Hacker Newsnew | past | comments | ask | show | jobs | submit | geocar's commentslogin

> as such they are composable in the sense that they can be used in a way the author(s) didn't think of. It's been a while since I've done any of that personally,

I do this all the time.

One of my favourite applications is a tool called "autoexpect" and I use it every time I try a new program.

What it does is this: I run a program in it's virtual terminal, and it writes a TCL script that does what I did, and puts little regex tests in for the output of that program for me. I can then edit that program (or not: sometimes the first output is fine).

Once upon a time I used to use a program called DESQview: It had a "learn" feature that allowed you to record and playback even DOS programs, so it was very easy to pick up autoexpect.

DESQview/X was their X11 server, and it also had the "learn" feature, but unless the application could be driven entirely by the keyboard, it didn't work; most similar applications I've seen over the decades since need such care for reliable "scripts".

Yes sometimes you also have the possibility of using the GUI accessibility framework to "script" the app. This is barely ok if it works, but most GUIs that I want to script were designed so that would not work at all, and it is coding that requires me work with the app instead of asking a domain expert for a recording.

autoexpect on the other hand is just text, easy to read and modify, and easy to send by email. It is hard to make a terminal application hostile to autoexpect without a great deal of work that (in the text based environment) can usually be undone just by using tmux and mosh on loopback.

> What I don't understand is why that must happen inside a terminal window where (for instance) all text must have the same font and size.

Modern (as in, since the 1980s) terminals are very capable of multiple fonts and font-sizes. I usually use a non-proportional font for coding myself.


> Modern (as in, since the 1980s) terminals are very capable of multiple fonts and font-sizes. I usually use a non-proportional font for coding myself.

Is that really true? Can I, in one terminal window, have prose with a serif font and code with a monospaced font at the same time? If I hover over something with my mouse, can I have a TUI tooltip at a smaller font size?


Yes such-a-thing-is-possible: The DEC VT330 (for example) allowed font upload, had multiple font sizes, and even mouse support.

There once was a program called https://en.wikipedia.org/wiki/ManaGeR which appears at first blush to be some kind of X11-competitor, except it was using the VT330's regular terminal capabilities to do those fancy pixel-patterns and fonts, and so there's just some weird VT escape sequences you've never heard of in there.

You can also use SIXELs if you want even more control, and you can readily see such things in action because qemu can (in 2026) send its graphical VGA display into a sixel terminal, but in the 1980s such a thing would not have been performant (probably something like 3 frames per minute) because the VT330 was slow, and such a thing would not be popular you would "lose the text" at some layer which would be as inconvenient as using any other graphical application.


Can you see if the media is carrying 802.1Q traffic tagged 986?

Yes: This is how Anycast works.

The same IP block is announced from multiple geographic locations, and so IP traffic will be routed to the nearest.


Even then, 0.4 ms round trip with the LTE tower itself doesn't make sense. The LTE stack just isn't designed for that.

That is a good point. If I ping the router 2m away from me in the airbnb (on Ethernet) I am staying in I'm getting 0.8msec. If it is really 0.4msec over some kind of consumer wireless, it is physically inside the phone.

I think more likely got something wrong with the units; System.Net.Networkinformation.ping reports in whole seconds (so this is ~400ms) for example. Maybe it is some weird tool or typo.


So there's something called Anycast. Thank you. But does that work on LTE as well?

Yes. And you can see it in action by using a "public looking glass" service and typing in an IP address to see which ASN (autonomous system number) announce it and who they peer with. Your mobile operator might even be operating one.

For example, go to https://lg.he.net choose BGP Summary IPv4 and plug in a well-known anycast address like 8.8.8.8 (operated by Google) or 1.1.1.1 (operated by cloudflare) and try a few different routers in different parts of the world, and you will see lots of different neighbors claim to be directly connected to these addresses -- something that should be very strange if you thought (for example) that an IP address had a geographic location at a particular point-in-time.

You can also try this for some of the addresses in this range and see that some of the addresses are like this.


It was something I didn't know much about, so thank you for taking the time to comment. Thanks to your comment, I've learned something I was missing. Have a great day

Yes, as well as DSL lines, 56k modems, and whatever else you can use to connect to the Internet.

N.B. This is exactly how seaside, vba, and even arc[1] do server-side state generally: by encrypting the blob-representing-state and sending to the client to be sent back on future requests (where it will be decrypted and rehydrated).

It's an old trick that everyone designing protocols should know, since there are lots of applications beyond AI companies.

[1]: As in, pg's lisp: https://arclanguage.github.io/ref/srv.html#:~:text=The%20pre...


