madethemcry

hace 4 díasdiscuss

I don't see why this is different to a careless developer allowing an agent to run rm -rf. I recognize the different angle with the exploits but boy wasn't this the exercise with ExploitGym?

Similar to how the basic thought "nobody gives you something for free" protects you from being ripped off in many situations we should apply "no AI company tells you about precious internals for transparency". It's stupid marketing and it's baffling to me how people give them any credibility.

madethemcry

hace 4 mesesdiscuss

Exactly! Whenever I feel offended by someone, I remind myself of David Foster Wallace's message in "This is Water." It's become a positive reflex for me, one that safes me from a rush of aggression as we all know it. However, I still find myself cursing fiercely in my car from time to time, it's just a stronger reflex, it releases some energy and I know I'm hurting nobody anyway

https://fs.blog/david-foster-wallace-this-is-water/

madethemcry

hace 6 mesesdiscuss

Hey thanks a lot, that should be the actual link behind the submission. Very interesting technique that boils down to encode a url with a ton of carefully shaped random numbers hidden in the fragment to generate the actual art.

That's the example url from the linked blog introducing this technique http://swtch.com/pjw/#123456789...

Source Code (Go) is here: https://github.com/rsc/qr/tree/master/qart

madethemcry

hace 6 mesesdiscuss

DHH also famously describe why and how they are leaving the cloud https://world.hey.com/dhh/why-we-re-leaving-the-cloud-654b47...

I'm not a fan boy of DHH but I really like his critical thinking about the status quo. I'm not able to leave the cloud or I better phrase it as it's too comfortable right now. I really wanted to leave redis behind me as it's mostly a hidden part of Rails nothing I use directly but often I have to pay for it "in the cloud"

I quickly hit an issue with the family of Solid features: Documentation doesn't really cover the case "inside your existing application" (at least when I looked into it shortly after Rails 8 was released). Being in the cloud (render.com, fly.io and friends) I had to create multiple DBs, one for each Solid feature. That was not acceptable as you usually pay per service/DB not per usage - similar how you have to pay for Redis.

This was a great motivation to research the cloud space once again and then I found Railway. You pay per usage. So I've right now multiple DBs, one for each Solid feature. And on top multiple environments multiplying those DBs and I pay like cents for that part of the app while it's not really filled. Of course in this setup I would also pay cents for Redis but it's still good to see a less complex landscape in my deployment environment.

Long story short, while try to integrate SolidQueue myself I found Railway. Deployment are fun again with that! Maybe that helps someone today as well.

madethemcry

hace 6 mesesdiscuss

That is so beautiful. The underlying algorithm is perlin noise (see https://en.wikipedia.org/wiki/Perlin_noise) and it's over 40 years old!

It's such a fabulous tool as the generated images can be used for effects like glass/ice displacements, cheap water-like effects, but you can also generate terrains from it or just cool visual effects that benefit from random patterns. The core property to me is that it feels very organic/natural.

This was such a common tool in Flash AS3 back in the days to create stunning effects, games and such. I'm not active in building visual stuff like that anymore but I bet it's still very common in this field, because why not?

madethemcry

hace 8 mesesdiscuss

Hey, I didn't mean to sell another tool over yours! It's just an experience that popped into my mind and I wanted to share. I appreciate your work and contributing to the problem space of exposing a local service. Thank you.

madethemcry

hace 8 mesesdiscuss

I used ngrok when it was the to-go answer for serving localhost (temporarily, not permanent) to the public, but the last time I searched for alternatives I stumbled upon the following jewel.

   > tailscale funnel 3000

   Available on the internet:

   https://some-device-name.tail12345.ts.net/
   |-- proxy http://127.0.0.1:3000

   Press Ctrl+C to exit.

I've tailscale installed on my machine anyway for some connected devices. But even without this would convince me using it, because it's part of the free tier, dead simple and with tailscale it's coming from kind of a trusted entity.

madethemcry

hace 9 mesesdiscuss

I did not play this (yet!), but just by watching this video I see how it overlaps with the coding games on https://code.org/en-US (Hour of Code!) in terms of having a code + gaming view to solve a challenge.

When I was teaching coding to kids, code.org was the to-go place besides using Scratch, to introduce coding patterns (mostly: conditional, loops).

An example is the famous Minecraft labyrinth [1]. There is also a Frozen themed one. If you have kids (~6y+), that's some fun way to get started instead of diving directly into actual code.

[1] https://studio.code.org/courses/mc/units/1/lessons/1/levels/...

madethemcry

hace 9 mesesdiscuss

That gives me a quite literal flashback.

Back in the Macromedia Flash 5 days (25 years ago!), Robert Penner popularized the easing concept. I can't imagine the void we had before that. I clearly remember me starring at the formulas in ActionScript 1.0 (see [1]) without any chance of understanding them - but usage was clear, easy and fun!

Those formulas basically generated the required tweening numbers mathematical (comparable to the Bezier approach mentioned in the article). That's a much different concept to the linear interpolation described in the linked blog article where you pass in a static list of numbers. The more complex your curve the more numbers you need. That's when the author links to the external tool "Linear() Easing Generator" by Jake Archibald and Adam Argyle. It was a fresh and nice reading even though animations are less a topic for me then it was back with Flash.

Here an example of an easing function from the linked source file. The tween executing function would pass in time (t) and other parameters I can't name to calculate the resulting value continuously.

  Math.easeInOutBack = function (t, b, c, d, s) {
      if (s == undefined) s = 1.70158; 
      if ((t/=d/2) < 1) return c/2*(t*t*(((s*=(1.525))+1)*t - s)) + b;
      return c/2*((t-=2)*t*(((s*=(1.525))+1)*t + s) + 2) + b;
  };

If you want to dig deeper, visit roberpenner's easing overview [2] with some resources. Surprisingly all of those links are still working.

[1] https://robertpenner.com/easing/penner_easing_as1.txt [2] https://robertpenner.com/easing/

madethemcry

hace 9 mesesdiscuss

I missed the "About" link in the footer but still found my way to the repo [1], where the project is briefly explained including a ton of great example images. Thanks for that!

> This website (technology demo) allows you to aggregate and visualize massive amounts of air traffic data. The data is hosted in a ClickHouse database and queried on the fly. You can tune the visualizations with custom SQL queries and drill-down from 50 billion records to individual data records.

[1] https://github.com/ClickHouse/adsb.exposed/

madethemcry

hace 10 mesesdiscuss

Yeah there are some issues. PR is stuck at "Checking for the ability to merge automatically..."

By accident I landed on https://us.githubstatus.com/ and everything was green. At first, I thought, yeah sure, just report green, then I realized "GitHub Enterprise Cloud" in the title. There is also a EU mirror: https://eu.githubstatus.com

Edit:

The report just updated with the following interesting bit.

> We identified a faulty network component and have removed it from the infrastructure. Recovery has started and we expect full recovery shortly.

madethemcry

hace 10 mesesdiscuss

Content wise a nice idea, but I also like the conclusion about how AI made this possible in the first place. The author itself mentions this motivation. AI is undoubtedly perfect for utilities, small (even company internal) tools for personal use where maintainability is secondary as you can ditch the tool or rebuild it quickly.

> Two years ago, I wouldn’t have bothered with the rewrite, let alone creating the script in the first place. The friction was too high. Now, small utility scripts like this are almost free to build.

> That’s the real story. Not the script, but how AI changes the calculus of what’s worth our time.

madethemcry

hace 10 mesesdiscuss

> Just F#$%^& use Rails.

No, just no. Or maybe it depends. But if you want to provide a lovely, modern, interactive frontend, you can't just blindly ignore what evolved on the frontend ecosystem for the sake of your purity. It's arrogant and dismisses all the people who love to craft enjoyable frontends.

Following some thoughts about how to merge Rails and modern frontend approaches and how Inertia finally solved that question for me.

--

I consider myself more frontend focused but I have a deep love for Rails and some advanced experience, for sure less than in frontend though.

I tried hard following the route of hotwire, stimulus and friends knowing that DHH and the rest of the community loves those JS patterns.

Creating reusable stuff, cresting just a little bit more complex components, sharing those components through the UI.. it's just horrible cumbersome, repetitive and far, far away from all those best practices and patterns we've developed in the frontend.

I tried creating a diff viewer with comment functionality with stimulus. It worked, I was kind of proud but it was cumbersome the define components and share functionality. Maintainable? No way.

