blueplanet

> Without a web of trust (sigh), a PKI (ugh), or some other mechanism to tie identities to trust metrics, this is essentially a complicated, very expensive, and fragile version of the shasum check npm already has.

The stance was without an agreed upon way of trusting public keys, you don't get any additional protection beyond shasum. Isn't that true?

Can someone explain to me why using a cached value for hashCode in an immutable string is a bad thing?

I think they mean tailoring in two ways:

1. Play stories local to where you live. 2. A lot of shows on NPR aren't straight news, so it'll remember which shows you particularly enjoy.