mtlynch

57 ms·

1. 901.▲
   Deploying Syncthing on a Fly.io Cloud Server(mtlynch.io)

   4 points by mtlynch 3y ago|0 comments
2. 902.▲
   by mtlynch 3y ago

   I didn't find it so scary due to the fact that it requires the attacker to read process memory. But then they pointed out that if the process memory gets paged to disk, then an attacker can recover the password from disk, which is admi
3. 903.▲
   by mtlynch 3y ago

   Same
4. 904.▲
   by mtlynch 3y ago

   > Open source code on GitHub might be thought of as “open and freely accessible” but it is not. It’s possible for any person to access and download one single repo from GitHub. It’s not possible for a person to download all repos from Gi
5. 905.▲
   by mtlynch 3y ago

   I played with it a little bit when you told me a few months ago it supports buildless.[0] The thing that dissuaded me is that it seems like it forces me to write my template HTML in strings, so I lose VS Code syntax highlighting and Prettie
6. 906.▲
   by mtlynch 3y ago

   This is great! I've been looking for a framework with exactly these goals. I've been using vanilla JS and custom elements and feeling like I'm writing too much boilerplate, but all the frameworks I've tried are too heavy
7. 907.▲
   by mtlynch 3y ago

   I'm not sure if the subdomain screws it up in your case, but my experience with Fastmail is that they handle this really well. I set up a catchall forwarding address, and then if I receive an email to whateverburner@mydomain.com, when
8. 908.▲
   by mtlynch 3y ago

   The word they transcribed as "shrude" was actually "shrew."
9. 909.▲
   by mtlynch 3y ago

   How are these generated? They seem to have errors that neither a computer nor a English-speaking human would make. They're sort of like how a child or a person unfamiliar with English might try to transcribe words they don't recog
10. 910.▲
    by mtlynch 3y ago

    I think it's just getting the HN hug of death. I'm in the US on fiber and seeing timeouts and 30+ second load times.
11. 911.▲
    by mtlynch 3y ago

    It takes a lot of work to manage an online community well. 50 EUR/year is probably lower than the true cost.
12. 912.▲
    by mtlynch 3y ago

    The attacker doesn't have to compromise the backend to achieve XSS. Suppose your website displays user-generated content (like HN posts). If the attacker finds a way to bypass encoding and instead injects JS, then without CSP, the atta
13. 913.▲
    by mtlynch 3y ago

    It's a tradeoff, and either extreme has problems. Too much abstraction (especially leaky abstraction the way web frameworks are) makes it difficult to reason about your application. But if you optimize for absolute minimal abstraction,
14. 914.▲
    by mtlynch 3y ago

    Oh, I didn't realize that. Thanks!
15. 915.▲
    by mtlynch 3y ago

    Ah, gotcha. Thanks!
16. 916.▲
    by mtlynch 3y ago

    My understanding based on the docs[0] is that htmx works with CSP, but it also drastically weakens its protection, as attackers who successfully inject JS into htmx attributes gain code execution that CSP would have normally prevented. Am I
17. 917.▲
    by mtlynch 3y ago

    I'm not sure what you mean. htmx and alpine.js are both client-side frameworks. To me, they seem to have similar goals and similar functionality. What do you see as the difference?
18. 918.▲
    by mtlynch 3y ago

    I really want to switch over to htmx, as I've moved away from SPAs frameworks, and I've been much happier. SPAs have so much abstraction, and modern, vanilla JavaScript is pretty decent to work with. The thing that keeps holding m
19. 919.▲
    by mtlynch 3y ago

    I get the same (relevant) results for the query of "aws" as freediver21. I've never seen Kagi miss something blatantly obvious like that, so I echo sibling's suggestion to reach out to Kagi to investigate what's goi
20. 920.▲
    by mtlynch 3y ago

    I've been using Kagi as my default search engine for four months for both work and personal use, and it's been a great experience. The only time I find myself re-doing a search in Google is when I want to look something up in Goog
21. 921.▲
    by mtlynch 4y ago

    I'm surprised the base price is only $2k. I have no experience with drones, but based on the video, I was expecting it to be like a $40k product.
22. 922.▲
    by mtlynch 4y ago

    This looks neat, but it's not a Show HN, as we can't try it out yet: > Show HN is for something you've made that other people can play with. HN users can try it out, give you feedback, and ask questions in the thread. &gt
23. 923.▲
    by mtlynch 4y ago

    It is the singer.
24. 924.▲
    by mtlynch 4y ago

    In 2017, Sidekiq was generating over $1M/yr in revenue.[0] It sounds like his costs are basically nil, so he's living the dream. [0] https://www.indiehackers.com/podcast/016-mike-perham-of-side...
25. 925.▲
    by mtlynch 4y ago

    I tried LogFlare (which is now Supabase Logs) in January, but it didn't work well for what I wanted. Supabase Logs / Logflare seems primarily interested in creating graphs from logs rather than using logs for diagnostic purposes.
26. 926.▲
    by mtlynch 4y ago

    There was a good Reply All about a similar phenomenon in Atlanta: https://gimletmedia.com/shows/reply-all/n8hodm
27. 927.▲
    by mtlynch 4y ago

    Cool, thank you!
28. 928.▲
    by mtlynch 4y ago

    This is cool! Thank you for sharing! I've fantasized about doing something similar. What resources did you find helpful in learning to do this? What would you estimate was your time investment to get it working?
29. 929.▲
    by mtlynch 4y ago

    The main purpose of the site is the discussion forum, which can't be a static site.
30. 930.▲
    by mtlynch 4y ago

    I can believe that, but I also have to take those claims with a grain of salt. Aside from Taleb, I don't recognize any of the people who claim Fridman blocked them, so for all I know, they tweeted obnoxious stuff at him and then compla