanently ban your account.

You can get it back by paying off a Meta employee through a site like Swapd. It's either that or get your comment to the front page of HN. Those are the only two customer support channels for Meta or Google.


Does her email show up on any leaks on https://haveibeenpwned.com/ ? I'm wondering if not publishing it would have made any difference to receiving phishing messages.


Would such an attacker be stymied by this? It seems like automated email harvesting wouldn't be a big time saver for any attack that required a well-crafted anything. I don't know anything about that particular attack, though.


This gave me "Press F to appeal ban" images.


This could happen to anyone. You’re tired or thinking of something else, the attack weirdly aligns and you don’t notice it until it’s too late.


> They managed to secure continuous income streams of free money by talking to people on their phones. It’s extra money and surely they planned on doing more scams. That’s the motivation.

Doesn’t this pretty much describe a sales job? Except the product they are selling doesn’t exist.


Not having to deliver a product is what lets scams scale much better than sales.


Really? When I first saw it I understood it must have to do with changing languages.


Never struck me that way, though I can see it in retrospect. On the other hand, if I see a flag, I know that’s language settings.

In don’t know that using flags for language settings is more semantic, but it’s convention so I know what it means.

I’ve seen flags used to indicate language settings for as long as I’ve been using computers.


Visiting the Netherlands right now and every time I visit local.google.com, it reverts back to Dutch. I had no idea what the symbol on its own and only figured it out when searching how to get things back to English and seeing the symbol used in that specific context.


I thought it was a weird logo or something, no idea it was even a button.


A funny argument to make when the “contract” is entirely automated, without negotiation or consideration.

Such agreements should not be enforceable in the first place.


I agree that there should be more restrictions on this than there currently are in the US, but unless the composition of the US Supreme Court changes enough that they overrule their many recent arbitration-related precedents, we’re stuck with this unless and until Congress changes the law. Honestly, they’re not even legally required to allow an opt-out at all under current rulings, other than rejecting the terms of service entirely.

At least no constitutional amendment is required to fix this. These US Supreme Court rulings have been based on the Federal Arbitration Act, a regular statue, not on the Constitution (except as the source of Congress’s authority to override state law on this issue).


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: