HNHacker News
TopNewBestAskShowJobs

yurishimo

2,579 karma · joined October 13, 2017

Twitter: @daronspence;

mastodon.social/@daron;

meet.hn/city/nl-Weert

Email: daron @ hey

submissionscomments
yurishimo··on Northflank Breached
How much of your public facing workloads rely on S3 if I can ask?
yurishimo··on PHP2Shell: Exploitation Attempts and Remediation Trends
What does being from a particular country have to do with a verified CVE?

It’s not like it was their first rodeo and they got lucky. There are lots of competent security companies located in countries all around the world, including ones you may not politically agree with.

yurishimo··on CSS-Tricks has a new owner
Awesome! Really happy for Geoff to be afforded the opportunity to bring CSS Tricks back to life.

Just goes to show that you can always make the world a better place with a little bit of luck and a lot of well placed effort. Kudos also to the pressure people put on Digital Ocean to do right by CSS Tricks and kudos to DO for allowing Geoff to take the site independent after their priorities changed.

yurishimo··on PHP 8.2.35
Yepp, we're seeing the Debian images now for 8.4.27
yurishimo··on Namecheap just seized and disabled all my domains
I like Cloudflare as a company but I’d be weary about paying for my domains and hosting my DNS with the same publicly traded company with a severe lack of public customer service outside devs getting mad on twitter (guilty!).

If cloudflare gets mad at you (even accidentally) and cancels your account then you lose everything. At least if you separate them, there is a chance that you won’t lose access to both at one time. Given that domains are generally a one time setup after purchase (especially if you use cloudflare for DNS) then I think the minor inconvenience is worth it, personally.

yurishimo··on Namecheap just seized and disabled all my domains
Many people use cloudflare for DNS. Few people use cloudflare for domain name purchases as that feature is much newer.
yurishimo··on Tesla Roadster
Isn’t FSD fully allowed in the Netherlands?
yurishimo··on Grieving the loss of details
UML is not a terrible idea from a systems architecture point of view but UML is absolutely terrible at describing business logic. And in today’s age of CRUD apps and frameworks, for some devs, business logic is the entire problem to be solved.

What is “valid” input? What is the failure scenario at the boundary for the consumers of your application? How are exceptions in the business handled? All of these are questions that might have a somewhat obvious answer, but if your goal as a business is to do something radically different compared to your competition, the “obvious” answer might be the wrong one.

yurishimo··on Big Tech ruined the cloud, so we're renaming ours
The post mentions bare metal so it’s possible they found a partner to collocate with in a few of the big regions globally.

Regardless, they also call out that what they offer is only an enhancement and if you use it as the only way to access your smarthome then you are not really using the software as intended.

We will see in 12 months if the migration was worth it. Nabu Casa is starting to push harder into B2C so we shall see if the product can keep up with the demand.

yurishimo··on Pi.dev: You Said No MCP
Glad I'm not the only want to find it a bit janky/broken at times. They seem to constantly be pushing updates which is nice, but I treat it mostly as a black box.

Anecdotally, I find the auto compaction (or what I assume is happening when the context magically drops) to be hit or miss. I do like how easy it is to use my work cursor sub and business chat gpt at the same time. Then I use nearly free cursor models for dumb shit and Sol for real problems.

yurishimo··on ASML says it sold 'absolutely nothing' in Europe in 2026
Where are you seeing that it’s being heavily regulated? The only thing I’ve seen is land procurement but that’s been a European problem for centuries now.

GDPR and other privacy related regulations have existed for basically a decade at this point so it should not be a surprise that companies need to follow those laws.

Anecdotally, there is data center and energy buildout talk here in the Netherlands, a country where land is the top priority for everyone.

Europe might not have a “frontier” lab but this is absolutely investment happening at breakneck pace.

yurishimo··on Flock is rolling out a voluntary severance program
Eh I think it depends on the country a lot too. The average UK citizen? Probably. Even as someone from abroad, I know the British are widely stereotyped as having cameras everywhere.

But Americans are raised from birth with the idea of “freedom” and a camera pointed at you recording your every move is antithetical to that. They somewhat tolerate it in private establishments like malls and restaurants but not in public spaces.

yurishimo··on My temporary PHP fix from 2014 has nearly 20M installs. Today I'm deprecating it
There’s a bit more nuance as to why. It’s not fair to say that the average JS dev is reaching for a package like is-odd/is-even.

Years ago when npm was just getting started there was a lot of experimentation and land grabbing for packages. A few “prolific” developers were pushing these tiny utilities and then using them in their own projects which ended up being required as deps in other projects and then snowballed into is-odd being included in webpack at some point (I think I have that timeline roughly correct).

It’s still a crappy problem for sure but it’s not fair to paint most JS devs with a brush so broad.

yurishimo··on Site Is Closed on Sundays
Honestly, I don’t mind it. Our lives are so commercialized as it is. If I can’t order a new stroller until Monday, I think I will survive.
yurishimo··on GPT-6 Astra on OpenRouter
How much code are you shipping in a day? I find I can pretty comfortable use Sol high most of the day and stay within the 5 hour limit. I’ve got too many meetings to allow me time to write code continuously for an entire day. I usually finish about one ticket a day and then review 1-3 tickets for my colleagues.
yurishimo··on .gitignore Everything by Default
In my opinion this will pretty quickly solve itself though. Accidentally committing keys to the repo potentially ruins your entire week. With a default disallow all list, you might have one bad deploy oopsie and then commit the files.
yurishimo··on Japan halves speed limit to 30km/h on all narrow city streets
There are some loopholes that exist for many european countries. The Netherlands has one cybertruck afaik.
yurishimo··on The Harness Is the Thing
Whats wrong with the font size exactly? Im not a desktop to check it but its look fine? A bit unusual but I wouldn’t say a clamp with a bunch of math is invalid.
yurishimo··on AWS Acquires DuckLabs
How much do you really need for generational wealth? In my opinion, if you're more than 10 years away from retirement and received a surprise $1 million, you're setup for the rest of your life and your children as well assuming they don't immediately blow it all when you die (that's what a good trust should be for).

Assuming historical returns, your money doubles roughly every 7 years, so within the rest of your lifetime, that 1 million should turn into at least 8. That's an extremely comfortable upper-middle-class lifestyle on the interest payments alone. If your children don't spend it all, your grandchildren would easily have private jet money by the time their parents retire.

yurishimo··on New Mac mini, featuring M6 and M5 Pro
Memory orders mean nothing if the money dries up. Perhaps nvidia can float the entire market for a year or two but if the AI labs don’t start making good on their promises and pony up some cash, everything is going to crash.
yurishimo··on Small, native web tricks worth remembering
How is an archived web site supposed to be a good resource on modern html and css development exactly?
yurishimo··on HTML Can Do That
For sure; and it will continue to be an issue as long as we allow old browsers to exist. I’m definitely not saying you shouldn’t have backend validation, just highlighting where the frontend validation provided by the browser is not as universal as it might appear on the surface.

FWIW I find the native date picker to also still be quite poorly performing in practice, despite quite robust browser support. I wish it worked better but for many reasons, I still see plenty of users (or bots?) who submit dates in the wrong format for whatever reason. My current hypothesis is largely focused on password managers though since they will often do whatever they want directly in the value attribute of an input element.

yurishimo··on HTML Can Do That
Where did I say to forgo backend validation? Of course you validate on the backend as well, but the better UX would be to prevent the user from entering a bad value to begin with, assuming it fits within your team’s performance budget.

I’m not advocating for willy-nilly package inclusion, just highlighting a current shortcoming of datalist that is often not mentioned in these sorts of articles.

yurishimo··on HTML Can Do That
Thanks for the vouch! The rest of the article was indeed good but I find a lot of value in hacker news comments precisely because someone comes back to the comments and lays out why what I just read might need a different perspective. If you just want to see cool stuff that a browser can technically do, we are all capable of reading the Chrome dev blog, but we come to HN for a wider perspective. Someone telling a war story about how some little tidbit came back to bite them is also valuable (imo).
yurishimo··on HTML Can Do That
Just a heads up but datalist is not really a great solution if you need a strong contract. The user can still type whatever they want into the field and there is no fuzzy filtering or typo mitigation. Once you add those requirements, a library that gives you a more fully featured combobox is likely going to make a lot of sense in your project.
yurishimo··on Incident with Github.com [resolved]
Except you cannot run a business in Asia with datacenters in the US. The latency is unacceptable.
yurishimo··on Shattered skeleton is first confirmed death from trebuchet
War… war never changes.
yurishimo··on They don't make 'em like Sublime Text anymore
Printf works just fine in a lot of languages and domains. Not everyone likes to use a step debugger.
yurishimo··on I don't recommend Tailwind CSS
I have the opposite experience regarding where it’s useful. In large teams , using an atomic css framework provides good guard rails and predictable behavior. I can confidently copy a marketing page or some random thing on the other side of the company and with very minimal tweaking, it will probably work. With normal CSS, the cascade is much more likely to cause subtle shifts in behavior over time as the main stylesheet is extended and modified.

To be clear, I like css and I find the cascade a great tool, but I also have first hand experienced the pain of too many chefs in the frontend styling kitchen and the havoc that seemingly innocent tweaks here or there can wreak on a site and I prefer tailwind for that reason.

yurishimo··on I don't recommend Tailwind CSS
It’s random sure, but it’s also reliably random. This is one of the few footguns that exist in tailwind and luckily it’s super easy to catch. The IDE plugins will give you a warning if you apply multiple classes that manipulate the same attribute and there is no reason you also can’t catch it in CI.

Is it ideal? I guess not, but there are a lot of weird gotchas and footguns in CSS too. Just because they’re in the language doesn’t make them magically more or less of a problem. For a similar weird mental shift, consider adding @starting-style and the native popover open attribute. All the good tutorials online have a warning about cascade order because as a human reading it, it can seem wrong or backwards.

Kevin Powell’s most recent video about animating display: none covers it if you want a concrete example.

Page 1 of 34Next →