Hacker Newsnew | past | comments | ask | show | jobs | submit | pstadler's commentslogin

This and high resolution displays, for me at least.


What is submarine marketing? Asking as a non-native English speaker.


It means it's an article paid for by a PR firm and subtly benefits one of their clients (while the topic of the article is true, or at least not an outright lie, and not obviously an ad).

https://paulgraham.com/submarine.html


Check out drawmote from the same author, where this library is being used.

https://drawmote.app/


this has no business working this well...quite impressive.


This works shockingly well.

And apparently without asking any permissions on the phone. What sorcery is this?


It asked me for permissions, in fact it had a pop up I had to click for it to ask for perms and then I got the system dialogue.


I'm struggling to find any meaningful takeaway here. This post has zero value.


NordVPN, they're the most aggressive.


Is it a good product? Genuine question


Works ok. Friend shared their account. Proven useful few times.

Their app wants persistence and they had sister who sells residential proxies, if you catch my drift.


I'd sooner setup an AWS micro instance with wireguard than use some VPN that might well be logging everything and selling it to data brokers and/or sharing with domestic/foreign intelligence services.


TBH good luck doing anything with it, you'll be blocked everywhere.

But yeah I agree. You have to trust someone, somewhere. Adding layers helps tho.


Are you suggesting IP/BGP discrimination against AWS subnets? So what's the alternative, a random, cheap VPS in (country of choice)?


This model is a applied in aviation safety. Mentour Pilot[0] is referecing it from time to time in his videos, mostly when existing systems and/or procedures fail to prevent accidents from happening.

[0] https://youtube.com/@mentourpilot


Also shout out in this context to ASRS, which is run by NASA. At ASRS their job is to take people's reports of things which didn't become accidents but could have otherwise, anonymize them, and then analyse that statistically.

https://asrs.arc.nasa.gov/


The version history of the kik package[0] is odd. It has been replaced with a security holding package nine years ago[1].

[0] https://www.npmjs.com/package/kik?activeTab=versions


I think this is the biggest irony of it: the kik package, which kik where so desperate to have, is basically sweet Fanny Adams.

Also, Kik turn out to be negligent and pretty scummy. There was some controversy with them involving crypto, but the main thing I remember about them is that Kik is rife in terms of trading pornography, including child pornography, as discussed on this Darknet Diaries episode: https://darknetdiaries.com/episode/93/.

So, from that point of view, I quite enjoy that Azer Koçulu told them to fuck off.


>Also, Kik turn out to be negligent and pretty scummy.

turns out?

they threatened a pre-existing naming collision with legal action and bullied the platform first into forcing the name to be theirs, and then afterwards by crying to npm until their software tests passed again.

they began scummy.


Yeah, but this also happened to a colleague of mine who created the pug templating package. It's so long ago now that I forget what it was originally called but, basically, he'd chosen a name that infringed somebody else's trademark. I'm not a trademark law expert but the thing about trademarks is they have to be defended or the holder can lose the exclusivity of the mark.

So my friend sensibly caved in and changed the name of the package, got on with his life, and now it's all long forgotten history.

Going back to Kik, before I knew about all the other stuff (which I only found out about when I listened to that Darknet Diaries episode last year - bit late to the party there) I simply thought they'd gone about defending their trademark in a hamfisted and douchey way that had got Azer's back up. Lawyer's gonna lawyer, and the way they did it I thought they were douchebags, but beyond that I didn't give it much consideration. There was certainly no way any of this even hinted to me that they were negligently facilitating the distribution of child porn[0].

[0] Yes, this is obviously against Kik's ToS, but ToS are only worth anything if they're enforced whereas - certainly at times prior to the Darknet Diaries episode being released in 2021 - there was at best inconsistent and ineffective enforcement of these terms. I have no insight into the current situation with Kik.


>pug templating package. It's so long ago now that I forget what it was originally called

jade, iirc. still best html/xml/etc templating package out there, jsx/tsx can't compare


Yes! Thank you! That was it. I still use pug in a side project because it works really well and would just be way too much hassle to untangle and migrate.

I just looked jade up on npm and it's still there, so the company that wanted Forbes to change the name didn't even want to publish a package by the looks of it.


haha, so, all of this for… nothing in the end?


The kik user page almost says it all. https://www.npmjs.com/~kikinteractive One person in the company thought this would be cool to be on NPM, then ... the lpad story.


There's a Swiss equivalent of it mimicking tram boards:

https://tramli.ch/en



There is a newer version on GitHub, and the very first version is on this site. Compare them and you will see the difference.


I compared them - and you're still not sanitising the $_POST inputs amongst some other bad practices. So it's great that you've made this and put a substantial number of hours into creating themes for it - but in it's current state (looking at all the branches in your github) it's not fit for purpose.

If you hosted this online, you're simply providing a platform for malicious users to gather targets or worse.

What was/is the goal of this project? To make the smallest CMS? To try your hand at making a CMS and to learn from it? This is unclear.


On github under the first two screenshots I very clearly expressed why I created this, the root cause was and remains the same, I want to continue to improve this script, but the most important task for me was backward compatibility, and simplicity. I love old time-tested technologies, this script (but improved) with additional functionality works as an admin panel on the hosting. I indicated this in the topic. on the hosting site there is our common goal - we are creating a community

if you have a solution - I will be happy to consider it and use it

P.S. the script does not collect cookies and works on text files. That's probably why this method


Keeping an XSS-prone version to your website still allows abusing, like the following:

http://old.net.eu.org/index.php?p=%3C/title%3E%3Cmeta%20http...

Fix it ASAP if you don't want to be associated with any fault caused by attackers.


I remember being blown away by the dancing bear from Lionhead Studios[1]. It was promotional material for their video game Black & White.

[1] https://winampheritage.com/visualization/black-and-white-dan...


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: