Hacker Newsnew | past | comments | ask | show | jobs | submit | hooluupog's commentslogin

Social platform.


Go is not really 'pass by value' when passing slices. It just passes the pointer value instead of doing a deep copy(copying the backing array). When trying to grow a slice in a function, the result is unpredicted because of 'apend' implicitly choosing to allocate memory or not. In addition, it is not concurrent-safe to pass mutable data. To avoid the safety problem, you have to copy stuff and consequently suffer a performance penalty. A better way to solve the problem is to introduce immutibilty. If one day immutibilty is introduced in Go 2(or 3), i wish slices are really passed by value. Then everything is passed by value as default with the immutable data passed by reference. You can still use pointers to pass mutable data just like using '_' to explicitly ignore error handling.

Now in WAT 1,

    func grow(s []int) { // s is deep copied.
        s = append(s, 4, 5, 6)  // changing 's' does not effect original slice.
    }
Explicitly pass mutable slice,

    func grow(s *[]int) { // s is referenced.
        *s = append(*s, 4, 5, 6)  // changing 's' will always effect origin slice.
    }
Explicit is better than implicit.


You are allowed to install other app stores on a android device.You can even install apps from unknown sources.But you need to be responsible for your own security.


you need to be responsible for your own security.

Or they could make sandboxing actually work.


I am not aware that anyone has ever made this work. Full VMs are escapable, iOS jails have been broken and even permissions technically allowed can be abused, etc. There is room to improve, but "just make it impossible to escape the sandbox" is massively oversimplifying. It also makes it harder to make useful apps if you reduce API surface.


if you can produce a flawless, performant, sandbox, fame and fortune awaits you.


However, you can't install other app stores from the Play Store itself. That seems pretty anti-competitive. Google also bans ad-blockers from its Play Store. Why? Because they interfere with its business model. Again, anti-competitive. No different than Verizon banning Skype from its network.

It's a shame the EC didn't hit Google over these, too.


It's kinda a chain of trust. One of the value of the Play Store is that you trust it not to include malware (if you do). If they allowed other app stores to be installed through it, google can't be confident in saying if you use our store, you won't get malware.


You trust the Google Play Store not to have malware?


It's certainly far more trustworthy than the iOS app store and Chinese app stores, all by a wide margin.


Based on what metric? Google doesn’t even pretend to review apps and the Google app permissions framework is laughable.


Based on total malware installs, where Apple has everybody beat by even just Xcodeghost alone.

Google doesn't pretend that manually reviewing apps prevents malware because it obviously (to any software engineer) doesn't. It does, however do both static and dynamic analysis of the apps in its store, unlike Apple and the Chinese app stores.


And that really hasn’t help. Xcodeghost basically affected the Chinese App Store where app authors downloaded a non Apple hosted version of Xcode.

https://us.norton.com/internetsecurity-mobile-android-vs-ios...

https://www.sophos.com/en-us/security-news-trends/security-t...

That doesn’t even consider all of the unpatched Android security holes.

https://www.esecurityplanet.com/mobile-security/how-secure-i...

Or the fact that most Android phones are running older versions that will never get patched.

https://developer.android.com/about/dashboards/

Compared to iPhones running the latest versions....

https://www.digitaltrends.com/mobile/ios-distribution-news/


There is no "Chinese app store" for iDevices. Anybody who downloaded WeChat anywhere in the world was affected.

Trying to bring uo unpatched devices is changing the subject (security-conscious people use Android devices that get regular security updates) — we were talking about app stores. It remains a fact that far more people have been infected with malware from the Apple App Store than from all other app stores combined.


People who care about security use devices that get updates - that’s true. They buy iOS devices.

Which Android devices get regular updates for over 2 years? 3 years? 5 years?

Android is insecure by design - since most devices can’t be updated. Unlike iOS devices that get updated regularly worldwide without waiting on the carrier.

And I posted links showing that Android is not as secure. Do you have any links to back up your claims?


That doesn't sound anticompetitive in the least. Alternative stores are allowed on Android; Google just isn't going to bend over backwards to do everything for you.


Google allows basically everything on the Play Store. To not specifically restrict their competition would not be "bending over backwards" at all.


You can install ad blocking web browsers just fine. The rule is that you can't publish an app that interferes with another app.


Google: ARCore MLkit Apple: ARKit CoreML


Apple have been using (name)core and (name)kit for a lot longer.

As an aside, how do you escape a star character on HN without dropping to a code block?


https://news.ycombinator.com/formatdoc

You need a space after the star, (* core) which is not like escaping at all...


nit: I think the apple naming convention has been (name)kit and core(name).


Apple seems to use both, but they've been leaning towards Core* rather than *Core recently. We have CoreAudio, CoreBluetooth, CoreFoundation, CoreGraphics, CoreImage, CoreLocation, CoreText…but there's also WebCore, JavaScriptCore, QuartzCore, and ImageCaptureCore.


I am really only familiar with webkit and webcore, so I just assumed most others followed that pattern!

CoreML always sounded wrong to me because of that.


Not the OP,maybe Bill Joy and John Carmack.


But its users want.


Flutter has the potential once it ported to desktop and even web(with WASM).


I think it'll only be ported to desktop once Fuchsia comes closer to release (which could be several years). They really seem focused on mobile only at the moment. Agree it could be a great solution.


Looks like it has started (MacOS for now) https://github.com/google/flutter-desktop-embedding


But it's not compulsory on android.


What a misleading title.Beijing Sinnet is just a shell company of amazon china(The same as Guxiang which is a shell company of google in china).


>Beijing Sinnet is just a shell company of amazon china

No. Look at their website http://en.sinnet.com.cn/home/default/index.html

北京光环 was founded in 1999 and run their own ISP and CDN. They are clearly not a 'just a shell company' and are a local partner.


Why should google's products must work with Amazon's products?It's not Amazon who sell google's products but google sell its own products via amazon online shopping platform.Does amazon echo have to work with google's product or install google's software or services to appear in search results?


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: