HNHacker News
TopNewBestAskShowJobs

sacrosanct

1,305 karma · joined June 28, 2022

submissionscomments
sacrosanct··on Svelte Native
> The only major hurdle to this is Apple continuing to treat web apps as second class citizens on iOS

If you add a site to iOS' homescreen it automatically becomes a PWA. The best example I found of a site fully leveraging this feature is Cryptee[0]. They talk about the PWA thing here: https://crypt.ee/download

[0] https://crypt.ee/

sacrosanct··on Ask HN: Why are most web services "spoofing" the From email header?
If the shop is doing DMARC[0] & DKIM[1] this is a non-issue

[0] https://en.m.wikipedia.org/wiki/DMARC

[1] https://en.m.wikipedia.org/wiki/DomainKeys_Identified_Mail

sacrosanct··on Exploring the Challenges of Open-Source Sustainability – Your Thoughts?
> Sustainability and Monetization: How can open-source projects develop sustainable business models without compromising their core principles?

GitHub has its Sponsors program[0]. You can still contribute code safe in the knowledge that you can bring home the bacon if you've managed to get people to sponsor you.

[0] https://github.com/sponsors

> Dependency and Corporate Support: Given the heavy reliance of big corporations on OSS

Corporations depend on OSS, but they should compensate the developers if the project is a cornerstone of their service/product. This does happen, and I've seen it happen.

> Licensing Challenges: How effective do you find the current open-source licensing models, especially in terms of commercial use? Are there ways these licenses can be adapted to better protect and benefit OSS developers?

It's important to distinguish between 'Gratis' software (free as in free beer) and free, as in 'free speech'. If it's the latter, as in the FLOSS model, developers getting compensated is often a bonus and not the main goal.

> Community Engagement: What strategies have you found effective in building and maintaining a strong, active community around an OSS project?

Do cool stuff, tell people about it. It's that simple. Social media is one way. Another is through word of mouth. If the project fills a gap in the market, people will notice.

> Comparison with Proprietary Software: In your experience, what are the key advantages and disadvantages of OSS versus proprietary software, particularly regarding innovation, quality, and user engagement?

Proprietary software is often closed source and doesn't have community eyeballs on it, so as opposed to FLOSS, it's inferior, but still often needed (I use Windows for example, because I have to, but default to Linux for everything else).

sacrosanct··on NSA is buying Americans' internet browsing records without a warrant
NSA doing NSA things. All legal and kosher due to the Third Party Doctrine[0]

[0] https://en.m.wikipedia.org/wiki/Third-party_doctrine

> Netflow data can be used to track network activity traffic through VPNs

Does this mean so called non-logging VPNs are handing over data? That seems unlikely depending on the provider. Mullvad seems pretty solid and seems like they don't sell 'Netflow' data. But I could be wrong?

sacrosanct··on Ask HN: How do you feel about AI generated voiceover?
I skip and swipe up anytime such an obviously AI generated voice starts talking. I've trained the algorithm to stop showing them.
sacrosanct··on Ask HN: Is it dangerous to connect a PC that's been off for 10yrs to Internet?
XP has Internet Explorer and I tried this in a VM once, and 99% of sites didn't load because they used TLS 1.2/1.3 which IE doesn't have functionality for. But plaintext HTTP sites loaded fine.

I wouldn't use XP as a daily driver if that's what you intend. There's so many exploits that have piled up over the years that getting pwned is inevitable at some stage and the attack surface of XP is massive.

sacrosanct··on RSA is deceptively simple and fun
As a rule of thumb, pay attention to crypto parameters and cipher 'suites'. Use the highest SHA, use seven word diceware phrases for the password, ensure the latest TLS version is used, use a reputable & robust RNG, etc
sacrosanct··on [dead]
Your periodical reminder that some human will write the last period in history and we all turn back to space dust.
sacrosanct··on Ask HN: What are the effective ways to improve communication skills?
A fool is known by their words, a wise person, by their their silence. In other words, listen more, ask better questions. By all means, speak, but you will learn more simply by hearing other's point of view.
sacrosanct··on My government is surveilling all its citizens via ISPs. How do they do that?
> Decrypt https traffic?

HTTPS/TLS prevents MITM attacks, but rogue certificates can be installed to sniff the plaintext, but that's exceedingly rare and hard to do. IANAC (I am not a cryptographer) and that's the best 2 cents I can manage, sorry. But things like DNS can be sniffed off the wire easily, and anything in plaintext HTTP is fair game.

sacrosanct··on Ask HN: Career Advice for a Generalist?
Generalist vs specialist is sometimes a false dichotomy. You can be both! What gives specialists an advantage is their hyperfocus on one area, but to the detriment of other areas, so there is always that caveat.

Generalists can spread themselves thinly across disciplines and never hyperfocus, so again: another caveat. It depends on your situation whether you want to specialize or generalize, and this can be a case-by-case basis.

sacrosanct··on Ask HN: What side project was the most successful that you started?
Saw a few of these 'Local LLM' apps take off. Rather than relying on a cloud-based API, the whole thing is bundled in a 250MB app and works offline.
sacrosanct··on The Cult of Mac
> the cult persona seems to be a somewhat dated analysis

iPhones and other iDevices are more accessible. It used to be a certain cohort could afford such devices and the rest had to buy 'Peasant Android' devices. But you can get iPhones refurbished in good condition from many vendors, and at a good discount. Caveat: they're not brand new, but they are very close.

sacrosanct··on Ask HN: Would you use a .dev domain for a personal email address?
People won't remember .dev

If you want a catchy e-mail use .com which people will remember. The only caveat is finding a short .com (All the good ones are taken, although Derek Sivers wrote a program to hunt for short domains so you could go that route)

https://sive.rs/com

sacrosanct··on Ask HN: What's the Average Lifespan of a Website?
If you keep the domain renewed after the ICANN 10 year window, you're good. Over the years, and I'm online 20 years now, people just don't renew domains for multiple reasons. (e.g They diverted energy elsewhere or they have multiple domains to renew and can't afford to renew a particular domain, or the project had its moment in the sun and needs to die).
sacrosanct··on Ask HN: Why was HN down for the past 6 hours?
Today, yes it hanged whilst trying to load. And there's no Big News I can think of that would slow HN to a crawl (AKA cascade effect). I checked Twitter for 'hackernews down' and a few people reported outages, but not too many tweets like in some of the famous outages where HN was offline for 24 hours and Twitter was buzzing with people complaining.
sacrosanct··on Linkhut: A Social Bookmarking Site
Wallabag[0] is useful too if you want a self-hosted bookmarking solution. I'm with Pinboard too, but regularly export my bookmarks so I have a backed up local copy of recent bookmarks I've added to Pinboard.

[0] https://github.com/wallabag/wallabag

[0] https://wallabag.org/

sacrosanct··on Irish State announce plan to build a porn preference register for most of the EU
The tech savvy will just use VPNs to get around geo-politics such as this, at least a VPN should work in theory to get around verification measures by the Irish State. This advice has been echoed countless times when this issue crops up.

One concern is that there are tech-illiterate people who fall victim of such an ID system and don't use a VPN to bypass it. I don't have numbers/stats, but I imagine a good chunk won't be using VPNs.

There is also another concern I have; that this verification database could be breached and people's 'preferences' are exposed. The only way to avoid such a breach is to not collect such data in the first place.

sacrosanct··on Ask HN: What you paying for .com renewal and with whom
NJAL.LA for privacy reasons. EUR 15.00 per year which I don't mind.
sacrosanct··on Besides ChatGPT, what other AI products do you use on a daily basis?
Do recommendation algorithms count as AI? Because there's a lot of that in Instagram Reels/TikTok, which I use daily.
sacrosanct··on Ask HN: What is your most wanted HN feature?
The ability to downvote stuff in /newest, but flagging serves that purpose in a way.
sacrosanct··on Everyone on Earth is your cousin (2014)
Relevant: https://en.m.wikipedia.org/wiki/Six_degrees_of_separation

> Six degrees of separation is the idea that all people are six or fewer social connections away from each other. As a result, a chain of "friend of a friend" statements can be made to connect any two people in a maximum of six steps. It is also known as the six handshakes rule.[1]

I know it doesn't mean we're all 'blood brothers' but it's useful when discussing the 'small world' phenomenon.

sacrosanct··on Ask HN: What changes to X/Twitter have you noticed in the last year?
Most of the automated bot accounts shut down because the API is now insanely expensive. The bots that are still working have deeper pockets than the rest and can afford to still operate. I miss the bots that can no longer operate. I don't mean troll-farm disinfo armies, I mean the humorous bots done for fun.
sacrosanct··on Evernote will restrict free users to 50 notes starting December 4
I've been using Standard Notes'[0] free tier for a while now without issues. Far superior to Evernote. And apparently EN uses your data for machine learning so they can monetize their free users. Standard operating procedure, when your data is en clair. Can't monetize E2EE data like with Standard Notes.

[0] https://standardnotes.com/

sacrosanct··on Ask HN: How would you learn webdev if you had to start over today?
- Learn best practice material.

- Search GitHub for projects other people have already done so you're not re-inventing the wheel (unless you want to learn how the wheel is made and that excites you).

- Build in business logic from the outset if you must. Learn the Stripe API. Don't tack on business logic later when your project becomes hyper-successful and you're scrambling to monetize.

- ChatGPT is just a guide. It will not spoonfeed you an entire SaaS Enterprise just by asking it to, there has to be a human in the loop with ChatGPT.

- Don't learn frameworks first, and then learn fundamentals. Start with vanilla JS, CSS & HTML, then choose a framework that doesn't insult your soul.

sacrosanct··on Ask HN: ADHD is ruining my life. Please help
Just recently posted: https://www.ledger.com/blog/hacking-adhd-strategies-for-the-...

Comments: https://news.ycombinator.com/item?id=38274782

sacrosanct··on Ask HN: Better Names for GPT / GPTs
Jeeves / Ask. Oh wait[0]

[0] https://en.m.wikipedia.org/wiki/Ask.com

sacrosanct··on Google dragged to UK watchdog over Chrome's upcoming IP address cloaking
> The Movement for an Open Web (MOW), an organization that has lobbied against Google's Privacy Sandbox initiative by claiming it's harmful to rival internet advertising businesses

They have much more to be annoyed at. VPN companies, The Tor Project, AD blockers, etc

I use the Google One VPN[0] to cloak my real IP, but only sparingly. For most of my Internet surfing I use a two hop VPN setup. One VPN router with kill switch mode, and then I connect to another VPN service on top of that, a sort of fake Tor / private relay setup.

I don't funnel all my traffic into Google One's VPN. I like to compartment and not put all my eggs in one basket. Looks like I'll be doing the same when this new Google-owned IP cloaking feature ships.

[0] https://one.google.com/about/vpn

sacrosanct··on LockBit says it's leaked 50GB of stolen Boeing files after ransom fails to land
> It's just a matter of time before it goes online, ransom or not

Sometimes the groups want a good reputation for not disclosing stuff if the ransom was paid. They earn that reputation over time.

sacrosanct··on Ask HN: Raid Alternatives?
ZFS
Page 1 of 6Next →