Hacker Newsnew | past | comments | ask | show | jobs | submit | more BiteCode_dev's commentslogin

Another one bites the dust

Another one bites the dust

And another one gone, and another one gone, Another one bites the dust


You would be surprised.

I know a government agency storing their entire list of all credentials for every one of their IT services and servers in an .ods file.

I introduced them to password managers, but it was too hard for them. SSH keys? Too hard.

I managed to make they bite the bullet of using keypass.

Then they lost their master password.

And went back to the .ods file.

So I can buy it.


At first I didn't get it.

I never have a hard time to write things with words for the average stuff, which is what the AI is good at. It's always faster for me to type it. And for the hard stuff, AI cannot help (yet).

For programming having help for the average stuff saves me time. But for words? That's my natural way of expressing thoughts, why would I need speed up with the most natural thing in the world?

But then I saw some of my friends use it, and I understood.

Most people suck at writing.

In fact, they suck at communicating in words in general. I started to pay attention, and realized that most of the discussion is not even proper French or complete sentences most of the time. The tone, the gestures, grunts and context are all used by every day people to express essential basic ideas.

And we rarely express anything beyond basic idea in days to days activity, no matter how smart we think we are, life is mostly mundane stuff.

And unlike me, they didn't have to write a ton of paperwork in their life, or articles, they have no training.

They struggle with the medium like a fish trying to climb a tree.

For them, GPT is a savior for any formal writing task.


Since this is DARPA, this shows they are interested in rust, which mean we will probably have strong toolchain certifications coming up eventually, making rust even more fall in the category of "the language you want to use for serious stuff".


If you have a secret to use in your python program, such as a password or an API KEY, you can use keyring to store it easily and securely.

This uses Keychain on macOS, Freedesktop Secret Service/KWallet on linux and Windows Credential Locker on Windows. So decrypting is managed by the OS usually it's done when the user log in or at first access, and is transparent to your program.

This avoids a pitfall I see too often where people hard code their password in their script because it's the simple thing to do.

Keyring is nice because it's only an inch more effort than that. It's the best ratio "ease of use" / "security" there is. You manipulate it like a key-value store, don't bother about encryption, prompting the user for decryption or anything. And you don't risk committing your secret or letting linger at the wrong place. Plus you benefit from your OS security team effort.

You can also use "os.environ" to read the key from env vars in production and only use keyring if it's not there.


Can confirm. This week a physicist friend came by to give it a try. He asked some questions related to his domain. I was fully expecting GPT to bullshit its way through it, from experience with GPT 3. But to my surprise, and to his, it got quite decent answers.


Instead of freaking out about it, it would be more fun to do a similar joke to him. What's fair is fair.


Yeah, I sure want to, especially on April 1st. Maybe I should do and Ask HN, how do I get back at my dickhead friend on April fools day :)


Sounds like a good joke to be of either side on to me. No harm done.


to me this is an unacceptable boundary to cross. I would never be able to trust someone that does that.


Is it because the phone is very intimate to you, or because of the implications?


because they could be viewing all their private communication/media on their device and that causes a lot of anxiety cause they won't confirm or deny if they have access.


Ugh, yeah, if this was not someone I know, the pictures, yikes !


what pictures?


It's basically the equivalent of someone in the 80s tapping your phone line.


Rather someone in the 80 changing the numbers on your phone book so that you dial a wrong number.


Yeah, I sort of feel that way too but maybe also is a good lesson learned.


What’s the lesson here? That software is insecure? Or that you shouldn’t trust your friends? Sad.


All of the above, plus, maybe, don't let people see you put in your pin. don't take security for granted. Be careful. I guess the lesson I learned is you need to pay attention to security.


And despite Epic having great games, this is why I have not installed it or paid for any of their product so far.

Also why steam is still the leader despite having a terrible UI: they have been very good to their customers.


Is Steam UI terrible? It seems a little slower than I'd like, particularly initial load but otherwise it seems fine to me. And most software I use is so slow now it certainly doesn't stand out and has probably moved to the upper grade just by not getting worse over the years.


Yes, it's absolutely horrible. It's just a browser and it's not well done. It takes seconds sometimes for clicks to register. Often I get blank screens and have to go back to reload the page I want. Everything about this browser-based UI is slow and cumbersome and brittle.


Yes, it is. It has all the problems of a web page plus all the problems of a native app. It's the worst of both worlds.


It's a Web-based UI which doesn't allow font size control or zoom, which deserves an achievement or something since nearly all of them allow this rather easily (either in UI or by editing CSS). Maybe a magnifier glass to help with the tiny font size.


What web engine is steam using? Has it always been a Web UI? I only started gaming on steam back in 2014, and it was a webui already back then so I'm curious!


> What web engine is steam using?

Chrome, not quite an electron app but as sluggish as one. It's not always been however the installer has always been known to be notorious.

These gifs was well known during the golden days, classics. NSFW-ish

[1] https://i.imgur.com/0qtsE.gif

[2] https://i.imgur.com/QuJNQ4K.gif


It's a batty Mac citizen, with slow startup, weird fonts, the exact same UI as on Windows, and the shortcuts are all wrong. It's probably the same on Linux, where it's a Windows app on the OS as well.

Valve doesn't have enough taste to see a problem.


> Also why steam is still the leader despite having a terrible UI: they have been very good to their customers.

Steams core customer is the game developers/publishers, who they take a ~30% (last time I checked) cut from the profits from.

The people who buy games are simply users of Steam, and Steam has to treat them well, otherwise their actual customers (developers/publishers) won't get as much profits, and indirectly Steam.


Developers don't pay that 30 percent, users do.

You could even say that steam is a customer of the developers (I buy your game at x to sell for y), and the average person is a customer of steam and the devs.

I don't really see the customers or the developers as the core. Both groups tie into each other in a big network effect.


Developers do. It comes out of their margins.

If game developers and publishers could get the same audience without steam and the 30% tax, they would in a heartbeat.

They'd probably cut the price a little to expand sales and enjoy the wider margin. Margin that could be spent on salaries and growth.

Thankfully Valve is investing its proceeds in developing competitive products that enrich the industry and not just skimming.


That is a pointless distinction.

30% of the price is distributed to Valve instead of developers.

Whether that results in developers obtaining lower profits or users paying higher prices is entirely subjective; that depends on what would happen otherwise, which is categorically unprovable.


It's not pointless at all, the fact that all the money comes out of my pocket is really signific ant it comes to determining who the real customer of valve is.

If it's a point of issue between me, Valve, and the game developers, at the end of the day it's my decision that matters because I have the money and if I choose not to spend it the whole thing stops working.

Take away valve and then I go straight to the source and purchase games from the developers directly, it's going to be inconvenient, but it'll be fine.

Take away the developers and valve will fund game development and start making their own stuff like Netflix has with all the media companies.

Take away the customers? Game over.

Of logic works all right when you're talking about Google and the fact that the advertisers are the real customers, because of the end of the day the advertisers have the money and when it is advertisers versus users the advertisers always win.

It's important to be the guy funding the system at the end of the day, otherwise you get screwed.


They are neither buyers nor sellers, they have a marketplace business model. https://www.bluecart.com/blog/marketplace-business-model#:~:....


> Developers don't pay that 30 percent, users do.

No really, the developers have 30% removed from a sale which goes to Steam. People who buy games don't see a price + 30%, it's the developer who sees the fee when they look at the sales. Otherwise all receipts from Steam would be $GAME_PRICE + $STEAM_FEE, but it's simply $GAME_PRICE and then the developer when looking through their sales, that see $GAME_PRICE - $STEAM_FEE.


So I pay $X and 30% of that goes to steam.

This is not me as the user paying. Gotcha.

The customer pays for /everything/ /always/ under /all/ circumstances. It's not cost plus pricing, vendors will charge as much as the customer will part with. Customers are willing to part with less when competition pushes prices down. That 30% is definitely keeping prices higher to the customer in any remotely competitive market. (I say nothing about whether that is a good thing or bad, whether that is cheap or expensive - it's just nuts not to know the customer is paying it, that's whose pocket the money comes out of).


If you buy a game directly from the publisher you don't get a discount for that 30% cut on Steam. For publishers with over $50 million in sales, they take 20%. But it costs the same price to buy Assassin's Creed on Steam as it does on the Ubisoft store.


Steam is not "very good" to their customers unless you mean in comparison to the abysmal competition. Remember they only started doing refunds after being taken to court by the Australian Competition and Consumer Commission. Even now their refuns are extremely restrictive compared to what a retail store would offer.


Since this is highly incompatible with most python ecosystem right now, may I plug nuitka?

https://nuitka.net/index.html

It's a compiler for python code that can create stand alone executables, and up to 4 times the speed of the initial code.

Best of all, it's extremely reliable, with a high level of support of event the tricky things like the scientic and gui stacks.


Seconded, I deploy large packages with gigabytes of deep learning and GIS dependencies in single executables with Nuitka and it works very well. Also handles including data files into the executable if needed.


Third'ly?... Nuitka is amazing. Simply as that.


Out of curiosity, are the GIS dependencies the proprietary ones (coughESRIcough)?


Please no, not ArcGIS. I’m sure our dependencies would clash with arcpy’s if we tried. Fortunately my company uses FOSS packages almost exclusively.


Ha ing been down a similar path, this whole thing works so much better if you don't 'import arcpy'. Licencing issues aside, you've often got faster tools in shapely, fiona, geopandas, rasterio, xarray.


We do similar. Works well.


> high level of support of event the tricky things like the scientic and gui stacks

Could it compile an app that uses Pillow and AggDraw and ReportLab and OpenPyXL with a TKInter GUI into a standalone app I can give to a coworker? That would be extremely useful!


I’ve used Nuitka to package an app that involves Pillow, mupdf, PyQt, and several other libraries, and it handles them with no problem.


That's very encouraging, I will give it a go!

And I have to ask, does a powersnail live in a powershell? =) (also a language I like that needs better GUI and EXE packaging)


I don’t know half of these but I’m almost sure that Pillow and TKInter would work.


AggDraw is an "anti-grain geometry" graphics library that works with Pillow for drawing high quality images. ReportLab is a very big PDF generating library, and OpenPyXL reads and writes XLSX format Excel spreadsheets. I use these in many of my work-related apps. Tkinter is the big question for me because it involves a lot of behind-the-scenes files. Thanks for your comment, I will give Nuitka a try!


Sold


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: