<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: lucacasonato</title><link>https://news.ycombinator.com/user?id=lucacasonato</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Sun, 05 Apr 2026 22:15:16 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=lucacasonato" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by lucacasonato in "Deno Sandbox"]]></title><description><![CDATA[
<p>It will only replace the secret in headers</p>
]]></description><pubDate>Tue, 03 Feb 2026 21:37:21 +0000</pubDate><link>https://news.ycombinator.com/item?id=46877652</link><dc:creator>lucacasonato</dc:creator><comments>https://news.ycombinator.com/item?id=46877652</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46877652</guid></item><item><title><![CDATA[New comment by lucacasonato in "Deno Sandbox"]]></title><description><![CDATA[
<p>We honestly should have just linked to oracle.com instead of evil.com</p>
]]></description><pubDate>Tue, 03 Feb 2026 21:06:43 +0000</pubDate><link>https://news.ycombinator.com/item?id=46877301</link><dc:creator>lucacasonato</dc:creator><comments>https://news.ycombinator.com/item?id=46877301</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46877301</guid></item><item><title><![CDATA[New comment by lucacasonato in "Deno Sandbox"]]></title><description><![CDATA[
<p>It’s a cloud service - so you can call out to it from anywhere you want. Just don’t ship your credentials in the app itself, and instead authenticate via a server you control.</p>
]]></description><pubDate>Tue, 03 Feb 2026 20:27:36 +0000</pubDate><link>https://news.ycombinator.com/item?id=46876803</link><dc:creator>lucacasonato</dc:creator><comments>https://news.ycombinator.com/item?id=46876803</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46876803</guid></item><item><title><![CDATA[New comment by lucacasonato in "Deno Sandbox"]]></title><description><![CDATA[
<p>We run or own infrastructure for this (and everything else). The link was just an illustrative example</p>
]]></description><pubDate>Tue, 03 Feb 2026 20:23:51 +0000</pubDate><link>https://news.ycombinator.com/item?id=46876756</link><dc:creator>lucacasonato</dc:creator><comments>https://news.ycombinator.com/item?id=46876756</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46876756</guid></item><item><title><![CDATA[New comment by lucacasonato in "Deno Sandbox"]]></title><description><![CDATA[
<p>I can confirm Ryan is a real human :)</p>
]]></description><pubDate>Tue, 03 Feb 2026 18:07:12 +0000</pubDate><link>https://news.ycombinator.com/item?id=46874670</link><dc:creator>lucacasonato</dc:creator><comments>https://news.ycombinator.com/item?id=46874670</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46874670</guid></item><item><title><![CDATA[New comment by lucacasonato in "Deno Sandbox"]]></title><description><![CDATA[
<p>We'll increase the lifetime in the next weeks - just some tech internally that needs to be adjusted first.</p>
]]></description><pubDate>Tue, 03 Feb 2026 17:55:20 +0000</pubDate><link>https://news.ycombinator.com/item?id=46874471</link><dc:creator>lucacasonato</dc:creator><comments>https://news.ycombinator.com/item?id=46874471</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46874471</guid></item><item><title><![CDATA[New comment by lucacasonato in "An Update on Fresh"]]></title><description><![CDATA[
<p>Happy to answer any questions :)</p>
]]></description><pubDate>Thu, 15 May 2025 16:34:42 +0000</pubDate><link>https://news.ycombinator.com/item?id=43996707</link><dc:creator>lucacasonato</dc:creator><comments>https://news.ycombinator.com/item?id=43996707</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=43996707</guid></item><item><title><![CDATA[New comment by lucacasonato in "Deno vs. Oracle: Canceling the JavaScript Trademark"]]></title><description><![CDATA[
<p>Deno is NPM compatible</p>
]]></description><pubDate>Mon, 25 Nov 2024 21:31:58 +0000</pubDate><link>https://news.ycombinator.com/item?id=42240408</link><dc:creator>lucacasonato</dc:creator><comments>https://news.ycombinator.com/item?id=42240408</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=42240408</guid></item><item><title><![CDATA[New comment by lucacasonato in "Oracle, it's time to free JavaScript"]]></title><description><![CDATA[
<p>JavaScript is the world's most popular programming language.<p><a href="https://www.statista.com/statistics/793628/worldwide-developer-survey-most-used-languages/" rel="nofollow">https://www.statista.com/statistics/793628/worldwide-develop...</a></p>
]]></description><pubDate>Mon, 16 Sep 2024 17:04:27 +0000</pubDate><link>https://news.ycombinator.com/item?id=41558133</link><dc:creator>lucacasonato</dc:creator><comments>https://news.ycombinator.com/item?id=41558133</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=41558133</guid></item><item><title><![CDATA[New comment by lucacasonato in "Oracle, it's time to free JavaScript"]]></title><description><![CDATA[
<p>You clearly have not read the post :D</p>
]]></description><pubDate>Mon, 16 Sep 2024 16:22:38 +0000</pubDate><link>https://news.ycombinator.com/item?id=41557709</link><dc:creator>lucacasonato</dc:creator><comments>https://news.ycombinator.com/item?id=41557709</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=41557709</guid></item><item><title><![CDATA[New comment by lucacasonato in "Oracle, it's time to free JavaScript"]]></title><description><![CDATA[
<p>It is practically abandoned, but unless the USPTO or a US court says that that is so, it is not legally abandoned. That is a problem because the confusion and insecurity about the trademark remains until it is legally considered abandoned.<p>That's why we need to file a petition with the US Patent and Trademark office.</p>
]]></description><pubDate>Mon, 16 Sep 2024 16:20:24 +0000</pubDate><link>https://news.ycombinator.com/item?id=41557682</link><dc:creator>lucacasonato</dc:creator><comments>https://news.ycombinator.com/item?id=41557682</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=41557682</guid></item><item><title><![CDATA[New comment by lucacasonato in "Google Chrome has an API accesible only from *.google.com"]]></title><description><![CDATA[
<p>like 90% of the DMA is just this haha</p>
]]></description><pubDate>Tue, 09 Jul 2024 19:06:49 +0000</pubDate><link>https://news.ycombinator.com/item?id=40919673</link><dc:creator>lucacasonato</dc:creator><comments>https://news.ycombinator.com/item?id=40919673</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=40919673</guid></item><item><title><![CDATA[New comment by lucacasonato in "Google Chrome has an API accesible only from *.google.com"]]></title><description><![CDATA[
<p>Except that is not what Google is doing. They have exclusive access to the one line that is preinstalled for all houses. Only they can use it. And if you want a different provider, you can't use that same line. You have to pay for the installation of a line from that provider with your own cash.</p>
]]></description><pubDate>Tue, 09 Jul 2024 18:30:53 +0000</pubDate><link>https://news.ycombinator.com/item?id=40919311</link><dc:creator>lucacasonato</dc:creator><comments>https://news.ycombinator.com/item?id=40919311</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=40919311</guid></item><item><title><![CDATA[New comment by lucacasonato in "Google Chrome has an API accesible only from *.google.com"]]></title><description><![CDATA[
<p>I agree it is very useful! This is also how I discovered this in the first place.<p>But that is not at all my point. The point is that google.com web properties have access to an API and a browser capability that is not available to it's competitors. Google only allows reading CPU info for itself.<p>The reason the data is not available for everyone, is because it would be a huge tracking vector. Same reason we don't allow webpages to read the device hostname, or username, or Chrome profile name. Google exposes this to google.com because it trusts itself. That poses this antitrust issue though.</p>
]]></description><pubDate>Tue, 09 Jul 2024 18:29:07 +0000</pubDate><link>https://news.ycombinator.com/item?id=40919290</link><dc:creator>lucacasonato</dc:creator><comments>https://news.ycombinator.com/item?id=40919290</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=40919290</guid></item><item><title><![CDATA[New comment by lucacasonato in "Google Chrome has an API accesible only from *.google.com"]]></title><description><![CDATA[
<p>No, this is used by Google Meet right now. Open the "Troubleshooting" panel in meet.google.com in Chrome, and you'll see live system wide CPU usage reporting :)</p>
]]></description><pubDate>Tue, 09 Jul 2024 18:20:25 +0000</pubDate><link>https://news.ycombinator.com/item?id=40919212</link><dc:creator>lucacasonato</dc:creator><comments>https://news.ycombinator.com/item?id=40919212</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=40919212</guid></item><item><title><![CDATA[New comment by lucacasonato in "How we built JSR"]]></title><description><![CDATA[
<p>We do not use GKE.<p>The Google infra that we do use in this hot path (GFE via Google Global External Load Balancers, and Colossus via Google Cloud Storage) is the same infra that powers serving static assets for Google internal services.</p>
]]></description><pubDate>Fri, 12 Apr 2024 16:19:24 +0000</pubDate><link>https://news.ycombinator.com/item?id=40014611</link><dc:creator>lucacasonato</dc:creator><comments>https://news.ycombinator.com/item?id=40014611</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=40014611</guid></item><item><title><![CDATA[New comment by lucacasonato in "How we built JSR"]]></title><description><![CDATA[
<p>The SLO (objective) is an uptime of 100%. That means that we have no error budget to use for scheduled maintenance or anything of that sort. This means that we can not use software in this hot path that would require scheduled maintenance (ie a relational database that requires periodic downtime for major version upgrades). We additionally minimize risk here: no code that is written by us sits in the path that targets 100% uptime. Ie if it breaks, its due to an upstream failure within Google's web serving infrastructure.<p>If we were to provide an SLA (an agreement, stating the minimum level of service to a customer) for this service, it would not be 100%. It would be 99.99%. This is to avoid risk. But we can still have a higher internal target than the provided SLA.<p>If we have to make all changes in a way that requires that we do not even have 8 seconds of downtime a year (but 0 seconds of downtime), that significantly changes how you design a system and roll out changes.<p>TLDR: SLA != SLO</p>
]]></description><pubDate>Fri, 12 Apr 2024 16:16:01 +0000</pubDate><link>https://news.ycombinator.com/item?id=40014566</link><dc:creator>lucacasonato</dc:creator><comments>https://news.ycombinator.com/item?id=40014566</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=40014566</guid></item><item><title><![CDATA[New comment by lucacasonato in "How we built JSR"]]></title><description><![CDATA[
<p>It uses Google Cloud Tasks</p>
]]></description><pubDate>Fri, 12 Apr 2024 15:54:46 +0000</pubDate><link>https://news.ycombinator.com/item?id=40014322</link><dc:creator>lucacasonato</dc:creator><comments>https://news.ycombinator.com/item?id=40014322</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=40014322</guid></item><item><title><![CDATA[New comment by lucacasonato in "How we built JSR"]]></title><description><![CDATA[
<p>Hey hey, post author here - happy to answer your questions!</p>
]]></description><pubDate>Fri, 12 Apr 2024 15:34:48 +0000</pubDate><link>https://news.ycombinator.com/item?id=40014093</link><dc:creator>lucacasonato</dc:creator><comments>https://news.ycombinator.com/item?id=40014093</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=40014093</guid></item><item><title><![CDATA[New comment by lucacasonato in "How we built JSR"]]></title><description><![CDATA[
<p>So the reason we do this - and I should have mentioned this in the post - is that we explicitly do not want to dog food here. Because JSR is the package registry, if it goes down, and we can not pull packages from the registry during deployment of a new version of the registry (that fixes the reason it is down), that would be very bad. So we don't put anything that depends on the registry in the path of deployment of the registry :)<p>Also, a lot of the work that the registry does (parsing source code, analyzing dependencies, enforcing rules on the code, etc) are pieces of code that are shared  with the Deno CLI, which implements this in Rust. The reason for this is that this work has to happen in Rust, because JavaScript, for the most part, can not "self-host" itself (ie you can not implement a JavaScript runtime on a JavaScript host if you want your runtime to provide more system bindings than the host runtime).<p>Finally, we do use Deno for many pieces of the registry where the "circular dependency" problem is not relevant. Namely the entire frontend uses Deno and Fresh :)</p>
]]></description><pubDate>Fri, 12 Apr 2024 15:34:13 +0000</pubDate><link>https://news.ycombinator.com/item?id=40014089</link><dc:creator>lucacasonato</dc:creator><comments>https://news.ycombinator.com/item?id=40014089</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=40014089</guid></item></channel></rss>