codebeaker

Why is an article from Jan 2025 being recirculated on HN now?

It's not Europol's role to push for this, and the European commission has suffered setbacks with ChatControl and other measures already since that time with excellent politicians such as Patrick Breyer doing an outstanding job of informing about and advocating for privacy.

- https://www.patrick-breyer.de/en/chat-control-eu-ombudsman-c... [Feb 2025 criticism of the "revolving door" and more context about how this is received] - an excellent resource overall curated by Mr. Breyer about Chat Control, it's advocates, sponsors, the due-process, alternatives and more https://www.patrick-breyer.de/en/posts/chat-control/

Can you say more about (the|your perceived) relationship between SQL and htmx? When looking up HTMX[1] I was surprised to see what looks like a relatively young project with no direct relation obvious to SQL.

[1]: https://htmx.org/

Why do people even reinvent this wheel every few months? Does the <1KB size even matter with modern caches and HTTP2? Does the amount of written lines of code matter when there's modern linters and tooling?

Anyone can build a "reactive" type framework by following tutorials online now, they're super in vogue.

Is my cynicism here warranted, or am I just jaded from 20 years of watching pendulums swing left and right and watching the wheel be reinvented over and over?

I haven't seen the documentary, but my anecdotal experience visiting SF annually since 2016 for work is that it's utterly dire.

I live in northern europe, in Germany, so our bar is high, quality of life is good, but i'm no snowflake prude, around Market Street in San Francisco is simply disgraceful.

I witnessed on every trip passers by being harassed sexually by mentally unstable, or drug abusing people. I was offered to buy a stolen gun in broad daylight a block over from the Twitter building. I saw a gang of people storm a hair salon on Market St. and attack the occupants, spilling out into a 10 person brawl on the street. I've seen people jumping turnstyles and being assaulted by police/security personnel.

It's a really desperate situation.

I'm sure this is a good resource, but even if you learn "modern C++" if there are no strict tools to enforce that you don't use old practices where better modern practices exist, what's the purpose?

Thank you so much for the detailed reply. pixijs looks amazing, and gsap looks pretty approachable!

What technology did you use for the animations? I've a bunch of itches I'd like to scratch that would be improved by having some canvas animated explainers or UI but I never clicked with anything. D3 back in the day.

A rudimentary look in the source code showed a <traffic-simulation/> element but I'm not up to date enough with web standards to guess where to look for that in your JS bundle to guess at the framework!

Postman, since they raised money have really lost their way in my opinion. The tool gets harder to use, with a more cluttered UI in every release. Seemingly random UI decisions make it awful to use.

Glad to see competition in the space, but I doubt that Kreya can claim to be a "postman alternative" unless it has 75% feature parity with Postman, simply because the range of ways people use Postman is so broad, that it's an unverifiable claim.

Unless Kreya can do teams, testing, scripting, sharing, reviews, forking, publishing secret-link API docs, generating example API code out of the docs in Ruby/Python/etc, it certainly isn't an _alternative_ to Postman for my team's use-cases.

As part of a team of maintainers of a popular (declining) gem, shame they don't make a mention of the extremely valid "gem is owned by a team, and anyone may push" model. I regret that the MFA token for many gems such as this may end-up in 1Password or similar, shared, along side the other credentials, rather than on a separate device or similar.

Had you taken the time to open the link, the 2nd paragraph states their capabilities succinctly:

> Parcel CSS has significantly better performance than existing tools, while also improving minification quality. In addition to minification, Parcel CSS handles compiling CSS modules, tree shaking, automatically adding and removing vendor prefixes for your browser targets, and transpiling modern CSS features like nesting, logical properties, level 4 color syntax, and much more.

>Much like Notion and other block editing methods, site content is represented in a JSON format. Each block has a type, for example, a block of Paragraph would have the type "Paragraph" and would be represented by {"type":"paragraph", "text": "Hello World"}, and an image would have the type "Image" represented by {"type":"image", "url":"http://placekitten.com/200/300"}. A page consists of an array of blocks representing the blocks in the page. A page that consists of a Heading, a Paragraph, and an Image would be represented by an array of maps with types “heading”, “paragraph”, and “image” respectively. A block can also have children. For example, a block of type “Container” may have 3 children of “Paragraph” blocks. It’s very similar to the DOM structure.

Why not make a DOM Editor then with virtual components? The JSON<>React serialization doesn't seem to offer much value, unless it's purely mechanical.

I don't mean to detract from the praise your product is getting here, but I'm really curious about those motivations if you have time to answer my query in amongst the other more excited threads, I'd be glad to understand what the trade-off buys you?

> It’s no secret that the Ethereum login will soon become a user standard and passwords will no longer be needed.

That's some serious kool-aid that the author has been drinking.

Nothing worthwhile in the article, users will be asked in a popup to sign a message they don't understand and will click-through anyway, and this hyperbole is applicable anyway only to dApps on Ethereum.

The best alternative to JWTs looked like it was going to be https://tools.ietf.org/id/draft-paragon-paseto-rfc-00.html but the reference implementation and RFC have gone quiet, and these days JWTs are basically OK, the security problems are largely solved by more sensible defaults in most of the common language implementations.

Something like a quine?

https://www.quaxio.com/qrquine/

I'm well aware that there's no absolute standards for this, but I've built a number of CQRS systems, and I didn't ever have idempotency IDs as a core tenant of the system.

What literature, or framework or ecosystem holds this to be a hard-and-fast requirement of CQRS?

Personally I've solved this problem similar to Git, modelling CQRS on top of Merkle trees so your system at least knows if your incoming edit (command|commit) is being applied on HEAD (no changes to the model since the command started) or to HEAD+n (needing to re-run some command validations, and "rebase" the incoming command).

As a European reading this it sounds like the author has some kind of narcissistic take on exactly what kind of immigrants their country has and where they "belong".

Of course what the author wrote, and what I understood needn't align, we're different, with different cultural references, but this stood out to me enough that I stopped reading to revisit HN to find out if anyone else observed the same casual use of what seems like inappropriately dismissive language.

I'm a recently naturalized German citizen, could you say more about how I can use my Perso this way. It seems nobody uses the "smart" features.

So far, it seems like a "mini passport" and an enormous risk to carry around literally everything someone needs to know to rob and/or impersonate me, but yet we're legally required to do so.

I'll have to dig up a citation. But the [] Three Mile Island accident was in part caused by (former) naval nuclear specialists making poor choices based on optimizing for the wrong things.

My memory is fuzzy, but this 37 minute video [2] has a breakdown.

If memory serves, the root causes were faults in the pumps and delays in the 28 baud diagnostic printouts running minutes or hours behind which left everyone operating on bad data.

Part of that was exacerbated by the operators applying techniques used on subs (something about preferring to keep low pressure in some vessel, because high pressure there could sink the boat if containment was lost), the TMI design didn't need this as it could vent/blow-off, and the operators became somewhat fixated on "trying to save the boat" and missed a bunch of procedures.

Of course this doesn't invalidate your point, but even if the reactor designs are really similar, it may be a mistake to cross train anyone.

(disclosure: haven't seen this video in a year or so, and am generally a fan of nuclear power considering the alternatives, but it needs to be done with different, safer reactor designs and probably with new branding because no matter what it's going to take _forever_ to convince anyone to trust nuclear, when they associate that term with the dangerous, BWR designs that were never intended for land)

[1]: https://en.wikipedia.org/wiki/Three_Mile_Island_accident [2]: https://www.youtube.com/watch?v=1xQeXOz0Ncs

Sorry if this is considered off-topic, but I mus thave surely missed something about why AstraZeneca is seemingly the only choice on the vaccine market.

I am German, we developed the Pfizer vaccine, but there is _no_ news about it, it seems like the AZ vaccine is the only option.

Is it a case that Pfizer wasn't viable, wasn't used here, or only made lucrative contracts with other countries, or is it being used, quietly without drama because they are fulfilling their obligations, unlike AZ who seems to be in the news every day.

I celebrated the success of the scientists (Turkish immigrants) who developed it, after the waves and waves of racism in Germany, having immigrants develop a vaccine helped vindicate some of our nation's political decisions to open the doors and borders, that we do in fact benefit, and, sadly now they seem to be invisible again.

I am in no way condoning sports piracy, or any other sort of piracy, but watching sports has become so incredibly difficult using legal means as to be virtually impossible.

I am a foreigner in my country of residence, I only own an Android smart TV (Philips, and with minor side-loading patches, all ads and nonsense are removed).

I used to run a media PC as my TV because local media options are so bad, and I cannot get "cable" because the TV corner, and telekoms corner of my apartment are opposite.

By now, it is impossible to watch MotoGP, or Formula 1 on a SmartTV using any kind of app in either my host, or home language - my choices are streaming with DRM via custom apps on some platforms (Apple iPad, desktop browser with DRM plugins), or to subscribe for €50/month to a nonsense cable package I won't use.

I maintained the desktop PC and fought with VPNs (and, the arms-race of anti-vpn, with DNS tricking from the stream host) to get a stream (Eurosport, if I recall) for a while, but at some point the VPN detection was reliable enough that I couldn't watch UK Eurosports, just EU Eurosport which didn't show the same streams.

In the end, I'm 18+ months out of any kind of motorsports, and completely lost the interest after a lifetime of being enthralled. They are killing these sports for internet audiences.

I visited that landing page a couple of times and had a mental "blip" because it looks exactly like a domain squatter holding page. I don't want to turn the thread into an incitement of your product, but first-impressions count.

You can reach me in private for any constructive feedback you want, but the product seems cool, but that home page is not doing you any favors.

The post solely looks at open source products, and for the author's example case (the Angular repository) it may be valid criticism.

For internal repositories we find this to be really valuable in my company, the odd duplicated branch (when we couldn't get through CI for some reason, but recreating the branch) for whatever reason will be garbage collected, and all those `[CHORE]` branches people quickly hacked up without following our issue tracking process will be GC'ed too, if not handled.

We run our (home made, with GitHub Actions, actually) bot in two stages, 30 days without activity, they get a label and a comment "stale, will be closed in 5 days, remove the stale label to prevent this", and then closure.

This works great, except when people take extended vacation, or happen to switch between teams with WIP branches that are unmerged, but because Git never really loses anything, we've never lost work this way,we just benefit from easier summaries when looking for PRs to review, and having better metrics about mean time to merge, and other factors.

There's quite some research, and even some products (I mentored a company about five years ago doing such a thing, but I even forgot their name, and don't remember what their outcome was) about this topic.

- https://www.hindawi.com/journals/js/2018/4105208/

If memory serves, you don't even need to have permanently installed sensors, you can do it with a portable stethoscope kind of contraption which can detect anomalies and help to schedule preventative maintenance.

I don't want to invalidate your experience at all, but I find exactly the opposite.

I do a lot of video pair programming, and I feel supremely comfortable screen/video sharing. Getting to work on my own machine with my own IDE and shell set-up, my own hardware in my comfortable home office, 10000% better than awkwardly scratching at a whiteboard speculating about what may or may not work if committed to code.

I've always chosen to go the hard-way (use terraform) for lambda because all my other infra is in terraform, do any of those other frameworks you mentioned interoperate neatly with TF? (I mean in terms of being aware of one another, being able to use similar/same resource tags, pick-up env vars for lambda exposed by TF (e.g rds credentials from the KMS), etc?)

Having watched the first 20 minutes of the linked video, I'm sure that's what OP wanted to share, but I got next to nothing from it.

The entire talk is about memory layouts and how nothing has a meaning unless we ascribe a meaning to it.

I don't really know what this has to do with types, or type systems, which are an algebraic concern, as far as I'm concerned.

Possibly unpopular opinion, but this generic graphic style seems completely unsuitable for a ERD tool. After clicking the link I was confused for a few seconds how poorly the site with a generic full-screen header of a (very) generic person at a laptop on a desk graphic can possibly be on the front page of HN, put a screenshot of the tool in the hero image.

I think that's an accurate portrayal of the "ivy league" type unis in the UK. They may not be what they once were, but they have a particular romanticism about them that people aspire to attend them.

Exactly, and often times extraordinarily valuable because they can be used for reverse engineering, or learning how the key signing or DRM works, or can be bypassed.

Of course, most legitimate indie communities stay away from this, preferring clean-room RE efforts.

Would love some pointers too, I've run into it once implement in a way j could t circumvent and was blown away. I'd love to develop the skills to do the same myself.

This comment probably doesn't add to the conversation, so I apologise in advance.

We make extensive use of Sonos and Amazon Echo products in our household and have two young children (3 and 5) the older one doesn't like issuing instructions for the Echo devices because he pauses occasionally and it somewhat aggressively "SORRY, I CAN'T HELP RIGHT NOW".

A bigger problem we've noticed is that things "drift". We've got muscle memory of asking "Alexa, play classical lullabies" or "Echo, play the skeleton dance song". Occasionally though these commands will be "hijacked" by some new content in Spotify or somewhere else.

"Alexa, play music for children" used to play nice kids songs, now it plays some murder-metal album called (one assumes ironically) "music for children", prior to that match, it seems like it was a search, or a playlist?

And there seems to be no way to deny-list music like this. It's driving us off of Spotify in our household, "skeleton dance" plays either screaming metal artists or the cutesey kids song with about 50% accuracy, it seems.

FWIW I had the same problem with Amazon FreeTime where for 5 bucks a month you get access to 10,000 kids shows and games, which is about 9950 more than I had time to vet to check if they were appropriate for my kids.

Please, hold your criticism if you want to berate me for raising kids in a household with voice assistants and tablets, I am trying to balance exposing them to useful technology without exposing them to the underworld of utter shite that is to be found beneath those interfaces.