HNHacker News
TopNewBestAskShowJobs

csiegert

104 karma · joined January 4, 2017

https://christian-siegert.com
submissionscomments
csiegert··on MacBook Pro with PROLED XDR Display and Touch
He has been CEO for all of five minutes. These products have been in development much longer.
csiegert··on Evolving Threat: http2shell is an RCE in Node, Python, and more
No. After your unhelpful answer I started investigating if my deployment is affected.
csiegert··on Evolving Threat: http2shell is an RCE in Node, Python, and more
I know that it is dead but since they provide security updates for another year I haven’t migrated off of it immediately. Anyways, the Deno runtime uses a brotli Rust crate that does not wrap C code, and with unsafe off, so I assume it is safe.
csiegert··on Evolving Threat: http2shell is an RCE in Node, Python, and more
Is Deno affected, too? It uses brotli by default. But I don’t know how it is implemented.
csiegert··on Cloudflare acquires Deno
I think Deno’s VC money ran out (see the layoffs a few months ago) and Cloudflare offered a stable, well paying job, maybe with stock options.

Just this morning I checked the Deno blog (again like so often in recent weeks) to see if they are still alive. The number of mentions in Hacker News posts and comments was zero in recent weeks. The project was basically dead or abandoned already. Sucks, because I went all-in on Deno.

csiegert··on Cloudflare acquires Deno
I’m disappointed that they discontinue the Deno runtime. It really is a joy to use.

I think they ran out of money and joining Cloudflare was their only remaining option.

csiegert··on Tcl/Tk 9.1
FFS, I clicked around for a few minutes and not a single screenshot of what the GUI toolkit is capable of. Even the highlights’ “Themed, Truly Native User Interfaces” chapter and the freaking docs that describe the widgets do not show a single screenshot. I’m shaking my head in disbelief.
csiegert··on Pull request limits are cutting down the noise
There is also the solution of: No merge requests, just feature wishes and bug reports. All code is written solely by the maintainers (with the help of LLMs).
csiegert··on Meteor Explodes over Massachusetts
> Interesting this also happened in South Carolina and Ohio within the past few months.

Sounds like the beginning of an alien invasion movie. Sleeper ships buried themselves into every state. Waiting for the mother ship to arrive.

csiegert··on OpenAI demand sinks on secondary market as Anthropic runs hot
How does that work? Is there a VSCode extension that works with all of them? I’ve only used the Claude Code extension for VSCode and would prefer something like that.
csiegert··on MacBook Neo
Now give us a 17-inch laptop, please!
csiegert··on Scaling PostgreSQL to power 800M ChatGPT users
Why don’t you change the order to “do work, if successful, grab a connection from the Postgres connection pool, start a transaction, commit, release the connection to the connection pool”?
csiegert··on Help us raise $200k to free JavaScript from Oracle
WS is already taken by the WebSocket ws://… protocol.
csiegert··on Chromium Switching from Ninja to Siso
Please add punctuation. I had to read it twice to understand.
csiegert··on Deno's Decline
It’s definitely nice to know that nothing gets executed, read, written or sent without permission from the user when running a program/script with Deno.

You complain the flags always have to be set to get anything working so they are supposedly useless. No, you don’t have to set them in a grant-all fashion. All flags allow fine-grained permissions, e.g. --allow-env=API_KEY,PORT only allows access to the env vars API_KEY and PORT instead of all env vars. The same principle applies to --allow-net, --allow-run, --allow-read, --allow-write, etc. See `deno run --help` or https://docs.deno.com/runtime/fundamentals/security/ for more.

csiegert··on Tell HN: Robots.txt pitfalls – what I learned the hard way
I’ve got two questions:

1. What does it look like for a page to be indexed when googlebot is not allowed to crawl it? What is shown in search results (since googlebot has not seen its content)?

2. The linked page says to avoid Disallow in robots.txt and to rely on the noindex tag. But how can I prevent googlebot from crawling all user profiles to avoid database hits, bandwidth, etc. without an entry in robots.txt? With noindex, googlebot must visit each user profile page to see that it is not supposed to be indexed.

csiegert··on $20k MRR in one month, Stripe destroyed everything on 1 second
The developer said it’s not adult content.

https://www.reddit.com/r/SaaS/comments/1dfwg1i/comment/l8mlm...

csiegert··on James Webb Space Telescope Finds Most Distant Known Galaxy
Your unit is wrong. Giga means billion. The universe is ~14 Gyr old.
csiegert··on Spotify Car Thing will be discontinued
Mail the device to Spotify’s headquarters. Better, a Swedish artist should build a memorial made of these devices in front of Spotify’s headquarters.
csiegert··on LoaderShip – CSS-Only Loaders
The About page (link top right) says “Loadership is a side project of Jingcheng Chen” and links to https://chen.works/
csiegert··on LoaderShip – CSS-Only Loaders
The activity indicators look nice and the configurator is great! Bookmarked.
csiegert··on Disabled at 22 million commits
It’s GitHub, not HackerHub. That the story is reported on Hacker News is irrelevant.
csiegert··on Tell HN: Twitter switched temporarily to rate limited mode
I find the scraping explanation plausible. Some search engine bots are aggressive. With all the AI hype, I first thought of Microsoft Bing scraping Twitter at full datacenter speed to suck in more information for OpenAI.
csiegert··on Texas airport worker dies after being sucked into Delta plane engine
Another case?! On New Year’s Eve, a worker got sucked into an engine and died. Even though the pilots announced they’d have one engine running and there were safety briefings minutes prior.
csiegert··on Alphabet selling Google Domains assets to Squarespace
What’s a cheap and reliable registrar? GoDaddy bought my registrar and renewal prices are about to double for me.
csiegert··on Buy well, buy once
You’d think if you pay more you get quality. I paid 280€ for the Microsoft Surface Headset 2 when they came out. After a year and a half, the plastic head band cracked in half. The part of the device that is stressed whenever I put the headset on or take it off was cheap plastic and just broke with regular use. 280€ down the drain because some MBA or stupid designer said hey let’s use cheap plastic.
csiegert··on Why your smartphone is causing you ‘text neck’ syndrome (2019)
You will still want to use your phone, on the go or sitting waiting for someone/something, or slouched on the couch. How does VR (a closed headset isolating you from your environment) help with that? The solution to looking down all the time is looking straight ahead instead. If we suggest ideas, mine is to make phones lighter and and easier to grip so you can hold them up easily and for a longer period of time. And if you suggest a necessity… Let me suggest a standing desk as a necessity.
csiegert··on Deno 1.33: Deno 2 is coming
Deno Inc. has two core products: The free Deno runtime and the for-profit Deno Deploy, a Deno hosting service with 35 locations around the world. The question that often popped up was where to store data. Deno Inc. provided several guides to connect to different cloud services. But they want the friction reduced to a simple `await Deno.openKv()`.

Deno Inc. has enough expertise in running a global service that two other companies rely on their work to offer edge functions to their customers (Netlify and Supabase). Adding a database to the service makes sense. And to be clear, they don’t develop a brand new database. They build atop of SQLite and FoundationDB.

csiegert··on Reddit's website uses DRM for fingerprinting
For anyone interested in just consuming pictures/videos from Reddit without clutter, try https://popular.pics
csiegert··on Using React, Redux and SSR to acommodate users without JavaScript
But then you don’t keep the state in the URL.
Page 1 of 2Next →