Hacker News new | past | comments | ask | show | jobs | submit | manchmalscott's comments login

It generated a link too long to send over discord, even with nitro (over 4000 characters). That’s hysterical.


That last point about dropping HTMX as a dependency but keeping the benefits is why I personally find Phoenix liveview so compelling.


I really like elixir, but I don't think i like live view.

Handling events by writing functions that need to match unchecked strings feels _super_ clumsy to me.

I know elixir processes are very very cheap, but I still don't like the idea of maintaining a stateful connection for each live view page, especially with the lack of typing.

Jumping between my markup and the 10s of different handlers in my live view is annoying too. I like the locality of behavior principal a lot.

Again, I really like elixir, but untyped languages kind of suck for dealing with the string based world of web frontends. That's why so many javascript shops take on the complexity of typescript.


Given that the event names are passed as attributes on the html elements themselves, they’re pretty limited to being strings. I don’t know how else it would be done.


I don’t know how either, but it still feels clumsy.


Yes, I'm all in on Phoenix and LiveView because of this.


Somewhat unrelated, I can’t deselect text on mobile here. Once I’ve accidentally selected something, the only thing I can do is select something else.

Anyways the big consensus I’ve heard about panels is that 1) $50 a year is a poor value for most people, 2) a 50% revenue split with the artists without which there would not be an app is insulting, and 3) releasing a podcast episode to “address the controversy” and failing to discuss the two most common issues made people feel ignored and belittled.


> releasing a podcast episode to “address the controversy”

The #1 method for damage control is to try to control the narrative, mostly by completely ignoring the main criticisms leveled at them.


I experienced the same text selection bug and I somehow managed to get the text to unselect by panic tapping the very edge of the margin like a claustrophobe in a bubble.


Does anyone have experience using this to develop with elixir / phoenix liveview?


I use cloudflare tunnels so my home IP is not attached to any DNS record, plus I have *.<my domain> route to a Traefik instance and I handle all routing there. When I add a new service on a new subdomain, there’s no new dns records announced, it just quietly stops returning a 404 error.

If I wanted to, I could run _everything_ through Authelia first, so you wouldn’t even see the 404 until you log into an account, but that hasn’t seemed necessary.


"Using a CF Tunnel implies that all SSL encrypted connections will be decrypted by Cloudflare, the connections data exists on their servers in plain text and then is re-encrypted for the transport to the user."

https://www.reddit.com/r/selfhosted/comments/133rr6n/about_c...

Is that true? Then third party doctrine would apply and you have to trust them more right?


I don’t believe any proxy could route traffic dynamically the way cf tunnels (and traefik for that matter) do without being able to read the unencrypted http requests. That’s a trade off I’m making and aware of, because I don’t want to use a VPN to access my services. (Another big trade off is cf only tunnels HTTP traffic, so I can’t use SSH keys to reach my self hosted gitea repos. Honestly that’s a bigger motivator to me to find another solution)


It’s a great product, but unfortunately they terminate the TLS and scan the traffic. It’s same as hosting the data on google or Microsoft (except you pay for hardware also). It should not be considered self hosted.

Is there a reverse proxy where the client makes a TLS connection to the proxy, proves their identity, if successful is allowed by proxy to initiate a new TLS connection to the server at home with the certificate of that server?


>If I wanted to, I could run _everything_ through Authelia first, so you wouldn’t even see the 404 until you log into an account

I'm actually considering this right at the moment. The idea of enforced 2FA just feels a lot safer to me


I do it the good old fashioned way, with a reverse ssh tunnel from VPS to home. An added benefit is that SSL is terminated only at the very end, so the VPS provider is just a dumb pipe.


The problem is, since the reverse proxy and authentication system face the internet, you are responsible for maintaining its security.

Software has vulnerabilities. Like nginx proxy manager had vulnerabilities and the developer didn’t patch some.

With a cloud based proxy, a third party handles authentication. But then, they shouldn’t access data.


For purely personal stuff which I only access from my devices, I use SSL client certificates in front of normal auth. The rest of services are mostly public anyway.


I have a similar setup with Tailscale and Nginx Proxy Manager.


I’m not sure I really understand the benefit to having your drivers license on your phone. “You can use it at TSA!” Cool but I’m already using my phone for my boarding pass. I guarantee you the friction and additional time to scan the boarding pass and then switch to the drivers license and scan that (when typically these are done in parallel) is going to make that use case a complete non-starter. Best case scenario someone tries it out and realizes it completely messes up the workflow and never uses it again.


A gas tank can’t be charged with renewable energy and you know that


Biofuels are a thing


Sir, please kindly toe the party line. Mining lithium and cobalt good. Farming sugar cane bad. Battery good, ICE bad.


You'll have an easier time finding a charging station than B/E100.


> pictured here using generative tools

How about we don’t do that though


I prefer this to whatever some intern found on a stock photo library by searching “Japanese woman smiling”.


One of the pillars of fair use is whether it disrupts the market for the original work. The explicit goal of gen ai is to replace artists and their original work.


I thought the explicit goal of AI was to create systems that can do tasks that typically require human intelligence. That includes beneficial things like finding cures for diseases, technology innovation, etc … Wouldn’t it be a shame to limit this growth potential to protect friggin’ YouTubers?

Maybe go after the application, not the technology? Someone uses AI to explicitly plagiarize an artist’s content? Sure, go ahead & sue! But limiting the growth potential of a whole class of technology seems like a bad idea, a really bad idea actually if your military enemy had made that same technology a top priority for the next years …


If I train a gen AI on the full works of Pablo Picasso, and ask it to create new works, have I disrupted the market for the original works of Pablo Picasso?

If I train people to draw anime from a book on how to draw anime, and ask them to start drawing work related to Bleach (e.g.), have I disrupted the market for the original works of Bleach?


To provide at least one positive example, I'm using fly.io to host a website I made for a friend (for her college capstone project), so I'm on the now-legacy hobby plan paying nothing, and I have had zero problems.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: