Hacker News new | past | comments | ask | show | jobs | submit | _evzi's comments login

Bitwarden has 0 issues 'autofilling' basic auth. It just passes the login credentials on connection and you never see a basic auth prompt.


That's actually a gripe I have with Bitwarden, because you can't turn that feature off. If an attacker can take over a single endpoint, Bitwarden will happily send your credentials to an iframe from a malvertiser without ever telling you.

It's a fine feature and the WebExtension API won't let them solve basic auth in any other way, but it's a security risk in my opinion. I'd much rather see browsers provide an API to HTTP Basic auth prompts instead so the user can select an identity from the list if they've got a saved username/password combo that matches a given set of requirements.


It only supports a single user/pass pair for each site. There are many cases where you would want to use multiple identifies and switch between them.


I played with Caddy a lot in the v1 days and again recently with v2.1. I ended up not sticking with it since there's things I do with nginx that aren't easy to do with Caddy if you don't have extensive Go knowledge. I am tempted to give it an honest go again, though, and see what I/it can do.

As for Caddy advantages, I think it's really just about having a super easy to manage JSON or Caddyfile. In migrating a few of my nginx configs to Caddyfile, I was able to reduce line counts from dozens to 2-3. That's pretty impressive, tbh.

If you've been using nginx forever and have no issues with it...I don't see any valid reasons to move to Caddy.


The only out-of-box thing I sometimes miss, is "try-files-first" -- but I'll also say it probably is a bit of an anti-pattern (just have static files under another path/sub-domain - etc).

But it is something that nginx does have. That, and maybe some kind of "x-send-file" acelleration/support.

Ed: this is odd, I could've sworn it wasn't that long ago I looked for and even discussed try-files-first for v2 - but apparently it exists?

https://caddy.community/t/v2-try-file-server-first/6440/3

https://caddyserver.com/docs/caddyfile/directives/try_files#...

Ed2: I guess I was confusing it with x-send-file acelleration - which still appear to be a bit wip? :

https://caddy.community/t/caddy-2-x-sendfile-x-accel-support...

https://caddy.community/t/sendfile-x-accel-redirect-v1s-inte...


You got me curious (I don't use Google Voice, but my dad has for a very long time) and I started to search around. It looks like all the alternatives are either expensive or shitty. :/

Edit: The universally accepted "best" seems to be Grasshopper[1] which is $29/mo or $26/mo billed annually ($312/yr).

[1] https://signup.grasshopper.com/plans


What a truly remarkable time to be alive.


>There are 4 USB-C ports anyway.

Only if you buy any MacBook Pro configuration with the touchbar. If you want normal F-keys, you're limited to 2 ports because "fuck you," I guess.


Is "fuck you" a euphemism for "you're buying a computer that costs $500 less and as a result probably doesn't have the internal hardware to support 4 separate USB-C ports"?


2 more USB ports costs an extra $500? It's strange because a $15 USB hub plugged into the USB ports works fine. It must be lack of internal space due to not including a touchbar... Wait that doesn't make sense either...


heh, seems you replied at the same time as me and included a screenshot. Bastard! ;P


You can choose male and female voices for the following accents: American, Australian, British, Irish, and South African. Source: my iPhone.


Right, but US iPhones come with a female voice by default, while British ones come set to a male voice.


I didn’t know Irish or ZA; I’ve been using Australian for awhile, maybe it’s time for a switch.


Per a buddy who is using said Edgium (Chromium-based Edge): https://i.imgur.com/p6ZMoJY.png


Oh ffs


Edg?


I assume real live websites are detecting "Edge/" and applying workarounds for the old rendering engine.


Like the maybe-not-actually-true reason why "Windows 9" was skipped and we got 10 instead?


It was too edgy for them.


Yeah, spam calls have gotten out of hand in the last year or two...really not sure what happened. I try and report as many as I can since I'm in the Do Not Call Registry...I am but one man, though.


If you're hosting with GoDaddy, I would highly recommend switching to pretty much any other provider on the planet other than 1and1. GoDaddy is notorious for screwing over users for basically as long as they've been around.

I'm not specifically sure about GoDaddy, but this Quora answer suggests that even the best plans can't handle more than 5,000-7,000 visitors per day: https://www.quora.com/How-much-website-traffic-a-sharing-hos...


Thanks, but I wanted to know the real-time visitor capacity of any shared hosting plan. what if I get all 5k to 7k visitors within 1 hour?


Join us for AI Startup School this June 16-17 in San Francisco!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: