parhamn

> I already do this.

Hows your ability to get an enterprise to mandate their 5000 employees to use it? That's what most of these types of rounds are about.

Expalin how you detect a branched/flaged sendKey (or whatever it would be called) call in the compiled WhatsApp iOS app?

It could be interleaved in any of the many analytics tools in there too.

You have to trust the client in E2E encryption. There's literally no way around that. You need to trust the client's OS (and in some cases, other processes) too.

Their status pages were all green when we dealt with this.

The case is made. That's awesome.

I normally share the sentiments of the article. But I am also curious, if the goal was:

- Implement the radio as the designer sent in the figma file (e.g. something like the radix demo one they're commenting on: https://www.radix-ui.com/primitives/docs/components/radio-gr...)

- Make sure it looks the exact same across all browsers

How doable is it with vanilla css? The example they gave was rendered to a black/white circle, most teams wouldn't ship that.

> Added back 5ms sleep on Windows 7/8 in (*Process).Wait (reverted f0894a0)

This was interesting!

Off topic note: I read the website and a few pages of the docs and it's unclear to me for what I can use LightPanda safely. Like say I wanted to swap my it as my engine on playwright, what are the tradeoffs? What things are implemented, what isnt?

Given certificate issuance basically ended up being "do you control the DNS for this domain", I feel like all of it could've been so much simpler if it was designed like that from day one.

While I love Let's Encrypt it feels so silly to use a third party to verify I can generate a Cloudflare API key (even .well-known is effectively "can you run a webserver on said dns entry").

Edit: TIL about https://en.wikipedia.org/wiki/DNS-based_Authentication_of_Na...

I'm surprised that's not illegal, and I think states will pass laws to fix this.

In my area, an &Pizza is $12 on their App, $19 on Doordash (delivery or pickup). A Chipotle burrito is $9.50 vs $12.35 on doordash delivery (plus every addon is a $1 more expensive).

You can easily pay an extra $4/$5 (30%) per item you order on there.

> SupportsIndex makes it so that, if you have a value that's not a Python int but can be implicitly and losslessly converted to one

Just to be clear for folks who care more about the general python around this: any class that has a method __index__ that returns an int can be used as an index for array access. e.g:

    class FetchIndex:
        def __index__(self):
            return int(requests.get("https://indextolookup.com").text.strip())
            

    a = ["no", "lol", "wow"]
    print(a[FetchIndex()])

The builtin `int` also has a __index__ method that returns itself.

Dunders are part of what makes typing in python so hard.

Interestingly besides typescript, javascript in 2025 is still super fragmeneted but by a bunch of well-polished tools that all do approximately the same thing. esbuild/vite(rollup)/trubopack(swc), prettier/biome/oxc, npm/bun/pnpm/yarn, bun/node/deno/worker-runtimes

Whats the expected error in the example you gave? That x can't be none because it was received as a str?

For a large subset of packages (like the browser ones), as a layman, it seems feasible to do static analysis for:

1) fetch calls

2) obfuscation (like sketchy lookup tables and hex string construction)

Like for (1) the hostname should be statically resolvable and immutable. So you can list the hostnames it fetches from as well.

Is this feasible or am I underestimating the difficulty? Javascript seems to have no shortage of static analysis tools.

What!?!? This is a thing? How did I not know about this. Thanks for the share!

> who knows what demands AI will have at that point

This is true for any investment pretty much.

> That's how my children's iPads are too

Hah! Says something about my self control!

Yeah it's usually trouble once a week. I recently needed to pay for parking using a QR code had to finish it in the 1 minute I had. Another appointment asked me to fill some online form and their reaction when I said "my phone is blocked from the internet" was funny. Turns out they still have paper forms when needed.

I do this too, and have them set the recover apple id to their own. Been averaging ~1.2 hours per day screentime the last few months (mostly messaging apps).

Basically in "downtime" mode all the time with a few "Always allowed" app. One thing is, you're phone (and it's browser) is pretty damn useless. Overtime you realize that a lot of things you need to lookup don't need to be looked up, etc but it can be frustrating at first.

Agreed, the pointer or "<field>_empty: bool" patterns are annoying. Point still stands though, you always get the structure you ask for.

> Try to access it and TypeScript yells at you. No runtime validation needed.

I was recently thinking about type safety and validation strategies are particularly thorny in languages where the typings are just annotations. E.g. the Typescript/Zod or Python/Pydantic universes. Especially in IO cases where the data doesn't originate in the same type system.

In a language like Go (just an example, not endorsing) if you parse something into say a struct you know worst case you're getting that struct with all the fields set to zero, and you just have to handle the zero values. In typescript-likes you can get a totally different structure and run into all sorts of errors.

All that is to say, the runtime validation is always somewhere (perhaps in the library, as they often are?), and the feature here isn't no runtime validation but typed cli arguments. Which is cool and great.

pair this with needing async in depth and that's exactly it. The whole network stack needs to be async-first and all the popular networking libraries need to have been built on that. Many of those libraries are already C-extension based and don't jibe well with the newer python parts in any way.

Do you often ask questions that lead you to a link? I use LLMs heavily but still use google when looking for a link.

I've wondered how this works (and who wins).

Do we know how big the "batch processing" market is? I know the major providers offer 50%+ off for off-peak processing.

I assumed it was to slightly correct this problem and on the surface it seems like it'd be useful for big data places where process-eventually is enough, e.g. it could be a relatively big market. Is it?

With regards to llm injection, we sorta need the cat and mouse games to play out a bit, no? I have my concerns but I'm not ready to throw out the baby with the bathwater. You could never release an OS if "no zero days" was a requirement. Every piece of software we use has and will have its vulnerabilities (see Apple's recent RCE), we play the arms race and things look asymptotically fine.

This seems to be the case in llms too. They're getting better and better (with a lot of research) at avoiding doing the bad things. I don't see why its fundamentally intractable to fence system/user/assistant/tool messages to prevent steering from non-trusted inputs, and building new fences for cases we want the steering.

Why is this piece of software particularly different?

That "just announced" link is really good if you have no idea what this is about: https://blog.cloudflare.com/moq/ (I missed it)

Since cloudflare is already sponsoring it, I do wonder how much of this type of service can be implemented all on cloudflare. Their stack could be great for tile serving.

I just tested 120B from the Groq API on agentic stuff (multi-step function calling, similar to claude code) and it's not that good. Agentic fine-tuning seems key, hopefully someone drops one soon.

Umberto Eco's game library.

Where's the best value & quality for that sort of stuff? It's insane what some sites charge for seemingly simple supplements.

> It wouldnt have gotten 2% finishd

What do you mean by this? I'd assume the process would be very very incremental. One function + accompany tests at a time, verify and continue and keep moving up the tree.

It's an interesting problem because I imagine in the future lots of things will be ported like this.