Hacker Newsnew | past | comments | ask | show | jobs | submit | jamesdepp's commentslogin

Looks like they're relying on system fonts instead of serving them over the web. It uses Segoe UI (a Windows font) by default. I tried accessing the page via Fedora and iOS and neither load the font correctly.


>Looks like they're relying on system fonts instead of serving them over the web.

This is a good thing. Using system fonts means less bandwidth consumed, more privacy (presumably), faster rendering, and better consistency with the rest of the user's environment.

The only failure could be not serving a web font as a failsafe, but I'm not going to count that against them because I hate the idea of web fonts.

Edit: Actually, nevermind all that. Microsoft is serving Segoe UI as a web font in addition to referring to the system copy.[1] If that's not rendering properly, either Microsoft got the URL wrong or something is fubar on the browsers concerned.

[1]: https://blogs.microsoft.com/wp-content/themes/ms-blogs/style...


I am honestly not excited about the "AI" tech here--I'm excited about the battery life improvements that will come from using ARM chips. Battery life was the reason I chose an M1 laptop over the alternatives. Hopefully we can get some more competition in the space with these new chips!


Priority Continuum Onyx by any chance? Those things are absolute beasts. Fantastic commuter bikes.


Some tests might have side effects. Probably not a great idea to test the function “bill customer” on a prod deployment. That’s why containers for testing is great—it’s easy to spin up an environment that can be messed around with without consequences (even if things go wrong or your tests have side effects).


I recently rewrote a website/small backend API for a non-profit organization. I could've gone with a serverless architecture for our forms handling API and reduced spending to nearly the free tier, but I had no good way to protect against a scenario like this. There was just not good enough documentation about how to completely cut off spending in the scenario of an attack, and I wasn't comfortable leaving the organization open to a cost attack like this.

So we're using Github Pages for static hosting and a $5 box from OVH now. Unmetered bandwidth, plenty resources for our purposes. Cheap enough, and we will never, EVER, have to worry about an attack like this. Well worth it imo.

Imo, serverless is great for internal jobs where you can control spending. For public facing things, you have to be a lot more careful.


Yeah I'm doing the same, a combination of OVH, Scaleway and Hetzner.

Sure there is no such thing as "free unlimited" bandwidth but I much prefer unlimited with a fixed cost until they decide it's not worth it and shut me down vs unlimited risk with no ability to cap it.

The lack of cap is the worst part and it's 100% a business decision. Every provider who tracks bandwidth could add a cap but they just choose not to because it's too profitable and the risk is mostly* on the customer anyways.

*there is of course a tiny chance they the customer goes bankrupt and they get almost notning, but usually they just need to pretend to be nice and forgive all or most of it


I am confused. Why couldn’t GitHub Pages suffer a DDOS attack? Also they don’t want you using them for business purposes:

https://docs.github.com/en/pages/getting-started-with-github...


GP probably refer to getting a huge surprise bill after a ddos attack, not github never got any ddos attack.


Worth reading - thanks for sharing.

Arguably a non-profit (unless it was selling stuff from the site, which is unlikely) would be exempt from their list of prohibitions.


It can but it won't result in surprise bill because the bandwidth is capped.


I feel like this could be a part of a weird plan to trap Apple into an antitrust lawsuit about iMessage. Beeper's CEO has been claiming that the existence of Beeper Mini actually improves iPhone users' experiences. He could argue that Apple shutting off access is not meant to improve Apple users' experiences, but rather, to keep people off of Android.

Honestly, I have mixed feelings. I REALLY think that iMessage needs to be opened up, but this was not the way to do it. Really hoping the EU swoops in and saves the day here.


The EU is not saving the day in America this time around.

iMessage will reportedly dodge EU regulations, won’t have to open up https://arstechnica.com/apple/2023/12/imessage-will-reported...


iMessage is mostly a US problem.

EU usage of iMessage is minimal compared to WhatsApp, Telegram, Signal and Facebook Messenger.

So there's little incentive for EU to get involved.


it’s absolutely the right way to do it. third party clients are a dying breed, because people have forgotten why they’re necessary.


pypush, the open source project behind today’s developments in the iMessage reversing news, is licensed under MongoDB’s Server Side Public License and owned by Beeper (JJTech sold the rights to Beeper, per discord). Although this library is fantastic, I do think that the extremely copyleft license could have implications on where we see this used.


Time for some reverse reverse engineering.


I could get behind this, but only if my kids had open access to the internet via some other device. Phones are addicting and can be harmful (esp to younger teens), but it is crucial that young people have access to the resources the web can offer. It opens up opportunities and allows teens to find support resources when their family/school isn’t enough (LGBTQ+ kids in states like Florida come to mind).

The biggest reason I have found success in my career field is because I had such a head start on those I went to college with. I got into software development in middle school, and was in frequent communication with other people building software (who were significantly older than me). Most parents probably would have shut this down. My parents let this activity continue, and it turned into my career. The relationships I built then and the lessons I learned have been invaluable. This experience was only possible because I had unrestricted access to the web. My kids, once they are mature enough to handle that responsibility, will enjoy those same freedoms.


Until there is a viable way to sync passkeys between all devices, all platforms, and all browsers, I will be happily sticking to my passwords. The security benefits provided by passkeys are not enough to offset the ecosystem lock-in that passkeys cause.


What ecosystem lock-in are you talking about, exactly? I just created a passkey for Chrome on my macOS desktop and another on iOS. The Chrome passkey will sync to Chrome for Windows, my iOS passkey will sync to my other Apple devices, and I can create more as needed.


For every platform/ecosystem you are using (Chrome, Apple iCloud), you had to create a new passkey. For people using multiple different devices and platforms, this is a headache. I want to sign up once and be done with it.


> I want to sign up once and be done with it.

Definitely! My understanding is that this is where passkey/password managers enter the picture.

My preferred password manager is 1Password, so once it gets passkey support I imagine I'll use that for everything. Until then, I'm depending on the limited sync functionality in iOS/macOS and Chrome.


Agreed. If mobile operating systems allow password managers to support Passkeys, and password managers implement the functionality, then I will absolutely switch.


Right? Nuclear power is some of the cleanest energy we have. With research developments, strong safety regulations, and a plan for storing the waste it produces, nuclear is a much better option than continuing to rely on fossil fuels.

What poor timing, too. With the war in Ukraine going on, now is not the time to be increasing your independence on fossil fuels, even if temporarily.


Don’t know if anyone can compare the impact of fuel wars vs impact of nuclear waste&fallout. Though I agree the former currently has a much higher effect.


Worrying about the 'risk' of nuclear waste while we emit so much CO2 into the atmosphere is like worrying about a hangnail while you have a huge tumor on your neck. Modern reactors have very thick containment shells and have zero risk of "fallout".


If the hangnail causes a sepsis, it’s fatal in short time albeit the risk might have been low. But what if the skin is dry and weak?

The German reactors were running on low maintenance because of the shutdown, anticipated for last December. Hence the risk of continued operation is worse than typical.

A large overhaul would be necessary to ensure usual safety.


Why is germany being so incredibly stupid about this?


Same question could be asked in the aftermath of an incident. The argumentation is not so straightforward if looked upon in detail.

Of course the question is if the reactors could have been „saved“ earlier on, but those decisions were made in 2010.

In the meantime, wind, solar and gas plants were built. Gas plants were intended to offset low output times in solar and wind. Gas plants can be quickly turned on and off unlike nuclear plants. Thats the reasoning.

What would you recommend?


Obviously that you should have replaced all coal and gas with nuclear. That is why France emits 1/6 the CO2 per kWh as Germany does.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: