Hacker News: mholt

New comment by mholt in "GitHub's Historic Uptime"

mholt — Tue, 31 Mar 2026 19:34:09 +0000

Even better IMO is this status page: https://mrshu.github.io/github-statuses/

"The Missing GitHub Status Page" with overall aggregate percentages. Currently at 90.84% over the last 90 days. It was at 90.00% a couple days ago.

New comment by mholt in "Starlink Mini as a failover"

mholt — Mon, 16 Mar 2026 22:51:41 +0000

Yeah but if you need Internet failover, cell phone towers are likely flooded. Starlink will be much more available (probably).

New comment by mholt in "Your phone is an entire computer"

mholt — Fri, 13 Mar 2026 19:51:15 +0000

And yet, try getting a full backup of your Google phone onto your own computer. (Without rooting/wiping the whole thing.) Heck, try getting just your text messages off (without a separate app)!

You can't. (Last time I checked.) The backup is encrypted in the cloud, and the only way to download it is to restore it to a phone.

Whereas I can just plug in my iPhone and get a full backup, complete with sqlite manifest, completely accessible. Text messages, photo library, everything.

New comment by mholt in "TUI Studio – visual terminal UI design tool"

mholt — Fri, 13 Mar 2026 12:42:52 +0000

tbf that's Apple's fault, not the choice of the free, unpaid open source developer.

New comment by mholt in "Google Safe Browsing missed 84% of confirmed phishing sites"

mholt — Thu, 05 Mar 2026 16:04:48 +0000

I never loved the idea of GSB or centralized blocklists in general due to the consequences of being wrong, or the implications for censorship.

So for my masters' thesis about 6-7 years ago now (sheesh) I proposed some alternative, privacy-preserving methods to help keep users safe with their web browsers: https://scholarsarchive.byu.edu/etd/7403/

I think Chrome adopted one or two of the ideas. Nowadays the methods might need to be updated especially in a world of LLMs, but regardless, my hope was/is that the industry will refine some of these approaches and ship them.

New comment by mholt in "RFC 9849. TLS Encrypted Client Hello"

mholt — Wed, 04 Mar 2026 15:40:49 +0000

But does it automatically provision the DNS records and rotate the keys?

I'm actually kind of furious at nginx's marketing materials around ECH. They compare with other servers but completely ignore Caddy, saying that they're the only practical path to deploying ECH right now. Total lies: https://x.com/mholt6/status/2029219467482603717

New comment by mholt in "Caddy Server Release Process"

mholt — Tue, 24 Feb 2026 17:49:55 +0000

Thanks for sharing this, we like it a lot. Mohammed Al-Sahaf implemented this for us so that releases can be made by a quorum of maintainers rather than being blocked by me every time.

Here's the first release done with it: https://github.com/caddyserver/caddy/releases/tag/v2.11.0-be...

And you can see the PR flow where the action happens: https://github.com/caddyserver/caddy/pull/7383

New comment by mholt in "Hear the "Amati King Cello", the Oldest Known Cello in Existence"

mholt — Tue, 17 Feb 2026 04:35:11 +0000

That is one beautiful instrument. What does the front look like?

And I know we can't hear it in its "original glory" anymore, but is the sample only like 10 seconds long because it's proprietary, or is the cello too delicate to play a full number on, or...?

Edit: Found the museum piece with full pictures: https://emuseum.nmmusd.org/objects/6684/violoncello?ctx=7735...

New comment by mholt in "Rivian R2: Electric Mid-Size SUV"

mholt — Wed, 11 Feb 2026 03:33:55 +0000

If you look at the R1 pages, you'll see those pages, though scroll-heavy, at least contain more useful info. I'm hoping that after R2 is actually available to order, that they'll update the page with more information. It's still early.

New comment by mholt in "GitHub is down again"

mholt — Mon, 09 Feb 2026 16:53:16 +0000

We can of course host our code elsewhere, the problem is the community is kind of locked-in. It would be very "expensive" to move, and would have to be very worthwhile. So far the math doesn't support that kind of change.

Usually an outage is not a big deal, I can still work locally. Today I just happen to be in a very GH-centric workflow with the security reports and such.

I'm curious how other maintainers maintain productivity during GH outages.

New comment by mholt in "GitHub is down again"

mholt — Mon, 09 Feb 2026 16:17:16 +0000

Of course they're down while I'm trying to address a "High severity" security bug in Caddy but all I'm getting is a unicorn when loading the report.

(Actually there's 3 I'm currently working, but 2 are patched already, still closing the feedback loop though.)

I have a 2-hour window right now that is toddler free. I'm worried that the outage will delay the feedback loop with the reporter(s) into tomorrow and ultimately delay the patches.

I can't complain though -- GitHub sustains most of my livelihood so I can provide for my family through its Sponsors program, and I'm not a paying customer. (And yet, paying would not prevent the outage.) Overall I'm very grateful for GitHub.

New comment by mholt in "Waymo robotaxi hits a child near an elementary school in Santa Monica"

mholt — Thu, 29 Jan 2026 17:55:51 +0000

The autonomous vehicle should know what it can't know, like children coming out from behind obstructions. Humans have this intuitive sense. Apparently autonomous systems do not, and do not drive carefully, or slower, or give more space, in those situations. Does it know that it's in a school zone? (Hopefully.) Does it know that school is starting or getting out? (Probably not.) Should it? (Absolutely yes.)

This is the fault of the software and company implementing it.

New comment by mholt in "Show HN: ChartGPU – WebGPU-powered charting library (1M points at 60fps)"

mholt — Thu, 22 Jan 2026 17:03:43 +0000

I'm getting the same error, but ://gpu shows that WebGPU is "Hardware accelerated"

New comment by mholt in "Show HN: ChartGPU – WebGPU-powered charting library (1M points at 60fps)"

mholt — Thu, 22 Jan 2026 17:03:07 +0000

Hmm, I'm getting "Failed to request WebGPU adapter. No compatible adapter found. This may occur if no GPU is available or WebGPU is disabled." but brave://flags reports that WebGPU is "Hardware accelerated." Any way for me to try this out?

New comment by mholt in "6-Day and IP Address Certificates Are Generally Available"

mholt — Fri, 16 Jan 2026 18:30:34 +0000

They are not in control of the US president.

New comment by mholt in "6-Day and IP Address Certificates Are Generally Available"

mholt — Fri, 16 Jan 2026 18:28:56 +0000

LE has 2 primary production data centers: https://letsencrypt.status.io/

But in general, one of the points of ACME is to eliminate dependence on a single provider, and prevent vendor lock-in. ACME clients should ideally support multiple ACME CAs.

For example, Caddy defaults to both LE and ZeroSSL. Users can additionally configure other CAs like Google Trust Services.

This document discusses several failure modes to consider: https://github.com/https-dev/docs/blob/master/acme-ops.md#if...

New comment by mholt in "6-Day and IP Address Certificates Are Generally Available"

mholt — Fri, 16 Jan 2026 18:19:38 +0000

It's less about IP address transience, and more about IP address control. Rarely does the operator of a website or service control the IP address. It's to limit the CA's risk.

New comment by mholt in "6-Day and IP Address Certificates Are Generally Available"

mholt — Fri, 16 Jan 2026 17:15:18 +0000

We've supported it for about a year!

New comment by mholt in "6-Day and IP Address Certificates Are Generally Available"

mholt — Fri, 16 Jan 2026 17:14:25 +0000

It works, but as another comment mentioned there may be quirks with IP certs, specifically IPv6, that I hope will be fixed by v2.11.

New comment by mholt in "Show HN: Rocket Launch and Orbit Simulator"

mholt — Fri, 09 Jan 2026 19:52:11 +0000

Don't rockets also start with the same horizontal velocity though, since nothing canceled it out when it got off the launch pad?

It would be like jumping, and finding yourself ~250-400 meters away from where you lept by the time you landed.

That said, neat project, and way fun learning experience. Good job.