Recent submissions

Comment · 2 months ago
See, this is you falling for their marketing.

It makes sense doesn't it? If you own all the pipes, you can effectively block bad actors. But in reality what they do is to just block everyone who blocks advertising tracking and profiling tech (such as canvas fingerprint etc)... and because all vendors use cf, they all block those same clients, and they think there's some winner takes all magic happening with finely tuned blocklists. Don't fall for the marketing!

Try it yourself. Block those fingerprinting tech and try to access their own user forum. you get blocked. Now allow fingerprinting (even if emulated in a headless chrome!) and access by the most toxic vpn you can think off, access granted.

All cloudflare does is act like a gatekeep for monetizable-by-creepy-advertising-networks traffic, not bots. If the bots pay the small headless chrome tax, you get bombarded with their requests just fine.

Comment · 1 year ago
while the comment you reply to is borderline insane,

you're taking from a very privileged position in terms of media consumption. the media that criticizes the genocide and the blackflag on oct 7th is very niche and you seem to consume it exclusively. the message is very different within mass media.

Comment · 1 year ago
you're really trying to vibe architect?
Comment · 1 year ago
point is that a script executes the script in front of you.

uv executes http://somemirror.com/some-version

most people like their distro to vet these things. uv et all had a reason when Python2 and 3 were a mess. i think that time is way behind us. pip is mostly to install libraries, and even that is mostly already done by the distros.

Comment · 1 year ago
i guess your pedantry is right. it would be much more expensive to pay for corruption without the "safety" of some well executed fraud... but now it's open season and nobody even have to care about looking innocent anymore.
Comment · 1 year ago
this manages to be even worse. since it's setup full of holes to usable (eg reaching out on the filesystem), you get the worst of random binaries without isolation, plus the dead end for updates you get in practice when dealing with hundreds of containers outside of a professionally managed cluster.
Comment · 1 year ago
it's a stretch to "executing a script with a build user" or "from a validated distro immutable package" to "allowing something to download evergreen code and install files everywhere on the system".
Comment · 1 year ago
Exactly. this is the margin aws trives from.

they sell "you don't need a team"... which is true om your prototype and mvp phase. and you know when you grow you will have an ops team and maybe move out.

but in the very long middle time... you will be supporting clients and sla etc, and will end up paying both aws AND an ops team without even realizing.

Comment · 1 year ago
amazing how nobody even know about ECC these days.

see so many series B+ companies running DB and storage without a care in the world.

Comment · 1 year ago
reminder that stallman was cancelled from the eff with adhominem attacks. and we are back to calling free software (which would prevent things like the article) as Open-Source (which ia just donations to google and meta)
Comment · 1 year ago
the people saying gpl cannot sell software is always bsd users, who always work for some company contracting with Boz allen Hamilton and such. It's never an honest opinion.
Comment · 1 year ago
nobody robbed my house in years. i still lock the door.

it's so banal to check host keys.

Comment · 1 year ago
oh it very much is. they just act and bill like it's not.

corruption requires costs you cannot verify after delivery. for construction it's the exagerated foundation which they only actually deliver what's needed and pocket the difference. for software it is the hundreds of rewrites that may or may not have happened and are now in the past.

Comment · 1 year ago
so, punish facebook. don't use my taxes to persecute criminally someone using the badly designed system.

they would have close banks or newspapers for much less.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton