Hacker News: Ndymium

New comment by Ndymium in "SingleRide: Longest route on NYC Subway without visiting the same station twice"

Ndymium — Thu, 07 May 2026 10:18:41 +0000

It's a game. You're supposed to click on the different route options that are presented to you on the bottom of the screen. That's why it goes slower the more options there are.

But I also just followed it for the first time from beginning to end, not doing anything. Because I assumed someone had already done the math.

New comment by Ndymium in "Facebook's Fascination with My Robots.txt"

Ndymium — Mon, 23 Feb 2026 14:17:25 +0000

While 7700 per hour sounds big, pretty much any dinky server can handle it. So I don't think it's a matter of DDoS. At this point it's just... odd behaviour.

New comment by Ndymium in "Facebook's Fascination with My Robots.txt"

Ndymium — Mon, 23 Feb 2026 14:13:06 +0000

Forgejo does set "cache-control: private, max-age=21600", which is considerably more than one second, but I grant it uses the "private" keyword for no reason here.

New comment by Ndymium in "Facebook's Fascination with My Robots.txt"

Ndymium — Mon, 23 Feb 2026 12:01:46 +0000

For some reason, Facebook has been requesting my Forgejo instance's robots.txt in a loop for the past few days, currently at a speed of 7700 requests per hour. The resource usage is negligible, but I'm wondering why it's happening in the first place and how many other robot files they're also requesting repeatedly. Perhaps someone at Meta broke a loop condition.

Facebook's Fascination with My Robots.txt

Ndymium — Mon, 23 Feb 2026 12:01:46 +0000

Article URL: https://blog.nytsoi.net/2026/02/23/facebook-robots-txt

Comments URL: https://news.ycombinator.com/item?id=47121210

Points: 91

# Comments: 53

New comment by Ndymium in "Roundcube Webmail: SVG feImage bypasses image blocking to track email opens"

Ndymium — Mon, 09 Feb 2026 11:11:47 +0000

Note that the API is split into XSS-safe and XSS-unsafe calls. The XSS-safe calls [0] have this noted for each of them (emphasis mine):

> Then drop any elements and attributes that are not allowed by the sanitizer configuration, and any that are considered XSS-unsafe (even if allowed by the configuration)

The XSS-unsafe functions are all named "unsafe". Although considering web programmers, maybe they should have been named "UnsafeDoNotUseOrYouWillBeFired".

[0] https://developer.mozilla.org/en-US/docs/Web/API/HTML_Saniti...

New comment by Ndymium in "Roundcube Webmail: SVG feImage bypasses image blocking to track email opens"

Ndymium — Mon, 09 Feb 2026 11:07:56 +0000

That's the old sanitizer API. That was already removed and what you linked earlier is the new sanitizer API.

New comment by Ndymium in "The Gleam Programming Language"

Ndymium — Wed, 14 Jan 2026 08:35:01 +0000

Gleam is technically as suitable for distributed computing as Erlang: since it compiles to Erlang, it can do anything that Erlang can. You can use Erlang and Elixir libraries and write FFI code to do things that would be unergonomic to do in Gleam. Sure the experience is different and if you want to embrace the guarantees of static typing, then the APIs will look different, like gleam_otp.

If you compile it to JS, then the guarantees change to JS's guarantees.

Personally I've felt that the JS target is a big plus and hasn't detracted from Gleam. Writing a full stack app with both sides being in Gleam and sharing common code is something I've enjoyed a lot. The most visible impact is that there's no target specific functions in the stdlib or the language itself, so Erlang related things are in gleam_erlang and gleam_otp, and e.g. filesystem access is a package instead of being in the stdlib. If you're just into Erlang, you don't need to interact with the JS target at all.

New comment by Ndymium in "I announced my divorce on Instagram and then AI impersonated me"

Ndymium — Mon, 22 Dec 2025 10:12:32 +0000

og:description is exactly the meta tag to use for link descriptions in embeds. Not all meta tags are only for search engines. The app acted correctly here.

