HN user

romantomjak

298 karma
Posts7
Comments36
View on HN

As far as I know, there isn’t an official API for cross-platform communication. However, the Messages framework allows developers to create sticker packs and interactive messages for iMessage. People in the group can interact with messages created by other apps, such as polls, location updates, and game integrations to name a few

Signal keeps cranking out brilliant crypto papers, but from a product perspective, it feels like they're throwing stuff at the wall to see what sticks. We've got post-quantum handshakes, stories and money transfer experiments, but still no SDK, no APIs, no bots. The official libsignal library is undocumented and incomplete. Large parts of functionality are still buried on clients. Don't get me started on "but they have published all protocol specs on their website, go on and roll your own library"! That's not how you run a product. It's borderline negligent for a platform used by millions.

Every other major messaging app exposes something to developers, but Signal is allergic to the idea. Makes me wonder if they even have a head of product because whatever they're doing now is a far cry from a coherent product strategy. Signal is basically a pile of hot cryptography duct-taped to a messenger that's more hostile than any product in Apple's walled garden. And that's from a day one user who's been advocating for them the whole way.

</rant> thanks to everyone involved in building the product <3

Download responsibly 10 months ago

CI users should cache the asset to both speed up CI runs and not run up the costs to orgs providing the assets free of charge

Are you referring to the json macro that allows variable interpolation? Doing that will void type safety. Might be useful in dynamic languages like Python but I wouldn’t want to trade type safety for some syntactic sugar in Go

I was aware of Supabase, but still was confused as to what this project actually does. The mention of "1 file" and "app server" wasn’t helpful either. Does that mean a single binary? One SQLite file? Does it execute other binaries? I’m not sure. In contrast, when I visited the PocketBase website - it provided a much clearer explanation of its purpose.

The GitHub security alert digest[1] is a real thing. It's a feature of GitHub where they report security vulnerabilities in your project's dependencies. For example, if you use python and you have specified requests library in your requirements.txt, GitHub will send you emails about disclosed vulnerabilities in that library, urging you to upgrade to a higher version where it's fixed.

[1] https://docs.github.com/en/code-security/dependabot/dependab...

Llms.txt 2 years ago

I find it confusing that author proposes llms.txt, but the content is actually markdown? I get that they tried to follow the convention, but then why not make it a simple text file like the robots.txt is?

Creative solution to a problem they had - no job and apparently only a backpack to their name, but the story quickly fell appart when I realised that they bought delivery robots, laser engravers, clothing, seals, double digit ipads, etc. Clearly they are loaded and just trying to downplay their invasion of privacy and perhaps downright illegal cloning of voice and appearance to get a job. Good job on that one company calling them out.

I agree, I was just making a point that different teams have different priorities and thus different scope. Saying "PodA can only talk to PodB over mTLS" is very different to "Users need to login using oauth". Who is going to build the product if product team is working on the service mesh?

Infrastructure teams can usually implement a feature faster than every app team in a company, so this tends to get solved by them.

Well, that's comparing apples to oranges. Product teams have completely different goals, e.g. adoption/retention/engagement, so naturally internal cluster encryption is so far out of scope that in fact only the platform team can reasonably implement it. I don't see how that statement is relevant. You don't send an electrician to build a brick wall

I'm consistently impressed by French solidarity to just go on a strike until they get their government (or a company in this case) to start treating them fairly. I wish that could work in the UK, but alas, we don't do that here.

I jumped to conclusions in my previous comment, but that was based on a personal experience. Realistically, I've only ever needed 2 commands: `pip freeze > requirements.txt` and `pip install -r requirements.txt`. They don't need 100% API compatibility to deliver value, just "good enough". 80/20 rule and all that.

Great article with lots of interesting ideas. Can't believe I didn't know about signal.NotifyContext. Finally I'll be able to actually rememeber how to respond to signals instead of copy-pasting that between projects.

I’m sceptical that migrating to GraphQL is actually an improvement. Instead of one team maintaining a cohesive API, you now have unlimited teams making shit up as they go?

The article also desperately needs more context. I don’t doubt a lot of cool engineering went into making this work, but for an outsider reading the article (and without them stating any goals apart from velocity) it’s unclear whether the whole thing was just an expensive resume driven development or an actual necessity that justified the invested engineering time

Apologies if this comes off as blunt, but this is the type of content I come to read at hacker news rather than it being just a series of obituaries.

The author has made a lot of great points, but one that stuck with me was:

I consciously spend a lot more time trying to develop problems, and to do a really good job of articulating them, rather than trying to pitch solutions.

I haven’t thought of it in this way, but this is an excellent way of motivating someone to “own” a problem.

I’m consistently surprised just how good the RX580 really is. It can handle most games on medium at 1440p, but I tend to just chill on ultra at 1080p. Plus I play on TV, so the smaller resolution is actually better from where I’m sitting

Git.io deprecation 4 years ago

This is why you should never use url shorteners for publicly addressable content. Using url shorteners contributes to ‘link rot’ and after the domain expires or the service reaches its end of life the link is broken and cannot be resolved anymore.

imo, it’s fine for linking to ephemeral content such as submission forms or anything that will not make sense after a certain time. Do not use it for articles and other content, because it will make the resource inaccessible after the service is no longer operational.

This is one of the best resources for starting with Go! It’s very practical and teaches a lot of important concepts in an easy to understand way. Cannot recommend this enough! If you read the book and learned something new consider sponsoring the author as a ‘thank you’!

Logging at Twitter 4 years ago

Thanks, this is a great insight. I haven’t thought about it in this way and it sounds like a very pragmatic approach without over complicating things.

To play the devil’s advocate - I reckon it’s all to do with support. If something breaks they can just pick up the phone and tell them to sort it out. What will they do when a random open source program breaks? Open a github issue?

I’m also sure deals like that come with other goodies, for example, my university offered free, licensed windows, office & visual studio installations.

Also, electronics course had windows-only software that we all had to use.

I’m sure it’s not that easy to switch. There must be deals on deals upon deals depending on where the school budget comes from and who approves it and so on.

Zoom 5.0 6 years ago

Security. App store has much tighter rules on what a developer can do whereas downloading a dmg from somewhere pretty much leaves you to fend for yourself (and Zoom already has proven itself here).

Edit: clarifications

Makes one ponder whether russians don't know what they're doing or are others simply better at hiding failures. Scared to think what else is going on that, us, regular people are not aware of. I feel like one of these days some government is going to announce "You didn't ask for it, but we poisoned the environment, ozone layer is gone and water is not fit for drinking, BUT! We have an answer to century long dick measurement contest!"

puts on tin foil hat