Recent submissions

Comment · 2 months ago
To be fair this behavior + extra-index-url definitely allowed for dependency confusion attacks. Now it's a bit silly for the CVE as written, but IIRC this was before you could use index-url to point exclusively to an internal package host so there were (and in other ecosystems still are) dependency confusion attacks going on in the wild where attackers are publishing "[email protected]" on any public package host (NPM, PyPi, etc) to try to compromise companies that have internal packages of the same name.
Comment · 3 months ago
Why not LoraWAN - has built in encryption (via preshared keys) and receiver stations + processing software already exists (Chirpstack).
Comment · 4 months ago
Mind sharing your solution a bit more - how do they trigger actions from each other for instance (or is that prompted by you asking them to read from each other)? Asking because OP is interesting but seems a bit overambitious for my own usecases (two pairs of claude + codex agents such that each pair should talk between each other but not across pairs; all running on the same machine).
Comment · 4 months ago
Cool effort! I appreciated the background into the why, as initially I thought this would have to do with optimizing animated GIFs and didn't realize there was a usecase for single frame GIFs anymore.
Comment · 1 year ago
Could this be used for LTE roaming? My parents live out in the middle of nowhere - no cell tower reception, but Starlink works so they have internet. I'd love to get them local LTE coverage for cell phone calls and text messages.
Comment · 1 year ago
Are you still using outdated GitHub Oauth apps for this, or have you swapped to GitHub Apps? GitHub Apps are newer and have Oauth flows, but have a fine-grained permissions model instead of the Oauth permission model.

More info: https://docs.github.com/en/apps/oauth-apps/building-oauth-ap...

More-over, can you document the GitHub permissions needed and which GitHub App(s) this tool uses? Are you using device-flow, online oauth-flow, etc? And where are the Oauth tokens stored if so? Is there any server-side component where you might be storing tokens?

Thanks!

Comment · 1 year ago
I believe parent comment was about `env -S` not being portable rather than `uv` being portable.

I'll say, I am as pessimistic as the next person about new ways to do X just to be hip. But as someone who works on many different Python projects day to day (from fully fledged services, to a set of lambdas with shared internal libraries, to CI scripts, to local tooling needing to run on developer laptops) - I've found uv to be particularly free of many sharp edges of other solutions (poetry, pipenv, pyenv, etc).

I think the fact that the uv tool itself is not written in Python actually solves a number of real problems around bootstrapping and dependency management for the tool that is meant to be a dependency manager.

Comment · 2 years ago
Amazing to see the progress of JPEG XL here. Been following the effort for a while, and despite the adoption difficulties (i.e. Chrome), they're making great progress regardless.
Comment · 2 years ago
I'd imagine illegal for environmental reasons, however, rather than financial losses of some other party.
Comment · 2 years ago
Those extensions were just glorified api clients / web browsers. This is akin to a company threatening the developer of a torrent client.
Comment · 3 years ago
Also a S10e user here. I've been eyeing the Asus Zenfone 10, but it's unfortunately not available in the US for most mobile networks here. Truly a shame that not many are making small phones, and those that are are not paying attention to the US market.
Comment · 3 years ago
What service did you use, and anythings to stay away from / definitely try?
Comment · 3 years ago
This is a strange take for me to see, maybe OP doesn't have the context that the US government has been funding Ghidra development for years now (before ultimately open sourcing it), and will no doubt continue to do so for years to come.

This is the software used by NSA and contractors to analyze malware. From a UI perspective I get that it's clunky, but from a capabilities perspective I doubt there is much lacking.

Comment · 3 years ago
Looks like they are just a reseller of Hetzner and Leaseweb?
Comment · 3 years ago
Any tips, tricks, or resources for getting started using Fargate for one-off or recurring jobs? I have terraform setup and managing AWS resources, but every time I look into Fargate it seems like guides point towards running webapps instead of diverse jobs.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton