HN user

haarolean

28 karma
Posts10
Comments31
View on HN

A warning to auth engineers: if an account is using a Gmail address, then auth codes from Google Authenticator should not be considered a second factor.

Incredible take. I don't know what's worse here — suggesting gmail address = google authenticator, thinking you can know the source of "auth codes", or the fact this is coming from an auth engineer. I'm switching to handwritten HMACs on paper napkins today.

They will happily oblige and put your review down if the host asks nicely. Happened to me, happened to my friends. Also they don’t care a bit about fake obvious reviews. Not like “not actively monitoring”, like telling you idk if you care to report it.

It's hard to take him seriously or consider him a good guy. While advocating for the environment, he doesn't hesitate to short tesla, an EV company (questionable nature aside).

There are two possible reasons for this (the 'why' remains -- not enough money?):

- He's admitting he doesn't care about the environmental mission, just the returns

- He thinks tesla is a fraud, but isn't saying it publicly

Either way, it's sus, so it's tough to trust him.

1) There are a lot of bugs, for starters. I've been using it for many months but had to switch back to Chrome about a year ago due to some unbearable bugs like tabs freezing and sync kept bringing back long-gone tabs. Don't get me wrong, I've reported a dozen issues (I have 50+ started threads on orionfeedback forums), but anyway, I felt like I spent more time reporting bugs than actually doing my stuff. 2) Some needed extensions are broken. It's not like I need that many with weird APIs. Bitwarden has been broken for some time, and Grammarly is still broken (3 years in). I tried the latest version a few days ago given what's happening with chrome rn, there are some annoyances still. I like Orion (kudos to Kagi team for working on it) and want it to succeed, I believe it just needs more time, I guess.

Kagi Translate 2 years ago

Mozilla is digging a grave for Firefox with its own hands, we need something else non-chromium, which Orion serves fine. I just wish they'd focus on fewer things as has already been mentioned, rather than producing many half-baked things.

There are at least 10+ open source kafka UI tools out there, what does your i++ tool try to achieve? Especially, considering it's not open source. "Too complex" is a questionable point for the pros list of a kafka-related tool, to be honest.

I maintain one of these FOSS tools and based on users' feedback, one usually faces the issue of finding just _one_ tool with all the required features, rather than making one's experience less complex (?).

As a maintainer I feel like the first tip is not the best approach sometimes. People tend to raise a lot of “I got a problem” issues (well, we all do sometimes) which they solve themselves in a short time (e.g. a misconfiguration). Responding instantly to such sounds inefficient.

Another big downside to springboot is that by default it wants around 100MB of RAM per instance While it might be not applicable to every app, nowadays we can do native images with Graal and some cheesy app could be launched with under 128MB of RAM usage.

Oh, was hyped to read it until I realized it’s US-focused. Being a non-US citizen makes the US one of the last countries I’d incorporate in. Yes, there is a lot of services like Stripe Atlas which would be happy to incorporate you for $100-500, but usually they don’t even shed the light at all how you would do taxes. If you’re not a US citizen, that’s gonna be a huge pain in the ass. You either pay a lot of taxes or do shady funneling (like “I pay myself as another corporation in another country and leave $5 taxable in US to buy printer ink”). I’m still looking for viable options to get incorporates somewhere to be able to use Stripe, but the US is a no-go for me.