brlewis

Joined 19 years ago

Karma
11,795
Submissions
4,411
Member since
Feb 20
meet.hn/city/us-Beverly

Socials: - github.com/brlewis

--- Bruce Lewis, creator of https://en.howtruthful.com/

View on Hacker News

Recent submissions

Comment · 6 days ago
Comment · 10 days ago
No. Like the PHP vulnerability, this was a bug in a language interpreter written in C, and a bug that would not be possible in most newer languages. Even as secure-by-design becomes more prevalent, there will be vulnerabilities, but this one is a taste of the past.
Comment · 11 days ago
I think I found the article you alluded to: https://thephp.foundation/blog/2026/06/16/php-through-a-scre...

The "Syntax as landmarks" section sounds like he's comparing it particularly to Python. The quirk of `$` denoting a variable did kind of work out for him. Especially compared to Python where you declare a variable by assigning it. But it's not like PHP was designed with a special character for each syntax role. He still needs to use context to infer other roles.

PHP has the advantage of being preinstalled or easy to install in a lot of environments. I had to investigate the blind developer thing because I'm still on the hunt for a second advantage.

Comment · 22 days ago
If we were talking in the context of large TypeScript projects, you would be right. Central management helps the project avoid adding too many dependencies.

But you replied to a comment that said "for simple standalone tooling scripts in otherwise non-JS/TS projects" where this absolutely is not a bad pattern.

Comment · 22 days ago
I don't use KV, but I doubt it's hard to migrate to another key-value store.

Deno has tons of browser APIs, e.g. Deno.serve uses the standard Request and Response objects. That's not platform lock in.

Comment · 22 days ago
Deno's is slicker. Deno's built-in LSP works with the automatically installed package's types.
Comment · 22 days ago
>I thought the latest versions ran actual typescript.

That's by design. Deno smoothly hides the fact that TS needs to be converted to JS for V8 to run it. Similar to how it smoothly hides everything about npm.

Comment · 26 days ago
Comment · 27 days ago
I'm super interested in what their specific complaint was, if they gave one.
Comment · 27 days ago
Comment · 1 month ago
Comment · 1 month ago
It's exceedingly charitable of you to try to infer a good reason for what they're proposing. I say "exceedingly" because in their proposal they had the opportunity to present a good reason, and they chose not to use that opportunity.
Comment · 3 months ago
>This effect would disappear almost completely if they instead of estimating their rank they estimated their score

In the article, in the section "The effect is in the noise", just before the graphs, it says they estimated their score. Where did you get that they estimated their rank?

Comment · 3 months ago
The key claim: "Random data actually mimics the effect really well."

This makes some sense. If people are asked to guess a number between 1 and 6 and then roll a die, the people who roll low are more likely to overestimate and the people who roll high are more likely to underestimate. But the key is precisely how well random data mimics the effect.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton