<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: andrewfong</title><link>https://news.ycombinator.com/user?id=andrewfong</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Thu, 29 Oct 2026 15:40:18 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=andrewfong" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by andrewfong in "Docker Hub is down (again)"]]></title><description><![CDATA[
<p>My understanding is that it's also a legal CYA. If you have SLAs in place, outages might mean you owe money. So companies tend to err on the side of underreporting.</p>
]]></description><pubDate>Thu, 25 Sep 2025 01:14:32 +0000</pubDate><link>https://news.ycombinator.com/item?id=45368136</link><dc:creator>andrewfong</dc:creator><comments>https://news.ycombinator.com/item?id=45368136</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45368136</guid></item><item><title><![CDATA[Anonymous Source Shared Leaked Google Search API Documents]]></title><description><![CDATA[
<p>Article URL: <a href="https://sparktoro.com/blog/an-anonymous-source-shared-thousands-of-leaked-google-search-api-documents-with-me-everyone-in-seo-should-see-them/">https://sparktoro.com/blog/an-anonymous-source-shared-thousands-of-leaked-google-search-api-documents-with-me-everyone-in-seo-should-see-them/</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=40496967">https://news.ycombinator.com/item?id=40496967</a></p>
<p>Points: 333</p>
<p># Comments: 296</p>
]]></description><pubDate>Tue, 28 May 2024 03:07:31 +0000</pubDate><link>https://sparktoro.com/blog/an-anonymous-source-shared-thousands-of-leaked-google-search-api-documents-with-me-everyone-in-seo-should-see-them/</link><dc:creator>andrewfong</dc:creator><comments>https://news.ycombinator.com/item?id=40496967</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=40496967</guid></item><item><title><![CDATA[New comment by andrewfong in "Netflitwitter.com"]]></title><description><![CDATA[
<p>Someone's also purchased setwitter.com to prevent the same attack on another obvious domain</p>
]]></description><pubDate>Tue, 09 Apr 2024 19:40:13 +0000</pubDate><link>https://news.ycombinator.com/item?id=39983353</link><dc:creator>andrewfong</dc:creator><comments>https://news.ycombinator.com/item?id=39983353</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=39983353</guid></item><item><title><![CDATA[New comment by andrewfong in "Stable Diffusion 3"]]></title><description><![CDATA[
<p>My understanding of this tech is pretty minimal, so please bear with me, but is the basic idea is something like this?<p>Before: Evaluate the image in a little region around each pixel against the prompt as a whole -- e.g. how well does a little 10x10 chunk of pixels map to a prompt about a "red sphere and blue cube". This is problematic because maybe all the pixels are red but you can't "see" whether it's the sphere or the cube.<p>After: Evaluate the image as a whole against chunks of the prompt. So now we're looking at a room, and then we patch in (layer?) a "red sphere" and then do it again with a "blue cube".<p>Is that roughly the idea?</p>
]]></description><pubDate>Fri, 23 Feb 2024 21:19:26 +0000</pubDate><link>https://news.ycombinator.com/item?id=39486243</link><dc:creator>andrewfong</dc:creator><comments>https://news.ycombinator.com/item?id=39486243</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=39486243</guid></item><item><title><![CDATA[New comment by andrewfong in "Ask HN: PG's 'Do Things That Don't Scale' manual examples?"]]></title><description><![CDATA[
<p>A more subtle aspect of customer service here is that, as the dev or PM responding to the customer, you have a lot more power to give the customer what they want.<p>A BigCo can hire a lot of CS people but the best they can do sometimes is "we hear you and we'll pass along your feedback".</p>
]]></description><pubDate>Wed, 25 Oct 2023 20:18:37 +0000</pubDate><link>https://news.ycombinator.com/item?id=38017779</link><dc:creator>andrewfong</dc:creator><comments>https://news.ycombinator.com/item?id=38017779</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=38017779</guid></item><item><title><![CDATA[New comment by andrewfong in "Experts fear crooks are cracking keys stolen in LastPass breach"]]></title><description><![CDATA[
<p>I tried that but it's just really hard to keep up over time -- e.g. I used a rule based on the domain name but domain names change somewhere often. Toss in things like "ugh, which of my three emails did I use on this site" or "which high school teacher did I say was my favorite for this site" and it ends up being a big hairy mess that screams for an encrypted place to stick my notes.<p>Also, what I consider "non obvious" isn't that non-obvious. Given enough of a sample size, a committed attacker can guess a lot of rules. And if the prize (a crypto wallet) is big enough, they might be motivated enough to give it a go.</p>
]]></description><pubDate>Wed, 06 Sep 2023 02:20:21 +0000</pubDate><link>https://news.ycombinator.com/item?id=37400674</link><dc:creator>andrewfong</dc:creator><comments>https://news.ycombinator.com/item?id=37400674</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=37400674</guid></item><item><title><![CDATA[New comment by andrewfong in "The company behind Stable Diffusion appears to be crumbling into chaos"]]></title><description><![CDATA[
<p>Eh, I'm not sure that follows.<p>So under U.S. law, the more "transformative" something is (as opposed to "derivative"), the more likely it is to be deemed fair use. The line between derivative and transformative is fuzzy but generally, something like a movie adaptation of a book is derivative whereas parody is transformative.<p>Given that, suppose I have a cat pic. Google creates a thumbnail of that cat pic, which is, by itself, obviously derivative. But Google includes my cat pic alongside many other cat pics in response to a query for cats, the thing as a whole starts looking more transformative.<p>Now suppose my cat pic gets sucked into a generative AI. I suppose it <i>could</i> be used to create a merely derivative copy of the original cat pic, albeit with reduced quality, like a thumbnail. But the whole point of these models is to recombine features from millions of images to create something unique. That is, if I tell the model to draw a cat, it combines features from thousands of other cat pics. Which seems at least as transformative as simply showing the same cat pics in a grid.<p>From an ethics standpoint, the <i>main</i> difference between Image Search and a generative AI is attribution. Google Image Search is just links whereas Stable Diffusion is sort of opaque about its sources. But attribution isn't one of the factors of fair use -- a parody which makes fun of the original without ever directly identifying the original is still parody.<p>That said, I suppose you could argue it affects the economic impact of the copying, one of the other fair use factors -- it seems plausible to me that AI generated images impacts the market for, say, Getty images in a way that does image search does not. But it's anyone's guess how a court would balance those two things -- courts very often pretend all of the fair use point one way to discussing how factors are balanced.</p>
]]></description><pubDate>Thu, 10 Aug 2023 06:44:55 +0000</pubDate><link>https://news.ycombinator.com/item?id=37072765</link><dc:creator>andrewfong</dc:creator><comments>https://news.ycombinator.com/item?id=37072765</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=37072765</guid></item><item><title><![CDATA[New comment by andrewfong in "MDN can now automatically lie to people seeking technical information"]]></title><description><![CDATA[
<p>Even if the AI didn't make stuff up, it's unclear to me what value it adds over...<p>- The existing human edited text already on the page<p>- The playground to run the code in question<p>- One of the many existing autocomplete / static analysis tools for HTML / CSS / JS out there. If you want a tooltip explaining what the second argument to a built in JS function in a code snippet does, this is a solved problem!</p>
]]></description><pubDate>Sat, 01 Jul 2023 00:43:23 +0000</pubDate><link>https://news.ycombinator.com/item?id=36544852</link><dc:creator>andrewfong</dc:creator><comments>https://news.ycombinator.com/item?id=36544852</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=36544852</guid></item><item><title><![CDATA[New comment by andrewfong in "Gergely Orosz: on the risk of Google shutting down Google Cloud Platform"]]></title><description><![CDATA[
<p>I think this is Supabase's whole schtick, right? It's an open source, optionally self hosted Firebase alternative.</p>
]]></description><pubDate>Wed, 21 Jun 2023 03:59:45 +0000</pubDate><link>https://news.ycombinator.com/item?id=36414239</link><dc:creator>andrewfong</dc:creator><comments>https://news.ycombinator.com/item?id=36414239</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=36414239</guid></item><item><title><![CDATA[New comment by andrewfong in "Windows 11 calls a zip file a 'postcode file' in UK English"]]></title><description><![CDATA[
<p>If you're going to use an ML model, you might as well use an existing language translation model rather than asking ChatGPT or the like to convert words one by one. You'd probably get better results treating American English and British English as entirely different languages rather than assuming one is the same as the other but with a handful of different words.</p>
]]></description><pubDate>Thu, 08 Jun 2023 04:38:37 +0000</pubDate><link>https://news.ycombinator.com/item?id=36237283</link><dc:creator>andrewfong</dc:creator><comments>https://news.ycombinator.com/item?id=36237283</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=36237283</guid></item><item><title><![CDATA[New comment by andrewfong in "The death of self-driving cars is greatly exaggerated"]]></title><description><![CDATA[
<p>I'm still annoyed they got rid of the ultrasonic sensors on the latest model. I test drove a 2022 (or maybe a 2021) and the park assist was pretty good. And then I get the 2023 delivered and there's no park assist for the first 6 months because they removed the ultrasonics but the vision-only software wasn't ready yet. A vision-based park assist finally came in via an OTA update  but it's nowhere near as precise as the ultrasonic version was. Like, the estimates of how much distance is in front of me seem to jump around a lot more than I'm actually moving, and it sometimes reports it's degraded when trying to pull out of a tight spot.</p>
]]></description><pubDate>Sun, 04 Jun 2023 05:44:25 +0000</pubDate><link>https://news.ycombinator.com/item?id=36183369</link><dc:creator>andrewfong</dc:creator><comments>https://news.ycombinator.com/item?id=36183369</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=36183369</guid></item><item><title><![CDATA[New comment by andrewfong in "Lawyer cites fake cases invented by ChatGPT, judge is not amused"]]></title><description><![CDATA[
<p>Well, it sort of is OpenAI's fault that it presented the interface as a chat bot though.<p>> It was given a sequence of words and tasked with producing a subsequent sequence of words that satisfy with high probability the constraints of the model.<p>This is just autocorrect / autocomplete. And people are pretty good at understanding the limitations of generative text in that context (enough that  "damn you autocorrect" is a thing). But  for whatever reason, people assign more trust to conversational interfaces.</p>
]]></description><pubDate>Sun, 28 May 2023 04:36:44 +0000</pubDate><link>https://news.ycombinator.com/item?id=36101173</link><dc:creator>andrewfong</dc:creator><comments>https://news.ycombinator.com/item?id=36101173</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=36101173</guid></item><item><title><![CDATA[New comment by andrewfong in "The Web I Want (2018)"]]></title><description><![CDATA[
<p>By virtual DOM, what I mean is telling the browser I would like to replace the innerHTML of an element with another bit of HTML, and the browser should figure out an efficient way to "diff" the update rather than replace all the children wholesale.<p>It would not be as efficient as Svelte and Solid since those can use the compiler to further optimize code, but having the framework-less version of JS be "as good as" a framework like Vue or React would be a big plus for moving away from frameworks generally.<p>Apart from that, the general problem of reactivity boils down to "map this DOM element to this variable, and if the variable changes, update the DOM element". You could imagine an API sort of like this:<p><pre><code>  <span bind-var="variableName" bind-gen="functionName">
    Default Value
  </span>
</code></pre>
Where `bind-var` specifies a variable that, if updated, signals that the span should be replaced with the return value of the function specified by `bind-gen`</p>
]]></description><pubDate>Sun, 14 May 2023 23:55:42 +0000</pubDate><link>https://news.ycombinator.com/item?id=35942486</link><dc:creator>andrewfong</dc:creator><comments>https://news.ycombinator.com/item?id=35942486</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=35942486</guid></item><item><title><![CDATA[New comment by andrewfong in "The Web I Want (2018)"]]></title><description><![CDATA[
<p>At this point, I feel like the party best equipped to reduce JavaScript bloat are the web browsers themselves.<p>There's the obvious stuff, like simply blocking third party tracking JS.<p>There's some small quality of life bits -- a non-trivial number of websites load JS to make prettier UI elements (like a nicer date picker) because the defaults are so ugly (on desktop at least -- mobile tends to be better). If browsers shippednicer default UI elements, folks would be be less inclined to write their own using JS.<p>And then there's larger fundamental changes to the API themselves. If HTML6 included virtual DOMs or reactive primitives, that might reduce the inclination towards framework bloat.</p>
]]></description><pubDate>Sun, 14 May 2023 22:09:12 +0000</pubDate><link>https://news.ycombinator.com/item?id=35941770</link><dc:creator>andrewfong</dc:creator><comments>https://news.ycombinator.com/item?id=35941770</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=35941770</guid></item><item><title><![CDATA[New comment by andrewfong in "Making friends as an adult is hard (2021)"]]></title><description><![CDATA[
<p>Seems to be a thing: <a href="https://www.meetup.com/mountain-view-area-runclub/" rel="nofollow">https://www.meetup.com/mountain-view-area-runclub/</a></p>
]]></description><pubDate>Tue, 18 Apr 2023 06:53:12 +0000</pubDate><link>https://news.ycombinator.com/item?id=35610784</link><dc:creator>andrewfong</dc:creator><comments>https://news.ycombinator.com/item?id=35610784</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=35610784</guid></item><item><title><![CDATA[New comment by andrewfong in "Launch HN: OutSail (YC W23) – Wingsails to reduce cargo ship fuel consumption"]]></title><description><![CDATA[
<p>I have no sailing or nautical or any relevant experience, so apologies if this is obvious, but what keeps the sail from getting blown off the ship?<p>My understanding is that the container is lifted and placed on top of a typical container vessel. And containers do fall off ships from time to time. Adding a very large sail to the container makes it easier to blow off. Is whatever the standard mechanism is for securing containers to ships sufficient here?</p>
]]></description><pubDate>Tue, 04 Apr 2023 02:53:55 +0000</pubDate><link>https://news.ycombinator.com/item?id=35434394</link><dc:creator>andrewfong</dc:creator><comments>https://news.ycombinator.com/item?id=35434394</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=35434394</guid></item><item><title><![CDATA[New comment by andrewfong in "Hyundai promises to keep buttons in cars"]]></title><description><![CDATA[
<p>YMMV I suppose but the "auto" options for climate + wipers do not work well for me.<p>Single droplet in the right spot => furious wiping. 100 droplets in the wrong spots => no wipe.<p>Climate - My preferred mode is to have the A/C on but not actually directed straight at me (so through the windshield vents), but auto also blasts through the front.</p>
]]></description><pubDate>Wed, 22 Mar 2023 07:21:19 +0000</pubDate><link>https://news.ycombinator.com/item?id=35257855</link><dc:creator>andrewfong</dc:creator><comments>https://news.ycombinator.com/item?id=35257855</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=35257855</guid></item><item><title><![CDATA[New comment by andrewfong in "Joint statement by the Department of the Treasury, Federal Reserve, and FDIC"]]></title><description><![CDATA[
<p>The short-term case for other banks bailing out depositors is that any systemic risk affects all banks and the rest of the citizenry, albeit indirectly.<p>But I think it's probably economically sound in the long-term as well. That is, asking every depositor with $250K+ to assess the financial health of each bank they use and maybe buy insurance is collectively more expensive than just having the FDIC implicitly insure all deposits.<p>That's different than asking if it's "fair". But I would wager it's probably more efficient.</p>
]]></description><pubDate>Mon, 13 Mar 2023 03:24:40 +0000</pubDate><link>https://news.ycombinator.com/item?id=35130588</link><dc:creator>andrewfong</dc:creator><comments>https://news.ycombinator.com/item?id=35130588</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=35130588</guid></item><item><title><![CDATA[New comment by andrewfong in "Cities: Skylines II"]]></title><description><![CDATA[
<p>I hope they get perf down. The first game runs great on my M1 until we get to around 100K residents or so. That's not a huge number of people for a real world city, but I guess simulating traffic + pathfinding for 100K+ actors is a dicey proposition CPU-wise.<p>IIRC, SimCity 4 didn't have this issue but it sort of cheats by chopping the map up into multiple tiles in a region and only simulating a subset of your population. Which honestly seems acceptable to me.</p>
]]></description><pubDate>Mon, 06 Mar 2023 20:23:44 +0000</pubDate><link>https://news.ycombinator.com/item?id=35047058</link><dc:creator>andrewfong</dc:creator><comments>https://news.ycombinator.com/item?id=35047058</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=35047058</guid></item><item><title><![CDATA[New comment by andrewfong in "Show HN: Touca – a better alternative to snapshot testing"]]></title><description><![CDATA[
<p>Similar concern here about the lack of snapshot files. Can "locally stored" captured data points be version controlled, even if it's some special Touca binary that makes no sense in GitHub?<p>I'm coming at this from a "how would I integrate this into my existing corporate setup" perspective. I'm concerned less about UX and more just how it works.<p>If I interact with Touca via a local client that doesn't to the Internet, and the actual data points are exchanged entirely via Git, that's a much easier sell than another server that I have to ask SREs to maintain. And being able to say "it's just Git + a local client" makes it easier to reason about concerns like "what if we switch to GitLab" or "how would this integrate into our own bespoke CI/deploy pipeline".</p>
]]></description><pubDate>Tue, 28 Feb 2023 06:27:53 +0000</pubDate><link>https://news.ycombinator.com/item?id=34966320</link><dc:creator>andrewfong</dc:creator><comments>https://news.ycombinator.com/item?id=34966320</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=34966320</guid></item></channel></rss>