HN user
[ my public key: https://keybase.io/slang; my proof: https://keybase.io/slang/sigs/PXc4bCZPU2wY09af3pVrImgiVFXonPvdK5AptjrIgdw ]
Sometimes you notice a problem that your unit tests didn't cover and want to figure out where it was introduced. That's where git bisect shines.
You can go back and efficiently run a new test across old commits.
Prince Rupert's drop is another.
Sounds like you had better luck than I did. After about a year of getting DMCA notices, Hetzner told me to remove my IPFS gateway from their network or they would kick me off.
I followed the DMCA process, added nginx block rules to make all the content mentioned in the DMCA notices impossible to access, and even submitted "statements" to Hetzner for each DMCA notice they got. None of that saved me.
Yeah, you would think so.
I guess if you want to do a DoS attack, send a few bogus DMCA notices to Cloudflare first to get the real IP of the server they're supposed to be protecting. Then you can hammer the server directly without Cloudflare getting in the way.
This is cool. Makes me want to see if a mechanical version of this could be done.
This is impressive, but if you care about privacy then why are you using MacOS to begin with? It seems like you could never be completely certain that it is safe.
Rather than starting with a closed system and ripping out the parts that spy on you, why not start with an open system like Linux or OpenBSD?
First the ciu-online.net people sent DMCA notices to myself and Cloudflare, since I used Cloudflare as a caching proxy. Eventually Cloudflare gave them the IP address of my server and the ciu-online.net people were able to determine that IP address was owned by Hetzner.
Now they send DMCA notices to myself, Cloudflare, and Hetzner. I think the goal is to annoy as many people as possible. Even after I shut off my IPFS gateway they continued sending notices.
Anyway, if you're hosting anything that might generate a DMCA notice, don't use Hetzner. They will kick you off even if you're complying with the DMCA process. Also, they make you submit a statement on abuse.hetzner.com for every single DMCA notice that gets sent to them. If you don't submit the statement in 24 hours they threaten to block your IP address. It is extremely tedious and annoying.
It wouldn't matter if you used a filter and your gateway didn't host copyrighted content.
The ciu-online.net application doesn't check whether or not the content is accessible through your server before sending a notice. It sends notices for all content that might be on the IPFS network.
You'll get annoying emails no matter what.
I'm not sure how likely it is that they'll try to sue me for failing to take down content, but I don't want to find out.
Running an IPFS gateway doesn't make me any money and even consulting a lawyer is way outside my hobby project budget.
Yeah, I took ipfs.slang.cx down after Hetzner threatened to kick me off their service.
I was able to stay on top of the takedowns by writing a script to create & deploy nginx block rules for each URL in the DMCA emails. Obviously I had no time for manual review of the URLs. But I guess that didn't matter and Hetzner got annoyed with all the emails and decided my business wasn't worth the trouble.
In this case the URLs contain valid IPFS hashes. The ones that I've tried all resolve to real files with the IPFS CLI.
The issue is they've never been requested from the gateway that the DMCA notices are being sent to. They might be blocked by the gateway, they might fail to resolve on the gateway for other reasons, or they might work. Nobody checked before sending the complaint.
These are actual hashes for books that exist somewhere on the IPFS network. You can get a lot of them to resolve. They've just never been requested from the site the DMCA notices are being sent to.
It's more likely that someone downloaded an IPFS hash list from LibGen and started sending emails generated from that.
These comments are easy to identify as ChatGPT because their style makes no sense in the context of a GH issue discussion. They're overly verbose and contain unnecessary caveats like "there may be other solutions that would be more appropriate depending on the specific needs of the project". Nobody who knows about the project they're commenting on would write that. They would mention what the other solutions are rather than being intentionally vague.
In another context, like SEO blogspam, this text wouldn't look out of place.
It's not an issue of the template that you use or the CTAs that you include. These emails are always useless noise. I don't need a welcome message from the CEO or check-ins to solicit feedback.
Spend less time on marketing and more time making your product good.
Sure, some amount of project management type work is expected when you're an engineer at a higher level (senior, staff, principal, etc). However, that's not the entire role. Before you reach those levels you should have a deep technical knowledge of how to write code and design systems.
If you don't have those fundamental skills, then you're not going to make a good engineer at higher levels.
If you do have those fundamental skills, but have never demonstrated them because you're too busy doing project management work, then why would anyone believe that you have those skills? Demonstrate them somehow.
If you want a role where project management type tasks are the whole role, then become a PM.
Imagine, your company has hired you as an engineer to design software systems & write code. Your performance at the company is measured by your ability to design software systems & write code. You've decided to take on the job of a project manager instead and not write code. Your contributions might be valuable, but why would you get promoted as an engineer?
It's hard to be sympathetic when these boomers choose to be alone, not marry, and not have kids. What did they think was going to happen when they got old?
I'd be happy with a browser extension that replaces all the paywalled links on HN with archive links.
I think the general "web product building" space is even more competitive with tons of good choices.
You've got Ruby on Rails and Elixir/Phoenix which both have an enjoyable developer experience and a well designed language.
There's JavaScript & Node.js where the language is a bit of a mess but the ecosystem is huge. Plus the same language can be used on the frontend and backend.
Python is extremely popular with Django, FastAPI, and Flask.
C# is also extremely popular with ASP.NET Core, although I've never used it.
There are plenty of shared webhosts that let you run whatever language you want. Fly.io, Render.com, Heroku, etc. They all let me run my code on a fraction of a dedicated server with fully managed infrastructure for a few dollars a month.
I stopped writing PHP around 2014.
I don't know if this is still true, but the impression I got at the time was that PHP is constantly trying to catch up with more advanced languages. There was no case I could point to and say "PHP is the best choice for this".
If I want to write a highly concurrent distributed system I'll reach for Elixir/OTP. If I want high performance, I'll reach for C or Rust. If I'm working on a data science project, I'll reach for Python or R. When is PHP the language to go to?
Heroku can protect itself from abuse of its free tier by changing the rules - which they eventually did.
I'm sure that the only reason why they kept the free tier as long as they did was because it brought in enough users (who were eventually converted into paying customers) to be worth the cost.
Heroku is not "the commons", they're a company and people are playing within the rules that they set out.
I don't think I would trust a "state sponsored purchasing office" to identify the fair market value of an exploit or even separate legitimate exploits from fake ones.
What is the salary range for the Backend Developer position? I read through the job posting but didn't see it.
A similar idea is discussed in this article about "refinement culture" https://archive.ph/BRgJA. Only the archive exists right now.
HN discussion here: https://news.ycombinator.com/item?id=27483207
Toyota is alright. I've got a recent RAV4 without any of this nonsense.