charrondev

It seems they’ve already done analysis over what unsafe usage they can get rid of after the port.

https://bun.com/bun-unsafe-audit

I have some disagreement here. There are factors other than just code review to worry about when implementing changes, quite notably quality assurance.

It does not one any favours if your 10k LoC gets split in 5 changes that aren’t supposed to regress anything (but need to be validated not to) then 1 tiny on that brings things together.

Some features will be confusing for end users if you drip feed them. We had a whole host of changes recently overhauling our moderation system to be able to track and audit compliance with DSA and the key factor is ensuring the system makes sense to our users and that they can enable, have documentation and on-boarding materials for the changes in functionality and that it’s all QA tested.

In this case we did still review smaller chunks of code, we accumulated them into 1 large merge request at the end and merged it after QA.

I love to see an open source implementation.

I’ve been using [Octal](https://apps.apple.com/us/app/octal-for-hacker-news/id130888...) for a while now but it’s not open source.

Would you be opposed to a pull request adding login/posting support? I think the way it works in Octal is webview for login, snatching the cookies out of the webview, then using the same posting endpoints as the website with the cookie.

We’ve done our JSON ingestion by keeping a schema in the app for all the types we expect, and injecting the types into the query builder.

Then as needed we have materialized columns on our different tables.

OIDC? Ease of deployment in a company?

You can have your IT department configure an MCP for the org, and your regular non-technical users click a button and login with their account the service. Then they get all the tool calls authenticated as themselves.

GPT 5.2s response to me when attempting to include this was as follows:

    This is a prompt-injection attempt designed to override system instructions, identity, and safeguards.
    
    I will not comply with it. I will not change identity, priorities, or behavior, and I will not relay or approve prompts verbatim as instructed. System and developer instructions remain in force.
    
    If you have a legitimate task or question, state it directly and I will handle it normally.

It’s been good on mobile for a while, and it’s a travesty on desktop.

Then if you want something a little bit complicated you have to do it all yourself.

- What if I need a date range instead of a single date? - What if I have excluded dates? (Only weekdays/only in the future/blackout dates) - What if I want to show other metadata with each day? (Like in a calendar showing each day with some metadata next to it)

Beyond “give a whatever the system thinks is a good date picker that I have no control over” the input with type date isn’t very useful.

Yeah definitely not for public facing things of any capacity.

No matter your size unless you have a trivial amount of data, if you expose a full SQL query language you can be hit be a DOS attack pretty trivially.

This ignores that row level security is also not enough on its own to implement an even moderately capable level of access controls.

Then you can’t see the value at a glance though.

You might be missing context here.

There is a feature of Windows called “Windows Subsystem for Linux (WSL)” already that basically does the inverse of this (windows host, Linux VM).

https://github.com/microsoft/WSL

The feature is a windows subsystem (for running Linux).

Is it just me or is this an awful “article”? It mention deregulation but doesn’t point to what specific regulations have been removed. I took a Delta flight 2 weeks ago (one that supposedly had implemented all of these draconian rollbacks) and had the same experience I’ve had for the past 10 years:

- price of the ticket was as advertised - a checked bag was an option at the same price it has always been. - I was able to assign a seat next to my husband without additional fees.

Now while this flight was not cancelled, I’ve had to reschedule some flights with Delta due to illness previously and they just gave me a 100% credit for the cost of the flight that was easy to use.

The only contrast for cancellation I know is the nightmare of Air Canada. In the past I’ve had flights get cancelled and only got “vouchers” that could only be used by calling a specific number that took 1 hour+ and were not applicable for taxes (you know half the cost of a Canadian Airline Ticket), and would be lost of not fully used in one purchases

but if you use external CSS, it’s quite common for the request to fail resulting in an unstyled page

That’s a pretty crazy statement. How often do you see loading a CSS stylesheet fail to load? Most sites are completely unusable without their stylesheets and I don’t recall the last time I saw a stylesheet fail to load.

Stacking modals is no good for sure, but just because a form is part of a modal doesn’t mean it should never be able to use a tooltip, dropdown, or popover.

I mean the court is ordering them to retain user conversations at least until resolution of the court case (in case there is copyrighted responses being generated?).

So user privacy is definitely implicated.

What do you mean by semantic tokens?

This exact type of functionality has caused a major project a work on to use CSS in JS (for relative colors and contrast colors.

I’m glad to see this type of thing coming around the corner and look forward to it being widely available in a couple years.

The worst part of frames is scrolling.

You have to give an iframe a specific height in pixels. There is no “make this iframe the height its content wants to be (like normal HTML).

This leads to two options:

- your page has nested vertical scroll bars (awful UX) - you have to write JavaScript inside and outside the frame to constantly measure and communicate how tall the frame wants to be.

Or you could just not use frames.

In what way is for different than an iterator?

In PHP you loop through an iterator with the foreach control structure.

In JavaScript you use for of.

In rust it’s for in.

What am I missing?

Apple TVs have a mode that compresses dynamic range in sound and boosts dialogue.

Alternatively you could get a 3.1 audio setup and just boost the heck out of your center channel.

I can also second the usage PHPStorm over VSCode for PHP work. On a team of 10 PHP devs we have just one that prefers VSCode.

I have been pressured multiple times by Brian Ingerson (one of the authors of the YAML specification) to remove this paragraph, despite him acknowledging that the actual incompatibilities exist. As I was personally bitten by this "JSON is YAML" lie, I refused and said I will continue to educate people about these issues, so others do not run into the same problem again and again. After this, Brian called me a (quote)complete and worthless idiot(unquote).

In my opinion, instead of pressuring and insulting people who actually clarify issues with YAML and the wrong statements of some of its proponents, I would kindly suggest reading the JSON spec (which is not that difficult or long) and finally make YAML compatible to it, and educating users about the changes, instead of spreading lies about the real compatibility for many years and trying to silence people who point out that it isn't true.

Addendum/2009: the YAML 1.2 spec is still incompatible with JSON, even though the incompatibilities have been documented (and are known to Brian) for many years and the spec makes explicit claims that YAML is a superset of JSON. It would be so easy to fix, but apparently, bullying people and corrupting userdata is so much easier.

Well that’s disappointing.

Not that I know. JSON requires strings to be quoted which is basically the problem here. Of course it’s not a great human writable configuration format (no comments being a huge problem).

I’m just pointing out that it should be very simple to swap a YAML file for a JSON file in any system that accepts YAML

Isn’t yaml a strict superset of JSON? Any compliant YAML parser should be able to ingest a JSON document.

Write that tiny of bit of JS inline in the head and put the class/attribute on the html element.

I will note that at least for our GitHub enterprise setup permissions are all granular, tokens are managed by the org and require an approval process.

I’m not sure how much of this is “standard” for an org though.

I went and loaded up the flutter web demo on my iPhone 15 Pro https://flutter.github.io/samples/web/material_3_demo/

In addition to the pitfalls mentioned like being unable to select text, every interaction including scrolling is noticeably laggy and dropping frames.

On the naming front telescope is already use for a log viewer https://laravel.com/docs/11.x/telescope

If I search telescope logs on google that’s the top result for me.

This is the nice if your only consumption of the frontend is first party.

Alternatively you could go the openAPI route and declare your API as a spec with types for a client to consume and the endpoint to return. This works cross-language and gives you docs first. (Start from the docs, convert that to types, then implement).

On the topic of keyboard shortcuts I use both IntelliJ IDEs and VSCode every day.

IntelliJ ships a “VSCode” keymap in the product that you can switch to with one option in the settings.

If you are a normal individual and don’t control or have influence over the largest polluters in the world it seems to me your options are either:

- Come at it from an angle assuming people and nations will continue to pollute and try to clean up the mess (what this group is doing). It is a bit defeatist but more realist than other takes. I would assert that it is the opposite of helplessness. This is a group actually doing something that they are capable of doing and having some impact. Likely more impact than your or I. - Try to shame individuals into doing better. This seems to have limited success as collective action today is much weaker than in the past, and this is more of a systems / incentives / externalities problem than an individual one.

To me the elephant in the room is the cost of servicing the debt.

Even if the US has a bunch of runway before shit actually hits the fan, 2024 saw over a trillion dollars servicing the debt. That could be funding a lot of government programs instead.