airtonix's comments

On: Ditching Obsidian and building my own

[airtonix]

or zerotier

On: Espressif's ESP32-C5 Is Now in Mass Production

[airtonix]

Any alternatives that aren't consumer hostile?

Should we just be pushing harder for "Works with Homeassistant" certification?

On: Flaw has Microsoft Authenticator overwriting MFA accounts, locking users out

[airtonix]

thank god it returns error codes.

i hate apis that only return strings meant for UI display only.

[notpushkin → airtonix]

If only the UI did display anything useful here too!

On: Stop Microsoft users sending 'reactions' to email by adding a postfix header

[airtonix]

On second thoughts (looks at Camelot), let's not go there. It's a silly place.

On: Show HN: Horizon – Private alternative to Imgur

[airtonix]

you should protect yourself from free plans going viral and costing you more than you'd like with rate limiting rules of some kind.

[sweca → airtonix]

I see your point, but the business model can sustain a large influx in free signups. I will keep this in mind though.

On: Git-cliff – Generate changelog from the Git history

[airtonix]

spent 3 years on a team hoping they would step up a write meaningful changeset titles...

however. ended up just getting:

- fixed things. - creates new feature x - fixed broken thing.

instead of something that's appreciable by non technical people:

- when navigating to the nuclear launch code dashboard, a user is no longer mocked for having a likeness to <current unpopular person>.

point here is. if your team didn't write good squash merged PR titles before, they won't magically start doing so because you're using changesets.

On: Show HN: From dotenv to dotenvx – better config management

[airtonix]

point is: where and how you do get this key when in prod?

[michaelmior → airtonix]

Part of my point is that if you care about security, you need to be thinking about these things. Forcing encryption then also forces you to think about how to provide the key. Of course, it's possible to do this in a very insecure way that defeats the purpose of encryption in the first place, but I think it moves things in the right direction.

[progx → airtonix]

The "securest" way is, you start your app and the app awaits the input of the key, it is only in the RAM.

But in reality, nobody will do that.

On: Facebook let Netflix see user DMs, quit streaming to keep Netflix happy

[airtonix]

not if you log in to enable and agree to share such messages. no.

On: Doom Captcha (2021)

[airtonix]

just spam click... autowin.

On: Show HN: RemoteStorage – sync localStorage across devices and browsers

[airtonix]

how is this different from remotestorage.io ?