Hacker Newsnew | past | comments | ask | show | jobs | submit | Nnnes's commentslogin

> the status page for a major CDN (such as Cloudflare or Akamai)

Would you settle for any old static page served by Cloudflare? For instance, example.com? https://bgp.tools/dns/example.com


That they've put it behind Cloudflare doesn't mean it's "served by Cloudflare"

Maybe Cloudflare gives them a good rate, or is donating service, but it's also possible or even likely that IANA is just using Cloudflare as a vendor, and therefore is paying for all the traffic, which is why they don't want people relying on it or hammering it all the time


  In the nomenclature of RFC 2119, one MUST NOT design computer systems that rely on the correct operation of an HTTP server at [example.com.] Plus, it's *_really_* rude to pound on a small-scale service being provided as a courtesy.

https://web.archive.org/web/20260915165314/https://egbert.ne...

Funny SSL setup. Explanation from here https://news.ycombinator.com/item?id=49133598

> Oh, certain browser will not work with this blog if it cannot negotiate ONLY for Cha-Cha/Poly. It's by design as a showcase of why that particular web browser refuses to do that.

I assume the "particular web browser" is Chromium, which won't load it on any OS I've tried. On Windows, Firefox and the built-in curl.exe also refuse to connect.


Firefox on Windows user here, and it loads the blog fine. I don't have Chrome installed but Edge (which is Chromium engine based) doesn't load it.


Thanks for the link.

Article makes it look like nothing happened in the embed/low-memory/single-threaded malloc space in decades since Doug Lea's malloc.

I just implemented TLSF for my minimal Wasm libc: fragmentation is just as good, performance is a lot more consistent (and on average better), for a significant reduction in code size.

http://www.gii.upv.es/tlsf/index.html

https://github.com/ncruces/wasm2go/blob/main/libc-gen/c/mall...


A great idea for another article. A focus, on embedded and malloc()

I do do have a malloc() benchmark but it is in bad shape and directories have not coalesce nicely yet, tor a single run or a menu-driven one.


Interesting! I have also implemented a version of TLSF for my (currently single-threaded) programming language. I also found it to be good for my use case (embedded / minimal code size). I'll compare it against yours. One improvement I did is some kind of preallocation for small blocks. https://github.com/thomasmueller/bau-lang/blob/main/src/main...


I don't get what this is supposed to prove. That my browser doesn't allow websites to declare what encryption they use? I am pretty sure there's a point to all of this, but please let me (and my browser) choose which encryptions I want to trust.

Is this a spec violation or something?


Isn't the idea that the server and client should agree on a common subset? Here, the server's subset is very small, but not esoteric – so then surely it's the client that's lacking in features?


Yeah but I don't want Chachacha, I prefer AES. If you can't do AES, I'm not interested in the website :)


Precisely.

Fix the browser.


It keeps certain web scrapers and inline transparent proxies/IDS/XNS from fetching, 100%

Certain browsers will suffer. Meh.


legend.


They were my first VPS. I've kept it running continuously the whole time; I have its IPv4 address memorized. Didn't think I'd ever want to give it up but here we are. Lesson learned, no more emotional attachment to infrastructure


Others have answered your question. A lot of the sites listed here https://anubis.techaro.lol/docs/user/known-instances/ have dynamic content; Git web interfaces in particular (Codeberg, the Linux kernel, FFMPEG, and more are on the list) are vulnerable to poorly or maliciously configured scrapers.


Yeah it makes sense for dynamic content. But so far I have only seen it on blogs, which could have just been a html file.


Even for git hosts, there is no reason to add bot checks to e.g. the repository root or other common URLs that random real users land on.


Summary of the mailing list discussion (https://lists.sr.ht/~sircmpwn/sr.ht-discuss/%3CDKSTMKM0ZD9N....) - counted by hand without LLM assistance so there may be mistakes or misreadings :)

~51 in favor of the proposal. 20 of those specifically stated a desire for a blanket or as-strong-as-possible ban. 17 mentioned paying for the service. Many (sorry, didn't count these!) stated that the reason they joined SourceHut in the first place is because of the strongly opinionated culture and that an LLM ban aligns well with that.

~19 opposing the proposal to some degree. (I am counting Greg K-H's comments as a very weak "oppose".) 5 specifically mentioned paying for the service, and 1 stated they will stop paying if the policy takes effect. Some stated that they don't personally use LLMs, or don't like them or the effects they have, or would support a weaker ban (e.g. only ban fully vibe-coded projects or excessive resource usage).


>mailing list discussion (https://lists.sr.ht/~sircmpwn/sr.ht-discuss/%3CDKSTMKM0ZD9N....)

That is certainly one way to decide what to do with the data your customers paid you to store...


You're missing the same point that the blog post is missing. What they're doing is much less like replacing rand() with 4 and much more like setting seed(4) before generating any numbers. There is no "loss of quality" unless you're already using a temperature of 0.


Gram Editor. It's actively maintained.

I know people disagree over definitions of "hard fork". Gram does not send patches to Zed but does occasionally merge fixes from Zed. There is not any specific effort to keep (non-AI) feature parity.

https://gram-editor.com

https://codeberg.org/GramEditor/gram


Why does the author hate the AI so much?


have they fixed the file refresh issue?


Vendors? Market? What do you think Codeberg is, exactly?


Doesn't matter that they're a nonprofit. I still can't trust them.


That's fine, you're not welcome there anyway.


I'm surprised (but not really) that you're the only comment I see even mentioning it. The ratings may be even lower quality than the SVGs.

Obviously they're all a bit cartoon-y, what else do you expect from SVGs. But I'm not convinced you could find a single human on Earth over the age of 4 who would seriously give the vehicle in GPT/1/whale/plane a 5/5.

Browse through the options a bit and the rest is not that much better. Grok/2/cat/plane, one of the more accurate planes, got a 2/5. For the most part, vehicles entirely missing do get a 1/5, except for whatever it is in Gemini/1/heron/plane scoring 4. Animals inside planes get completely random vehicle scores I guess.

The cats are all orange, except for a few of the skateboard cats that are black. I'm sure there's nothing to read into there...

Well, I've convinced myself that the next effective test of multimodal models will be whether their judgments of LLM-generated SVG airplanes are anywhere close to reasonable.


The main anti-vandalism bot ClueBot was created in 2007, and its successor ClueBot NG in 2010. They certainly have false positives from time to time, but that doesn't mean they aren't the most useful bots on the website.


It aims to have a false positive rate of 0.1%


Consider applying for YC's Winter 2027 batch! Applications are open till November 2.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: