Hacker News: petcat

New comment by petcat in "Show HN: Plain – The full-stack Python framework designed for humans and agents"

petcat — Wed, 15 Apr 2026 10:19:25 +0000

> the main difference I saw was that only postgres is supported, not necessarily a bad thing.

Then why not just delete the other files that you don't want? Why also completely change Django's API?

New comment by petcat in "Want to Write a Compiler? Just Read These Two Papers (2008)"

petcat — Wed, 15 Apr 2026 10:14:59 +0000

And Nystrom's book

New comment by petcat in "[dead]"

petcat — Tue, 14 Apr 2026 19:42:04 +0000

From another comment:

> Kontext holds secrets server-side and mints short-lived tokens per session.

That probably makes this thing DOA for most people (certainly for me and everyone I know).

New comment by petcat in "Show HN: Plain – The full-stack Python framework designed for humans and agents"

petcat — Tue, 14 Apr 2026 19:33:30 +0000

It looks like it's a fork of Django that just kinda changed a bunch of stuff arbitrarily?

New comment by petcat in "Spain to expand internet blocks to tennis, golf, movies broadcasting times"

petcat — Tue, 14 Apr 2026 17:59:13 +0000

> there need to be EU-level regulations against individual countries, such as Spain and Italy, implementing these absurd restrictions

Why should other EU members care what websites Spain allows their citizens to access? Does the "EU" even have authority for such a thing?

New comment by petcat in "Someone bought 30 WordPress plugins and planted a backdoor in all of them"

petcat — Tue, 14 Apr 2026 12:00:01 +0000

> Compared to traditional C or C++ projects it's madness.

Those projects typically rely on an external package manager to handle their dependencies for them. Apt, yum, etc. Otherwise you end up in dependency hell trying to get ./configure to find the development headers of whatever it needs. I don't miss those days. Rust/Cargo is a godsend.

New comment by petcat in "Tell HN: Docker pull fails in Spain due to football Cloudflare block"

petcat — Sun, 12 Apr 2026 16:53:12 +0000

Italy and Spain are the bad actors here. Not cloudflare.

New comment by petcat in "Tell HN: Docker pull fails in Spain due to football Cloudflare block"

petcat — Sun, 12 Apr 2026 14:28:06 +0000

Rampant bot traffic and scrapers are the real cancer. Until that goes away everyone is going to need cloudflare or some other bot firewall service.

New comment by petcat in "Tell HN: Docker pull fails in Spain due to football Cloudflare block"

petcat — Sun, 12 Apr 2026 14:12:32 +0000

Spain is mandating their ISPs block cloudflare to stop people from illegally streaming soccer games. Cloudflare isn't the one doing the blocking.

New comment by petcat in "US summons bank bosses over cyber risks from Anthropic's latest AI model"

petcat — Fri, 10 Apr 2026 19:12:44 +0000

Those things were made illegal by Congress, not by a president's executive order, which is what this thread is about.

New comment by petcat in "HBO Obtains DMCA Subpoena to Unmask 'Euphoria' Spoiler Account on X"

petcat — Fri, 10 Apr 2026 19:02:48 +0000

> all of this falls apart if you use Mullvad

The only thing that falls apart is the IP address identification, which is only a very small signal for identifying an internet user. X/Twitter undoubtedly has more identity information than just an IP address.

New comment by petcat in "US summons bank bosses over cyber risks from Anthropic's latest AI model"

petcat — Fri, 10 Apr 2026 16:49:21 +0000

> the government banning it from being released by executive order.

There's no legal mechanism for the president or the government at all to do that.

New comment by petcat in "Supply chain nightmare: How Rust will be attacked and what we can do to mitigate"

petcat — Fri, 10 Apr 2026 16:44:19 +0000

How would that work? Rust "crates" are just a compilation unit that gets linked into the resulting binary.

New comment by petcat in "Microsoft terminates VeraCrypt account, halting Windows updates"

petcat — Wed, 08 Apr 2026 19:44:27 +0000

Apple or Google know what the cryptographic signature of the boot should be. They provide the keys. It's how they know that "factory reset" does not include covert code installed by the factory. That's what we're talking about.

New comment by petcat in "I've been waiting over a month for Anthropic to respond to my billing issue"

petcat — Wed, 08 Apr 2026 19:16:43 +0000

I'm sure this guy would like to actually keep using Claude though instead of getting permanently banned.

New comment by petcat in "Microsoft terminates VeraCrypt account, halting Windows updates"

petcat — Wed, 08 Apr 2026 18:36:02 +0000

The public keys are provided by the developer. Google, or Apple, for example. It's how they know that nothing was tampered with before it left the factory.

New comment by petcat in "Microsoft terminates VeraCrypt account, halting Windows updates"

petcat — Wed, 08 Apr 2026 18:08:50 +0000

I happen to like knowing that my mobile device did not have a ring 0 backdoor installed before it left the factory in Asia. SecureBoot gives me that confidence.

New comment by petcat in "We moved Railway's frontend off Next.js. Builds went from 10+ mins to under 2"

petcat — Wed, 08 Apr 2026 17:24:49 +0000

web dev is a sewer

All my projects are server rendered with jinja/minijinja, bootstrap, jQuery, and htmx when I need a little bit of SPA behavior on forms.

No builds, just static