News for hackers. Stuff that matters.

reynaldi

I initially thought it to be the AI context already filled with previous rehearsal conversations. And it remembers that the ingredients are already prepped. In which case, they could just start another chat to start fresh.
Re:Notion Agents on Saturday September 20, 2025 @12:31AM (#45310393)
What's the use case? I mostly use Notion for writing notes
Re:MCP Server Could Have Been a JSON File on Saturday September 20, 2025 @12:27AM (#45310372)
As someone not familiar with MCP, so the tool definition is just the request spec and resource definition is just the response?

Then I have the same question with the article, why do we need this standard? If it's just to let the LLM know to call the tool in JSON format

Ignoring the Spain block for a while, I wonder how/why these piracy sites use Cloudflare. Are they using something like R2 or Stream? This means someone still has to pay for it, right?
Not sure if my feedback can help.

As someone who don't know anything about SOC2, but still aware that if I want to signal 'data privacy' that I need to get it: I don't know what I'm supposed to do on your site.

Some sort of onboarding can help, like what are my steps from knowing nothing to actually getting the SOC2. Maybe some educational contents or resources can also help.

Re:Ask HN: Cursor or Windsurf? on Monday May 12, 2025 @04:32AM (#43960810)
VS Code with GitHub Copilot works great, though they are usually a little late to add features compared to Cursor or Windsurf. I use the 'Edit' feature the most.

Windsurf I think has more features, but I find it slower compared to others.

Cursor is pretty fast, and I like how it automatically suggests completion even when moving my cursor to a line of code. (Unlike others where you need to 'trigger' it by typing a text first)

Honorable mention: Supermaven. It was the first and fastest AI autocomplete I used. But it's no longer updated since they were acquired by Cursor.

Re:Ask HN: What are you working on? (April 2025) on Monday April 28, 2025 @11:42AM (#43822728)
Currently building a CORS Proxy.

After working on it for a while, I noticed there’s a stigma around using CORS proxies, often associated with fetching undocumented APIs.

While that’s sometimes true, I’m hoping to change that perception, to show that they can also be used for accessing real APIs. It just requires the proxy to correctly handle credentials and secrets.

The idea is to open up more possibilities for building static-first apps without worrying about CORS.

Re:Fauna Service Winding Down on Wednesday March 19, 2025 @01:41PM (#43415079)
So sad, I was looking at Fauna for a MongoDB alternative after they removed their serverless tier. But still I'm glad I didn't go with Fauna, especially after knowing they are shutting down.
Re:Why do we have both CSRF protection and CORS? on Monday March 03, 2025 @08:29AM (#43241518)
I agree with this, but in my past online discussions about fetching publicly available information, two main arguments often arise:

1. The resource owner doesn’t want you fetching their resource.

2. They don’t want to suddenly be flooded with requests.

Each of these points has counterarguments. For example, the Same Origin Policy (SOP) only restricts fetches from the client side, and nothing stops people from fetching via a backend.

The second argument makes sense, the resource owner doesn’t want their resource to be freely fetched and to suddenly receive thousands of requests that their server likely can’t handle. SOP helps prevent this, but if you’re fetching from the backend, you should implement caching to avoid repeatedly hitting the target resource.

I created a CORS proxy [0] to handle this scenario, including caching responses.

There are also several free CORS proxies [1] available, they might be considered sketchy, but they’re probably fine for testing.

[0] https://corsfix.com

[1] https://gist.github.com/reynaldichernando/eab9c4e31e30677f17...

i think youtube allows you to blur some parts of your video

in case you don’t want to recreate the video

this looks amazing, can't wait to use it for my next articles

also nice job on the video demo, was it made using inscribed? :p

Re:WikiTok on Thursday February 06, 2025 @01:45AM (#42959741)
This is the way to go, you wouldn't want to use a CORS proxy for something authenticated/with credentials (e.g. API key). But for public unauthenticated request, they work just fine.
Re:WikiTok on Thursday February 06, 2025 @01:43AM (#42959729)
These services are called CORS proxies! I recently made an updated list of the currently working free ones here: https://gist.github.com/reynaldichernando/eab9c4e31e30677f17...

Do note that these proxies are for testing only, and they are heavily rate limited.

For production use case, you might consider using Corsfix (https://corsfix.com)

(I am affiliated with Corsfix)

Re:1.58-Bit Flux on Wednesday January 01, 2025 @10:47AM (#42566705)
Some impressive results

> 1.58-bit FLUX achieves a 7.7× reduction in model storage and more than a 5.1× reduction in inference memory usage

Older »