Hacker Newsnew | past | comments | ask | show | jobs | submit | artooro's commentslogin

If the Mimestream mail app supported JMAP, I'd be switching away from Gmail asap.


While true, this is also an eye opening event of how much worse it could be if it was more generic and not limited to crypto wallet addresses.


Seems like exchanges should have a confirmation screen that shows the destination addresses from XHR requests before processing, though I suppose the malicious script could just change the DOM showing the address you entered instead of the modified address it injected.


This looks pretty bad. Even if this only affects crypto wallets, I can't help but imagine how much worse this could be.

Another good read is at https://www.aikido.dev/blog/npm-debug-and-chalk-packages-com...


(This was originally posted to https://news.ycombinator.com/item?id=45168413 but we merged the threads)


How is this better than using Pi-hole to do the same? It can also run in an allow only mode as I understand.


I think the idea is that it blocks everything on your machine instead of causing the whole network to go offline as piholes are generally applied to the entire home network.

Your mileage might vary, but in my home, causing my smarthome plus my wife and children’s internet to go offline might cause a bigger distraction to my focus. Also you couldn’t use a pi-hole at work for instance.


I wanted to build my tool because eventually I want to support multi-tenancy. Custom allowlists and schedules for all family members.


"can run" / "can be configured to run" / "is not documented but can" != "is purpose built for allowlisting workflow as simple as possible"


<3


- single binary file deployment

- TUI based configuration

- API endpoints


I wish I could say no IPv6 no business. There are only 2 ISPs here, one cable and one fiber. Neither have IPv6, the smaller ISP also does CGNAT because IPs are expensive. I'm trying to convince them that they could save money with less powerful CGNAT hardware if they deploy dual stack.


I've been a fan of systemd even if just for how much simpler creating services is. I just need to write a simple config file instead of a complex init script.


+1 - there was a misconception that initscripts were easy or simple - if you wanted _correct, bug free_ initscript you were probably looking at around 100 lines of shell script.


Or if the service didn't support pam_limits because it was legacy trash, you had to hack something into the initscript like `ulimit -n XYZ` and restart it. Now things like this are trivial and easy to solve. Using systemd makes large scale Linux systems administration much easier.

Now it has gone a bit overboard. Some of the stuff like the dns resolver or the nspawn capability seem a bit over the top, but overall, it has massively improved all Linux distributions it is used in.

Never again will I worry about trash buggy init scripts not actually stopping a service due to a stale pid file. Now it puts the service into a control group and can kill all things in the control group even if the service is bad code.


Anytime there is an outage that affects App Engine, Google can't seem to get their status page updated for an extended period of time.


What's crazy is that RCS messaging is down as a result of this outage. It shows how poorly the technology or infrastructure was designed.


Isn't RCS basically just instant messaging? I don't know why it's surprising that it would be down.


I'm not sure any single company could have an outage that would take out SMS globally, but RCS is presumably more centralized.


SMS is pretty much decentralized, although there's a few companies with a lot of reach. I don't remember any Global SMS outages, but it wasn't uncommon for a whole carrier to have an SMS outage and especially for inter-carrier SMS to be broken from time to time (sometimes for days). I've certainly seen some stuff with SMS aggregators: almost all of them claim a majority of direct links, but when you have accounts with 4 large aggregators and one of them has an outage, you find out which of your other account use that aggregator for which links (because their deliverability will go to zero to those destinations).

RCS was designed and specced, by GSMA, as a telco run decentralized system that would replace SMS as like for like; but there were only a handful of rollouts. It's really only gotten use as Google pushed it onto Android, using their RCS server; recently iOS started using it although I don't know what server they attach to.

Since RCS is basically the 5th wave Google IM, it's no surprise when they have a major outage, RCS is pretty much broken.


> recently iOS started using it although I don't know what server they attach to.

According to Wikipedia, only the carrier's RCS server is used [1]

[1]: https://en.wikipedia.org/wiki/Rich_Communication_Services#So...


All of the major carriers use Google Jibe as their RCS backend anyway though, so it's pretty irrelevant.


It used to be kind of distributed, but Google has been strong arming carriers to use their hosted Jibe service through a combination of proprietary extensions (e.g., E2E which is finally standard) and bypassing carrier control (if the carrier didn't provision RCS, Google Messages would use their own service iMessage-style).

From the end user's perspective, if the carrier didn't use Jibe RCS, it simply wouldn't work well.


People liked to be utterly pissed at Apple for not supporting RCS. But there were reasons


That explains why I couldn't get the photo of my parents dog today.


should have used Erlang


Oh my god is that why my RCS chats were failing earlier?!?!


Looks like a UI on top of OpenAI or Anthropic?


It would be better if Notion became a full competitor to Google Workspace. If they start their own email hosting and calendar backend for Notion Calendar, it would be getting closer.


I strongly suspect that is their goal. They acquired Skiff.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: