Building your own shell using Rust - <AUTHOR> https://www.joshmcguigan.com/blog/build-your-own-shell-rust/ <comment><USER2> Hi all, author here. I'm not sure of the rules around self promotion so I want to point out that I didn't submit this, but I'm happy to see that others are enjoying it.

I wrote this blog post to document my process of building a simple shell using Rust. I learned a lot about how shells, terminal emulators, and the OS interact by going through this exercise, so I hope this is useful to others as well.

Feel free to reach out if you have any questions.

<comment><USER3> I've never used Rust, but looking at the code, and reading [https://doc.rust- lang.org/std/process/struct.Command.html](https://doc.rust- lang.org/std/process/struct.Command.html) , is std::process:Command just farming out to bash? I ask, because the examples don't specify a full path, so that implies something else is doing the PATH search, like bash. Because of this, and the semantics, it looks like it's equivalent to a system() function in other languages.

If you really want job control, a path, environmental variables, and all the things that make a shell a shell, you have to be using exec() or execvp() [https://doc.rust- lang.org/std/process/struct.Command.html#me...](https://doc.rust- lang.org/std/process/struct.Command.html#method.exec) . Otherwise all you've done is wrap an existing shell that does all the work for you, and that was an immediate fail when we had to a make a shell in my undergrad systems course.

An easy check is the use the command "echo $SHELL". If that spits out anything besides literally "$SHELL", you're farming out.

All that said, Rust's exec() is listed a unix specific, so if you're on Windows, I guess you're stuck.

<comment><USER4> If you or anyone else would like to file a bug, that'd be great: we should make this more clear in the docs. I'm about to jump on a plane or I'd just do it; a bug will make sure I get back around to it eventually.

<comment><USER5> Why would the docs need to be updated? Is it assumed that a command would be executing a bash or other shell process?

<comment><USER4> If something isn't clear, it deserves an update.

This could be by adding some text to clarify that this doesn't use a shell, or maybe changing the examples to not imply one is used. It just depends.

</comment></comment></comment></comment></comment><comment><USER6> If anyone is interested in developing a shell even further, checkout rustyline[0]. It makes it very simple to add keyboard shortcuts (Ctrl-C), completion, and even history. There's also liner[1], which is part of the redox-os project, which also has a lot of the same features.

[0]: [https://github.com/kkawakam/rustyline](https://github.com/kkawakam/rustyline) [1]: [https://github.com/redox-os/liner](https://github.com/redox-os/liner)

<comment><USER7> I second this greatly! Too many people roll their own line editors and always mess up the readline (emacs) shortcuts.

<comment><USER8> I rolled my own and didn't even bother with emacs shortcuts (got vim ones though, as that's what I'm familiar with).

However I'm not adverse adding emacs shortcuts if anyone can recommend a good guide for which keys do what.

<comment><USER7> Bash shortcut guides get most of the useful ones. [https://github.com/fliptheweb/bash-shortcuts-cheat- sheet](https://github.com/fliptheweb/bash-shortcuts-cheat-sheet)

<comment><USER8> Useful link (thank you) but to be honest I was after a more complete list because nothing breaks usability more than something being familiar but not behaving quite the same exactly. But I'll stop being a lazy arse and Duck Duck Go the answer myself :)

</comment></comment></comment></comment></comment><comment> Null-Set An example of a more fully featured shell written in rust is Ion. [https://gitlab.redox-os.org/redox-os/ion](https://gitlab.redox-os.org/redox- os/ion)

It is inspired by fish

</comment><comment><USER5> I'm currently writing a shell in Rust, and have written a post about it. If you find this interesting you may also find my post interesting.

[https://nixpulvis.com/ramblings/2018-10-15-building-a- shell-...](https://nixpulvis.com/ramblings/2018-10-15-building-a-shell-part-2)

<comment><USER2> Thanks for sharing, your posts are very well written.

I really like the idea of syntax highlighting before the user presses enter.

Any reason you are writing your own posix parser and readline implementation, rather than using existing Rust crates?

<comment><USER5> Partially to learn how, partially to maintain a consistent style, and partially to see where we can improve.

As for the POSIX parser specifically, I love grammars, and want to support multiple, and building one in LALRPOP is t too bad. Also I looked at conch- parser, but didn't want to use its AST, and decided to go this route.

I have been using the termion crate, and may have another PR to contribute. I have somewhat ambitious goals for the readline like library though.

<comment><USER2> As I was thinking about an improved user interface for the shell, it seemed like at some point you'd hit the limit of what is reasonable given the current split implementation between terminal emulator and shell. Do you think you'll get to a point where you'll need to build an all-in-one solution?

<comment><USER5> It's interesting you mention that. I'm (slightly) involved with the Alacritty project, and generally like the layer of abstraction here. If not only to support the existing status quo, but also as it leaves a lot of the platform specific features for the terminal.

ANSI, and the other standards are large and somewhat unwieldy though, and there are times it would be nice to do away with it all.

As for features, there's a number of things that you could argue for being implemented in either place. One feature I feel is a good fit for the shell for example is saving and being able to recall and/or pipe previous commands, while copy paste might be implemented in both.

</comment></comment></comment></comment></comment><comment><USER9> Any other recommended article in making your own shell in other language?

<comment><USER10> [https://github.com/danistefanovic/build-your-own-x#build- you...](https://github.com/danistefanovic/build-your-own-x#build-your-own- shell) ?</comment></comment>


Twitter Activist Security - <AUTHOR> https://medium.com/@thegrugq/twitter-activist-security-7c806bae9cb0#.881ljtvmr <comment><USER2> Because it is always possible you will fail your Tor discipline, I would add some defense-in-depth aspects, in case your browser is compromised and your network address is revealed.

\- Use separate hardware. A cheap laptop and a cheap phone.

\- Burn the receipt and chuck the packaging.

\- Cash. Pay in cash.

\- Buy from small stores with no CCTV, or better yet, from people like migrant workers.

\- You can buy stored value cards (debit cards) without ID, and some you can load with cash at ATMs. (Also good to buy from travellers.)

\- Once you have a debit card you can pay for data without going to a store.

\- If you turn on your Wifi tethering and other devices are in range you have created an event in their logs. Just use a cable. If you must, change the SSID regularly and use Android 6 which has MAC randomisation. Never have any other SSIDs saved, especially not your home network.

\- Turn the phone off when not in use. Removing the battery is advisable.

\- Don't connect to 3G near your home or work or where there is pervasive CCTV or not many people.

\- If your commute is logged (via your cellphone, number plate recognition / tolling, personally identified public transport like Oyster cards) then your location can be correlated against when your persona was online.

\- It might seem that transmitting from different locations is a good idea. But not really, it gives a more unique history.

\- Run Tor on the laptop. Run _nothing_ on the phone, its just a radio.

\- If you want to use Signal, get another burner phone.

\- Invest in some numbered wafer seals or tamper bags. Keep your kit in them when cached.

\- Don't tell fibs to federal agents. Record all interactions with them.

<comment><USER3> You make a lot of interesting points with frequency analysis, but these facts can be used for your benefit.

For example, if you're concerned about transit systems being used to identify you, try leaving the devices in a safe location for several hours and have them respond on a timer system. Any analysis ran across millions of users will end up filtering you out, lowering your own suspicion factor and increasing the adversaries uncertainty when facing big data.

How a system fails is just as important as how it performs when it comes to security, the young-adult novel Little Brother by Doctorow goes into this in good detail.

<comment><USER2> Sure, but it depends how complicated you want to make it.

Ideally you would use an electronic dead drop -- any tweets would be sent by a small embedded computer which listens passively on Wifi for a message sent to it from you as you transit past it, then at some random time later fires up the 3G to send to twitter etc (still via Tor). This can be automated to run from an android phone. Of course if this phone is found its credentials can be extracted and it can be turned into a method to locate you. See the FBI CI bust in New York of 'Anna Chapman'. They really should have used Tor, but of course that flags your IP as of interest in the big NSA computer in sub- basement 19.

[https://vault.fbi.gov/ghost-stories-russian-foreign- intellig...](https://vault.fbi.gov/ghost-stories-russian-foreign-intelligence- service-illegals)

</comment></comment></comment><comment><USER4> I'm glad they included something about mental health. There was an interesting post on /r/privacy the other day of someone with burnout from the paranoia of government surveillance [1]. I browse /r/privacy from time to time and am worried by the threat models that many people on there have. I don't know the reasons for their threat model, but I suspect a large number of people don't have any solid reason for such a rigorous model other than paranoia. The cognitive load of maintaining privacy at that level must just be overwhelming.

[1] [https://www.reddit.com/r/privacy/comments/5qfpb6/im_exhauste...](https://www.reddit.com/r/privacy/comments/5qfpb6/im_exhausted/)

<comment><USER5> I can't find the tweet easily now, but the original reason for including that was because people apparently have problems handling disconnected personalities for a long time. the_grugq says this affected undercover people.

Edit: here's the tweet with some interesting comments [https://twitter.com/thegrugq/status/824949499688726528](https://twitter.com/thegrugq/status/824949499688726528)

<comment><USER6> yeah, a study of the literature will show that it is a constant problem for people that start to assume a secret identity. There is a class of people that are actually better at this than others[0]. For police that go undercover flow long periods, they run the risk of "going native" [1][2]. There was Tolkachev[3][4] who insisted on personal meetings rather than dead drops (although it was ultimately Alrich Ames' betrayal that doomed him, not KGB surveillance or tradecraft errors.)

Karl Fuchs described his mental trauma of being both a Western atomic scientist and a Soviet Atomic Spy[5].

There are many more references available, but it is seldom discussed. This is one of the reasons that the CIA (and other secret agencies) become so insular. The members are unable to be open with anyone else except each other, and so they tend to stick together.

Theres more on the extensive work that RUC and Special Branch had to do to maintain the sanity of the IRA informants they were running. There is a constant refrain, human beings do not operate well with secret identities under high stress environments for long periods of time.

[0] [http://www.slate.com/articles/business/the_dismal_science/20...](http://www.slate.com/articles/business/the_dismal_science/2015/04/sex_and_the_workplace_do_closeted_gays_and_lesbians_cluster_in_certain_professions.html) [1] Undercover and Alone [2] Lu-CiFER: Memoirs of a Mongol [3] The Billion Dollar Spy [4] [https://www.cia.gov/library/center-for-the-study-of- intellig...](https://www.cia.gov/library/center-for-the-study-of- intelligence/csi-publications/csi-studies/studies/vol47no3/article02.html) [5] [https://archive.org/stream/sovietatomicespi1951unit/sovietat...](https://archive.org/stream/sovietatomicespi1951unit/sovietatomicespi1951unit_djvu.txt)

</comment></comment></comment><comment><USER7> One comment and two questions:

I wish I had something important enough to say to be able to put this advice to use!

How important is the physical location you work from? Should you religiously avoid working out of a place that is associated with you, such as your home or office? Should you avoid places that are near where you live, and if so, how far should you go? Or is Tor sufficient for masking your physical location in all cases?

I'm very interested in how the grugq is able to have had such a public persona for so long and remain anonymous—including speaking at conferences in person, I understand. Obviously, he is an expert, but that doesn't really explain _how_. He writes prolifically on Twitter and sometimes other mediums. How is this large body of content not subject to stylistic analysis? Information is known about him, such as where he lives and what he does for a living. That seems extremely revealing. How has he been able to speak at conferences, quite literally tying his physical identity to this anonymous persona, let alone traveling to the conference in the first place?

<comment><USER6> 1) physical location

It depends a lot on how intense you expect the investigation to be. Strong protection comes from using a network connection that is not linked to you, in addition to using technology that masks your IP address. If there are CCTV, then that increases the risk exposure, as does bringing a mobile phone with you. It is a lot of trade offs based on the threat model. In the case of a resistance twitter account, I suspect that simply using Tor Browser Bundle will be sufficient, but it is hard to make a blanket statement.

2) anonymous

I'm not anonymous, I'm pseudonymous. There are hundreds, or thousands, of people that know my "real" name. It isn't important, I don't use it for anything. The only people who do use it are my mother and my bank. I've been using the same handle "grugq" for over two decades. Everything I have done is under my handle. I don't maintain two identities, I have only one -- the grugq. You can't link my handle with another identity because there isn't one.

Over a decade ago I was at a small art college where +Fravia was giving a talk. After his speech, we went for a walk and a chat. He lamented that all the hackers were dropping their handles and going by their real names for commercial reasons (so they could get jobs, basically.) He said to me, "you and I are the only ones left still using our handles." A few years later he died of cancer. So, now I am the only one left.

People who know my name, know where I live and know that it would increase my risk profile to expose me. They respect my wishes to use my handle, and they respect my privacy. It is no great secret, it is simply the choice I have made, an obligation to an old dead friend, and also one that could have very real security implications.

It always puzzles me why people care so much. A name is a name.

(also, you have no idea what I do for a living. lol)

<comment><USER8> By chance, is this the same Fravia whose "guides" I studied 20-ish years ago to learn how to "crack" old software applications?

<comment><USER6> Yes.

</comment></comment></comment></comment><comment><USER9> The principles The Grugq outlines here are explained in lots more detail in his OpSec for Hackers presentation. It includes a detailed analysis of how Lulzsec violated these principles which is why they were caught:

[http://www.slideshare.net/grugq/opsec-for- hackers](http://www.slideshare.net/grugq/opsec-for-hackers)

<comment><USER10> That Avon quote: [https://www.youtube.com/watch?v=E2Fv- nJCfrk](https://www.youtube.com/watch?v=E2Fv-nJCfrk)

<comment><USER9> Thank you. I thought it sounded familiar.

</comment></comment></comment><comment><USER11> interesting read, but isn't this written by the same guy who was selling exploits to 3rd world dictators?

edit: it appears he was a "broker" / middleman. some moral high ground.

[http://www.forbes.com/sites/andygreenberg/2012/03/21/meet- th...](http://www.forbes.com/sites/andygreenberg/2012/03/21/meet-the-hackers- who-sell-spies-the-tools-to-crack-your-pc-and-get-paid-six-figure- fees/#7437d3e69448)

<comment><USER6> no. never sold anything to "3rd world dictators."

<comment> angry-hacker But you feel morally ok by selling exploits? You never know how are they being used, how come you're so proud of it?

<comment><USER12> I was originally against it but now I'm neutral on it. Most of the exploits are intentionally put there by companies that have enough money & expertise to avoid them. The bigger ones have enough money to make compilers and CPU's that make the software immune to code injection. Microsoft even has Steve Lipner who did one of projects (below) that taught me high-assurance security. Like them, his philosophy is shipping product over correctness since that is what market rewards. As for market, they almost always buy something insecure over something more secure if even the slightest extra benefit in insecure thing. You can't get them to use something secure even when it's free (eg Signal).

So, what you should be thinking is you and/or other people are using and financially rewarding companies that intentionally leave vulnerabilities in software. Is that morally right? Probably not. Is someone making money off those vulnerabilities morally right? Probably not. The first seems worse, though, as the vulnerability market would be tiny if it wasn't happening. They'd command higher prices but even that would mean less damage.

[http://www.cse.psu.edu/~trj1/cse543-f06/papers/vax_vmm.pdf](http://www.cse.psu.edu/~trj1/cse543-f06/papers/vax_vmm.pdf)

Note: Compare Design and Assurance sections to how commercial or FOSS VM's are built today. Regular "security" is a joke.

<comment><USER13> Wait, what? Did you just say software companies intentionally embed vulnerabilities in software?

<comment><USER12> Yes. They don't put the individual vulnerabilities in there on purpose. It's an indirect effect that they're conscious of. They know certain practices will reduce the amount of vulnerabilities in their software at some increased cost. They know a quick-and-dirty approach will leave a ton of bugs, including vulnerabilities, in there at a higher, profit margin. If not embedded, they also usually sell the fixes for it in terms of support contracts or upgrades. They consciously choose to go the route that increases vulnerabilities and profits. After problems happen, they do as little as possible to patch them while underlying process creating them for profit remains. We call the result of this game penetrate-and-patch.

By avoiding QA for extra profit, they're effectively adding vulnerabilities to their software. There's other companies that know certain practices reduce their defect rates or security worries. They're preventing or removing defects on a regular basis while still making a profit. These companies are rare. Most leave vulnerabilities in. The project managers will even tell you that if you question them in a way to get a straight answer.

Here's Lipner at Microsoft straight up saying it. He at least still turned their security around a lot with compromise that was SDL.

[https://blogs.microsoft.com/microsoftsecure/2007/08/23/the-e...](https://blogs.microsoft.com/microsoftsecure/2007/08/23/the- ethics-of-perfection/)

A recent example comes from Jack Ganssle in The Embedded Muse where he points out basically nobody commissioning embedded systems will sacrifice dollars or time-to-market for security:

[http://www.ganssle.com/tem/tem314.html#article2](http://www.ganssle.com/tem/tem314.html#article2)

A follow up was a person that lost their job improving security in an embedded product:

[http://www.ganssle.com/tem/tem315.html#article5](http://www.ganssle.com/tem/tem315.html#article5)

Others in later issues & other forums I've read all consistently say the same things. Total apathy where it's not even on the checklist or requirements is default. I experienced this myself with a lot of people I tried to sell on security at 10-30% extra cost. Just 10-30% on a critical system! Most in embedded will also frown on or fire you for improving security if it adds substantially to the BOM cost, dev cost, or time-to-market. You're supposed to do it cheap as possible. It's why 8-bitters are still selling by the millions of units or however large number despite little to no built-in safety/security. Hard to argue with $1 a chip vs $5-30 when selling 100,000+ units of a product with that different being profit. And you probably won't even get sued over hacks! :)

Counterexamples in case you're curious of methods for making software with low defects at somewhere from slightly to 50% increased cost:

[http://infohost.nmt.edu/~al/cseet- paper.html](http://infohost.nmt.edu/~al/cseet-paper.html)

[http://www.anthonyhall.org/c_by_c_secure_system.pdf](http://www.anthonyhall.org/c_by_c_secure_system.pdf)

Companies using those methods actually _warrantied_ their software at specific defect levels that were usually under 6 bugs per loc. Praxis is still around as Altran.

</comment></comment></comment></comment></comment></comment><comment><USER14> I would go so far as to make sure you know who is near you when you engage in any such activities because when a government begins to limit its suspects to a small number of people they can catch you in the most innocuous places; like a public library

</comment><comment><USER15> #8 cropping might not be adequate as many photos have meta-data attached (e.g. EXIF) - you probably want to at least view that or delete it entirely before posting a picture.

</comment><comment><USER16> I recall Twitter was suspending accounts for logins using Tor - I assume, it's no longer true? Or it's sufficient to provide phone number to safely login via Tor?

<comment><USER17> You must verify your account with a mobile phone if you sign up using Tor. You can use an email address if it's not over Tor.

</comment></comment><comment><USER18> Does Twitter have a Tor .onion address for accessing their system?

<comment><USER19> Considering the fact they lock accounts for "suspicious behaviour" that don't provide a phone number and keep it that way until you do provide one. I'd say they don't care about your privacy.

</comment></comment><comment><USER20> Nice seven samurai avatar :)</comment>


How to print things - <AUTHOR> https://byorgey.wordpress.com/how-to-print-things/ <comment><USER2> It might be nice to use the front side for pages 1 to n/2, then print the remaining pages on the back side of the sheet, in reverse sheet order.

eg: (1, 8), (2, 7), (3, 6), (4, 5)

This has the downside that the middle consecutive pages are on the same sheet, but the upside that you only have to flip the stack once, and never have to flip any individual sheets. So it's nicer to leaf through and you can jump ahead fairly easily.

It's almost completely compatible with the algorithms for single page printing, with the small addition of one stack flip in the middle(No memorisation of state is needed, it will be very evident that the flip is required as you will see the first page again!).

<comment><USER3> That's a nice idea. I will add it to the collection!

<comment><USER2> Thanks!

</comment></comment></comment><comment><USER4> "The pages must be turned one at a time; there is no easy way to jump ahead multiple pages."

This makes Möbius double-sided a non-starter for me. I'm happy to read most PDFs using GoodReader on the iPad. The exception is information-dense PDFs, for which I often want to:

\- Flip back and forth between different sections

\- Keep fast access to a couple of key pages

With a regular single/double/booklet printout, this is easily achieved with fingers and bookmarks. The Möbius double-sided method, though, you lose these, for only a small practical gain (always being able to lay consecutive pages side-by-side).

</comment><comment><USER5> Dude... just print stuff in booklet style

</comment><comment><USER6> I like this idea. Making it possible to look at any two consecutive pages side-by-side is, IMHO, very useful. Especially for technical papers where the text refers to equations on other pages.

</comment><comment><USER7> It's missing the 'Kerouac' method: print everything out on one enormous continuous scroll. Advantages: easy to store current position; always in order, even if you drop it; no need for paperclips/staples. Disadvantages: random seeking is painful.

<comment><USER8> That has all the disadvantages of screen and paper reading combined.

</comment></comment><comment><USER9> Most wall calendars I have seen follows this "Möbius double-sided" pattern.

</comment><comment><USER10> You can also try an interleaved double-sided layout:

sheet 1: \- face / page 1 \- back / page 3

sheet 2: \- face / page 2 \- back / page 4

sheet 3: \- face / page 5 \- back / page 7

and so on.</comment>


Jeff Bezos on Google in 2001 – Passitdown.tv (2001) - <AUTHOR> http://www.passitdown.tv/watch/jeff-bezos-on-google-in-2001/ <comment><USER2> Wow he looks different. Like a cross between Colin Mochrie and Kevin Spacey.</comment>


#Resist - <AUTHOR> https://www.meetup.com/pro/resist/?cta=1 <comment><USER2> I also care about democracy. I hope that in the future, the DNC doesn't collude with the mainstream media to destroy any real chances of a third-party in this country.

Since they haven't apologized to the American public for doing so and instead keep doubling-down on emotional rhetoric, I don't want them anywhere near the white house.

I really hate Trump. But I hate that you pushed me to vote for him because the alternative meant that this politically correct toxic culture would continue to saturate all parts of our society.

I support resistance. The resistance against the anti-fascists who are beating people up in our streets and threatening someone with violence for speaking their mind. If their idea is ridiculous, have a civil debate and stop using violence in an attempt to win an argument.

<comment><USER3> What a nonsense - the violence has been minimal, and no more than the usual violent idiots you get in any situation, from any group.

Also, I would buy you not wanting to vote for a DNC candidate because of the way they handle their primaries or whatever, sure. The idea you'd be willing to vote for a GOP candidate after their blatent disregard for the public, truth and democracy is laughable.

If you are claiming you want to punish the DNC by withholding your vote from them, sure, fine. Rewarding the GOP for the way they acted? A joke. Completely undermines your point.

This just reads like so many of the comments I've read recently - focusing on the very small negatives of 'the left' while completely ignoring the huge issues from 'the right'. It's such a nonsense.

</comment></comment><comment><USER4> Is there also a #support page for people who are in support of the current action?

Or a #not_a_us_citizen hashtag for people outside the US who are sick of hearing about US politics?

Or is this just another rich big-city, blue state startup trying to tell us what our political opinions should be?

<comment><AUTHOR> > Is there also a #support page for people who are in support of the current > action?

No

</comment></comment><comment><USER5> I'm surprised a company would take such a rash action not particularly based on facts. Did the executive order mention Muslims in any regard? Did the executive order ban countries where the majority of Muslims immigrate from? Did the executive order ban all countries with a majority Muslim population?

This highlights the importance of open source and distributed architectures for these social tools we depend on. I have no choice but to use a tool and support a company taking a terrible political stance in order to attend programming and hiking meetups I'm interested in.

</comment><comment><USER6> Noticed there's nothing for New Zealand so I impulsively requested one. If anything positive could come out of 2016, it's renewed civic responsibility.

</comment><comment><USER7> This is a great example of a tech company stepping up to create space for political action in a way that doesn't silence anyone and brings people together. Bravo!

<comment><USER8> How is this bringing people together?

The email advertising this movement repeated false claims about the government banning people on the basis of religion. Spreading hysteria and fear and inaccurate facts is not the way to win the argument.

<comment><USER9> Is this the line you're referencing? "But after the recent executive order aimed to block people on the basis of nationality and religion, a line was crossed."

How are these false claims? The executive order directly mentions religious grounds and allows "minority religions" in the 7 listed majority Muslim countries to be allowed in while prohibiting the rest.

<comment><USER8> I read it and I believe your interpretation is false.

It DOES NOT allow minority religions in while excluding the rest.

It does instructs the applicable departments to simply prioritize people facing religious persecution. Prioritizing people through the safety checks and paperwork who are at the most risk should be the EXACT purpose of a refugee program with a humanitarian basis to it.

<comment><USER10> Not specifically religious persecution -- it's if you're part of a 'minority religion.' Which seems silly to me. Yes, assessing their level of danger should be part of any vetting and prioritization, but it should be an overall thing. If a person is in more danger (due to political ties, or maybe they helped US forces) than someone who's in a minority religion but otherwise safe, shouldn't the first person have priority?

It's good to go about helping the most vulnerable people. Unfortunately, the proposed methodology in the EO was ham-handed at best, and unconstitutional at worst.

<comment><USER8> I think there's fair room for critiques on this implementation and their methodology for selecting priority.

If more than a small number of protesters brought up these kinds of rational arguments, I think many on the right would be far more receptive to seriously listening.

Instead, you hear about a "Muslim ban" and people calling Trump literally Hitler and most people on the right are sick and tired of these kinds of arguments and aren't going to be receptive.

</comment></comment></comment></comment></comment></comment><comment><USER11> Ati luat repede ideile romanilor :)</comment>


LinkedIn debuts LinkedIn Live, a new live video broadcast service - <AUTHOR> https://techcrunch.com/2019/02/11/linkedin-debuts-linkedin-live-a-new-live-video-broadcast-service/ <comment><USER2> I wonder who will be watching this. Instagram Live isn't catching on with users and LinkedIn engagement seems even lower. Maybe they need to combine it with some exclusive content like Office Cribs or something.</comment>


CISPA Just Got Worse, And Then Passed On Rushed Vote - <AUTHOR> http://www.techdirt.com/articles/20120426/14505718671/insanity-cispa-just-got-way-worse-then-passed-rushed-vote.shtml <comment><USER2>
        Basically it says the 4th Amendment does not apply online, at all.

        Incredibly, this was described as limiting CISPA, but it
        accomplishes the exact opposite. This is very, very bad.

        Far from the defense against malevolent foreign entities that the
        bill was described as by its authors, it is now an explicit
        attack on the freedoms of every American.

Can someone with legal expertise tell me if this is this hyperbole or reality?

<comment><USER3> Hyperbole. The 4th amendment never applied online (except in 1 Circuit with respect to e-mail).

<comment><USER4> Why shouldn't it apply? That's what I have a hard time coming to terms with.

<comment><USER3> The 4th amendment encompasses: "The right of the people to be secure in their persons, houses, papers, and effects..."

The literal text applies to your house and your person. You can make certain analogies from there, but even paper mail is a bit of a stretch (it was found to be protected because the Constitution creates the postal service). For example, one analogy might be: if I go everyday to the local news stand, the 4th amendment doesn't prevent the government from asking the news guy what magazines I look at without a warrant. So why should the government need a warrant to ask Google what things I search for on their service? I'm not saying that its the right analogy, but rather that people who say "oh the 4th amendment obviously covers information online" are starting from the result they want and working backwards.

The problem is two-fold. First, there is no general right to privacy in the Constitution. Privacy is a pretty modern concept. People in the 1700's had very little privacy even in the physical sense.[1] What the 4th amendment protects is a narrower right: the sanctity of your home and personal effects and freedom from physical government harassment. Second, we don't have a well- defined idea of privacy even today. Why should the Constitution protect information I freely give my credit card company, Google, Facebook, etc, with the knowledge they use that information to sell me crap. Why should the Constitution protect information third parties collect about me from their own observations? There might be good reasons to institute those protections, but we don't have a well-defined idea right now where the lines should be drawn.

[1] There is an interesting documentary I saw once about how hallways are a pretty modern concept that arose contemporaneously with ideas of personal space. In houses from the 1600's you'd through bedrooms to get to other parts of the house--the expectation of private space was just a lot less.

<comment><USER4> Given your statement that privacy is a relatively modern concept, I find it interesting that the EU has comparatively stronger data protection laws.

Those countries in general are way older and have older laws than the US. So if they can have strong data protection and privacy why should the US not have an equivalent?

Giving up protection in the name of commercial interest is not a good solution or compromise.

</comment></comment></comment></comment></comment><comment><USER5> For the good of the children, the <del>Internet</del> Congress must be shut down. You don't hate... Children... do you?

</comment><comment><USER6> Obama will slap this down before the dust settles on his desk from CISPA hitting it. Nice little veto penmanship workout.

<comment><USER7> <http://imgur.com/Tb5GM>

</comment></comment><comment><USER8> Looking at the Apr17 version of HR 3523 on thomas.loc.gov (the amended version is not out yet), it seems that it says:

* The government is allowed to share "classified cyber threat intelligence" with private parties.

* Private parties are allowed to share data with the government, and the government is not allowed to "affirmatively" search it except for specific categories of crimes.

* These categories include warezing, which is probably upsetting a lot of people.

Does anyone know what an "affirmative" search is? Is this where it is assumed that the 4th Amendment's warrant requirement is being dropped?

I don't see anything in there about collecting data other than what is given to the government by private parties. Of course, "contractors" can be used to offset the blame. The government could pay telcos to tap their wires and forward everything to Langley, which is also a nice way of corruptly sending public funds to the already wealthy. However, I believe this could already be done without this law.

Does anyone know how the law compares to what existed before? If a network provider sniffed their own wires and came to the government with evidence of warezing, an imminent terrorist threat, kiddie porn, a script kiddie DOSing someone, or script kiddie porn, how would it have been handled before this law?</comment>


Jira Alternatives to Try in 2020 (Free and Paid) - <AUTHOR> https://ora.pm/blog/jira-alternatives <comment><AUTHOR> What are your favorite JIRA alternatives for software teams in 2020?</comment>


Preact, a fast 3k React alternative - <AUTHOR> http://developit.github.io/preact/ <comment><USER2> I'm not sure that we should be doing this.

Yes, it stands to reason that if you take framework X, cut out a lot of functionality, remove some of the "ugly" code that addresses edge cases, then you end up with a similar, reduced framework which is smaller in file size.

But this is done at the cost of polluting the Javascript framework environment. The biggest problem right now is pollution, we're all drinking from the fire hose of frameworks and someone needs to cut the supply so we can double-down on the good stuff and stop jumping from one framework to the next like a plastic bag caught in a strong breeze.

Preact is now a decision point for any developer who Googles "react alternative" and scans far enough through the search results. This isn't right. This contributes to decision fatigue. It's time to stop churning out new frameworks that are only marginally different from what's already available.

<comment><USER3> Nope. People should always create and attempt improve upon whats out there.

Don't try to stifle innovation for the sake of making decisions simpler.

If you don't want to make decisions, don't use libraries, or use an opinionated framework.

<comment><USER2> > People should always create and attempt improve upon whats out there. Don't > try to stifle innovation...

I agree completely and my argument is that a lot of the Javascript libraries being pushed around over the past three to four years are neither creative nor improvements over what already exists. React is innovative. Redux is (arguably) innovative. jQuery was innovative. Many other libraries have been innovative. I'm arguing against the hundreds upon hundreds of "me too" libraries that make it so much harder to find the truly innovative stuff. These libraries do nothing but add to decision fatigue. Developers have to make decisions, sure, but we need to have limits too.

<comment><USER4> I would actually not consider jQuery to be innovative as much as it was a refinement/improvement of existing libraries such as Prototype and Dojo. I think jQuery is great so this isn't a knock against it, but rather just saying that sometimes one thing comes out that is revolutionary but then something else that is an improvement/iteration on that smooths out the rough edges and becomes "the one framework to rule them all" (for a few years, at least).

<comment><USER5> jQuery's api seemed innovative and quite different than the other libraries I used at the time.

\- css selectors to get at nodes. Very dom-focused, but without messing w/ prototypes like _Prototype_ did

\- almost every function in the api acted on both single nodes and collection of nodes. It seems like it started the 'chaining' trend.

\- no complicated class/namespace hierarchy to learn. Every function was on $ or $.fn. `$('.foo').hide('slow')` vs the equivalent in Prototype involved instantiating an Animation object and passing in the dom node, as I recall.

\- cared about file size and not clobbering other globals.

</comment></comment></comment></comment></comment><comment><USER6> We don't need smaller frameworks, we need more _modular_ frameworks. If the framework is modular you can take what you need, and replace the parts you don't like.

I'm using mercury [0] in my current frontend project for this purpose. Most of the features of React, none of the commitment. Every single component is interchangeable; the core repository is simply an index.js requiring other modules, which can be depended on individually if you're not looking for a kitchen sink solution.

[0] [https://github.com/Raynos/mercury](https://github.com/Raynos/mercury)

<comment><USER7> I prefer opinionated, integrated frameworks. I can count on the whole stack being well tested and don't have to worry about subtle bugs and versioning issues between components.

The JS community has gone way overboard on factoring everything into a dozen little submodules, IMO.

<comment><USER8> While I feel like I'm close enough to tame the React ecosystem (and like it!), I honestly agree. Personally I do prefer opinionated. Luckily Ember exists in the JS world.

<comment><USER9> Ember is awesome, it doesn't seem to get much love on HNews though. Which is a shame because its really really good - I tried react and spent 2 days messing with various starter packs, trying to get webpack configured and not getting anywhere. Ember took me half an hour to get started.

<comment><USER8> Not just HN. I rarely see it mentioned elsewhere. Even in those "JS fatigue" articles which is funny because Ember is the antidote to that.

<comment><USER10> Because Ember devs already found the best tool years ago and they are super productive. The community is huge and super active but they definitely totally ignore this "fatigue" bullshit... you know, if you found your love of your life, you don't go any more in the dance club to chase other boys/girls... ;)

</comment></comment></comment></comment></comment></comment><comment><USER11> It's always interesting to see a fresh take on something already in use, especially when the focus is on optimization.

However, I completely disagree that Preact is a "React alternative." React is not simply a bunch of code. It's an entire ecosystem with a large community supported by a well-funded entity. A lot of these new libraries and/or frameworks popping up seemingly every other week and claiming to be an alternative to X are just not up to par with the competition and/or the expectations of developers.

Whenever I see something new on the radar, I look at the documentation and commit history. Anything unproven without good documentation, examples, unit tests and/or performance tests is just ignored. If I really like the concept, I'll bookmark it and check on it periodically.

</comment><comment><USER12> Where do the savings come from? I can't imagine that React.createClass() is all that much code. I'm guessing a lot of space saving comes from not doing PropTypes (which I find immensely useful) and not having a synthetic event system (meaning you can't test with TestUtils.Simulate.click()). What else is missing I wonder?

<comment><USER13> Lack of synthetic events is a huge one for me.

<comment><USER14> This is extremely interesting to me and I would love to hear why. I skipped synthetic events because I didn't feel they were necessary, but I would appreciate additional insight.

</comment></comment></comment><comment><USER15> Off-topic, but am I the only one who thinks that classes are the most puzzling feature of ES6?

How is writing "class Blah extends Component { ... }" any better than "Blah = Preact.createComponent({ ... })", except to save a few keystrokes?

ES6 is full of syntactic sugar to improve readability, but classes substantially increase the "surface area" of the language for... what benefit? Static analysis and tooling, maybe? In that case, why not wait until ES7 is fully baked to build interesting features around the type system, instead of making yet another Java derivative...

<comment><USER16> Well for one 'class Foo extends Bar' will work without any further code to make inheritance work in the way you'd expect, including use of super() etc. Whereas your second example is using non-trivial framework code, that some framework author has to write. See Backbone's extend() for a clear example of what is required [0]. That's work that every framework author is potentially going to implement differently, needlessly.

And the fact that almost every major framework has implemented something similar themselves is proof enough (for me at least) that the ES6 sugar is valuable. It has nothing to do with Java, it's simply a useful pattern that everybody was already using.

[0] [http://backbonejs.org/docs/backbone.html#section-247](http://backbonejs.org/docs/backbone.html#section-247)

<comment><USER15> The question is whether that ~15 lines of code, written once, is worth the substantial increase in the surface area of the language, especially when overlapping so much with the existing prototypal inheritance mechanism. The choice to use Java/C++-style inheritance is a design pattern that doesn't necessarily reflect the only (or even the best) way to accomplish things.

<comment><USER17> ES6 classes do not use Java/C++ style inheritance, they are still the same as writing:

      function Foo() {

      }

      Foo.prototype = Object.create(Parent.prototype);

      ....

It's just sugar, nothing more.

<comment><USER15> The semantics of JS classes are still different in enough subtle ways: constructors and constructor subclassing, (lack of) object properties, hoisting, etc. That is on top of the new keywords, new function syntax, etc. All that needs to be mapped onto the model of "classical" Javascript in order to completely understand the language. There are enough gotchas there to disqualify JS classes from being simply sugar.

<comment><USER17> You can add object properties to a ES6 class's prototype, no?

EDIT: Just tested in Firefox and indeed you can.

<comment><USER15> Not in the class declaration, though. Why force the programmer to go through the prototype, when ES6 provides such a "convenient" abstraction around it?

<comment><USER18> Coming to the spec soonish and already supported in Babel - [https://github.com/jeffmo/es-class-fields-and-static- propert...](https://github.com/jeffmo/es-class-fields-and-static-properties)

</comment></comment></comment></comment></comment></comment></comment></comment><comment><USER19> How does this stack up versus something like riot.js? [http://riotjs.com/](http://riotjs.com/)

<comment><USER20> RiotJS couldn't keep it to the original size of about 3 KB, it's about 9 KB now. They market it as a "React-like", but it appears that this one is way more "React-like" than RiotJS ever was.

</comment></comment><comment><USER21> I started using Snabbdom, which is also tiny, but has a nice module/hook API: [https://github.com/paldepind/snabbdom](https://github.com/paldepind/snabbdom) (plus 'style' module supports transitions/animations).

</comment><comment><USER22> Compared to React, what _isn 't_ available in Preact?

<comment><USER23> Last time I checked you couldn't use contexts yet.

<comment><USER3> Thats a good thing.

Context is not a good feature, and even the developers didn't want to write documentation for it because they didn't want people to use it. [https://github.com/facebook/react/issues/580](https://github.com/facebook/react/issues/580)

<comment><USER24> Then how would something like react-redux work without context?

<comment><USER25> It can already work without contexts. You just pass a store instance via props.

I don't like contexts either :(

<comment><USER14> Yup. I've successfully added contexts to Preact, but I still am not 100% sold on the value. Thankfully, simply supporting them doesn't add much bloat.

</comment></comment></comment></comment></comment></comment><comment><USER26> How big is React gzipped? How much are you saving with this library?

<comment><USER27> Perhaps even more important, does library size still matter once dead-code elimination is an option in Webpack2?

See: [https://twitter.com/dan_abramov/status/656970508005736448](https://twitter.com/dan_abramov/status/656970508005736448)

<comment><USER28> Just take a look, how many libraries are written in ES6, clearly not much. So dead code Elimination only works if you have ES6 libs and that will take some time.

</comment></comment></comment><comment><USER29> Yeah, there's already a company called Preact. =]

preact.com

<comment><USER30> A good one, too. The last startup I worked for was one of their first customers. You fire off events, they machine learn normal behaviour for your customers and feed the intel to your customer success team so you can prevent churn and identify your high-performing customers.

<comment><USER14> Yeah... causing this confusion is one of my more regrettable mistakes of the year. Honestly if some amazing name came along I would not be entirely opposed to changing it.

</comment></comment></comment><comment><USER31> Interesting. In terms of "React alternatives that are tiny", I have a really big soft spot for domChanger[0]. Really cute syntax, and it works pretty well -- I built most of a TodoMVC implementation with it and Hoverboard[1] (a tiny Flux implementation). I also completed a partial "Flux Challenge" implementation with that same combo [2].

[0] [https://github.com/creationix/domchanger](https://github.com/creationix/domchanger)

[1] [https://github.com/jesseskinner/hoverboard](https://github.com/jesseskinner/hoverboard)

[2] [https://github.com/girvo/domchanger-hoverboard-flux- challeng...](https://github.com/girvo/domchanger-hoverboard-flux-challenge)

</comment><comment><USER32> Re: fast claim, it turns out it's not that fast: [http://localvoid.github.io/uibench/](http://localvoid.github.io/uibench/) :(

<comment><USER33> My results: Preact 2.7.3 took 864920; React 0.14.6 took 435580

There were some benchmarks where Preact was faster, but overall half React's speed.

<comment><USER34> Preact is using implicit dom recycling, so it heavily breaks use cases like "tree/[*]/render". Just hold mouse over its time and it will display "max" time, it will be much closer to reality.

All other libraries either don't have any form of recycling dom nodes, or it is disabled for this benchmark.

</comment></comment></comment><comment><USER35> Unfortunately no word on browser compat. But wow. I thought [https://github.com/Lucifier129/react- lite](https://github.com/Lucifier129/react-lite) was slim.

Is there a 1k-React challenge going on?

<comment><USER36> I've found this in the project wiki [https://github.com/developit/preact/wiki/Browser- Support](https://github.com/developit/preact/wiki/Browser-Support)

</comment></comment><comment><USER37> I've look at react, angular, mithril, and lately elm. It seems elm is here to stay.

</comment><comment><USER38> The value proposition of Preact makes no sense to me:

> Preact is an attempt to recreate the core value proposition of React (or > similar libraries like Mithril) using as little code as possible, with > first-class support for ES2015.

I understand building a faster React, an easier to use React (forms are a nightmare), but a smaller React? We are talking about saving on the order of 30kb. This doesn't even matter on mobile. Can anyone give me a compelling use case?

<comment><USER39> > _I understand building a faster React, an easier to use React (forms are a > nightmare), but a smaller React? We are talking about saving on the order of > 30kb. This doesn 't even matter on mobile. Can anyone give me a compelling > use case?_

Less code can also mean its easier to understand and has pruned the legacy/redundant parts (being ES2015 only).

And being able to read the whole code of your framework in one sitting, and understand it, is great.

Besides, it's not like "as little code as possible" is their ONLY goal. They're not merely building a drop-in React replacement with less code. The reference to "Mithril" looks like they'll also investigate their own APIs and ways of hooking components etc, which will be similar in concept but different than React's exact APIs -- they already dropped the non-stateless components APIs.

[addition] Regarding the "order of 30kb savings". Here's an excerpt from their site: "The React-based demo was 1.8mb of JavaScript. This demo, using exactly the same code and with the same functionality, is 60kb.".

</comment></comment><comment><USER40> How does this compare to Riotjs "A React-like user interface micro-library" ? riotjs.com

<comment><USER32> This project aims to be API-compatible w/ a subset of React's API.

Riot, on the other hand, has a completely different API

</comment></comment><comment><USER41> less code !== faster code. I wouldn't even try this without seeing some impressive performance benchmarks. Giving up the support of the entire react team and community in exchange for a small framework that may or may not be faster is a huge ask.

<comment><USER14> [https://github.com/developit/preact- perf](https://github.com/developit/preact-perf) [https://localvoid.github.io/uibench/](https://localvoid.github.io/uibench/)

In the second benchmark, Preact is only faster in around half of the tests. However, this benchmark only tests complete top-down re-renders and intentionally triggers synchronous rendering in Preact. In a normal app composed of Components, Preact batches state changes which improves performance considerably.

<comment><USER34> All libraries in uibench have batching, and batching doesn't improve performance, it just prevents from doing unnecessary work during one frame. It is pointless to test performance of different state changes with enabled batching.

</comment></comment></comment><comment><USER42> It makes sense stay tiny if you are creating a small component yo be exported.

</comment><comment><USER43> And now we're all hoping for Preact Native...

<comment><USER44> I'm hoping for React Native to be maintained, stable, and performant...

</comment></comment><comment><USER45> I was thinking about something like that today and now I see this. Awesome!

</comment><comment><USER46> Oh another JavaScript framework. Of course the world needs that.

If I was recommending a development path to a young developer I would have to say choose the "dark side" and become an app developer and let Apple / Google feed you your framework. Don't waste your time on the web - you'll waste your life learning this weeks flavor of the month framework while lacking core understanding of the underlying technology ( [https://wdrl.info/archive/121](https://wdrl.info/archive/121) ) and never seeing your code amount to anything but a series of band aid and kludges.

<comment><USER47> It's not another framework. It's not even another library. It's an implementation of an existing library with some features cut out.

<comment><USER48> We have so many choices in the javascript ecosystem that it's pretty impossible to make a meaningful choice.

But, it's very possible to lose time trying to figure out what you "should" choose or even what your choices might be.

And since that's what the parent is bemoaning, your distinction is pretty useless.

Note: If you want to use react then the correct choice is react + redux + webpack. If you want to validate a startup idea, then the correct choice is jquery :)

</comment></comment></comment><comment><USER49> I am just sitting here, watching elm organically growing, while people creating "new" react-flux-redux-ember-angular-dojo-backbone frameworks every day.

I meant to troll, sorry.</comment>


Show HN: Furatto, a flat and sleek CSS framework - <AUTHOR> http://icalialabs.github.io/furatto/

<comment><USER2> It's 245kb and over 9000lines of CSS :-/ Is there a reason why it's double the size of other CSS Frameworks?

Edit: Full disclosure - I develop Pure (purecss.io)

<comment><AUTHOR> Hi hobonumber,

First of all I woukd like to say that your framework is one of the ones I like the most when developing mine...

I know it's a big file but it is because it has a lot of comments, I have to work on the sass version to change the comments style...the minified version is close to 133 kb or so...but I definitely have to reduce it and make it lighter...

Any piece of advice?

<comment><USER2> Hey Kurenn, I would pay close attention to every CSS rule and really think about if it's needed or not. Also, try to follow some CSS principle such as OOCSS or SMACSS so that you reduce selector bloat.

ie: ".tabbar-inner { ... }" is better than ".tabbar .inner { ... }"

</comment></comment></comment><comment><USER3> Maybe explain why it's a better choice than Bootstrap? It's certainly visually different, but still awfully similar to most end users.

<comment><AUTHOR> You got that right....it uses the same format for naming the classes but it have some other features bootstrap does not.. I just think to choose a framework you have to see if the class names make sense...how easy is to adapt and change...to fill your needs...just my humble opinion...

I'll continue working to give a better api and built more useful addons

Cheers!

<comment><USER4> > but it have some other features bootstrap does not

But what's the differences beyond visual changes (which, frankly, aren't important).

<comment><AUTHOR> I think the visual elements do make a difference but taking that out...it has probably not much differences with bootstrap...I'll be working to make it more semantic, lightweight...and that should give a better development experience...

You have any suggestions?

<comment><USER4> They don't make a difference. With bootstrap, it's trivial to change the design.

</comment></comment></comment></comment></comment><comment><AUTHOR> I need some feedback on this framework guys!, hope you find it useful!

<comment><USER5> I don't know if it's part of your philosophy but I think that adding more javascript tricks and libraries could add some value to your framework. Good job though.

<comment><AUTHOR> Yeah I'll probably add some, if you have some suggestions, you are more than welcome!

</comment></comment></comment><comment><USER6> It looks pretty nice, and has some nice JS but... On Chrome (latest) Windows, I have double scrollbars.

And if I may nitpick a few things...

1\. The pagination #'s are offcenter. 2\. The titles (Navbar, Pagination, etc are almost invisible on my screen)

<comment><USER7> Ditto on Chrome (29 dev) on OS X 10.6.8 -- double scrollbars.

Yay, yet another fixed-black-top-nav CSS framework! With major bugs!

</comment></comment><comment><USER8> Did a quick browse through the code. A couple of things jumped out:

1\. A number of CSS classes have 'furatto' as a prefix ex. '.furrato-block'. This seems a bit counter-productive as the word itself does not add any value to meaning of the class names.

2\. I notice that for the responsive design the class is '.row-fluid', but since responsive is now a norm it may make sense to have '.row' be fluid/default and have a '.row-fixed' class for the few that may want a fixed only.

3\. I like the font, it works well, but for the navbar links its a little tough to read. Also the '.motto' class is almost impossible to read, though changing the font color for the class should suffice.

4\. I really like the circular images and the inclusion of date picker and toolbars js.

I will definitely try it out and watch it on github.

p.s. you may want to look into the double right scrollbar that is on the github.io pages.

<comment><AUTHOR> Hey thanks a lot for the feedback!!...it's really great!...I totally agree with on the row-fluid class name I'll updated that. I want to make a more semantic class names to give more meaning to the markup.... I'll consider the font on the navbar...probably just reduce the font weight would do the trick....

Thanks again for the feedback. I'll be working on it! :)

</comment></comment><comment><USER9> There are a few issues that made me close the web site after a few seconds. I'm usually very excited about frontend frameworks and add them right to my bookmarks; not in this case though.

\- The Furatto title on the start page is way too close to the top navigation. \- That thin font in the navigation & title renders pretty ugly on my MBA/Chrome. \- When I clicked the first navigation button seeing the text move down vertically because of the top border I closed the tab.

I'm sorry I can only give negative feedback but it may be useful in some way..

<comment><AUTHOR> Yeah it is really helpful!...sorry to hear it does not fill your eye...but I'll be working on it to improve it!

Thanks!

</comment></comment><comment><USER10> Furatto=Flat in Japanesse, awesome & clean.

</comment><comment><USER11> The toolbars popup has a fixed position, so if you open a "toolbar" and then scroll with it still open it just hovers in the middle of the screen like this: [http://i.imgur.com/vdoHhMr.png](http://i.imgur.com/vdoHhMr.png)

<comment><AUTHOR> Good observation, I did not notice that. I'll create the issue at github, thanks a lot I really appreciate it!.

</comment></comment><comment><AUTHOR> Hey guys I just released the rails gem for those ruby devs [https://github.com/IcaliaLabs/furatto- rails](https://github.com/IcaliaLabs/furatto-rails) try it out!...I need to add some more doc! enjoy!

</comment><comment><USER5> I love the flat font. I think I could use this framework for a couple of my prototypes.

<comment><USER12> What is a "flat font"?

</comment></comment><comment><USER13> One thing that will prevent people from switching to this (from Bootstrap, or similar) is the lack of navbar search form. Besides that, very beautiful. The tag edit is a nice addition to most front-end frameworks.

<comment><AUTHOR> I'll be adding this kind of features in the near future....I'll keep you posted!

</comment></comment><comment> LX-350 I noticed that Furatto uses Normalize, can I use this framework with the legacy version of Normalize? I am stuck working on intranet apps and need to support IE 7/8.

<comment><AUTHOR> You should be fine yeah!

<comment> LX-350 Awesome!:) I'll definitely play around with furrato and keep an eye on its progress.

</comment></comment></comment><comment><USER14> I'm seeing some strange scrolling on iPhone 4S. There's no momentum - it just instantly stops

<comment><AUTHOR> I'll create the issue on github...yeah some else just notice a double scrollbar....it is probably related!.....thanks for the feedback!

<comment><USER15> Same problem on my iPad.

<comment><AUTHOR> Got it! :)

</comment></comment></comment></comment><comment><USER16> What makes this different/better than something like flatstrap?

<comment><AUTHOR> It is just another option for a framework...it included some cool features that flatstrap does not probably the checkbox and radios buttons are the best example...

Also it was a challenge I put on myself and built better css

</comment></comment><comment><USER17> The controls on the first form on the Forms tab are not styled.

<comment><AUTHOR> Yeah I just wanted to point out the native elements when you just want to use the default ones. But it is probably not clear enough...

</comment></comment><comment><USER18> the font looks way too thin to me

<comment><AUTHOR> The one from the headers right?....yeah it seems the same to me, but I wanted to some else tell me!...thanks!

<comment><USER19> Yeah, I could barely see the diagonals on the 'w's in the headers.

</comment></comment></comment><comment><USER20> lol furatto, how japanese</comment>


A Look at Sidecar's On-Demand Logistics Infrastructure - <AUTHOR> http://blog.side.cr/under-the-hood-a-look-at-sidecars-on-demand-logistics-infrastructure/ <comment><USER2> Just seems like a lot of work (and $) to deliver a $6 burrito.

<comment><USER3> Logistics is considerably more difficult than most casual observers realize, whether it's delivering a $6 burrito or delivering a life saving organ. The tech involved behind the scenes to pull it off successfully is downright impressive.</comment></comment>


Kubernetes Goat: Vulnerable Kubernetes Cluster Environment - <AUTHOR> https://github.com/madhuakula/kubernetes-goat <comment><AUTHOR> I have recently created "Kubernetes Goat", designed to be intentionally vulnerable cluster environment to learn and practice Kubernetes security.

Hopefully it's helpful for the community to learn. I would love to see your feedback/suggestions.</comment>


Mumbai Counts Quarter of All Covid-19 Deaths in India - <AUTHOR> https://www.cybercoastal.com/mumbai-counts-quarter-of-all-covid-19-deaths-in-india/ <comment><USER2> Plagiarized from Katharina Buchholz's article:

[https://www.statista.com/chart/21868/share-of- covid-19-cases...](https://www.statista.com/chart/21868/share-of- covid-19-cases-deaths-in-indian-states-cities/)</comment>


Why Silicon Valley Should Be Worried - <AUTHOR> http://gigaom.com/2008/07/17/why-silicon-valley-should-be-worried/

<comment><USER2> If you want to know the health of an ecosystem, look at the health of the pilot fish, and not at the whales.

The indications of latent rot or the incursions of new competitors and of asymmetric solutions can be masked by the sheer scale of an established business.

The pilot fish are the leading indicators.

Whales can easily coast on revenues and their customer bases and by squeezing their ecosystems and their partners for a decade or more, even with their businesses and business models rotting away underneath them.

If the startups in SV are getting squeezed, then SV has something to worry about.

</comment><comment><USER3> "Microsoft posted a 42-per-cent rise in profit" (globe&mail)

"Google's net income for the quarter was $1.25B, up from $925M" (Techcrunch)

I wouldn't call that bleak.

The Silicon Valley leaders may not be able to maintain their high growth rates but I doubt they would be affected in the same way other industries have been.

I'd like to see the impact its having on the smaller players and not just the big advertising companies.

Is this directly affecting the publishers at the bottom of the pyramid?

<comment><USER4> True I wouldn't call it bleak either. eBay posted 20% earnings growth although the stock is down. It is interesting to go through this again though having been through the first one. It's tough. I remember so many friends and colleagues leaving for places like Austin or Boston way back when. Now, I wonder if the same will happen. Engineering wise, I really don't expect many to leave but the mom and pop shops that rely on high valued incomes... and maybe business units, always the first to go.

<comment><USER5> Earnings is the wrong thing to look at when you enter a recession. It's easy for companies to manipulate earnings for a little while, by shuffling money around and delaying expenses.

Gross revenue is your leading indicator: are they still selling as much, or more, than before?

Alain - fairsoftware.net

</comment></comment></comment><comment><USER6> "Now Silicon Valley is in for a long-overdue reality check, one that should worry one and all. Why? Because the news coming out of advertising-focused companies is not good."

The article does a good job of explaining how the poor economic conditions are impacting internet advertising, but this has nothing to do with a reality check. People have less money to spend so they buy less things. That doesn't mean that internet advertising models are misguided.

</comment><comment><USER7> Its kinda ironic, Google had been seeing such high growth rates for a business of their age and size that it seemed as if they were defying gravity. Add that to the environment in the Googleplex, and you have a company that doesn't feel like a company.

This creates the potential that Google will overlook something, which will lead to some little guy taking their place as they took Microsoft's as the standard in software development

<comment><USER8> > standard in software development

Can I please have whatever you're smoking? It seems good.

</comment></comment><comment><USER9> This two day old thread about google is somehow related to this article:

<http://news.ycombinator.com/item?id=247046>

</comment><comment><USER10> i think if googles 39 percent growth was a shortfall, its funny, how many businesses as old as google has investors wanting more than 39 percent yoy growth?

<comment><USER11> Not too many businesses have a P/E ratio of 34 with a market cap of 150B. It's a matter of expectations, they were expected to grow more than they did and the stock price had those expectations priced in.

</comment></comment><comment><USER12> Silicon Valley should not be any more worried than the rest of the country or world.

Actually, given what people are pointing out here, maybe SV should be less worried than the rest of the country.</comment>


The Man Who Solved the Market: How Jim Simons Launched the Quant Revolution - <AUTHOR> https://www.amazon.com/Man-Who-Solved-Market-Revolution-ebook/dp/B07NLFC63Y <comment><AUTHOR> Brilliantly enjoyable read on how the Renaissance fund was created, the models and approaches they used, and the characters who built them.</comment>


Save RSS and Atom - <AUTHOR> https://mg.guelker.eu/saverss/ <comment><USER2> So the formats are very much alive, enabled on virtually every blog and many news sites.

Also the article does not mention a single mobile reader.

Feedly for ios/android/web has held the crown since google reader shut down yet is not even mentioned.

If you are still consuming feeds on your desktop in 2018 you are doing it wrong.

<comment><USER3> You should send an email to the author given that many people read feeds on mobile devices.</comment></comment>


Startup Bootcamp at MIT: streaming live via Justin.TV - <AUTHOR> http://startupbootcamp.mit.edu/?s2010

<comment><USER2> What's up with the Party Poker pop under ads? Seems like short term focus on revenue over long term brand damage. Sure, this year Startup Bootcamp is only available on Justin.tv. But in the future, I'm more likely to go to UStream or Youtube or anywhere else if video is available there.

<comment><USER3> They gotta make money somehow, ya know? Streaming video is not the cheapest thing.

Though I do think it would be cool to have a no-ad price. Would you pay a buck to watch the same broadcast without ads?

<comment><USER4> We do. $10/month gets you a pro account that removes the ads.

</comment></comment></comment><comment><USER5> Bob Metcalf is speaking now. Nothing like technology startup advice and Q&A with the co-creator of Ethernet. I love that icons and legends of the industry are still living to tell their tale.

<comment><USER6> So is Bob Metcalf over the whole internet is going to implode on itself idea he was somewhat obsessed with in the past?

I don't mean this as a snide comment but really, honestly, did he change his mind, and if so what made him reconsider?

Obviously his credentials add a lot of weight to those kinds of comments, though at the time I have to admit it left me scratching my head.

</comment></comment><comment><USER7> Thanks for organizing this, and streaming it. A friend and I are watching some of the talks from Portland, Oregon.

Sidebar: the intro mix before the first speaker (Chris Wanstrath ) was perfect for the event. Groovy/dubby, but subtle. We were going to skip through it, but actually listened to all 50 minutes. <http://www.justin.tv/startupbootcamp/b/269855690>

<comment><AUTHOR> Glad you enjoyed it.

I believe the intro music was Thievery Corporation.

</comment></comment><comment><USER8> I went with my wife and a friend (developer). We had a great time, there were a lot of exciting speakers. The only thing I would suggest in the future is to either spread it out over two days (probably not possible) or to cut down on the number of speakers (tough, I know). Moving through so many 30-minute presentations felt like a sprint, and we were having a hell of a time discussing what we saw afterward because so many talks had jumbled together. Still a great time, though, thanks to all involved!

</comment><comment><USER9> My notes and pictures are up: <http://ourdoings.com/ourdoings- startup/2010-09-11>

I repeat names a lot in the captions because each photo also has its own web page.

</comment><comment><USER10> This was a great event. My business partner and I came in from out of town to check it out. Almost every talk was great, lots to learn. Chris Wanstrath had some great insights into viral growth, Bob Metcalf was very funny and produced some wonderful advice, George Bell started Shark Week, And Kiva's video has me totally convinced that you can distill something complex very effectively with a simple demo video. Watch their demo video, the technology rocks. Never been to anything like this before, great experience.

</comment><comment><USER11> Hacker news mentioned :)</comment>


IPad 2 Likely to Have 2048x1536 Screen Resolution - <AUTHOR> http://www.macrumors.com/2011/01/15/ipad-2-screen-likely-to-have-2048x1536-resolution/

<comment><USER2> I really, really hope this is the case. I use my iPad two-three hours a day, and pretty much at the top of my punch list of improvements, is higher resolution. You really do notice it when using press reader, or Zinio to read magazines - the pixelation is very evident on the smaller fonts.

</comment><comment><USER3> Assuming that Apple can source such a display, driving it will be very resource intensive. A dual-core CPU will help, but it will also need a powerful (read power hungry) GPU. I have no doubt that Apple is looking at very high resolution displays for the iPad. That doesn't mean that they'll be able to get it ready for this release, though.

<comment><USER4> Based on the GPU device driver information and leaks about A5, it looks like they do indeed have such hardware.

</comment></comment><comment><USER5> The fundamental issue is yield. The more pixels in a display, the greater the likelihood that you'll end up with an obtrusive stuck pixel or a significant number of dead pixels, rendering the panel unsaleable. This is one of the major reasons why we haven't seen any significant increases in the resolution of laptop or desktop displays in some years. The Retina display on the iPhone 4 isn't hugely expensive, nor particularly innovative - there are a number of other handsets with similar pixel densities. 960x340 is 0.6 million pixels, versus three million pixels in this rumoured iPad 2.

Very high resolution displays ameliorate this issue somewhat because bad pixels are less noticeable, but I just don't see how anyone could produce a display with such a vast pixel count cheaply enough to meet the iPad's price point.

If Apple have figured it out, the iPad 2 is almost irrelevant. This would be one of the most significant breakthroughs in display technology in decades. Bear in mind that 2560x1600 is the same resolution as the current class-leader in desktop displays, the $900 30-inch Dell Ultrasharp. In order to make it work, Apple would have to change the entire economics of LCD manufacture. I really do hope it's true, but I can't see how.

<comment><USER6> Part of the reason 30" displays cost as much as they do is that they're just physically larger, regardless of DPI. This requires a lot more yield-sensitive silicon on its own, and also requires a lot more in terms of display illumination.

Also, let's not ignore economies of scale: compare the number of iPads sold in the last year to the number of 30" monitors _ever_ sold.

</comment></comment><comment><USER7> Highly unlikely unless it's double screens.

2048x1536 on a 10" display is going to be extremely expensive. Doubt it such a display exists now.

<comment><USER8> Most people couldn't imagine the iPhone 4's retina display either, but Apple did it. I used to doubt Apple's engineering capabilities, but not anymore. I wouldn't put anything past them. The display that the iPhone 4 has didn't exist till it launched, so I figure this is no different.

<comment><USER9> It's not just their engineering, but their scale. Buying 1 or 1,000 or even 100,000 of a cutting edge component can be expensive. But when you can put in guarantees on 1M+ of an item, you can seriously drive down prices.

With the iPod thie is one reason why companies like Archos, iRiver, and even MS couldn't compete with Apple. Apple got preferred pricing based on volume that no one else could touch.

If the iPad has that resolution I guarantee 10M units shipped in 2011, and that's probably conservative. No other tablet can come out and confidentally even think they could ship half that number.

<comment><USER8> It's the cycle that kills Apple's competitors in the consumer market: 1) Apple sells millions of a brand new device, 2) this allows Apple to order millions of components, 3) cheap components drive down Apple's costs, 4) Apple can then lower the product's price but still retain a high margin, 5) Apple sells millions more because the feature & price one-two punch is too much to overcome.

<comment><USER10> This shows why being first to the market with a good product can seal your advantage for years. Assuming it's not too early.

</comment></comment></comment></comment></comment><comment><USER11> It would still be a retina display since iPads are held further away that iPhones in typical use.

<comment><USER12> Apple's use of the term "retina display" has nothing to do with the distance the display is from your eyes. The point is that, no matter how close you get to the display, your eye has trouble distinguishing individual pixels. In my experience, that's actually true with the iPhone 4.

<comment><USER13> Eh, Steve said that it was at a "normal" 10-12 inch distance from the eyes, IIRC. I agree, though, it's very hard to see those pixels, but I also agree with OP that you hold it quite a bit farther away. They'll call it a Retina Display almost for sure, if just for branding.

</comment></comment></comment><comment><USER14> What I'd _really_ love would be a MacBook with that kind of resolution.

<comment><USER15> Me too, but considering Apple's focus I have low expectations for future Macs.

</comment></comment><comment><USER16> [http://blog.gatunka.com/2009/11/03/japanese-computers- still-...](http://blog.gatunka.com/2009/11/03/japanese-computers-still-living- it-8-bit/)

This blog post explains perfectly why I am slowly falling in love with what Apple is doing for displays. I don't have anything to add separate to it, but thought it was relevant.

</comment><comment><USER17> That would be nice but what they _really_ need is to make the thing usable outdoors.

<comment><USER18> Do they really?

Firstly, the perceived lack-of-outdoors-usability hasn't stopped them selling a ton of the first generation model already.

Secondly, _my_ experience of using an ipad outdoors -- limited, because I don't have a garden -- is that it's fine except in direct bright sunlight from a cloudless sky (i.e. a single focal very bright light source): it's still readable on a day with high broken cloud and sunlight. The extreme case (bright sunlight, blue sky) is still manageable if you can position the ipad so it's not reflecting the sun straight in your eyes.

Seriously. There _has_ been progress in the daylight-usability of backlit LCD displays over the past decade ...

<comment><USER19> Are you talking about outdoor use in sunny Scotland? Both direct bright sunshine and wanting to spend time outdoors might both be limited by the local climate.

And "they've sold a lot" is an incredibly weak argument. It applies to most things Apple has launched in the past five years yet they seem to keep improving them anyway and indeed selling more of the newer ones.

<comment><USER17> I actually live in Scotland. I'd love to be able to stroll over to the Botanic Gardens and use my iPad to do some reading/work while breathing fresh air, but I was sorry to find that's not really an option, rain or shine.

Yes, you can still read stuff outdoors (or in conservatories) but only barely making out the text, images and interfaces are spoilt completely. The first time I tried it my reaction was 'I can't see a damn thing.' It's really not at all optimal for outdoor use, unlike the Kindle. And the Notion Ink 'Adam' seems to have a much better outdoor performance.

I think the iPad's mobility is its killer feature: being able to take it into the lounge, recline on the sofa, pass it around the room, use it places where a laptop is too conspicuous, etc. Being able to take it to outdoor destinations would obviously boost that significantly.

</comment></comment></comment></comment><comment><USER20> 2048x1536 resolution has a name: 2K (from the digital film world). iPads are already widely used on movie sets; this would more than cement that trend. Hope it's true!!!

<comment><USER21> Then again, a 30" display is 2560x1600 and costs over $1000. Will they really get that many pixels in a 10" display and still keep the price around $500.

I'm going to go with "unlikely".

<comment><USER22> Physical dimension is a very large factor in LCD panel pricing, and a 10" panel is only 10-15% the size of a 30" panel. I wouldn't be surprised if Apple could get hi-res 10" panels for cheap, especially since they'll be ordering millions of those.

<comment><USER21> So if it's easier to pack 10MM subpixels into a 10" display, why do they sell 30" displays of that resolution and not 10" displays of that resolution?

I figure the high cost of 30" panels is due to the defect rate, which increases with number of pixels (which is why 1920x1200 displays cost about the same, regardless of whether they are 27" or 24"; same defect rate). And, I'd think it's easier to make a big working pixel that a small working pixel.

In conclusion, I highly doubt that the next iPad is going to have a screen of this resolution.

</comment></comment></comment></comment><comment><USER13> Hah, my tweet(s) got quite some attention! I'm not even sure if I found that image myself, but I do remember discussing it on IRC in August (and just recently brought it back up with all the new rumors).

(Lots of attention, and, it seems, lots of follow requests. Future note: don't use a private account to post interesting info from, if it might be referenced around the internet.)

</comment><comment><USER23> Why would they make an iPad with a resolution nearly as high as their Cinema Display, far more than most of their desktops? I think this is an awful lot of extrapolating- a much better explanation for those images is a sloppy build system.

<comment><USER24> I think so too, probably the artists at Apple is producing these higher res assets for a future iPad with retina display. They already know it will happen at some point. But not for this upcoming revision.

</comment></comment><comment><USER25> At the same time desktop monitors hover at 100 PPI resolution indefinitely. There has been only minimal improvement on desktop monitor resolution since the good old CRT days.

<comment><USER26> I know. I need a 30" 'retina' display. My iPhone has ruined my desktop experience.

</comment></comment><comment><USER27> Unless my math is wrong going from 1024x768 to 2048x1536 is quadrupling the resolution, not doubling, as the article states. Am I missing something?

<comment><USER8> It's called '2x' resolution because it's twice as many pixels per dimension, and because you append "@2x" to image resources for them to be used in your app. It is 4x the pixels, but that I guess Apple figured that took slightly more brainpower than just imagining twice as many pixels tall, and twice as many pixels wide and calling it '2x'.</comment></comment>


Exorcising Google - <AUTHOR> http://log.adamwilcox.org/2013/07/14/exorcising-google/

<comment><USER2> Memo: Privacy died a long time ago. . If you want true privacy, you must disassociate yourself from technology, move to the mountains and live off of the land.</comment>