rognjen

FOMO is another way of saying risk mitigation though.

Sure it's not a silver bullet now but what if it becomes in a year or two and they didn't do it...

Ah the eternal debate between open source and Open Source.

This is an entirely predictable next step - the only surprise is that it took so long to happen.

They progressively replaced all the default apps with the Google alternatives.

A Chrome-Chromium type split was only a matter of time.

Entirely anecdotally, I have daringfireball in my RSS reader and I read it a lot more a few years ago than now.

Might be that I changed, might be that the content changed.

I feel that my preferences are generally quite aligned with the bulk of HN readers...

That is a really very likely scenario.

The attacker was trying to compromise agentkit and found changed-files used in the repo so looked around. Found that it was using a bot with a PAT to release.

Totally possible the bot account had a weak password, and the maintainer said it didn't have 2FA.

They got the release bot PAT so they tried possibly quite an obvious vector that. They didn't need anything sophisticated or to exfil the credentials because agentkit is public.

It just so happened that it was detected before agentkit updated dependencies.

It's possible that with if thye had checked the dependabot config they could've timed it a bit better so that it's picked up in agentkit before being detected.

edit: Although, I don't think PATs are visible after they're generated?

Yes, but:

a) you'd need write permissions for the original remote

b) even if you did, that'd push the commit to the original repo with the tags

Wow! space.com does pretty much everything you can think of to "extract max value" from each visitor.

It's got a lot of ads, traffic arbitrage, floating unrelated videos and even back jacking...

There doesn't seem to be a PR for the commit though.

> Update the tags in the parent repository to point to the SHA of the fork

I don't think that's possible.

Forks are a GitHub UI construct.

There would be two .git dirs so for all intents and purposes they're two repos that don't know about each other.

Locally you can't refer to a commit that's in a different dir...

My goto was basically: "I want to do <x>. What do you think?" (but a bit more diplomatically phrased)

Some examples:

- Change the way standups are done - Do something not directly related to the team - Do debt - Change / take over the way a project is being done

In general it worked well because either I had a good idea in which case I'd often get the agency to do it, or perhaps not directly but a path towards it or it wasn't and I learnt something.

It's interesting how your list contains points that are almost duplicates of each other:

- fear of original ideas = cognitive conservatism = preference towards bias

And kind of opposites:

- decision anxiety = results from, or brings about, too much measuring

So, I guess those can be digested to say that engineers are:

- Innovative - Make informed decisions

Y'know what might be good: instead of showing the AI answer as a regular one, like the cesspool that is Quora, show the answer only to the poster with a CTA to accept or reject the answer.

If it's accepted, it's posted.

Not only would this be more user-friendly preventing random slop but would probably allow them to collect a non-negligible amount of feedback for training.

Talk about putting the cart before the horse.

The likelihood that this doesn't survive till August is much more significant than you imagine.

The likelihood that it dies a few months after you leave is greater still.

Take the 3% as schmuck insurance and move on with your life.

I'd suggest you follow Jetbrains' pricing structure.

While admirable, a one time payment for a service you host is fair neither to you (what if I use it for 10 years) nor me (what if you shutdown tomorrow).

On the other hand, a one time fee for analytics I could deploy on my server a) makes financial sense for you and b) is an intriguing value proposition for me.

Have a look at https://once.com/

> is strange given its location,

Strange in the current context that it's not in the Middle East but not strange when you look at the map and see that it's a straight shot for a trading ship from the Middle East a thousand years ago.

Besides the useful content, the article employs some clever interactive elements.

But video streaming is typically very battery intensive tho

dang perhaps merge this and https://news.ycombinator.com/item?id=41168904

> IDE support

RubyMine is great.

There's no mention of React in the post...

History of God by Karen Armstrong

This https://news.ycombinator.com/item?id=38990879 thread has some info about why you might want to care at least a little

How does it work?

You're probably right that the first would have been more accurate.

Glad you didn't quit :)

But as I mention:

> Please note these are suggestions for when you might need to re-evaluate, not indications that you’ve failed.

imo 10M revenue falls firmly within the lifestyle business category.

If you're a solo bootstrapper making $300k per year, you aren't thinking of quitting ;)