Then I wanted to create a double list where you can drag items from left to right. It was the hell to include css, js, manage the hierarchy and then I just gave up. I was demotivated by the constant nagging of my brain how much more simple this would have been with a single, simple react/vue component.

Then I went the wrong route: Rails API plus React. That's just giving up on most of what Rails gives you and I wasted ton of my time creating an additional auth layer on top of the session that Rails would give me. And then the horrible duplication of your state. One in Rails and then the same stuff in React. The same nagging in my brain now told me: That's wrong.

And then I found the holy grail of modern Rails development: Inertia.js. I heard about it very often but never at the right time. So I forced myself to try it out.

And here I am: I use Rails with Inertia Rails. I have the full pleasure of Rails but I can create React components that represent any page I like to write in React. Inertia will serialize and pass in the data from my controller. So no state. Just pure UI building.

If you love Rails and the frontend: Try out Inertia. It feels like I'm using the best of both worlds. The layer inertia creates is very shallow and optional. So the risk is low.

madethemcry

hace 10 mesesdiscuss

I relate absolutely zero with their reasoning around AI. It's so fabricated.

> While staying true to Google’s iconic four colors, the brighter hues and gradient design symbolize the surge of AI-driven innovation and creative energy across our products and technology.

madethemcry

hace 10 mesesdiscuss

That was as great reading, thank you.

I've a related observation. In my experience the amount of hallucinated urls with structured output (think of a field `url` or `link`) is pretty high. Especially compared to the alternative approach, where you let the llm generate text and then use a second llm to convert the text into the desired structured format.

With structured output, it's like the llm is forced to answer in a very specific way. So if there is no url for the given field, it makes up the url.

Here a related quote from the article:

> Structured outputs builds on top of sampling by constraining the model's output to a specific format.

madethemcry

hace 11 mesesdiscuss

Can you please give any sources? While it sounds plausible and interesting it's nothing more than a wild conspiracy theory without some background information.

madethemcry

el año pasadodiscuss

I truly wonder what people do when they want JS full stack both frontend an backend especially with a DB involved. ORM situation looks pretty fragmented or you write pure sql. And then you still have to decide on the backend. Going raw with express? Next.js, well known, but with a questionable agenda (, Remix, Astro, TanStack, and so on. It's a mess, because you always have to recalibrate and re-evaluate what to use.

I often see myself going back to Ruby on Rails for my private stuff. It's always a pleasure. On the other side, there are so few rails people available (compared to js) that it's not viable for any professional project. It would be irresponsible to choose that stack over js and often java for the backend.

Anyone have similar feelings?

madethemcry

el año pasadodiscuss

I had the same experience, go to layers and there you'll find it under a new section "Explore". Select it to deactivate it.

madethemcry

hace 2 añosdiscuss

Hey, while being on that topic and somehow related. There seems to be kind of a default company that creates those catchy tech marketing videos, explainers etc: https://sandwich.co

Examples you may know:

  - https://sandwich.co/work/playdate/
  - https://sandwich.co/work/auth0-2/
  - https://sandwich.co/work/slack-wfh/

madethemcry

hace 3 añosdiscuss

Small world. Only yesterday I read that great comment from user adameasterling about credential stuffing in another thread [1]

> Troy Hunt is such a treasure. And for us web application developers, there is no excuse for not having protection against credential stuffing! While the best defense is likely two-factor, checking against Hunt's hashed password database is also very good and requires no extra work for users!

That user even listed 23andMe [2] as an example but it's from 60 days ago. This incident is referenced on the techcrunch article.

[1] https://news.ycombinator.com/item?id=38521106

[2] https://news.ycombinator.com/item?id=37794379

madethemcry

Submissions

Fortinet Firewalls (FortiSIEM) – Remote unauthenticated OS command injection

MediaMarkt hit by Hive ransomware, initial $240M ransom

Going Beyond the Abstract Syntax Tree (AST) with the TypeScript Type Checker

Walt Disney's MultiPlane Camera (1957) [video]

What's this? (example.com/pension)

New method exploiting the way that the Apple iPhone operates with other devices

PokemonGo-Map

Hackaball: A Toy for 21st Century Launched on Kickstarter

Backspace key unbound in Safari 6. TAB is also dead.

comments