JakaJancar

Just use an iPad?

I’m optimistic about this. A system with these agents rummaging around for a while will be much more secure than one without.

We’ve learned security through obscurity is bad. Not using these will be security through ignorance.

Hopefully it will push us to not only fix individual issues but close entire classes of possible gaps, once P(discovery) gets much higher.

Love that it’s embeddable, I needed exactly this for the upcoming app I’m shipping!

I have a phone number that is +1(gapless non-decreasing sequence). I’m entertained every week by developers testing.

(Also, people using it as a fake number for some appointment/reservation - which I sometimes update to change their name or add a special request :))

I don’t think OpenAI gets enough credit for exposing GPT via an API. If the tech remained only at Google, I’m sure we would see it embedded into many of their products, but wouldn’t have held my breath for a direct API.

Ah yes, Linux on a laptop: wifi, sleep, graphics - pick any two

They enshittified/Dropboxified their core Docker Desktop app so much that OrbStack — I believe a single person initially — managed to build a better product. I love this outcome.

Procrastinate does have scheduled tasks but maybe I’m missing some other part of beat you mean (never used celery)

Assuming you're fine with keeping the queue in postgres, I've used Procrastinate and it's great:

https://procrastinate.readthedocs.io/en/stable/index.html

Core is not Django-specific, but it has an optional integration. Sync and async, retries/cancellation/etc., very extensible, and IMO super clean architecture and well tested.

IIRC think the codebase is like one-tenth that of Celery.

The "Unix Domain Sockets breakthrough" sounds kinda suspect to me. I'd imagine you should be able to push at the same rate to stdout with a smart MPSC design.

I didn't mean to imply Google was covering anything up, but Gemini in this specific conversation clearly was.

You have some weird definition of "root".

One obvious thing I still can’t believe pg doesn’t have is the ability to define triggers at the database or schema level. I must have written code to mass generate DROP/CREATE TRIGGER probably 5 times (yes I know you can reuse the trigger procedure itself). And then you need to remember to re-run whenever tables are added/removed.

I often suspect things in Settings, esp. account/iCloud section to be webviews, just based on how they load (icons appearing a short moment after the page opens for example).

Makes sense, thanks!

HN comes through in 10 min :)

I didn't know about CA/Browser forum and the Baseline Requirements. Thanks, will check it out!

// Edit: Relevant section:

The Subscriber Agreement or Terms of Use MUST contain provisions imposing on the Applicant [..] the following obligations and warranties:

[...]

Protection of Private Key: An obligation and warranty by the Applicant to take all reasonable measures to assure control of, keep confidential, and properly protect at all times the Private Key [...]

Love it!

I always liked Balsamiq, it really forces you not to obsess about the pixels too much, but it was so slow/bloated/buggy, like something from the Java on desktop era. This is much smoother!

That makes sense. I would guess if you're completely blind or can't smell or taste, you're less picky too. And if all of the above, you're not picky at all.

Haha, thanks. It seems we share a pet peeve. I assume you know https://sso.tax.

If AI can code anything, it should certainly be these small scripts. This is the current area of exploration.

Pingdom (original), Checkly, etc. are for monitoring your websites, from "outside", with a focus on availability (super frequent checks, from different geos, ...).

Datadog, New Relic, Pingdom APM, etc. are for monitoring your production environments, from "inside", deeply integrate with your code, with a focus on availability and troubleshooting (stack traces, distributed tracing, ...).

Assertly is for monitoring of your systems (production, or custom in-house internal, or licensed SaaS) and making sure they behave in a way they're supposed to, with a focus on security, integrity, compliance (more complex, customized checks that run for example daily).

AI noob question:

Why do OpenAI/Anthropic/... not support constraining token generation? I'd imagine producing valid structured output would be at the top of their feature request lists.

Ah, cool, didn't know - joined the train late.

I've adopted the practice of avoiding libraries with major version > ~3. If you needed to re-design your API so many times, I don't trust your judgement enough to build on top of it.

That said, I still use React and... it's at 19.x :'(

The lack of export scares me too, but is it really a problem?

If I were to switch to Linux, I guess it just means that I'd have to go through the forgotten pass(key) flow on every site on first login?

Maybe an edge-case in some codegen?

I lived in the West Village for the last 6 years, also facing the courtyard and maybe seeing 20 apts, pretty much all consistently utilized

¯\_(ツ)_/¯

The use case is that I’m an Apple/iCloud user and want to migrate to Google/Linux/whatever and don’t want to go to 100 sites manually to change my passkey?

One thing where the semantics are not the same between HTTP/1.1 and HTTP/2/3(?) is the `Host` header, which is often (always?) gone in the latter in favor off the `:authority` pseudo-header.

Apps/scripts may rely on `Host`, but the underlying HTTP/2 server software might not normalize/expose it in a backwards-compatible way (e.g. Hyper in Rust).

Technically I guess it’s the browsers fault it doesn’t set it.

I would be curious to know if there are other such discrepancies that apps migh run into when enabling HTTP/2/3.

Well his username is bad_user :)