HNHacker News
TopNewBestAskShowJobs

PufPufPuf

1,350 karma · joined June 5, 2020

submissionscomments
PufPufPuf··on Show HN: I'm rewriting a web server written in Rust for speed and ease of use
Most Linux distributions won't package an unknown project. Chicken and egg problem. You could create your own PPA but that is basically the same as sudo curl bash in terms of security.
PufPufPuf··on Flowistry: An IDE plugin for Rust that focuses on relevant code
Probably because "Visual Studio Code" is a Microsoft trademark, but the plugin works with all the IDEs based on the open source base (VSCodium, Cursor, etc.)
PufPufPuf··on Ruby Blocks
Take a look at Kotlin, it perfected this idea
PufPufPuf··on Ask HN: Abandoned/dead projects you think died before their time and why?
My best guess is:

- not backed by a huge corporation (React = FB, TypeScript = Microsoft, Next.js = Vercel, ...)

- many of the ideas I listed above were controversial at the time of introduction, I can imagine that Opa must have felt overwhelming

- Opa didn't actually have components or state management, which was a pain point on which React originally took off

PufPufPuf··on Rotating Sandwiches
Did they? To me it seems that they just rotated and recorded them.
PufPufPuf··on CamoLeak: Critical GitHub Copilot Vulnerability Leaks Private Source Code
PR releases. Yeah, it was an exaggeration, I know that the mitigations can only go so far.
PufPufPuf··on Firefox is the best mobile browser
Yeah, but it also has bl*ckchain.
PufPufPuf··on Major security breach at Austrian AI startup localmind.ai
My first thought too. It's not that hard to use an enterprise password manager.
PufPufPuf··on CamoLeak: Critical GitHub Copilot Vulnerability Leaks Private Source Code
It's used widely for issue/PR templates, to tell the submitter what info to include. But they could definitely strip it from the Copilot input... at least until they figure out this "prompt injection" thing that I thought modern LLMs were supposed to be immune to.
PufPufPuf··on Ask HN: Abandoned/dead projects you think died before their time and why?
Yeah, Opa was wildly ahead of its time, I actually just wrote a top level comment about it. Basically Next.js+TypeScript+modern ECMAScript features, but in 2011.
PufPufPuf··on Ask HN: Abandoned/dead projects you think died before their time and why?
Definitely Opa: http://opalang.org/

In 2011, before TypeScript, Next.js or even React, they had seamless server-client code, in a strongly typed functional language with support for features like JSX-like inline HTML, async/await, string interpolation, built-in MongoDB ORM, CSS-in-JS, and many syntax features that were added to ECMAScript since then.

I find it wild how this project was 90%+ correct on how we will build web apps 14 years later.

PufPufPuf··on A WebGL game where you deliver messages on a tiny planet
Check out Outer Wilds if you like tiny planets! (Not to be confused with Outer Worlds)
PufPufPuf··on Asciinema CLI 3.0 rewritten in Rust, adds live streaming, upgrades file format
Yes, it's right there in the article.
PufPufPuf··on Distributing your own scripts via Homebrew
Fun fact about packaging Python tools: It turns out that there are Python packages that aren't compatible with Homebrew due to cycles in build dependencies. While this is no problem for pip, as it just downloads binary releases, Homebrew builds ALL of the dependencies from scratch. And yeah, that also means that modestly sized Python projects may take over an hour to build the "bottle".
PufPufPuf··on I ditched Docker for Podman
> I literally just aliased docker=podman in my shell and carried on with life.

Thanks, I hate it. It might look fine at first but once you need anything more advanced than running a hello world container, it falls apart. Fun fact, there is no set of flags that would correctly build a multi-platform image on both Docker and Podman -- I found out the hard way.

I guess Podman may work if you go all in on it, but pretending that it's a drop-in replacement for Docker will bring you only pain.

PufPufPuf··on Farewell to Meshnet
They say it's $5 for 5 devices on their page, and that it works as a Tailscale exit node... is that not true?
PufPufPuf··on Nokia’s legendary font makes for a great user interface font
That does not really help, as demonstrated: https://ctrlv.link/x9Ov

Sites just shouldn't disable zooming, it's one meta tag. The browsers shouldn't offer this option at all. There are no legitimate reasons to disable zooming.

PufPufPuf··on How I code with AI on a budget/free
Actually nowadays they allow unlimited usage of free models without depositing anything.
PufPufPuf··on HRT's Python fork: Leveraging PEP 690 for faster imports
If that was the case, why use Python in the first place?
PufPufPuf··on GPT-5 vs. Sonnet: Complex Agentic Coding
It's pricing / usage modifiers, basically price expressed as a ratio of the default model.
PufPufPuf··on Stop Killing Games
On GOG, you can just download the standalone installers, they are all DRM-free. That's why I prefer buying there.
PufPufPuf··on uv: An extremely fast Python package and project manager, written in Rust
Sadly hashbangs are technically limited to: 1) Support only absolute paths, making it necessary to use /usr/bin/env which is in standardized location to look up the uv binary 2) Support only a single argument (everything after the space is passed as a single arg, it's not parsed into multiple args like a shell would), making it necessary to use -S to "S"plit the arguments. It's a feature of env itself, for this very use case.

So there isn't really much to do to make it simpler.

PufPufPuf··on Mullvad Leta
The request is just to add context to the title. The perceived veracity of that title isn't really important, if they decided to call themselves that.

BTW what ties are you talking about? Is there a source for that claim?

PufPufPuf··on Ruby 3.5 Feature: Namespace on read
Most definitely. When I worked with existing Ruby codebases, it was surprisingly hard to answer the question "where is this defined" when every import is dumped into a single global namespace. I had no idea where stuff came from, and neither the IDE.
PufPufPuf··on A community-led fork of Organic Maps
That's not my experience at all, for shops and restaurants (opening hours, menus, photos, ratings) I always need to use Google Maps. And even then, a "practical monopoly" does not mean anything unless you monetize it...
PufPufPuf··on A community-led fork of Organic Maps
I'm Czech, and a long time user of Mapy.cz / Mapy.com. Monetization of Mapy.com has been a question for some time. It's part of the Seznam conglomerate, which makes most of its money through various news sites (including a TV channel) and an ad platform. Other "side projects" of Seznam, like their e-mail service, serve as drivers for their homepage and stay completely free. Mapy.cz contained affiliate Booking.com links for some time, but recently they added a paid subscription and moved the ability to download offline maps for more than two countries at a time behind a paywall. It seems that they are just now trying to figure out a more sustainable way to monetize, and everyone is hoping they won't destroy the great app in the process.
PufPufPuf··on Launch HN: Cua (YC X25) – Open-Source Docker Container for Computer-Use Agents
They just provision cloud VMs. That's the level of tech understanding you need to build an "AI startup" nowadays. "Never heard of QEMU, we just use Ubuntu" doesn't really strike confidence.
PufPufPuf··on Datastar: Web Framework for the Future?
By "error handling" in Go you mean "if err == nil" repeating every five lines throughout the codebase?
PufPufPuf··on CSS Clicker – incremental game about making a personal web, written in pure CSS
Amazing work! I once did a short text adventure with CSS only (https://janpokorny.github.io/tiger10k/) and I remember it being not easy to figure out, even in this simple form. Doing counters is absolute witchcraft.
PufPufPuf··on Generate autounattend.xml files for Windows 10/11
Exactly what is this trying to achieve? Running a third party tool to modify the OS, disabling security features, using "downloaded" group policies (what policies?), and sending all your DNS traffic to a third party (when on PC it's possible to just modify the etc/hosts file) -- these aren't exactly the best security practices. The only reasonable suggestion is the IoT Windows version.
← PreviousPage 6 of 14Next →