jstepien
Joined 15 years ago
Karma
108
Submissions
43
Member since
Aug 28
stepien.cc/~jan
View on Hacker NewsRecent submissions
Comment · 12 years ago
stylefruits uses Clojure almost exclusively these days. https://www.youtube.com/watch?v=Hv4slaRydRM
Comment · 14 years ago
While I fully agree with you that the practice of curling a script and piping it into `sh` is—to say the least—risky, notice that this risk has been widely accepted long time ago. Each time you download an executable file—be it an exe for Windows, apk for Android, a Linux binary, an OS X executable—you're doing the same thing. I'll go one step further: each time you download a free/open source tarball you do not read the code before typing `make`. You make your machine run some code of unknown functionality and only plausible origin.
Arguably, HTTPS is one step forward, however vulnerabilities like the one discussed here make us defenceless. To make matters worse the line of defence based on reading the script works only in the case of relatively short, unobfuscated and unminified scripts written in plain text. It also requires the person who's downloading to have skills which despite being common for this community's audience are not widely spread across the population.
Sure, many projects sign their releases or announce cryptographic hashes of published files. But let's be honest: how many of us actually run `gpg` od `sha256sum -c` to verify them?
Spreading paranoia is not my goal here, however I hope that this comment will end up being thought-provoking.
Comment · 14 years ago
echo 'inoremap kj <Esc>' >> ~/.vimrc # works like a charmComment · 14 years ago
Finally an application with a UI which really nicely blends with the Windows 8 look and feel. Microsoft should be pleased.
Comment · 14 years ago
At the very beginning of the presentation he underlines the importance of the static compiler RubyMotion is based on, yet at 7:30 when he compiles a file with a name error in it the compiler doesn't even file a warning. Such non-existent methods and other similar errors should be caught at compile time if we're talking about solid AOT compilation.
Comment · 14 years ago
I've been running various flavours of GNU/Linux on my laptop for a couple of years now, with Arch being the most recent one. I find it perfectly adequate for an IDE-less, Vim-centric coding which takes a significant majority of my time spent in front of a keyboard.
I wonder what are experiences of members of the HN community who run Linux on their MacBooks, especially in case of a development-oriented environment. Could you share your opinions about such a setup? Is it worth the price of the machine?
Comment · 14 years ago
Firsty, comment sections are usually full of noise and it's next to impossible to distill any valuable information out of it. Secondly, don't expect an average person to bother checking for potential malware.
Comment · 14 years ago
I wonder whether they block magnet links as well. In either case, URL shorteners seem to be a sufficient solution.