And don't forget the venerable .NET Forms with its kilobytes of __VIEWSTATE

> kilobytes

cute


Do they mitigate replay attacks?

Also basically jwt tokens

> Search ad pricing is inelastic and auction based (supply goes down price goes up).

False. Advertisers have budgets and ROI targets. If Google cannot compete people will get their clicks elsewhere.

> A jump in traffic to DuckDuckGo does not mean Google is experiencing a decline in search volume. Number of queries per session has increased since launching AI Overviews.

But it does produce lower ROI for advertisers (in this case: CTR goes down because my ad is being shown to more people). Once user is on my landing page, my conversion rate is fine month on month (±1%), but my CTR on google got sharply worse by 5% since, and if it goes much further I'll stop completely on Google.

I doubt I am alone: Maybe others will jump ship sooner and the price will recover (demand goes down) but in either event Google is less net revenue, and given how aggressive their sales pushes have been I think it could be that big


> if the odds haven't properly converged what information does watching the prices get you before-the-fact?

How do you know we are "before-the fact"? Because these numbers are bananas?

Somebody just tanked their job, their life, for a million bucks.

Anybody who took that bet, might've individually spent only a few bucks to see that.

Everyone else (the people watching) learned the price of entertainment is a few bucks, and ruining someone's life is a million bucks.

Was that a surprise to you? If not, then the (market) prices may be said to have converged (close to) reality.

But maybe it is, and you think people would ruin their lives for less, or would pay more for human misery. In any event, the distance between whatever you think that probability is, and the return earned on these odds is information, that we all can enjoy (as benefit) before-the-fact.


> What's the appeal of collecting high priced watches?

You can carry them on your person through airports and other places reasonably unmolested in a way carrying a bunch of cash isn't so easy.

> Is it kind of like art collections, where its a decent store of value

Art doesn't store value: It trades whatever number the parties exchanging it want it to have, so those parties can manipulate their total annual revenues, which might be confused with value if you cannot think of why else someone would want to tell other people they made more or less money in a year, but is not valuable to anyone else.


> It trades whatever number the parties exchanging it want it to have

I'd argue that that's the very definition of (economic) value. Someone puts a cost on a good/service, and someone who values and can satisfy the cost gets said good/service.


Sure it is, but that's not a way to store value (what economists specifically call store of value if you want to read more about it), which is a little different:

If you buy a €100k rolex, you probably can't be sure you can sell it for more than €100k anywhere at anytime in the future.

You probably can't even find a bank that would take that €100k rolex you just bought as collateral for €500k on a 30y mortgage.

That's why a €1m watch collection is never going to be worth €1m unless we're talking raw materials.


> > What's the appeal of collecting high priced watches?

> You can carry them on your person through airports and other places reasonably unmolested in a way carrying a bunch of cash isn't so easy.

Now I have to ask, why do you need to carry a bunch of cash through airports, and why so often that you need a method of doing so?

I'm of course assuming you're doing this for legal reasons, I understand all the reasoning for less legal ones, but then that's hardly comparable to the original question, so I think this is a fair assumption.


Dereferencing does have a postfix notation, so you can try it (sort of):

    #define $ [0]
then you can say ptr $[0] or ptr[0]$ and see if it's really better...


100% it's the safer option.

The software with the best security track record of all time is written in C.


I'm curious which software you have in mind. Ex: seL4 is technically C, but I'd say the theorem prover is doing most of the real work there.


Specifically? I'm thinking of qmail.

qmail was at one point the second most widely deployed email server, handling the majority of online mail. It wasn't a research project; it's not obscure. Yahoo used to use it.

And what I mean by track record: After more than a decade after the last published version, a theoretical attack was found requiring special setup uncommon for a sysadmin, and impossible ten years prior.

When anyone thinks about how to build reliable secure software, I think they should be thinking of qmail because it really has no public source-available equal, except maybe djbdns.

seL4 on the other hand makes some specious claims about some ten year old version of itself, and so few people have even heard about it you thought it important to remind it is "technically" C -- qmail isn't like that at all: There is no prover, no test suite, and almost no metaprogramming of any kind. It's just C.


I would maybe not go that far, look at ADA, SPARK etc.


I would recognize sarcasm when I see it. But statistically, that could be true, considering the amount of C code running ( probably far less than COBOL or FORTRAN ), Compared to the relatively small amount of Rust code vs the amount of faults observed with it.


The software with the worst security track record of all time is also written in C.


kill -SIGWINCH -1 will redraw all your windows.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: