News for hackers. Stuff that matters.

lentil

67% is good enough for me. I am not using it as a medical device, and I am not an elite athlete. I just enjoy doing exercise, and every now and again I like to review the stats from my watch.
Re:Sunsetting Create React App on Saturday February 15, 2025 @03:26AM (#43056886)
CRA has been a maintenance burden for my team for the last couple of years due to security vulnerabilities and incompatibilities in old packages.

We have several React apps (created with CRA) to support, embedded deep inside ASP.NET Web Forms apps (its legacy all the way down).

We decided to switch from CRA to Vite. It has worked great so far.

I am happy to see these docs recommend Vite as an option for adding React to existing apps, because at the time this decision was made on my team, it wasn’t very clear what the correct path was for replacing CRA. I don’t think we could have as easily switched to a framework like Nextjs.

If you are in a similar situation, I would recommend Vite.

Re:Python 3, Pygame, and Debian Bookworm on the Miyoo A30 on Sunday February 02, 2025 @05:08AM (#42907650)
Similar to wanting to start a blog, but instead of writing a post, spending significant effort building the platform. First post becomes ‘how I built my blog’.
Are these types of repos trust worthy, or is it best to download straight from Signal’s site?

Similarly, I noticed Signal is on Flathub [1] for installing via Flatpak, but the developer account is ‘unverified’. It’s always put me off installing via this method.

[1] https://flathub.org/apps/org.signal.Signal

I struggle with reading speed, and concentration in general when reading. No idea why. However, I love listening to podcasts, audiobooks, videos etc. at 3x speed.

Using text to speech has also helped. No longer do I delay reading long messages from coworkers, or dread reading boring documentation. I just use text to speech. It works really well on Windows (my current work laptop), but unfortunately not so much on Linux (personal laptop) or mobile (too fiddly).

Re:GrapheneOS on Pixels getting extended Android support on Sunday December 08, 2024 @04:57AM (#42356196)
It’s great that Google is extending the support, and that GrapheneOS can benefit from it.

I bought a Pixel 4a specifically for installing GrapheneOS. I used it happily for almost 3 years, until EOL firmware support. The phone worked fine, but I wanted the reassurance of firmware security updates.

I was going to get a Pixel 6/7 (I forget which was available at the time) to use GrapheneOS again, but I was so annoyed at Google for only supporting firmware for 3 years, that I decided to switch to an iPhone SE.

Shortly after this, I believe the next Pixel came out with 5+ years support. I had some regret, but the iPhone SE is OK, and I didn’t want to buy a new phone just for the sake of it.

I will probably switch back to GrapheneOS for my next phone, as it really is a great mobile OS. Hopefully the project is still going strong by then.

Re:Forced to Upgrade on Monday December 02, 2024 @02:50AM (#42294024)
True for the OS, but you won’t get firmware updates/security patches once the upstream vendor stops support.
Re:Rewrite It in Rails on Saturday November 02, 2024 @06:08AM (#42025309)
Smaller companies have less traffic, need less expensive servers, and have no need to spend money optimising the language. They can focus on that when they make billions of dollars, like Shopify does.
Re:The most popular programming languages on GitHub on Thursday May 02, 2024 @03:08AM (#40233494)
Very interesting! How this data was acquired?
Re:htmx 2.0.0-beta1 on Sunday March 17, 2024 @01:13PM (#39736009)
The resource to be deleted should be identified in the URL, so there is no need to pass a body. This is the same for `GET`.
Re:Elon Musk: "Don't advertise. Go f*** yourself" on Thursday November 30, 2023 @02:57AM (#38470899)
He admits the company will die if advertisers pull out, and his solution is to document it and let the world know that the advertisers were the reason the company died.

Curse you advertisers for ruining his company!

Re:FreeTube – The Private YouTube Client on Monday October 16, 2023 @08:25AM (#37898862)
I’ve been using NewPipe for years, and have not experienced issues as you described.

Make sure you are using their own f-droid feed.

Re:A fast(er) de-referer service with CloudFront on Wednesday November 10, 2021 @10:06AM (#29175349)
Oops, link seems to have lost part of its path.

Should be https://www.kevinwmcconnell.com/aws/faster-referer-service-c...

I think you could run this service on CloudFront Functions, if you didn't mind using a Refresh header instead of the meta tag.

(CloudFront Functions can't generate body content, but it looks like this service works by responding with a refresh meta tag. So if you change that to a Refresh header you wouldn't need to write the body.)

CloudFront functions run on the 200+ edge locations of CloudFront and, according to the docs, have sub-millisecond startup times. So might be a viable option?

You can also set Lightroom to write sidecar xmp files, which means every edited raw file will also have its own copy of the edits kept alongside it.

Coupled with using a good directory structure, that significantly lessens the impact of losing a catalog file.

Re:API Tokens: A Tedious Survey on Wednesday August 25, 2021 @05:22AM (#28299479)
I think the difference may be in the "They’re easily revoked and expired" part.

Passwords are usually one-per-resource, e.g. a user has a single password. If that password is compromised you can reset it, but all the consumers that used it will need the new credential.

Whereas tokens are typically one-per-consumer, so if one is compromised you can revoke/expire just that token, without affecting other consumers.

Same with expiry times -- you can set that on a token without it expiring all access to that resource.

Not sure if that's what the author had in mind, but it's a difference in how these things are often used (even if fundamentally they are otherwise very similar).

Re:Git password authentication is shutting down on Thursday August 12, 2021 @06:24PM (#28162380)
While this probably doesn’t completely solve your problem, have you tried using conditional includes in your .gitconfig? I’ve been using that to ensure that anything under ~/work uses my work email for user.email, but anything under ~/projects uses my personal email. It’s quite handy.

https://git-scm.com/docs/git-config#_conditional_includes

Re:Firefox 91 introduces enhanced cookie clearing on Tuesday August 10, 2021 @12:41PM (#28131010)
As a Scot, I find that a bit sad. We’re really not that far away!

Does that also mean you never learned about Rabbie Burns in school?

Re:Amazon Web Services In Plain English (2019) on Sunday July 25, 2021 @04:56PM (#27952838)
pubsub would also be misleading, given SQS does not support the pub/sub pattern. It's a queue where each message is processed once by a single consumer; it's not a pub/sub system where multiple consumers can subscribe to messages of interest.
> many payroll softwares will test decently

That's certainly the impression I got from working in this field for a while. I've worked on one of the products on that list of UK payroll providers, and it has one of the most extensive test suites that I've seen. And some of my colleagues there had previously worked for its competitors, and they mentioned similarly good test coverage there.

I'm sure the quality & amount of testing varies a lot between different products, and I have to imagine there are some dreadful ones. But at the same time, I don't think having thorough test coverage for this type of product -- especially for the parts of the product that deal with monetary calculations -- is particularly unusual either.

Re:Ask HN: Who is hiring? (December 2020) on Tuesday December 01, 2020 @03:38PM (#25269568)
Arcivr | Senior full-stack engineer | Contract | REMOTE | https://arcivr.com/jobs

Hundreds of artists, celebrities, and teams rely on Arcivr's platform to deliver unparalleled VIP experiences. We build products to create and operate VIP events in the music and entertainment industries, from virtual meet & greets to streaming concerts.

We’re looking for a few experienced engineers to help us build and improve our recently-launched virtual event platform, Arcivr Live. We’re a small, enthusiastic team, where everyone has a significant impact on everything from technical strategy to the bottom line.

Our current tech stack is React/TypeScript, Go, PostgreSQL, AWS. We all work on all parts of the stack, although we do also specialize a little to suit our individual strengths and preferences.

Full job description: https://arcivr.com/jobs

Re:Ask HN: Who is hiring? (August 2020) on Monday August 03, 2020 @11:02AM (#24038541)
Arcivr | Senior full-stack engineer | Contract | REMOTE | https://arcivr.com/jobs

Hundreds of artists, celebrities, and teams rely on Arcivr's platform to deliver unparalleled VIP experiences. We build products to create and operate VIP events in the music and entertainment industries.

We’re looking for a few experienced engineers to help us build and improve our newly-launched virtual event platform, Arcivr Live. We’re a small, enthusiastic team, where everyone has a significant impact on everything from technical strategy to the bottom line.

Our current tech stack is React/TypeScript, Go, PostgreSQL, AWS. We all work on all parts of the stack, although we do also specialize a little to suit our individual strengths and preferences.

Full job description: https://arcivr.com/jobs

Re:Invert, always, invert on Tuesday July 21, 2020 @07:19AM (#23905974)
One of the ways to apply this inverted thinking is to conduct a "pre-mortem" at the start of a project. By deliberately imagining that something has failed, and speculating about the reasons, you can sometimes uncover useful steps that prevent those imagined failures from actually happening.

I've found this can be quite useful, both for minimizing risk, and also (interestingly) as a source for new product/feature ideas.

Older »