[1] "To be very honest here, you risk having KeePassXC blocked by relying parties." https://github.com/keepassxreboot/keepassxc/issues/10407#iss...

More examples here https://fy.blackhats.net.au/blog/2025-12-17-yep-passkeys-sti...

It currently has 99 Democratic sponsors and 31 Republican sponsors (note: there are more Republicans than Democrats in the House). It will probably not make it out of committee. 2 of the 4 Democrats on the committee have sponsored it; 0 of the 8 Republicans have.

Passkeys are here to improve your login security! All you have to do is give complete control over your ability to log in to a service to one of three American big tech companies. Yay!

Open 3 terminal windows. Try to switch back & forth between just two of them with a keyboard shortcut (without mentally tracking whether or not to press Shift). You can't.

Open a browser and two terminal windows. Try to switch between one terminal (your editor) and the browser window (your reference docs), without also bringing the other terminal above the browser window, covering up your docs. You can't.

> Is this going to be some Kind of major epiphany?!

If you don't use several windows per app, probably not. But, I do, and macOS's window manager is awful for it.

OpenAI, for example, is not profitable as far as I know. I think the users they have now will be in for a rude awakening once they have to come up with a business model in order to pay back their investors. Startups that don't have a business model and get bought also regularly get shut down shortly later, leaving users stranded, look at Nest or Keybase for example off the top of my head.

Not having a business plan looks like "we'll release a free thing, have no way to generate income, lose money for a few years, and then beg for a million dollars." That's not a business plan. That's a waste of your time & your users' time.

> have you started a successful business?

Not yet, but I am actually working on it! Having a meeting with a local business tomorrow to discuss potential market pricing options so I have some idea of how much money I can expect to make. Business plan!

The corollary for this is as a user, you should determine whether or not the business you are planning to depend on has a business model before you choose to depend on them. If there is no apparent income stream, then the business will close at some point and you may as well skip all the heartburn and choose not to use that business for anything you care about. BlueSky, I'm looking at you right now.

Context, two nearly identical comments from different users.

hackerman70000 at 16:09 https://news.ycombinator.com/item?id=47677483 :

> Cloudflare pushing PQ by default is probably the single most impactful thing that can happen for adotpion. Most developers will never voluntarily migrate their TLS config. Making it the default at the CDN layer means millions of sites get upgraded without anyone making a decision

valeriozen at 16:17 https://news.ycombinator.com/item?id=47677615 :

> cloudflare making pq the default is the only way we get real adoption. most devs are never going to mess with their tls settings unless they absolutely have to. having it happen at the cdn level is the perfect silent upgrade for millions of sites without the owners needing to do anything

One of these hand-curated blog aggregator websites pops up on HN about every month. They're cool and good on the author for trying to solve the problem, but it seems like the wrong approach to me. They're too disorganized, a random collection of mostly tech- and politics-related writing from random people with zero way to vet the quality of the writing. They also require the creator/owner to care about the project for the long-term, which is unlikely. I never revisit the aggregators.

I wonder if webrings are a better fix here. The low-tech version could be to put a static-URL page on my blog that links to other blogs I like, with a short description. Then people who find my blog interesting might also enjoy the blogs that I enjoy. That could be powerful if it caught on widely.

Maybe a clever person could come up with some kind of higher-tech version that could present a more interesting & consistent interface to users, encourage blogs to link back to each other, and also solve the dead-link problem.

I spent a lot of time squashing bugs like this.

Windows has one window manager. Linux has dozens. Windows apps are written to make assumptions about how the Windows window manager works. Things like windowing event message sequences, side-effects on values returned by other APIs, the exact sequence of fullscreen status side-effects such as window size and mouse cursor capture and window chrome presence. That's valid because those always work the same way on Windows. But Linux window managers all do all of those things differently, and trying to get all dozens of window managers to behave exactly the same way as Windows's does is near impossible.

Another possibility is it's just how the game works, even on Windows. It was pretty common to get windowing bugs reported, test them on Windows, and see the exact same behavior as we had on Linux.

Note that this is a much less robust form of anti-cheat, which is why many developers do not enable it.

Rather, I don't like that the terms I released my work under aren't being respected. I believe LLMs are derivative works of the pieces they are trained on. I spent more than ten years working on open source code, and now the models that were trained on my GPL'd code are being used to make proprietary code against the terms of the license. I find this reprehensible.

While it wasn't an explicit term of release, generally I did not expect anyone to get any kind of financial value from the blog posts I wrote. I just wrote them for fun & maybe others would find them interesting. Now, LLMs have been trained on my blog posts and are generating financial value for some of the worst human beings on the planet who are using their money to murder, demean, and maim other humans.

I now know that blog posts I wrote for fun are putting money in some sociopath's bank account, and the GPL'd code I wrote is being used to create software to exploit me & other users. If I continue to create things publicly, it will be used against me and other people, and there's nothing I can do to stop it except to stop creating things. It's all very disrespectful & demoralizing.

Oh man, tangent into one of my favorite library book experiences. I checked out a sci-fi book at the library. It was good I was enjoying it. Then a few chapters in, I found a previous library patron had written nit-picky notes in the margin, poking holes in the author's fictional science tech explanations. And these weren't little one-word exclamations, they were whole sentences written in perfectly legible, almost impossibly-tiny pencil handwriting. Some of them even had little drawn diagrams! It went through the whole book, every hundred pages or so some little margin notes about how such-and-such sci-fi babble didn't reflect how space-time actually works or whatever. It was a hoot, a little bonus on top of the book itself.

Supremely ethical of you to ignore the license terms of open source code, but respect the license for proprietary code.

This would be an excellent title :)