teleclimber

And the "lucky ten thousand" is a reference to https://xkcd.com/1053/

Note there was a W3C community group that explored the "HTTPS on local networks" question. It's closed now but they wrote use cases and proposals:

https://www.w3.org/community/httpslocal/ https://httpslocal.github.io/proposals/ https://httpslocal.github.io/usecases/

I wish some of this work would continue as well.

I would interested in hearing examples of software that is a breeze to self host and terrible to self host. And most importantly, why? What can software devs do to make something a breeze? And what should they avoid? Thanks.

I was wondering as well so I looked it up real quick. Here are some relevant issues:

- https://github.com/w3c/ServiceWorker/issues/745 - https://github.com/w3c/geolocation-sensor/issues/22

> I'm sure there are commercial (not even paid necessarily) apps that do all this, but this one is used only by us and it's built to perfectly interact with our lives

There is another factor you may not be aware of: shopping apps are juicy targets for acquisition by marketing/data mining company. I mean, there is no clearer indication of what you want to buy than what you put in your shopping list, so it's perfect source of data to mine.

Out of milk is such an example: it was a good app with 5 million users, then it got sold. Users became the subjects of data mining, or their account got deleted (if in Europe). Fun!

https://www.prnewswire.com/news-releases/inmarket-acquires-o...

https://twitter.com/JamesLiamCook/status/1407370148349198341

I'm hoping PWAs continue to get better so that app stores aren't the only way of having an app-like experience. App stores just aren't designed for this kind of use case, and hurdles like "We're dropping your app bc you only have 4 users"* take the joy out of home-coding.

* fictional quote but it wouldn't shock me if it became real

Agreed. An read only API for my upvoted stories and comments would be great so I can preserve this data and use it outside of HN.

> The isolation aspect was interesting in the days before Firecracker...

I don't think Firecracker's existence makes WASM's isolation uninteresting. First, I think you are looking at way more resources running a full VM (even a "micro" VM) compared to a WASM runtime. I think startup times are not comparable either, so if that matters you'll find WASM to be the way to go.

Second, WASM's capability-based security model is wonderful for giving the untrusted code the things it needs to work with. With a VM, you have to stitch together with shared directories, virtual eth bridges or, linux capabilities, maybe some cgroups, and who knows what else. (Granted you may need to do some of that with WASM too, but less so).

Are you willing to talk a bit about how Deno Deploy works internally? I think you have an internal build of Deno that can run multiple isolates (unlike the CLI, which basically runs one). How do you limit the the blast radius in case of a vuln in Deno?

Kenton Varda did a pretty great writeup on CF worker security [0]. Would love to see Deno Deploy do something similar.

[0] https://blog.cloudflare.com/mitigating-spectre-and-other-sec...

Issue 3335. I know. I'm watching it. :))

The "any language" advantage of WASM is theoretical. Each language is at a different level of support of WASM, libraries aren't all caught up and at the same point for all languages, etc...

I love the promise of WASM, but every time I look at it I get lost in a sea of acronyms, and my optimistic ideas of using language X with library Y on runtime Z are dashed because there is some missing piece somewhere.

If anything, the "any language" thing creates a giant matrix of potential pitfalls for the programmer.

In comparison, the combination of JS/TS, the browser API and a solid std lib looks pretty good for some problems.

Edge functions are typically run intermittently, with their runtime stopped to free up resources between runs. Therefore a big factor is startup and shutdown speed. Containers are pretty bad there. Deno is better, and WASM is unbeatable, especially with things like Wizer[0].

[0]https://github.com/bytecodealliance/wizer

Bmw has had a bunch of them:

https://abcnews.go.com/US/mysterious-bmw-fires-continue-call...

It's not just technical and marketing, it's legal too. And this article references emails from tesla legal team. So legal is telling dmv that it's L2 so it doesn't have to get permits, but that doesn't mean the tech isn't destined to be L3 when it's fully developed and they are ready to submit themselves to regulatory scrutiny.

> ...and AGPL will rightfully worry them.

Not deeply familiar with AGPL. Why is it bad for contributors?

Dang. It's really hard to put something online that lets anybody be creative without someone coming in, using to do bad things, and getting the whole site blocked by google.

I guess nothing is going to change too since this conveniently serves to entrench the big platforms.

> I forgot what made github.com switch to github.io. Something similar but totally separate.

Yep, here's the link that explains it all:

https://github.blog/2013-04-09-yummy-cookies-across-domains/

> For that you'd have to open up network and file access pretty much right off the bat.

For the network access I have an issue[0] open that asks to separate permissions to listen on the network from permission to dial. Also, along the way I want to have the ability to let the OS pick the port as an option.

Permissions are meant to work by whitelisting. So you wouldn't open access to the whole system just to talk to your DB, or to operate on some files.

[0] https://github.com/denoland/deno/issues/2705

Nice use of grafana.

I wish it would show the number of tests. That metric is so important to understand why the number of cases move sometimes. I'm not sure if the original data source[1] includes this or not.

https://github.com/CSSEGISandData/COVID-19

My reaction exactly. A more correct headline would be:

"Patient 0 spread virus prior to Ebola-style lockdown"

But I suppose that doesn't play into the reader's fears as much and therefore may not draw as many clicks.

FYI on this site linked from op the image for "create a table" is the same as the image for "create a database".

https://simplesql.redbeardlab.com/

Question: how do you deal with blobs in your json request/response? (sorry I haven't had the time to play with the API to see)

I used open shot while on vacation recently and it was a pleasant experience. At the very least it was among the better open source productivity apps that I tried recently.

By this I mean it has a complete installer for my os, it installed without a hitch, the UI is "normal" and intuitive enough, it handled my dpi just fine, and the functionality is solid.

The only issue is that it was a bit sluggish at times.

Got my video done and will surely drop a donation if I adopt it as my go to video editor.

I'm not sure it's so limited.

First this is a great space for open source apps.

Second I think people in general are becoming more aware that free online stuff usually comes with a hidden cost to privacy.

Third there is a whole swath of online services that can't thrive in current situation: services that are too uninteresting (from a data harvesting pov or no tie-in to larger offering) to run for free, and not valuable enough for the user to pay $7/month for, and not worth running as a SaaS at a lower price. Yet if a user had a cloud OS with metered resources, they could run such an app for a few bucks a year (plus a few bucks donation/paid to the app dev). And they'd never have to worry about it shutting down because the dev wants to do something else with their lives.

> More moderation.

Agreed. However moderation power is something that needs to be considered carefully. I think moderation power should be distributed broadly to the users who have shown good stewardship of the community via their participation, and not to a few chosen individuals.

> Higher barriers of entry.

Yes this is the key. It should take work to occupy mind-space. Your first comments should be shown to very few people, probably experienced users in the community, and their approval or disapproval will determine how much visibility your next comments get.

Here is a 4+ hour class recording on the topic. I started going through it and it has helped me understand ot better.

https://youtu.be/xovq8MXVsZM

The reason for a good camera is not to take artistic photography (although you can do that too and many do).

It's because people use that camera to record memories that they cherish. Just ask any new parent what happens to their phone's camera roll once number 1 pops out. Or ask young people to show you where they went on their last vacation: many times it'll be a bunch of cool shots taken on a phone.

These memories are priceless and having to record them with a device that is open but has the photo quality of a 5 year old device is not an attractive trade-off.

If linux phones are going to be a thing (pinephone, librem) they'll need great cameras and excellent image processing software t be even somewhat competitive with Google Pixels and iPhones and Samsungs.

Given how hard other manufacturers try and fail to make equally good cameras, it's going to be a steep climb for the open source community too.

So far I am not seeing much work being done in that space. Maybe this is a start?

I want an open non-spying phone but it's going to be hard to let go of the amazing camera in my pocket now (Pixel 3a).

> To be fair, we didn't try to go around selling businesses on "decentralization idealism"; that would obviously be silly.

Sorry, my comment should have been more clear. I wasn't referring to Sandstorm or you in my comment and I didn't mean to accuse of you of such silliness. It was more a reaction to the poster above who said they were targeting "small business" without specifying which kind of small business and what they are solving for them.

Anyways, yes, there are many reasons for businesses (even small ones) to self-host. Other reasons include the ability to customize (you can't customize a saas, unless you're a gigantic customer), and longevity (Saas come and go, and switching costs can be high).

I asked Kenton V about the reasons for the failure of the business. You might be interested in his reply[0].

My 0.02: I'd interview your target market to find out if this is a pain point they recognize. Many of these projects are started out of decentralization idealism (for good reason, and it's not a bad thing), but as a business you do not want to be left having to educate your potential buyers about why they need this.

[0] https://twitter.com/teleclimber/status/1173345736013910017

Interesting concepts and ideas. There is definitely a lot of room to simplify frontend frameworks and I'm glad to see work in this direction.

In the composition sample code [1] I see two counters in the code, but only one shows up in the rendered view. Am I missing something? I would have expected two independent counters.

[1] https://stackblitz.com/edit/solenya-samples?file=app%2Fcompo...