HN user

paultendo

66 karma

Founder at Oncor (https://oncor.io), C-PAID, and Fifty Six Law. Building open-source tools in TypeScript. Interested in security and multi-tenant systems. https://paultendo.github.io

Posts2
Comments9
View on HN

Anyone can be an "ideas guy", very few are good at it.

"I am still waiting to see LLMs build an idea into something other people use at scale" - so Microsoft using Claude Code doesn't count?

As I understand it, Anthropic drew two specific red lines: no mass domestic surveillance, no fully autonomous weapons systems. Seems reasonable to me.

Feels like OpenAI, Google, and Meta have been given a clear path to get federal contracts now by simply not drawing the same lines.

I agree that rejecting valid non-Latin characters in valid contexts is user-hostile, but I should be clearer about scope: this is specifically about machine-readable identifiers (slugs, handles, ENS names) where the character set is intentionally restricted, not display names or user-facing text.

The approach there should be what wongarsu describes below (imo), to style the UI so official accounts are visually distinct (badges, colour, etc.) rather than policing the character set.

namespace-guard is deliberately opinionated for the slug/handle case where you've already decided the output should be ASCII-safe. If your use case is broader than that, confusables detection without rejection is the right call.

Thanks Josh - putting this article out there has pushed me to sharpen a lot of my thinking which hopefully should come across in my more recent work. I've updated the article to scope the NFKC recommendation to identifiers and added a note crediting your correction. Thanks for catching it.

Of course Google can restrict how their API is accessed. But locking paid accounts with no warning, no explanation email, and no functioning support path while continuing to charge $249/month is a different problem entirely. A reasonable enforcement process would have been a warning email, grace period to stop using the tool, then restriction.

What an awful way to lose trust, locking out their users but billing them all the same.