Hacker News new | past | comments | ask | show | jobs | submit | more porcoda's comments login

I always assume the stack people choose is based on what they know. Given that we’ve seen a huge number of people learn web tech over that last decade or so, it’s sort of unsurprising to see so many people go that direction. I’d assume a secondary factor is portability, although given that you can achieve portability with other stacks too, I generally think it’s tech familiarity that drives it more than anything else.


Wow - this is very cool and gives me strong nostalgia for Commodore-64/128 demos and old-school BBS's. I remember spending hours on my Commodore 64 doing this sort of thing by hand for the little BBS that I ran out of my bedroom.


Basing something around a Google OS isn’t really an alternative to big tech. Given the reaction I’d expect if a Microsoft Open Source project was the basis of an “alternative to big tech”, I don’t see why something with a Google pedigree should be treated differently.


And listing microG as an opensource alternative to Google services is disingenuous. It still uses the same Google servers to make requests, just the client is open.


It's not possible to do push notifications for proprietary apps without making some requests to Google. The location services of microG support other providers and don't use Google. microG even replaces the Google map some apps integrate with another provider, at least it did a few years ago.


It seems like the user has a choice to configure microG to use different providers other than Google though.


Expecting Microsoft to create an alternative to big tech. Did I miss the /s ?


“musicat is moving away from WebAudio towards native playback in Rust”

According to the linked document, this is based on Symphonia + cpal. Why not just say that - stating what programming language it’s in is pointless, but the backing software is meaningful. Why make it harder to find what the actual libraries being used are than the language they’re written in? I don’t get why people can’t resist pointing out rust when rust appears somewhere even if that choice is irrelevant from a user perspective.


Unfortunately, most of the PDF work I do involves things I’m not uploading to a service - ever. I don’t care if they’re “deleted immediately after processing” - they left my control. This sort of software would be great if it were 100% offline.

This isn’t just a niche issue either: this is a very real consideration for any corporate user. More companies are taking data loss and security issues seriously, which often means restricting what cloud services they are willing to use.


I work at https://www.pdf-tools.com and we hear this again and again.

Despite the proliferation of cloud services, most large enterprises DO NOT want their sensitive documents entering the cloud. And in some cases, e.g. patient medical records, there are strict regulations about how those documents can be stored, which means on-premise is a requirement.

Good news for us, as that's what we specialise in, but also perplexing how trends in the software industry can completely ignore what customers actually want.


Looks interesting.

However, the pricing page with no actual numbers and the ambiguous ‘Contact Us’ is a huge turn off.

I cannot stand the dance with business people who want to have a bunch of calls and meetings to know how big a company they’re dealing with is before they decide on a good rate to gouge them.

Pricing pages should be straight forward. Have tiers if you want to cover your rear but only at the limit of usage have the ‘Contact Us’ option.

I’m shopping around for a PDF solution and would’ve recommended this to my manager but I’m not willing to do more meetings to get quotes.


> the ambiguous ‘Contact Us’ is a huge turn off

Same. About three years ago we introduced a company wide policy to not buy anything where the price is not known. So, so much time (money) being wasted on figuring out the actual costs, the offering would have to be really inexpensive to make up for this. And if that were the case, the price would be right there.


Yup.

They usually do high usage volume pricing at high rates that are proportional to the size of the company and make you sign a yearly agreement so they can get a huge payment upfront.

How about building some trust? What if the service sucks? It will be hard to get your money back and you paid a year in advance.

They make you work to get a quote and the quote usually doesn’t work for your needs.

I too will not look at services with this pricing structure anymore unless word of mouth is favorable.


very good heuristic. I'll be borrowing. Any others you'd care to share ?


> the pricing page with no actual numbers and the ambiguous ‘Contact Us’ is a huge turn off.

It’s also one of the top-10 web usability mistakes as defined by the Nielsen Norman group.

As in, it drives away far more potential clients than it can possibly convert. It’s a massive anti-pattern.


Large enterprises can afford to take things in house and might even save money that way, not to mention the security gains. Medical offices have no choice. However small companies often don't have anyone in IT (other than the CEO who does everything and only rarely knows what he is doing other than the niche the company is in). These should be the prime market for tools like this - just pay us a little bit and we will worry about he details for you - everything is backed up. However if you can get one enterprise account that is a lot more money than thousands of little accounts and so everyone focuses on them anyway.


> Good news for us, as that's what we specialise in, but also perplexing how trends in the software industry can completely ignore what customers actually want.

I initially read this backwards and thought you were lamenting that people insist on on-prem stuff when cloud is clearly The Right Thing.

I certainly don't think the entire software industry is ignoring what customers actually want. Case in point, you. But also lots of other developers who thrive in covering the myriad use cases the myopic behemoths can't see. They just have very loud PR and marketing and pretend those cases don't exist, so you hear about them a lot.


You seem to think that users want everything in the cloud and that’s what’s causing the proliferation of cloud services. You are wrong. Users want _convenience_. They couldn’t care less about the cloud or technical details. If your website can do what they want to do without uploading their documents to your server then and if it’s faster and cheaper then that’s what they’ll prefer.


No PHP nor JavaScript SDK? You guys don't like money?


It's a fair point. Most of our customers work with CPP, C# and Java in enterprise / back office contexts, which is why no PHP or Javascript right now - we've been tied up with other priorities. That said we just added Python to our main SDK and PHP is coming.

Plus our enterprise automation product can basically talk to anything via REST API ( https://www.pdf-tools.com/docs/conversion-service/api/conver... ).

But yeah - now you got me fired up to annoy some colleagues ;)


I would think that JS/TS support would be relatively high up... my own bias speaking, but a lot of development and effort to easing cloud apps is JS/TS centric.


PHP and Javascript? So you never worked on "enterprise"?


I work in a FAANG on stuff that is definitely "enterprise software", a major part of what we develop is written in TypeScript.

I admit PHP will not be as good of a candidate but for smaller companies it is still extremely attractive, and it's probably easier to develop since you can write PHP extension in C.


In that case, you can use https://www.pdftool.org/, which runs in the browser but offline and never uploads your files to any server.


I wanted to let you know that i disabled UBlock and badger for your site, but i'm still getting "please disable adblocker" ad error.

THe site renders fine otherwise. I'm not a technical user, but i do run Ublock in the complete Javascript disabled settings.


I didn't create this tool, but I use it frequently. I'm also using uBlock Origin, but I don't see the issue you describe. I'm not sure what Badget is, though.



How can I really know that as a random user


Unplug your network cable when you use it.


And it stores it in local storage and uploads it using a service worker later when I'm online?


If that's your paranoia level: How do you know the "offline" tool you're using is not uploading to a server? Possibly inadvertently in the course of bug reports, or surreptitiously while contacting the license server...?

Should security concerns really warrant not trusting the (reputable) vendor that the files are not being uploaded, you would need to do some sort of audit and/or run in an isolated environment and wouldn't be the "random user" referred to in OP.


You can easily block network access for an app on Windows using Windows Firewall. Same on a few Android skins such as MIUI by Xiaomi


same is true for Chrome Browser, open dev tools and select Network to "Offline"


Thanks


Use incognito mode then close that window before reconnecting online?


I'd suggest install a separate browser (there exists a myriad by now), unplug internet, use the service, uninstall the separate browser, reboot pc.


I suggest a separate VM for that, that you can delete when you're done. Add put the VM on a separate PC that you bought with cash off craigslist. Then toss the PC away in a different postcode when you're done. Then you can use the PDF tool safely without fear you're being tracked.


Run it on an air gapped breadboard 8086?


Use 'Developer Tools' and Inspect. Watch the Network tab.

If you also wear a tinfoil hat, delete the local storage, etc, after you are done using it.


Is is OpenSource ? Can it be run as docker pull; docker run ? If this is an option then use can make sure it will work offline..


This isn't my tool but based on what I read on the previous thread about it, it doesn't seem to be open-source. However, some folks recommended this tool which does seem to run locally: https://github.com/torakiki/pdfsam


> This isn’t just a niche issue either: this is a very real consideration for any corporate user

Very true, but I'd wish this "common" knowledge is more widespread. Security is a major issue commonly overlooked. People do a lot of insecure things for convenience.


I understand that you want to keep your work private and not expose your documents to the internet, but there might be a situation where the document isn't that important to you and any online solution would be sufficient, let's say you one of your friends tells you to ask the ai a math problem they want to know how to solve/learn but the ai only understands text then you need to ocr the pdf which is jpg converted then copy it to the ai, you might be on your phone or away from your desktop environment, here you might consider using an online solution like pdfequips :)


For anyone looking edit/fill PDFs locally (the data you fill in and document you load stay in your browser): https://SimplePDF.eu

You can read more in the privacy policy [1]

It can also be embed in any website [2]

Disclosure: I’m the developer behind it

[1] https://simplepdf.eu/privacy-policy

[2] https://simplepdf.github.io/


I'd also not upload any personal or identifying docs up to this, but I would use it for fliers and it would REALLY be useful converting PDFs I downloaded off the ineternet to begin with. (I've downloaded stuff in the past that I had to convert in order enter the data on the PDF into my computer. Geologic data for maps, list of states with capitals, alphabetized by them--well before ChatGPT, the list goes on.)


Sounds to me like that (a desktop app version) is the product to sell (since the online service seems to be free).


docker pull frooodle/stirling-pdf-base


This was on hn a couple of days ago. Stirling pdf is a self hosted docker container and this way you don’t have to worry about files being uploaded. https://news.ycombinator.com/item?id=40242639

I almost thought this hn post was the same service wrapped in a show and tell.


I had just setup "Stirling PDF" on my home NAS a few of weeks ago, since my SO needed to merge some documents and I'd recently read that (or a similar) HN thread.

I definitely would recommend it. It was really quick to setup; though my already having a reverse proxy with wild card TLS certs setup probably helped streamline the networking side of things.

https://github.com/Stirling-Tools/Stirling-PDF


Stirling-pdf. You can self-host it. Even though it all runs locally anyway


this might be a stupid question, but how do the teams share the documents?


Yes. People usually are surprised that NVIDIA is using it : https://www.adacore.com/nvidia

Ada is assumed to be dead by most US-centric programmers, but is alive and used outside the US. Seems most of the action these days in Ada-land is in Europe.


Not surprisingly, VHDL is also mostly used by European companies.


+1. My team still favors batteries-included style systems, even if it means missing out on the latest thing all the cool kids on the internet are talking about. For languages, this usually means sticking with the standard library that ships with it along with one or two libraries that augment it (e.g., BOOST for C++). It's not like "batteries included" eliminates the problem - a bad actor can wander in there and cause trouble. It's just a much more controlled environment that often has a process for contributing. I'm not a fan of the move of languages away from rich standard libraries to the "Random Interconnected Pile Of Internet Stuff".

Unfortunately people like me are in the minority it seems, and the "move fast and break stuff" mentality seems to still dominate the open source world even if that phrase has fallen out of favor - the attitude still seems to exist.


in open source you rarely have the cohesion of a full team to NIH all the stuff that you could pull in libraries for...


The swan, the pike, and the crawfish.


> I always thought part of the point of open source is that the code is auditable

Yes, it's theoretically true but doesn't actually occur in practice - largely because open source rarely sits still long enough for people to actually have the capacity to audit. From my vantage point, that capacity is consumed by addressing known bugs and issues, and the never ending feature adding and adaptation to changing whims of the developer community.

For example, the most recent high profile event w/ xz wasn't due to an audit but a lucky event of someone noticing something weird that caused an audit AFTER the weirdness was noticed. Had nobody noticed the weirdness, it's not likely any auditing would have occurred to notice it.

There is certainly a benefit to open source from transparency that allows such scrutiny when something weird happens. Had that code been closed source, it's very likely nobody would have been able to figure out what was going on nearly as fast.


I’d guess it’s because the size of the community that gets angry is trivially small relative to the overall customer base of Nintendo. I’d also guess that the average person whose gaming doesn’t stray much further than casually playing Animal Crossing, Zelda, or Mario doesn’t care nor notice when Nintendo does this sort of thing.


I honestly don't blame them. Couple of reasons.

First, having your assets in Garry's Mod is, in my opinion, a ticking time bomb for those assets going viral. This can be good, however in Nintendo's case their target market is kids and naturally they want tight control over the (squeaky clean) image of their characters. They have spent decades building that brand recognition and association.

Second, the only people who are going to get angry about this are Turbo-nerds, and Nintendo has already turned their back on Turbo-nerds. The overlap between people who are mad about this and who were already mad about Yuzu has to be substantial.

I don't know. I think this sucks, and it's particularly sucky that they just filed a DMCA action and didn't contact the developer directly. I feel bad for Gary.

All in all, it seems that they want to send a message that messing with The Plumber is just about as bad as messing with The Mouse.


I seriously hope these "turbonerds" as you call them wise up and start doing their thing anonymously so that the likes of Nintendo can do nothing about it.


JS is both the best and worst thing to have happened to computing in the last decades. Great creations based on it, but I constantly feel that dev community comes from a completely different planet than me when it comes to thinking about quality, resources, and priorities. I often feel that the greater JS community does more harm than good when it comes to what can be built atop that ecosystem.


Consider applying for YC's W25 batch! Applications are open till Nov 12.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: