Hacker News: antran22

New comment by antran22 in "The Quiet Renovation at Bitwarden"

antran22 — Mon, 18 May 2026 16:21:01 +0000

When I first learnt about Bitwarden about 3 years ago, I started hosting Vaultwarden right away. Right now I have one instance for myself and another for my friend's company. Everything runs as smooth as butter. If you can self-host something, do self-host a Vaultwarden instance. If you are (like me) somewhat paranoid about the fact that Vaultwarden hasn't got a proper security audit on its codebase, just run it behind a VPN, it will probably be fine.

I'm not particularly worried about Bitwarden going belly up because it has already have such a well-established open-source replacement. The worst-case scenario is that Bitwarden make the clients incompatible with Vaultwarden, and like how OP already mentioned in the post, somebody in the community will fork them as soon as this happen.

New comment by antran22 in "Moving away from Tailwind, and learning to structure my CSS"

antran22 — Sat, 16 May 2026 14:48:28 +0000

> Tailwind instead pushes the dev into a CSS-first approach. You think about the Tailwind classes you want, and then throw yet-another-div into the DOM just to have an element to hang your classes on.

To be fair plopping a `div` everywhere started way before Tailwind. I blame React and the mess that is CSS in JS for this.

New comment by antran22 in "Futhark by example (2020)"

antran22 — Sat, 16 May 2026 14:44:04 +0000

Was expecting to see some examples of how to read runes, but I am nonetheless equally satisfied.

https://en.wikipedia.org/wiki/Elder_Futhark

New comment by antran22 in "Futhark by example (2020)"

antran22 — Sat, 16 May 2026 14:42:27 +0000

Elder [0] and Younger [1] Futhark (or Fuþark) are the name of two runic writing systems used by Germanic and Scandinavian Vikings. The name Futhark is a combination of the first 6 runes /f/, /u/, /ð/, /ɑ/, /r/, and /k/. Similar to how you get the name "alphabet" from the first two letters of Greek's writing system.

[0]: https://en.wikipedia.org/wiki/Elder_Futhark

[1]: https://en.wikipedia.org/wiki/Younger_Futhark

New comment by antran22 in "Ratty – A terminal emulator with inline 3D graphics"

antran22 — Mon, 11 May 2026 15:55:30 +0000

why wouldn't you want to see your htop output on a moebius strip

New comment by antran22 in "Nokia N900 Necromancy"

antran22 — Fri, 12 Dec 2025 04:14:42 +0000

I'm just wondering if there is any real modern pocket cyberdeck with the form factor of those old phones, with a slide out physical keyboard.

New comment by antran22 in "Icons in Menus Everywhere – Send Help"

antran22 — Tue, 09 Dec 2025 10:01:01 +0000

in that case, they should make it optional. What some might find as eye candy, other finds as nuisance (case in point, animation).

Show HN: A dead-simple CV generator using Typst typesetter

antran22 — Mon, 09 Sep 2024 18:55:23 +0000

I banged out this piece of code when I want to quickly do tailored CVs during my job search.

Github: https://github.com/antran22/typst-cv-builder

Comments URL: https://news.ycombinator.com/item?id=41492142

Points: 1

# Comments: 0

New comment by antran22 in "Zen, a Arc-like open-source browser based on the Firefox engine"

antran22 — Tue, 27 Aug 2024 17:29:05 +0000

I checked this out and I gotta say it is still in a very early stage. The features they are presenting seem nice, but not very usable, with a lot of rough edges.

Then I found this issue, where essentially they left a huge backdoor open with Remote Debugger: https://github.com/zen-browser/desktop/pull/927. The guy claims that it was due to ignorance, but seeing this really shakes up my paranoia. Luckily I haven't typed any credential into the app. From a security-minded user's perspective, this is not a good sign. I hope that they would really put privacy & security forward, get some 3rd party security audits.

Gowebly: A tool to bootstrap an web application in Golang

antran22 — Thu, 06 Jun 2024 14:23:41 +0000

Article URL: https://github.com/gowebly/gowebly

Comments URL: https://news.ycombinator.com/item?id=40597784

Points: 1

# Comments: 0

New comment by antran22 in "Apple Fell Behind in the AI Arms Race"

antran22 — Thu, 06 Jun 2024 14:15:10 +0000

I sincerely hope that Apple don't pull a Recall move, because at that moment I'll be forced to migrate off the ecosystem (maybe I'll install Asahi Linux on my M-series machine).

So thank you, Apple, for not running in this arm race. Not every race is worth participating.

New comment by antran22 in "Biscuit authorization"

antran22 — Thu, 14 Dec 2023 11:24:54 +0000

In the case of a serious attack, the blacklist should be every token. You can still handle this quite nicely with JWT by rotating the previous verification key. Depends on systems and configuration, this can be as easy as changing the HMAC private key or push a new RSA key to every verifier.

New comment by antran22 in "Biscuit authorization"

antran22 — Thu, 14 Dec 2023 11:18:00 +0000

JWT doesn't encrypt (by default) the payload. The header & payload is passed through base64 and appended with a hash to produce a JWT. JWT verifying doesn't require making API call, and is essentially a hash check. Any verifier with a public verification key can determine if the JWT is bogus by a quick hash check and reject the request right away.

Comparing to session IDs, you have no way to know if an unique id is bogus or not. You have to check from a list, be it a cache or a database. This limits the scalability of the solution. I'm not an expert, but AFAIK JWT verifier can be stationed on the edge of the application network, and I have not checked this but I suspect they can even make a hardware solution for those kind of activity. That's definitely a big reduction of attack surface in terms of DDOS.

IMO JWT doesn't have that many moving parts. Encryption parameters are handled by libraries according to tested standards. The only real thing you need to do is to keep your private key safe.

CSS Arts using only background gradient on a single div element

antran22 — Tue, 17 Oct 2023 17:27:33 +0000

Article URL: https://a.singlediv.com/

Comments URL: https://news.ycombinator.com/item?id=37918463

Points: 3

# Comments: 0

New comment by antran22 in "Amazon Honeycode Shutting Down"

antran22 — Fri, 25 Aug 2023 19:22:32 +0000

I worked with some platforms that does. However, those usually position themselves as a code generator more than a full application builder.

- Amplication: Last I checked, they allow defining data structure & endpoints etc. before exporting to Nest.js Boilerplate with niceties. They sync to a separate branch on GitHub, so you can use it alongside writing actual logic into the boilerplate, and merge new changes from Amplication to the main branch. - Draftbit (React Native based Mobile App builder). The builder is not very great, they lack a bunch of features. They make up for this by allowing the developer to add custom JS code very easily. You can write your own Custom React element inside the editor, and with a little massaging things can fall into place. I'm not saying this approach should be abused, though. The team told us once that some of their big clients are mobile dev agencies that mostly just use the platform to Storyboard & bootstrap some UI before doing the actual logic in their own code. - FlutterFlow (Mobile App builder). I'm biased because I'm still in the progress of helping a client fixing their mess on FlutterFlow. FlutterFlow's code output is really spaghetti. The developer UX on the builder is horrible, so in the end I still opt to eject and deal with the spaghetti code.

New comment by antran22 in "Bun v0.8"

antran22 — Thu, 24 Aug 2023 06:59:09 +0000

Thanks for building Windmill. I spin up a test instance and was blown away by the well-designed-ness.

I'm looking to investigate using Windmill as a website builder for some small internal system. Few questions: - Is it possible to setup custom path for flows (to hack it into a REST API) - How can we go and make authenticated flow

New comment by antran22 in "Chandrayaan-3 Soft-landing [video]"

antran22 — Wed, 23 Aug 2023 16:13:05 +0000

You are saying "gross omission" like this is some Python script, like they are skipping the else clause for a condition. Imagine trying to land a plane that is flying at Mach 2, with no direct control, only a video feed with 4 seconds resolution, a bunch of sensors and a tank of fuel for retrograde burn to slow you down. Can you even fathom the number of scenarios that can happen. Your application may have 1 happy path and 2 sad path. Here you get only 1 happy path, a few not so happy path where your probe land sideway or just roll down a crater; and the rest of them are every other combinations of your probe's orientation and speed vector and collision location.

Hell, you can run a few thousand simulators for every scenario you can think of during descent, including lost of burner, propellant leak, etc, and then during the actual descent a chip get burnt because of a stray cosmic ray. There will still be somebody on HN call you out for cutting corner.

New comment by antran22 in "How to implement a disk cache plugin for Elixir's Req HTTP client?"

antran22 — Fri, 18 Aug 2023 03:39:49 +0000

It's a piece of example code to demo a concept. You are asking people to error check a something akin to a curl call in a bash command.

New comment by antran22 in "VinFast: Vietnam EV maker valued at more than Ford or GM"

antran22 — Wed, 16 Aug 2023 12:51:31 +0000

Honestly, BBC is writing a very clickbaity title. They have only been on NASDAQ one day. Vinfast is not going to topple Tesla or Ford or GM in the next few days.

Context: I'm a Vietnamese and worked on one of the Vinfast subproject at one point. I like how Vinfast is going in Vietnam, trying to spearhead EV adoption in our country. I honestly hope they grow to be bigger than Tesla. But the product is not there yet.

New comment by antran22 in "Jira can’t stop people from using it incorrectly"

antran22 — Wed, 16 Aug 2023 12:44:14 +0000

IMO it's not Jira's fault (although I hate Jira with a burning passion). It's the problem of management trying to force their opinionated certainty on a very uncertain process of software development.

One of my past team used another lightweight Jira alternative, and even though the software does it best to keep things light, agile, PMs read the burn up chart as religiously as the Bible, then make their strategic decision based on the most optimistic estimation of the chart.

Agile is great at its core, but business people ruined it. And we have craps like Agile Expert.