It does not work in latest Firefox, so it is lie to call it "Decision model in your browser". It rather "Decision model in your Chromium browser where WebGPU is enabled"
109 karma · joined August 19, 2023
Yeah, we really live in age of Internet Explorer 6 yet.
We already have cool features in browsers, like transparent backgrounds, rounded borders, and even HTML 5 video elements, but we still cannot use VM intensively for any purpose with no hassle.
Maybe 10-50 years later we finally can use Linux laptop with RTX 5060, and just run a Call Of Duty multiplayer while a local LLM will fix bugs in our code.
Email is fine when it is an option. Mullvad have even option to pay with a credit card & PayPal. That's more sensitive data than Email.
Tomorrow they will do it again, and attackers will replace binary files that users download with this random script. Or this script will steal crypto/etc.
To make attack vector difficult for hackers, it's preferable to download any software as packages. On linux it looks like `apt install python3`.
The benefits is
1. Repositories are immutable, so attacker can't replace binary for specific version, even if they will hack all infrastructure of DuckDB. Remote script may be replaced anytime to run any code
2. Some repositories have strict review process, so there are external reviewers who will require to pass security processes to upload new version
The single one method how to install DuckDB on laptop is to run
`curl https://install.duckdb.org | sh`
I've requested to deliver CLI as standard package, they have ignored it. Here is the thread https://github.com/duckdb/duckdb/issues/17091
As you can see that it isn't single slip due to "human factor", but DuckDB management consistently puts users at risk.
Recently I've tried Baldur's Gate 3, gameplay looks nice, but options in dialogues written by 12 y.o. kid. It would be nice to talk via LLM that would have the described character personality.
The typical problems of any code base with no tests is a regression bugs, rigid team (because they must keep in mind all cases when code may destroy everything), fear driven development (because even team with zero rotation factor don't actually remember all problems they've fixed).
So definitions does not matter when stats that author refers, does not include a developers who own over 50% code in repo, but includes me as contributor.
That's widely known problem of programmers to believe that world is perfect and all data are always actual. Actually it won't.
It looks they consider as maintainer only those people who listed on package.json, not a real number of contributors on github or anything.
So all conclusions in this post is based on wrong assumption and incorrect data interpretation. That's all you need to know about it.
I think you could list random people on github in your package.json to looks cool in eyes of stats cultists.
I'm developer of "Linguist", a browser extension for translation in browser, and I say you that nowadays it is possible to translate text locally in device. Linguist have embedded offline translator. The same with TTS and voice recognition.
All this features may run locally in-device, even in browser extension, but not in macOS application?
This product looks rather like a malware that will spy on users and then blackmail us or sell our conversations to email scammers for better targeting or anything.
Additionally it is interesting that Chinese and Korean languages is not supported. You just use cloud services, they are all support these languages, why you don't? Is it to fake something?
"12 hours translation per month" for $29. 12 hours it's about 6-12 meetings? Who is your audience then?
Why?
A lot of times I faced with page 404 when clicked GitHub links that have been moved.
Isn't it good idea to do it like that - Move repo to new org (to move stats and activity) - Create repo with the same name that are fork of a target repo - Update readme to explain repo was moved - Archive the repo to place a warning on top of the repo
This way make users have to click link in original github repo, to go on your repo.
So it would be a problem if you need to show a numbers and you need to fake activity. But if you don't need fake activity, it is not a problem, because a real people who really looking for solution will be able to click one more link.
On the other hand, this way ensure that whole content will be available by indexed links.
How to prevent 404 and why people still faces with it on GitHub?
Currently it sounds you just a kid who want to be paid. Is there anything more except "you all owe to me" in this claim?
I believe, once in deep future, an open source developers will grown and stop repeating this sectarian mantra.
No one owes you anything. If you do opensource and you need in money - use your open source as marketing tool to promote services you sell.
It's simple as 2+2, I've mention it in my blog post https://vitonsky.net/blog/2025/06/24/open-source/
I think those who believe a companies will pay to you for a random OSS is just a kids. Ask people who can use a sheets, they explain you why your product will die with this approach.
Quote > Decryption of messages in encrypted rooms always end with error `Error: Can't find the room key to decrypt the event`
Maintainer action is "turt2live closed this as not planned on May 10, 2024"
It's all you need to know about a goals of Matrix and its success.
Matrix protocol is over-complicated, as consequence any SDK and even clients are over-complicated too, that eventually makes any interaction with Matrix is difficult, unpleasant, and error-prone.
Matrix design is error-prone by its nature:
Keys exchange confuses many users, I had many questions of people who are not programmer.
Matrix encourage login at random sites who up their web client, that is critical security problem.
But a Matrix fans are blind to a problems. This is why I don't believe Matrix will transform from marginal chat for freaks to a mainstream chat where people talk. So eventually, Matrix is a platform where Matrix fans talks about Matrix and send porn to each other.
Literally everything in Matrix is designed against privacy and security. Check issue I mention above. The product that is "privacy focused" would never have such type of problems that will force developers to say that lack of encryption for chats is a minor problem that will not be fixed.
Every client looks bad, works slow and most of them have only subset of features.
At 2025 year I still can't see online status when I use most popular server and client.
When I use SDK as a developer, *I can't use encryption* for bots. I've created issue about it over year ago https://github.com/turt2live/matrix-bot-sdk/issues/363 and maintainer just closed it as not planned to fix.
Matrix Protocol is overcomplicated and ridiculous. As I understood, the reason of mentioned problem with lack of "online status" feature is a high network load that yields by presence status feature, so server owners just disable this feature.
It is ridiculous that messenger who state it is "privacy focused" - can't handle encryption for bots and sell us idea that it's fine to log-in in my account on random site on internet. Because any site where i enter my password and secret key, may steal my password.
The same thing with applications. "Reference implementation" of app is an Electron app that loads javascript from internet and may inject malware anytime.
My impression is that Matrix is a scam to spy over people who blindly believe in security, like a Telegram does.
It runs very slow. Test case that run translation for text in 3k chars multiple times, takes about 30 seconds for google translator, but more than 10 minutes for `nllb-200-distilled-600M`.
Text sample: https://github.com/translate-tools/core/pull/112/files#diff-...
My tests runs on nodejs, it looks in browser it have no chance for real world use
If this API will be implemented in next few years, there will be browsers who hold up the world in progress.
Linguist have enough many users, so we could expose this API for client side code, and users with browsers where Translation API is not implemented yet, could install Linguist and sites who uses Translation API would works fine. Translation API calls would proxy by Linguist and preferred translator module would be used.
Any thoughts about it?
So i have question to HN too, what a good ways you know to backup GitHub repo with all stuff from there?
I tried a gitea, but it may only copy repo once, but not sync changes.
Of course I will fight to keep features in both browsers, but chrome really fight for money and against a good UX
For an instance, i've built a Linguist, is a full featured translation in browser that may translate even offline (with embedded Bergamot translator of Mozilla) https://github.com/translate-tools/linguist
One of important Linguist features is that user able to use custom translators, it means user may insert their javascript code that implements a translator class, and then use their custom translator. So it is possible to use ChatGPT as translation module in Linguist, or even local instance of LLAMA, any proprietary translation service API, etc.
But with manifest V3, google also ban RCE (remote code execution), so probably when i will implement a feature "custom translators store" where will be present a lot of custom translators from a github, and this feature will fetch their code when user press "install", a google will ban this version, and i will be forced to roll back this feature for chrome, and leave it as is in Firefox.
As result, a Chrome users will always have a "simplified" versions of features and we will have inversed case with Browser API features (when site tell you "go chrome to run my features"). An extensions will notify their users "go firefox to have all features like a custom translators store or ads blocker".
Is this a distributed and balkanized web3?
You may think you can detect any scam, but scam may be targeted and complex