Hacker Newsnew | past | comments | ask | show | jobs | submit | sysguest's commentslogin

yeah but... that convention is so much of a security/bug headache

sometimes, its footguns seem worse than javascript...

hope some typescript-like "typed shell" becomes mainstream someday


> hope some typescript-like "typed shell" becomes mainstream someday

The trouble with trying to invent a new, more robust shell language is you basically just end up re-inventing any number of scripting languages (eg Perl, Python, awk, ...), so you might as well use one of those.


Most regular programming languages aren’t well suited for shells because they have a verbose syntax due to their readability goals. But with a shell, the vast majority of times you’re typing in stuff that you have no intention of reading back ever again.

I’ve done a fair amount of research here and I actually think we do need a new programming language for the shell (and then I created one).

I wrote a blog about this problem: https://murex.rocks/blog/split_personalities.html#conclusion


Excellent article, thanks for the link. I do agree with the premise. But every time I write some Bash code and think there should be a better way to do this, I ask myself why I don't just learn Perl. I dunno. Feels like inventing another solution would just hit the old "there are now 14 standards" problem where it would solve some problems but introduce others (see: PowerShell).

I don’t disagree with you per se. But if the new shell solves enough annoying problems then I think it has merit in existing.

But then you run into the problem that you’ve learned a new language and built new scripts that only you can use.

I use Take Command (well, mostly TCC) in my Windows workstations but no one else does, so TCC specific batch files and aliases only work for me.


If you’re vastly more productive using these alternatives then it would be silly not to use them.

If your colleagues want to reuse the same scripts then they can install the runtime too. It doesn’t mean they need to write all their future scripts using that runtime.


> so you might as well use one of those.

Did someone say... Xonsh?! It's tough to give up the niceties of zsh and it's various plug-in ecosystems, but I would love to be able to use Xonsh [1] as a daily driver for exactly the reasons stated. It is already the language I lean on over bash for most utility scripts with its kitchen sink built-ins.

[1] https://xon.sh/


Oh this looks quite nice!

> hope some typescript-like "typed shell" becomes mainstream someday

Might want to check out nushell (https://www.nushell.sh/)


PowerShell

Powershell syntax is worse than bash argument quoting and it’s half-hearted participation in .Net instead of being designed as built-in makes it annoying to do anything advanced, plus its security defaults are almost never what is wanted to actually get stuff done.

well Deno was the only player who could have prevented recent npm security disasters:

built-in permission system for filesystems and etc

just forbid writing to important folders like ~/.ssh


well I just don't get it -- why?

unless cloudflare's CEO is a friend of cloudflare people, so just want to financially them bail out...

...why acquire and kill? cloudflare can have more outreach and reputation by keeping deno alive


> why? unless cloudflare's CEO is a friend of cloudflare people, so just want to financially them bail out...why acquire and kill?

Aquihiring is a time-tested strategy to build out a team. The Deno folks likely have a bunch of experience that Cloudflare is well placed to make use of


Aquihiring also requires the personnel hired to... actually stay with the company....

Unless you dangle HEFTY stock options with incremental maturity dates, nothing is else is keeping them from leaving.


> Unless you dangle HEFTY stock options with incremental maturity dates

That is indeed how this whole thing works. I used to work with several folks who were kicking around FAANG for 4 years till their acquisition stock fully vested

When you consider how much time/money it takes to hire an experienced engineer, and how quickly they are liable to jump to the competition, acquiring an existing team of experienced engineers and tying them with the golden handcuffs is not a bad deal


> acquiring an existing team of experienced engineers and tying them with the golden handcuffs is not a bad deal

well... why not tie who's already inside the company (who you actually know about) instead of an external people (who you DON't know about)?

it's much difficult to get info about some external person, and most info is about external reputation ('the looks')

though... that's the reason job-ping-pongs work: someone outside looks better than someone inside, because of your lack of info


If the talent wanted to work at Cloudflair, they'd apply there. Being acquired is a loss of agency and the project you care about is shut down. Several public research papers say retention is hard.

Which also leads to considerable questions about if the thing being shut down in the acquirehire was the real purpose and any momentum of the team itself moving to new projects a bonus.

that just means they might not be actively looking to join cloudflare but are willing to do it if the price is right. nothing wrong with that, it's how employment works for the most part. likewise retention in these cases is typically solved via golden handcuffs, another "the price is right" thing.

I assume the logic is something like this:

- We want to do more work on our runtime and need people to do it

- Those developers for that company over are there working on another runtime

- Buying that company allows them to come work for us without any potential issues from investors in that other company


+ deno's file-system permission model is the answer to recent malicious npm packages fiasco:

"deny access to ~/.ssh and other important folders" --> that alone would likely have 99.99999% sterilized most "hacks"


> methods for using the level change every week or so

hmm doesn't mean noob will become better? if what I'm "learning" about AI is going to get deprecated every week... then it doesn't make sense to "keep up"


Here's how I think about it. There's two different things "knowing how to use AI effectively" and "knowing how to leverage effective AI to improve your project".

1. Both are multipliers on skills you already have. A "noob" will be at a disadvantage.

2. The second one is a complex blend of technical skill, domain knowledge and human factors (knowing your user-base, knowing your product/project, understanding UX/DX/whatever) that you probably will always have an edge on.


"even Qwen 3.8 has a hard time to consistenly conform to a schema"

idk maybe this is a feature? if some LLM model is wonky, it won't generate right json format, so I'll know for sure

but for Jev, it's 100% right format, so I can't know if it's gone wonky or not


another thing: chinese gov can just some of its wipe its populace easily (the gov controls media 100%)

but... not the western govs


yeah this

if I'm ordering 1 RAM and demanding some special customization, even mom-and-pop stores will just ignore me

but if I'm buying 100000000000 RAM, things change


well even if the results are crap, it still has big economic influence:

"since I can use AI to create this app this much, I'll pay you less"

"although current AI made this crap, it'll outpace you eventually, so I'll pay you less"


idk maybe apple can release fbx or blender files?

I mean these seem nice for print-decorations...


No decent engineering firm is going to want to work with FBX or Blender files. In fact they probably wouldn't even know what to do with them. Even proper model formats such as STEP files don't give you the details that are on a drawing that you actually need to do anything useful with these.


I’ve only dabbled with cad for 3d modelling in Onshape. It seems that there all kinds of ways to add measurements in the render files. Not sure about blender.


MBD is a thing, however that doesn't really matter here, for making accessories you can more or less just assume all dimensions are perfect since you need some compliance for the accessory to be installable. What I'm talking about that can't be encoded in a model easily are things like the keepout area for the camera.

The reason you don't want Blender files at all in any sort of engineering is because it's a mesh. You can't pull any useful information, even something simple like a radius, from a mesh.


Someone in the community will, or already do it. 3D model of Apple product is easier to find than other brands.

Actually, I've been looking this kind of official drawing for practice product modeling and rendering.


Roll your own?


Consider applying for YC's Winter 2027 batch! Applications are open till November 2.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: