MartijnHols

5 ms·

1.
by MartijnHols 4mo ago
Rate limits don’t work if bots rotate IPs from residential blocks on every request.
2.
by MartijnHols 5mo ago
What are you looking for? I use Bunny CDN along with Bunny Shield, and together they're better than Cloudflare for me. It's $10/month, but I can afford it for the privacy of my users. Bunny's aggressive bot blocking with
3.
by MartijnHols 6mo ago
I opted for Bunny Shield exactly to combat bots, in particular ones that spoof User Agents and rotate millions of IPs. It works great, detecting the vast majority of bots and challenging them. Much more user friendly than Cloudflare too, wh
4.
by MartijnHols 11mo ago
Telling a new contributor no thank you is hard. Open source contributors are hard to come by, and so I’ve always dealt with PRs like this (albeit before AI days but from people who had never written a line of code before their PR) by leavin
5.
by MartijnHols 1y ago
One thing to consider is that if you were to succeed in placing hidden text/image on an ID card, it may fail manual forgery checks at airports and police stations. One of the many ways IDs are checked is with different types of lightin
6.
by MartijnHols 1y ago
Depends on the project. For websites I like to use a statically generated Nextjs site served by nginx[1] and for SPAs Nginx that serves a Vite-built static bundle with a backend that’s in whatever language the backend team chose. [1] https
7.
by MartijnHols 1y ago
A 15+ second load on a gigabit connection is impossible to have anything to do with the React library, as React is only kilobytes big and has no impact on the host.
8.
by MartijnHols 1y ago
Fair enough. The quoted statement doesn't hold outside the context of the argument that Preact has feature parity. You can build the same apps with Preact and those others, you just need to sacrifice other things.
9.
by MartijnHols 1y ago
I think the same generic answer _does_ apply to most mature projects. Libraries like these should be approached like discussions about starting over in mature software projects; "this time we'll do it correctly", or "thi
10.
by MartijnHols 1y ago
If Preact truly was as feature complete as React, it would be used by everyone by now – it's old enough for most teams to be aware of it. The fact that it isn't widely used is case in point.
11.
by MartijnHols 1y ago
Why would React be bigger and slower than it needs to be? It's a very mature project with a professional development team behind it, I'm sure we can trust them to tackle whatever unnecessary bloat they may have. I think we should
12.
by MartijnHols 1y ago
There is no such things as a true apples to apples comparison for libraries such as this. They all cherry pick something and ignore a ton of things such as: - accessibility - amount of libraries with plug-and-play solutions to common
13.
by MartijnHols 1y ago
The article mentions they inject a web component. I imagine a bad actor could add something to that. In this case at the very least the author could add a "I hacked your Grammarly extension" text just via CSS, but I'm sure yo
14.
by MartijnHols 1y ago
While Google Translate's interference sucks, with current browser tools, I don't think they can really operate any other way. This is mostly because of cases where they need to translate a sentence like "[Click here] for more
15.
by MartijnHols 1y ago
Unfortunately browsers don't really provide good solutions for extensions that need to inject or change sites. Look at Google's owner in-browser translate extension, its DOM manipulation breaks many interactive apps as well. There
16.
by MartijnHols 1y ago
It's not just noise though; clients are actually experiencing crashes and other issues because of it. I wrote an in-depth article on the Google Translate extension's interference of React (and other webapps): https://ma
17.
by MartijnHols 1y ago
Makes me wonder if you can use this to hijack their plugin. At the very least you should be able to inject text into it, but you can probably render a pretty little login form as well, abusing the trust the user has in their extension. Is i
18.
by MartijnHols 1y ago
At no point would I say web development is super simple. It's hard to get started, it's hard when something gets larger/more used, and it's hard when things are massive. There are so many things to consider, as the origi
19.
by MartijnHols 1y ago
This wasn't my experience. Hacker News felt surprisingly welcoming as soon as I upped the depth and reduced the opinion. There are some areas I noticed Hacker News isn't very interested in, such as web accessibility (other platfor
20.
by MartijnHols 1y ago
So long as your article has a decent enough structure – which this article makes it seem is the only thing that matters – I reckon there are two ways to make blog posts that developers read and share; 1. make so many of them, you'll re
21.
Dutch parliament calls for end to reliance on US software(reuters.com)
44 points by MartijnHols 2y ago|7 comments
22.
by MartijnHols 2y ago
Even on European servers, it’s still controlled by a US organisation, so if Bitwarden is required to shut down access, they will. For an example where this happens, this court verdict from The Netherlands shows Microsoft's Dutch branch
23.
by MartijnHols 2y ago
I expected it to be much harder to move away from these services I heavily relied on like Microsoft 365. Before I started migrating it figured I was so entangled in their web, that switching to an alternative would be a tremendous task. Aft
24.
Moving away from US cloud services(martijnhols.nl)
580 points by MartijnHols 2y ago|368 comments
25.
Moving away from US cloud services(martijnhols.nl)
7 points by MartijnHols 2y ago|4 comments
26.
by MartijnHols 2y ago
Oh, impressive how browser extensions can live outside of browsers now. And on mobile too! After having used Bitwarden for more than 4 years, I only switched last week, so I'm still in the honeymoon phase. But it has everything I used
27.
by MartijnHols 2y ago
Don't think you can self-host it, but that would also pretty much defeat the user-friendly aspect. You don't need the server source if the vault is client-side encrypted, besides you would get zero guarantees that what they show a
28.
by MartijnHols 2y ago
Proton Pass truly doesn’t get enough credit for being completely open source, more user friendly, and hosted outside the US (wouldn’t want to lose access to your vault [1]). [1]: https://berthub.eu/articles/posts/y
29.
How much traffic can a pre-rendered Next.js site handle?(martijnhols.nl)
76 points by MartijnHols 2y ago|61 comments
30.
by MartijnHols 2y ago
My mistake, I missed that the data was limited to "personal" information.

More ›