Hacker Newsnew | past | comments | ask | show | jobs | submit | oofdere's commentslogin

I say this as a Railway customer, go take your vacation. The only time you should even reconsider is a massive bonus plus more time off for staying.

Correct me if I am wrong - if the API keys are compromised, then a large bill could be racked up?

Oh you're right, that does sound like a good reason for the original commenter to not take his vacation. Lucky the organisation he works for made him the single point of failure in circumstances such as these.

I had assumed the original commenter OWNED the company. Yes, I agree with you that if he is an employee then take the time off.

Ah yep, that would be a different story if that's the case (from reading his original comment I still think he is an employee though)

You can give permissions to Web Workers when starting them in Deno, which afaict Node cannot do.


Well this is very stupid. Why not move Deno to be based on workerd or something? or vice versa? throwing it away is such a waste.


What exactly is AVIF doing in this case that I can't do with two <img> tags at a smaller size? I can easily create a thumbnail that beats the AVIF quality in less than the 5KB delta between the static and progressive version in Squoosh.


The quick answer is: you can have up to four passes. With progressive AVIF, you let the browser avoid rendering previous passes if a subsequent one has already been downloaded. It's more efficient and saves battery.


Yes, if you look at the demo, the "progressive" AVIF loads a visible image at 8.5KB, and at that point, it looks better than the progressive JXL. However, that is ALL the AVIF shows until the image has fully loaded. At around 98KB, the JXL looks significantly better, and at around 240KB already looks really close to the final image, while the AVIF still looks terrible. At 280KB when the AVIF finally loads, they look identical.


BTW, you can configure the AVIF encoder to have another in-between pass or two so the quality jump isn't as big. The JXL folks just happened to go with only two total passes.


Won't that increase the total size of the image for each pass?


Thanks to AV1's inter encoding, overhead is overall minimal as each pass can refine on previous ones. Think of it as a mini-video. Because of this, in the case of images with a lot of repeated patterns, progressive AVIF encoding can actually result in more efficient images!


Looking at the demo linked in the blog post, I can make a similar quality thumbnail for a smaller size than the delta between the static and progressive AVIFs


The quick answer is: you can have up to four passes. With progressive AVIF, you let the browser avoid rendering previous passes if a subsequent one has already been downloaded. It's more efficient and saves battery.


Which sounds very useful if your connection is slow enough to make use of progressive image decoding. (Often enough the case for me.)


I prefer the UX of the AVIF example here. I think it's better to have a progressive phase where the image is obviously "not ready", yet you can still determine important details like the subject of the image (unlike a blurhash), rather than a phase that you could mistake for complete, but looks bad in parts.


Quad9 doesn't have an adblocking DNS service though, so it's not really a replacement.


That's something people should run themselves. I run Adguard Home on my router. Unlike the main Adguard product, Adguard Home is fully FOSS. It's been rock-solid for me, and improves on pi-hole in various ways - like full IPv6 support.


  > That's something people should run themselves. I run Adguard Home on my router. 
I'll second this. People should really be flashing their routers. OpenWRT is simple enough that if you're on HN I think you'll easily be able to do it. And like most routers, you set it up and forget it.

But you'll also get a bunch more benefits from OpenWRT, to make it worth your while.

  - I was able to buy a router for <$100 that was WiFi 7 capable (W1700K[0]) and had better hardware than most consumer routers. You can find plenty of cheaper routers that are flashable and more capable.
  - Adguard Home
  - Split tunneling/VLANs: Since we're talking Mullvad, you can put devices behind Mullvad on a VLAN. So activate Mullvad by changing SSIDs.
    - Trivial to put IOT devices on a VLAN (can make one directional too so you can access from your main network but they can't reach back. I throttle everything IOT)
  - Tailscale
  - QoS (Control the speed and prioritization of different connections)
  - It's a fucking computer, you can even run shell scripts
[0] You don't need something like this unless you're getting >1Gbps from your ISP. Big thing I wanted is the 2 10G ports.


It's probably the software I trust the most on my network to 'just work', and with the local caching I can use slower upstream dns providers and still have sub 1ms average latency (no performance worries by excluding google and cloudflare). I don't use it for dhcp, but it is a good fit that it's available as well. Couldn't be happier.


I use Mullvad's adblocking DNS server on my phone which is not always behind my home router.


If you're on Android, FF supports add-ons.

If you're on an iPhone, uBlock is now supported: https://apps.apple.com/us/app/ublock-origin-lite/id674534269...

There's also Orion browser, but I found it to be a bit more glitchy, especially around sites like YouTube (fuck the app, I'm not watching videos there): https://orionbrowser.com/


Yes, I use Firefox on Android with ublock origin, it works great. But using adblocking DNS on your phone will also block most in-app ads which is a big quality of life improvement.

I could also use a VPN to keep my phone always on my home network and thus behind my own ad blocking DNS but Mullvad's adblocking DNS was really nice and convenient.


You can use NextDNS as your dns provider on your phone or use Rethink DNS app like me


Really? I never found it effective unless I messed with certs on my phone.

For example, DNS blocking isn't going to block YouTube ads if you're using the app since they don't need to respect your DNS, but it will if you're in browser because they can't control that.

For apps I always use revanced.


Ads from providers like Google AdMob and AppLovin are blocked. Apps could bundle their own DNS or DoH resolver or use hardcoded static IP addresses but in my experience most do not.

Youtube ads do not get blocked by DNS adblock because Youtube ads are served from the same domains as the content and thus DNS blocking would be counterproductive. I don't think it has anything to do with respecting DNS.

I don't have the Youtube app installed to test but the Internet suggests that at least in 2023 it was very possible to block the Youtube android app (content and all) via DNS, which hints it does not bypass system DNS. [1]

[1] https://superuser.com/questions/713289/blocking-youtube-andr...


Are you explaining my comment or rebuting it? I really can't tell what the intent is. Maybe the internet has trained me poorly in thinking most replys are generally rebuttals. But it really does seems like you're just explaining my comment.


Mostly a clarification of what I find DNS ad blocking works for on Android, which seems to be somewhat different from your experience (probably we use different apps).

A weak rebuttal of the reason why DNS adblock doesn't work for Youtube and the Youtube app.


FYI I don't see YouTube ads on Android + Firefox mobile + uBlock Origin


The uBlock Origin lite that can run on iOS is very limited compared to the uBlock Origin that runs on Firefox Android.


Sure, but you're on iPhone. It's better than nothing.

I'm on your side but telling people to buy a new phone doesn't solve their problem. Short of that uBlock and/or Orion are their best options


It's not the same thing at all. Mullvad DNS blocks all ads across the system.


I've been using NextDNS [0] for a long time. It's worth the price because you can set up all kinds of different blocking profiles and have different ones on different devices, allows you to have overrides for local network items (or internals like on a Tailnet, Pangolin, Wireguard, etc) and a lot more. The ad blocking ends up working so well a lot not only are ads blocked on web pages but it works with some streaming audio ads as well as VoD that has ads injected. Highly recommend.

[0] https://nextdns.io


Up until the developers roll their host files into their app. That's why a pihole doesn't stop ads when you use the YouTube app.

Look, I still run AdGuard on my router, but it's not the same thing


I could, but DoH/DoT seems very involved to run yourself, and sometimes I need to give a recommendation to someone less tech-savvy.


I stopped recommending anything I host myself for those people. When it breaks I'm the support team, and I'd rather not be. NextDNS free tier is what I give them now, takes two minutes, and I never hear about it again.


I'd argue you don't need to run DoT/DoH yourself if it is just for your local network.

Setting up a local resolver, such as a Pi-Hole or Unbound on a firewall can serve unencrypted responses to your devices. Those resolvers in turn can use DoT/DoH with their upstream resolvers to encrypt the requests that go through untrusted networks on the Internet.

This is the best of both worlds, the simplicity of unencrypted DNS while encrypting traffic where it matters.


Mullvad had adblocking, malware blocking. And they didn’t block websites from governments blacklists in France and Italy. None of these features are available on Quad9.

Maybe it’s time to try nym.com?


This is a very important detail. Adblock in 2026 is necessary and DNS will transparently do a lot of that work for you. It isn't just about lightning fast lookups and five-nines uptime anymore.


For blocking, I would much rather run my own service.


I've been loving the Pihole setup I just set up. It uses Quad9 as the upstream provider and then I do all the blocking myself. I used to use NextDNS but this is so much better and free!


Technitium is also really good as a performant local blocker and recursive dns server. I have been running mine for years now and it is fast as well.


How do you block ads when you're outside of your home network? Do you expose your pihole outside?


I set up a WireGuard VPN and use that to connect back to my home network. It's fast enough for what I do on my phone.


VPN back to your home network?


Yeah I have a VPN set up. I don't have the best internet so sometimes it's slow (mostly just app downloads seem to take the longest, so I'll just disable it and then re-enable it.) But it works just fine for streaming, including video


I've assumed the latency suffers then


You could set it up to only route DNS, but that might be complicated for most people


My setup goes like this:

Fiber ONT -> Proxmox x86 -> OpenWRT -> Adguard Home -> unbound -> Quad9.

Browser: Firefox + ublock origin & privacy badger & strict privacy setting & Https-only.

My internet is rock solid and super fast, extra low latencies. OpenWRT shapes my traffic to 90% of line speeds, so zero bufferbloat on my end. All my devices connect to this setup. The proxmox box is just an old dual core mini-pc with 8gb ram and 2x 1gbps NIC's and a wifi 6 module for 2.3gbps wireless (only 5Ghz, no 2.4Ghz). I want to replace this box with a new one to get 2.5gb ethernet & better power efficiency as my box is a 51W cpu, but total powerdraw is about 20w without causing wifi to drop. Aggressive power saving can make wifi unstable.


I've been using Control D and have been happy with it so far


many things should be covered by other things but that's never a valid reason not to cover them explicitly


This is why I think we should treat or reframe laws as formal systems, akin to Lean / Metamath / etc... : treat it like a database of axioms / principles and theorems with proof.

As long as we don't we have to choose between explicit and repetitive or implicit but concise. The advantage of implicit but concise is that individual citizens can grasp larger sets of axioms & principles, but the we run the risk of having lawyers, judges etc. be confused, confusable, or feigning "innocent confusion" about the law and the spirit of the law. The advantage of explicit but repetitive is that its much harder to confuse if a party can point to a literal sentence stating exactly the situation in one place, but the law easily bulks up exponentially.

On the other hand using a formal system, you can clearly distinctly mark the axioms and normative postulates, and include example theorems ("yes a black citizen is also a citizen", "yes the gypsy is a human", etc...). Even when cases haven't been covered as explicit theorems, the formalized aspect means parties can derive unambiguously the sentences they need to shove in the face of a judge.


I get the argument, but I feel like most issues arise from incentive structure rather than not being able to define things precisely enough.

Plus it's important that the law can be read by the average citizen as well. Not that current US laws are, but, it's an ideal to strive towards...


"space" is just a common English term for this kinda thing, as you can see in any dictionary ever:

Collins: "A particular kind of space is the area that is available for a particular activity or for putting a particular kind of thing in."

Cambridge: "an empty area that is available to be used"

why do you think Twitter called them spaces in the first place?


Not saying the word doesn't make sense, questioning it's use from a branding/identity standpoint. It's already taken/associated with an aspect of another network that like it or not is still in proximity to whatever AT proto/Bluesky are developing. Just call it something else! ("hardest thing in computer science is naming things" etc etc)


> "space" is just a common English term for this kinda thing

Isn't that exactly the problem?

It's like using "node" for something in your program's design, or "tree" or "type" whatever. Usually it's better to find a more specific name that communicates the intent even better, or at least less common name, as it'll inevitably will clash with something else, and by then you wish you'd name it differently than every other single thing out there. Unless it truly is only that thing which can be called "tree", don't suddenly call it "perennial" just because.


It's funny you said "node" because the first thing it reminds me of is NodeJS. I'll admit I don't know why they called it node. But I have never seen anyone bothered by it either.


  Location: Los Angeles, CA (on Metro!)
  Remote: Yes, also happy to travel for work
  Willing to relocate: Yes
  Technologies: My greatest skill is yapping, but I also enjoy Rust, TypeScript, and Svelte
  Résumé/CV: upon request (nothing of note in there)
  Email: [email protected]
Looking for work that primarily involves talking to people about things, could be PM, DevRel, marketing, you can even hire me to roast your startup. I have a decent bit of broadcast background as well so if you're working on something realtime or just doing livestreams I could be a good fit.


our rights have largely held up even in the absurd world we live in, and the constitution continues to be a thorn on the side of those trying to abridge them. what we are seeing now is the conclusion of decades of eroding our rights and the tower still refuses to topple. though of course we're going to have a lot of work to do fixing it up after all is said and done.


Have you heard of the Patriot Act?


Have you heard of ACLU v. Clapper, HLP v. DoJ, Doe v. Ashcroft, or US v. Moalin? Parent acknowledges decades of degradation and points to thorns like these.


Have you seen Wickard v. Filburn?


Consider applying for YC's Winter 2027 batch! Applications are open till November 2.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: