tabbott

8 ms·

61.
by tabbott 10mo ago
Yeah their work thus far has been an incredible public service to the Python community.
62.
by tabbott 10mo ago
Very exciting! I guess I'll have to wait for Django and Pydantic support to migrate to it on Zulip, but type checking was the last major linter that's still slow in Python.
63.
by tabbott 11mo ago
I think most projects limit commit message titles to 68-72 characters, not 50, which is indeed too little to say much of anything. I don't find it hard to write 70-character summaries, and as a maintainer, I find it very useful to have
64.
by tabbott 11mo ago
I like that this tries to extract from the human the information that they didn't provide in their initial commit message. So many tools go the direction of asking AI to generate a commit message for you, which will spend most of its s
65.
by tabbott 11mo ago
No. See the "Sponsorship and discounts" section on the pricing page, which makes clear the 10 users limit for free usage of the mobile notifications service is for workplace use, not communities.
66.
by tabbott 11mo ago
What do you see as the gotchas with Zulip for community use? Zulip is 100% open-source, and we sponsor our hosted services (mobile notifications, etc.) free for OSS projects.
67.
by tabbott 11mo ago
Unfortunately, cyber attacks are an application that AI models should excel at. Mistakes that in normal software would be major problems will just have the impact of wasting resources, and it's often not that hard to directly verify wh
68.
by tabbott 11mo ago
Poor quality, user-hostile experiences are a very common consequence of entrenched monopolies. So many companies buy Microsoft regardless of the quality of the actual products. Given that context, why would directors invest in an expensive,
69.
by tabbott 1y ago
I'm not sure for Android. Chrome's store has a history of legitimate free apps with millions of users but little revenue being purchase by threat actors who then add malware to the app. But I've seen fewer stories of that sor
70.
by tabbott 1y ago
Yeah my reaction was: - The class of threat is interesting and worth taking seriously. I don't regret spending a few minutes thinking about it. - The idea of specifically targeting people looking for Crypto jobs from sketchy companies
71.
by tabbott 1y ago
I'm sure there's subtle details to manage here. But "You can exfiltrate data be opening a browser" is a weak argument: One can display the URL to be opened to the user if such an Internet-limited app asks to open a brows
72.
by tabbott 1y ago
They could have made it a setting, with an explanation of the security benefits of it, so that folks who are paranoid can take advantage of it. A relevant threat scenario is when you're using your phone in a public place. Modern camera
73.
by tabbott 1y ago
In my view, the core issue here is that Android's permissions system doesn't consider "Running in the background" and "Accessing the Internet" to be things that apps need to ask the user for permission and the
74.
by tabbott 1y ago
I feel like too little attention is given in this post to the problem of automated troll armies to influence the public's perception of reality. Peter Pomerantsev's books are eye-opening on the previous generation of this class of
75.
by tabbott 1y ago
I predict that people will end up using the term "vibe engineering" to refer to development processes that involve asking an LLM to build their entire app: UI design, database schema, architecture, devops, QA, debugging, etc, with
76.
by tabbott 1y ago
For what it's worth, Zulip has a Mattermost data import tool, and communities are an important use case when we set product direction. While I can't promise we won't ever change our exact monetization strategy, we're not
77.
by tabbott 1y ago
Microsoft Teams dominates the team chat market thanks to anti-competitive bundling practices. Slack's proprietary "Slack Connect" federation system requires both users to pay for Slack for their entire workspace. Slack has ve
78.
by tabbott 1y ago
https://blog.zulip.com/2025/06/17/flutter-mobile-app-launche... and the previous blog post linked from there gives some context as to why we rewrote the Zulip mobile apps from React Native to Flutter. Our Flu
79.
Zulip 11.0: Organized chat for distributed teams (FOSS)(blog.zulip.com)
4 points by tabbott 1y ago|0 comments
80.
by tabbott 1y ago
I think we agree here that the US/Europe jurisdiction difference is relatively minor compared to questions about the software itself. What's dangerous is the framing; many E2EE messengers give the server a LOT more power than &quo
81.
by tabbott 1y ago
I think this is a dangerous view. As we've seen with the libxz attack, skilled developers are very capable of hiding backdoors/vulnerabilities in security software, even when it is open source. So it's very important whether
82.
by tabbott 1y ago
Apple's app store practices are an abusive monopoly, and I wish the Proton folks luck. We once had a Zulip update rejected by Apple because we had a link to our GitHub project with the source code for the app in the app itself. And it
83.
by tabbott 1y ago
If you're doing consumer chat with friends and family, I'd recommend Signal over Matrix or Zulip. For a community: A lot of communities want anyone in the public to be able to join their spaces and read their channels. For that us
84.
by tabbott 1y ago
Some of the quotes in the article try to blame some of the harm from Coinbase's data breach on "know your customer" regulations. It's such self-serving nonsense. Society is within its rights to demand that financial inst
85.
by tabbott 1y ago
Zulip's notifications service is free for community use, as well as business use up to 10 users. If you're not a business, why would you need to build a fork? Just spend 5 minutes filling out the brief community plan form and you&
86.
by tabbott 1y ago
Yeah, Element hasn't tried push notifications for monetization, and they are FOSS. I will note https://element.io/pricing only advertises self-hosting options starting at $10/user/month. I think they've
87.
by tabbott 1y ago
As of 18 months ago, both Mattermost and Rocket.Chat, the other popular self-hostable alternatives to Slack, required a paid plan for mobile push notifications at the time we started charging for them (they are open core, so they also gate
88.
by tabbott 1y ago
We're very actively working on end-to-end encryption for notifications; it'll be in the Zulip 11.0 release this summer if at all possible. While I'm here, the Flutter rewrite of the mobile app is launching next month, and whi
89.
by tabbott 1y ago
I lead the Zulip project, and frankly this comment is highly demoralizing. For what it's worth, Zulip is entirely FOSS. In contrast with most commercial open source software on the market today, Zulip charges only for Cloud hosting, pu
90.
by tabbott 1y ago
I have a very similar experience. Some students who want to get involved in contributing to open source will try to contribute to Zulip by taking whatever they wanted to say and asking ChatGPT to write it better for them, and posting the re

More ›