News for hackers. Stuff that matters.

InGoodFaith

For Composer 2 they got called out on it and only acknowledged after enough criticism.

Here is a link to Lee Robinson saying they will do better to be more transparent with future releases.

> Agree with the feedback we should have mentioned the base up front, we will do that for the next model!

https://x.com/leerob/status/2035073197561745579

Re:Claudia – Desktop companion for Claude code on Sunday August 17, 2025 @07:11PM (#44935749)
didn't the underlying API they built upon ramp up their pricing and effectively price them out?

like a precursor to reddit's own API pricing changes that made it hard for 3rd party clients to compete.

The saving grace with these API wrappers is that local models being a thing can still let them hedge against the underlying AI labs eating up their stack.

Re:eslint-config-prettier npm package compromised on Saturday July 19, 2025 @09:10AM (#44615210)
It appears the individual was unable to distinguish a display name from the actual email address (common phishing tactic of having something like [email protected] as the email display name while the actual email address is a random throwaway). [1]

Good reminder to use a password manager as well (as it would also catch the 'npnjs' typo squatted domain too).

Similar incident happened to the HIBP guy who mentioned ignoring the password manager safeguards due to being half asleep while on the plane.

Also keep in mind you can disable install scripts in npm from running (if you happen to not do your development in an isolated environment) via configuring your .npmrc with

> ignore-scripts=true

Stay safe out there

1: https://x.com/JounQin/status/1946297662069993690

> 2. They support premium domains, so you can be struck by lightning and randomly have the price of your domains dramatically jacked up (had to drop a domain due to this).

Do you have an example of this as it is against ICANN's rules IIRC.

The only instances I have seen about this were the posts here on HN when someone didn't read the registration price being at a discount compared to the renewal price thereafter.

If there is of course a legitimate instance of reclassification into a premium domain after the fact, you have a big case on your hands.

Re:Lichess on Scala3 – Help Needed on Monday December 05, 2022 @05:20PM (#33872721)
You might be interested in Linen to make your discord (and slack) searchable outside of the walled garden (can also use to archive too).

https://github.com/linen-dev/linen.dev

https://news.ycombinator.com/item?id=31494908

> An eggcorn is a soundalike though, isn't it?

Not necessarily, you might be thinking of malapropisms but yes probably a closer word would be the general term: protologism.

Another commenter added some useful info on the evocative alteration of metaphors [2]

1: https://en.wikipedia.org/wiki/Malapropism

2: https://news.ycombinator.com/item?id=33757097

What you are describing is also known as an eggcorn.

https://en.wikipedia.org/wiki/Eggcorn

If the worst is a public mea culpa and following the agreements you should've done in the first place, that barely seems like a deterrent to infringe the license.

Might as well create a crawler bot on github and slurp up all the GPL/AGPL for your new AI-coding startup, iterate fast, make profit, then pay a pittance in legal fees and a small "We're sorry".

Re:Dolt – A SQL Database That Works Like Git on Wednesday October 12, 2022 @05:57AM (#33174820)
> I also see nothing to make this name make sense

Last time this was brought up it was just referencing the fact both "git" and "dolt" refer to variations of calling someone a dimwit.

It's like if you come across a project called "dunce" that is "git for X" or whatever tagline you imagine.

For context this discussion from 2 years ago probably might be worth reading[1]

1: https://news.ycombinator.com/item?id=22731928

Re:Why JWTs Suck as Session Tokens (2017) on Monday October 03, 2022 @06:02AM (#33065433)
I am in agreement with what you are saying.

> and if the spirit of HN is to judge without facts - then I apologize.

Although snarky, I am sure you would appreciate if HN doesn't devolve into sensationalist titles such as: "PHP sucks" ad nauseam since there are plenty of social media networks that get flooded with titles like that already.

Just as we (the audience) in good faith read and judge based off of the merits of the article's content - one could also argue that an author should treat the audience with similar courtesy of not needing to:

> misleading (purposely, because it attracts interest)

Not saying this applies to this article since in my subjective view I didn't find the title misleading or egregious.

You might also be interested in seeing the recent edit history of titles on HN

https://hackernewstitles.netlify.app/

Re:Why JWTs Suck as Session Tokens (2017) on Monday October 03, 2022 @04:24AM (#33064843)
> The titles are misleading (purposely, because it attracts interest)

I am neutral to this conversation but thought you might not want to justify this point as it is against the spirit of HN. Specifically in the guidelines:

> Otherwise please use the original title, unless it is misleading or linkbait; don't editorialize.

Which would give the submitter permission to change the title to something more substantive.

Cloudflare's domain management has sadly also had some questionable actions/decisions.

0: https://news.ycombinator.com/item?id=31573854

1: https://community.cloudflare.com/t/domain-not-working-after-...

While I use and enjoy their other services, I would advice taking this incident into consideration about their registrar services that "prevents transfer-out of domains, sets to 'pendingdelete'"

https://news.ycombinator.com/item?id=31576353

Re:Snap launches its first drone on Thursday April 28, 2022 @03:46PM (#31197326)
I'm not the person you replied to but just dropping this here for others interested:

There are some 'open-back' and 'open-ear' headphones that let you hear your environment passively.

Others that have more active environment passthrough such as Ambient Sound from Samsung, also exist.

This might be a useful gift for a cyclist or jogger that needs situational awareness.

Re:Introducing Media CDN on Monday April 25, 2022 @07:25PM (#31162170)
For anyone else curious on pricing, saving you a click

> Please contact sales for pricing details.

It is in the preview stage so perhaps that's why.

Re:Twitter is adding an edit button on Wednesday April 06, 2022 @12:33PM (#30934237)
Twitter says it's been working on it since last year.

But as for the whole "3 days before he bought the shares" - He's been accumulating for far longer than that and even the CEO of Twitter mentioned they were in talks with Elon about being on the board "in recent weeks" [1]

With that said, yes it may be manufactured coincidence mostly driven by the new CEO change and not by Elon buying shares

1: https://www.cnbc.com/2022/04/05/elon-musk-spent-2point64-bil...

> I really really hope that some backup of the metadata was done before the delete button was pushed

Perhaps some folks over at /r/DataHoarder [0] might have something?

Might want to start with their sister sub /r/DHExchange [1] depending on how the main mods would view this situation.

0: https://www.reddit.com/r/DataHoarder/

1: https://www.reddit.com/r/DHExchange/

Re:Using email wrong on Sunday March 06, 2022 @02:49PM (#30580567)
Nowadays when signing up for valid services, some don't let you opt-out of the marketing emails until much later in the flow; the worst offenders ignore your opting out options by including a new category of marketing-type emails every couple of months that you have to go in and untick.

Wouldn't that be classified as spammy ads from a valid message (when done using dark patterns with no one-click unsubscribe option)?

Re:Trapped in Silicon Valley’s hidden caste system on Wednesday March 02, 2022 @10:08AM (#30528177)
Isn't the fact that they immigrated likely bias towards the higher skilled echelon that managed to go through the visa process?

When you say "outperform most domestic US groups", are you normalising for the same skillset and education levels?

Perhaps a source to accompany your statement will help shed some light.

Re:Everything you need to know about monorepos on Wednesday February 23, 2022 @05:46AM (#30439779)
You can scroll directly to the bottom and see the final comparison table.

Here's a screenshot for your convenience [1]

I agree with you that I prefer to get straight to the point, but this pet-peeve tangent doesn't seem to be a productive discussion of the actual merits of the tooling.

1: https://i.imgur.com/8Vzbh3c.png

Re:App store bill sails out of Senate Judiciary Committee on Thursday February 03, 2022 @08:40PM (#30201737)
It's great that you have the choice to disallow notifications.

Conversely, it will also be great for any possible sideloaded app to also have the system give the user that same choice.

Now if one side starts to impose their choices on the other is when we start having a problem.

Re:Did I just lose half a million dollars? on Sunday January 30, 2022 @09:40AM (#30137559)
I always appreciate grammatical corrections, and I know non-native speakers that do too.

A friendly correction of a non-standard word does not deserve derision.

Re:LastPass appears to be holding users' passwords hostage on Tuesday January 11, 2022 @02:28PM (#29896514)
The company vision can change even without acquisition.

Having an open source and self-hsotable alternative (that also has a SaaS equivalent if you so choose) seems to be the more prudent choice.

The confusion stems from how you initially worded it as

> GPL licensing exception

If you instead replaced "exception" with a warranty disclaimer then your intent would've been more clear in your original post.

Some lines of work might not need a meta understanding of prose or poetry - but it can be useful to build up a charismatic (almost cult-like) following if you want to play to the masses.

Alliteration especially when paired with "The rule of 3" is an easy example of a technique you can use to disseminate a memorable message to most people.

Is it useful when writing code? Probably not, but it can help your company when you do your fundraising or pitch to investors.

By any chance did you have an initial picture without your face?

Over recent years Facebook has been clamping down with those same sort of messages (sometimes it will appear after a few days or weeks for people I know) and for better or worse the main fix was having a picture with a face on a brand new account.

Older accounts don't have this problem though.

It's a similar tactic to how in recent years twitter lets you sign up without a mobile number but after some time you will suspiciously get your account locked until you "verify" with a mobile number.

Re:I started a paper website business on Tuesday December 14, 2021 @02:00PM (#29555814)
Wouldn't also be HN without the misinterpretation of BrandonM's response.

Here is dang's comment about that topic/meme [1]

1: https://news.ycombinator.com/item?id=29178442

Re:Debunking Cloudflare’s recent performance tests on Monday December 06, 2021 @06:55PM (#29467415)
They stated in the blogpost that they only performed the benchmarks against their own services

> So instead, we ran the same tests (echoing headers and measuring TTFB via Catchpoint) against our own platform

Re:Debunking Cloudflare’s recent performance tests on Monday December 06, 2021 @06:19PM (#29467045)
Asking before benchmarking seems to be a sure way to poison your results.

Who's to say that the performance of the services won't coincidentally perform better after you've given your request to test?

I am sure they might mention some legalese of "avoiding putting arduous strain on the services which may cause disruption to our other users" as a justification, but that PR speak won't fly with me since there is a separate section that already references that.

I say this as a big fan of Cloudflare and I am sure they don't need to use such underhanded tactics to make their services look good.

Slight tangent: I always found it to be an added plus/bonus to a tool if it can survive being scrutinized by well-formed and long-lasting groups.

What would be my preferred VPN/Mail/Payment/Storage/Encryption tools?

The one that has been scrutinized by TLA to catch these groups. On a long enough time scale, it can expose if they truly are "no logs", "fully encrypted", "privacy-conscious" or if it's just marketing buzzwords when they actually face a warrant.

Older »