New comment by Ndymium in "Denial of service and source code exposure in React Server Components"

Ndymium — Fri, 12 Dec 2025 12:25:32 +0000

It's basically what Phoenix LiveView specifically is. That's only one way to do it, and Phoenix is completely capable of traditional server rendering and SPA style development as well.

LiveView does provide the tools to simulate latency and move some interactions to be purely client side, but it's the developers' responsibility to take advantage of those and we know how that usually goes...

New comment by Ndymium in "250MWh 'Sand Battery' to start construction in Finland"

Ndymium — Fri, 28 Nov 2025 04:50:32 +0000

This is essentially what a ground source heat pump system is. Except instead of a sealed water tank you just make a tall hole that fills with water and the sun will warm it for you during the summer automatically.

1800 kWh is very little. We use around 12000 kWh and our neighbours' new house uses around 8000 kWh annually and most of that is heating. I'm not sure how many houses can hit 1800.

New comment by Ndymium in "Sony PlayStation 2 fixing frenzy"

Ndymium — Tue, 14 Oct 2025 06:35:03 +0000

Made me laugh though, when in the first level that it completely blocks, the director tells you to get close to a pickup, but the car you're chasing smashes the pickup to the sky like Team Rocket.

Last I heard there was a feature branch for testing a software implementation of floating point that would fix these issues, but naturally it would be a lot slower. I haven't tried it myself.

New comment by Ndymium in "You did this with an AI and you do not understand what you're doing here"

Ndymium — Tue, 23 Sep 2025 03:29:17 +0000

I admit that latter part is just for whimsy, because I think it looks fun. The dashes I like for their aesthetics and if that makes me eccentric then so be it. They shouldn't distract anyone's reading, or at least they didn't use to before LLMs.

New comment by Ndymium in "You did this with an AI and you do not understand what you're doing here"

Ndymium — Mon, 22 Sep 2025 10:27:49 +0000

En and em dashes are easily accessible on both my laptop's and phone's keyboard layouts and I like using them, just like putting the ö in coöperate. It's sad if this now makes me look like a robot and I have to use the wrong dashes to be more "human".

New comment by Ndymium in "Optimising for maintainability – Gleam in production at Strand"

Ndymium — Fri, 29 Aug 2025 08:47:22 +0000

Note that you linked to the 0.1.1 version of the gleam_otp documentation. The latest version resides at https://hexdocs.pm/gleam_otp/index.html and both gleam_erlang and gleam_otp have hit 1.0.0 already. It doesn't contain every feature yet (like dynamic supervisors) but it's usable (and I've rolled my own dynamic supervisor in the meantime).

New comment by Ndymium in "You know more Finnish than you think"

Ndymium — Thu, 07 Aug 2025 07:11:02 +0000

Here's a modern take I like with banjo and accordion by Slack Bird: https://www.youtube.com/watch?v=WMvpeYBnwTg

Turns out you can play it with an angry face.

New comment by Ndymium in "You know more Finnish than you think"

Ndymium — Thu, 07 Aug 2025 06:17:40 +0000

*Ei saa peittää. :)

New comment by Ndymium in "Software Development at 800 Words per Minute"

Ndymium — Mon, 28 Jul 2025 11:35:25 +0000

I'm not, the author was my colleague at the time. I can only hope to be half as brilliant as him.

New comment by Ndymium in "Software Development at 800 Words per Minute"

Ndymium — Mon, 28 Jul 2025 10:56:20 +0000

It was quite likely this one: https://www.vincit.com/blog/software-development-450-words-p...

Sadly the audio samples are gone. I'll need to pester someone to fix that.

New comment by Ndymium in "Slightly better named character reference tokenization than Chrome, Safari, FF"

Ndymium — Fri, 27 Jun 2025 21:37:40 +0000

Thanks to your article I just realised my HTML entity codec library doesn't support decoding those named entities that can omit the semicolon at the end. More work for me, good thing my summer vacation just started! :)