gravyboat

I'm one of the maintainers of Streamlink [1] which has members from around the world and we've been running various methods of donation since 2017 or so. In that time our Open Collective [2] has made about $1600 USD. We have 6k+ stars, and over 50,000 users across all platforms (based on download stats as we don't collect any metrics in our apps so it's potentially higher) yet the entire amount we've collected is thanks to less than 100 people. We note the Open Collective on every release as well, and have donation links in the documentation.

My own personal donation methods total $15 from one person in the past 5 years since we forked the project and started maintaining it. We have more users than many start ups do and I know that there are several companies using our software.

[1]: https://github.com/streamlink/streamlink [2]: https://opencollective.com/streamlink

This is a fantastic idea. The concept of code tours is something I've been trying to push for via thorough readmes combined with example PRs to show users how to actually do something but this takes it to another level that I'm very happy to see.

I think this is the first webpage I've seen that doesn't load at all without AMP. Pretty concerning that developers are going down this route.

Seems neat but using Intel chips over AMD is an immediate deal breaker for me.

I'm using an Ergodox EZ which I really enjoy and I'm hoping wireless plus a trackball is in the next iteration. Even just being wireless (or a wireless add-on) would be great.

While this may work for individual contributors I don't see how it benefits open source work and the community in general. It suggest writing articles and creating videos but there is then a drive to release less information publicly to try and get people to pay because your code is confusing or your docs are lacking. That seems like a big negative.

It also doesn't work for team based projects. I'm one of the maintainers of Streamlink [1] which has members from around the world and we've been running various methods of donation since 2017 or so. In that time our Open Collective [2] has made about $1600 USD. We have over 50,000 users across all platforms (based on download stats as we don't collect any metrics in our apps so it's potentially higher) yet the entire amount we've collected is thanks to less than 100 people. We note the Open Collective on every release as well.

My own personal donation methods total $15 from one person in the past 5 years since we forked the project and started maintaining it. We have more users than many start ups do and I know that there are several companies using our software, but I haven't figured out how to make donations really work yet. How do we determine who should make what from a shared pool of money? How do you value a contribution, PR, etc., and most importantly how do you get users to actually pay without negatively impacting the project?

[1]: https://github.com/streamlink/streamlink [2]: https://opencollective.com/streamlink

Why are you sorry for them? They are making the choice to work at Plaid when they know Plaid is a terrible legal phishing company.

Are there plans at any point to support remote work? Seems like a very cool product but relocating is a bummer.

Last time I looked at a D.C. based job for another federal agency the answer was no. Considering the lower salaries and fact they don't cover relocation costs it's a pretty big downside.

You should include details on how long each of those interviews are. 3 technical interviews plus an intro call seems excessive depending on how long they're expected to take.

When Twitch Prime was originally released one of the major issues was reminding people that their token was available. I built primeminder as a tool to remind people to renew their Twitch Prime subscription via email notifications: https://github.com/gravyboat/primeminder, the plan was to eventually advertise in the body of the emails once the user base was large enough.

The second was a remote job board like weworkremotely called remote-first (https://github.com/gravyboat/remote-first). This was when weworkremotely was younger and I was pretty dissatisfied with the fact they didn't even support searching for jobs, it was just a messy list that was a pain to search so I thought I could do better to solve this.

Both projects failed.

Okay that makes more sense and is just my bad then. I hadn't even looked at the index thoroughly as the minified JS correlated to the `workers-site/worker/script.js` and I didn't realize the index.js was responsible for generating that based on content mismatch.

I generated my worker the second week of May so it's totally possible that this wasn't in the release I generated with. Thanks for pointing out that the template had been updated.

Sorry if I wasn't clear. Yes I understand I can set whatever headers I want in a response via the edit options for my workers. The problem I'm running in to is that I created a worker for a static site and it has a massive 1 line JS blob for the script section that I have to go through to set this. I never created this, it's just what was set up when I used Wrangler to deploy my static site.

This is fine except it's a huge hassle to modify and I'm actually a bit surprised that by default workers don't use secure headers. I figured they would since they're pretty standard now and I'd rather have to disable them if I needed then to manually configure them. If someone isn't familiar with security headers there's also a good chance they would deploy their site and never enable them which makes sites running on workers less secure by default.

I'm going off this several year old blog post: https://scotthelme.co.uk/security-headers-cloudflare-worker/ that talks about how to set this up and it seems like functionality has changed a bit since then, or maybe I am misunderstanding their screenshots. Outside of this I can't find any documentation from Cloudflare about setting these headers that is more recent, or what I would need to set for a new worker that has recently been created to get this functionality.

So I guess my question is two fold, are there plans to make it easier to enable secure headers than to manually modify the worker itself? My plan is to do that currently once I stop slacking and decide to just parse this giant JS blob.

My second question is are there any plans to add documentation around functionality such as this? I was really shocked to see that secure headers weren't something that's simply enabled by default and even more so when I looked through the docs and didn't see any examples on how to set them up. Maybe my use case is niche, but I thought secure headers were pretty standard at this point.

Hey Kenton. I recently migrated a few of my static sites to Workers and was hoping you could clarify what the teams plan is around security headers. The only documentation I could find was some random blog post from 2 years ago that didn't help as the way workers function has changed since then and it's no longer as simple as just dropping in a few lines of code.

I'd love to easily configure security headers so my sites are getting good ratings again, but I couldn't find it in the documentation and it doesn't seem like there's been any update to support this. Is your team working on making security headers easier to enable for workers or is there something I missed for setting this up?

Obsidian seems very cool. One thing I noticed on install as someone with a Windows device is that the install location cannot be specified. It would be great if your team supported this as it's pretty standard for many Windows apps and aids in system organization. I was able to move Obsidian and the obsidian-installer and things seem okay but I have no idea if this will break the updater at a later point in time.

I don't think saying "work from home friendly" is very honest. I applied for the Seattle DevOps position (which is still open months later), and was told I'd have to work from the office because that's how the teams worked in that location. So the Seattle office is not remote/wfh friendly at all.

This job isn't actually full remote. I applied for it previously and was told that I would regularly have to commute to San Ramon to work in their office for a week at a time. If I remember correctly it was something like once every 6 weeks.

This organization doesn't provide feedback so don't be surprised if you ask for it and don't hear anything.

What's crazy to me is that 80K GBP (about 100k USD) is considered a very good salary in the UK for mid-level/senior people. That's not even new grad levels in the states...

As a heads up it doesn't look like there is any sort of job posting link on the site.

Sure I've sent you a follow up email. Thanks for the response.

I was also a big fan of the old support system that was accessible straight from the interface and not a third party tool. Granted the few times I had to contact support at that point I received very fast and thorough responses so this experience may have made me biased.

DO support has gone majorly downhill (I have a comment about this that goes into it) in the last year or two with more issues cropping up here and there on hypervisors that go unattended for absolutely no reason. I still haven't found a good alternative but I'm looking.

I'm actually looking at migrating away from Digital Ocean. I had a recent incident that took over a week to solve with 48+ hours between tickets where support wasn't even reading the previous ticket. They claimed that someone looked at the hypervisor the system was on and found nothing, but as soon as that occurred my issue was resolved. One of the worst support experiences I've ever had where I was asked for the same information multiple times after waiting days to hear back, and was even asked if my issue started during an outage that was days after my initial report. Completely unacceptable.

I had a similar experience recently with a question I had answered years ago. A highly ranked user came in, complained in a comment about the fact I linked to documentation instead of copy pasting the docs into the answer then downvoted me causing a loss of 2 karma. I reported the comment because it was ridiculous this person is scanning questions which are years old to try and find things to nitpick.

I'm not sure if they removed the comment or if some other moderator did, but it was gone within a couple of days. My karma loss remained. It's absolutely ridiculous over there sometimes and these sorts of interactions are one of the big reasons I stopped participating.

I will continue doing so in the monthly hiring thread when I have the time.

I've had multiple comments detached (as you can see by my comment history) for calling out companies that suck to apply for in the monthly hiring threads. Either the people who posted must have complained so they removed it, or HN doesn't want people to know some companies suck to deal with when it comes to hiring process.

I never received a response from PIA after contacting them at the email noted here. Other people have posted similar statements in previous monthly threads as well.

Saying that you 'tolerate' remote workers is a pretty big red flag. You may wish to change the wording or just eliminate remote as an option if all you'll do is tolerate them.

I've been seeing a lot of this lately with many companies near the great lakes, just awful salaries that even with a lower cost of living would be a net loss, it's a real bummer.