Sure, it would be great if you'd immediately get hammered with hundreds of requests and start make money quickly. It would also be great if it was a bit more transparent, and you could see more stats (what counts as "idle"? Is my machine currently eligible to serve models?). But it's still very new, I'd say give it some time and let's see how it goes.

If you have it running and you get zero requests, it uses close to zero power above what your computer uses anyway. It doesn't cost you anything to have it running, and if you get requests, you make money. Seems like an easy decision to me.

We collect zero data about your typed words, personal dictionary data, stored contacts, clipboard history and basically anything else that's privacy-sensitive.

What we do collect is very generic and fully anonymized metrics such as: Do you use a theme, did you modify the keyboard, did you add an emoji key to your keyboard, etc.

We are not interested in typed words or any private data. We just want to know how people use the keyboard in general (which features in particular), and that's all we collect. You can opt out at any time, and all collected data is automatically deleted every 30 days because we only keep a 30-day rolling window.

If you want to be extremely safe, you can also skip enabling full access for the keyboard, which makes it impossible for us to send data from the keyboard itself to the app. But as said, we don't actually collect any privacy-sensitive data (and never will), and disabling full access comes with a few other caveats because Apple put many basic features such as vibration etc behind the full access setting as well, for whatever reason.

But one thing is clear: I won't be bothered, robbed or even stabbed in my own car, and I also won't arrive in a different village lest I drive there myself. I won't arrive three hours late either, or have to stay overnight in some shitty Hotel because they couldn't find a replacement train.

The German public transport, like many other things in Germany, is an absolute fever dream for a "developed country".

If you have absolutely no idea what you're doing, well, then it doesn't really matter in the end, does it? You're never gonna recognize any security vulnerabilities (as has happened many times with LLM-assisted "no-code" platforms and without any actual malicious intent), and you're going to deploy unsafe code either way.

Given that ffmpeg was apparently using mailing lists before (which I didn't know at the time of writing), this is obviously an improvement. But it's still a lot of friction, and it seems that it's friction for no particular reason.

Hosting your code on something as obscure as Forgejo actively makes it hard for people to contribute. Most developers use GitHub, and only have experience with GitHub.

If I have an issue with something, I'll make a PR and move on with my day. But if making that PR involves creating an account on some obscure website and learning a new user interface just to contribute code to a single project, I'll simply pass. It's not worth the hassle.

GitHub is the most popular service by far for a good reason. People build their whole professional portfolio on GitHub, and it's well-known and globally recognized.

If you're afraid GitHub is gonna go down one day or kick you out, just mirror your repo to your own git instance. It's been done for decades, and it works very well, without introducing friction.

Comments URL: https://news.ycombinator.com/item?id=43685406

Points: 1

# Comments: 0

They seem to be using SendGrid. I pinged the CEO and CTO of Autodesk, the official Autodesk account and the SendGrid account on X about this, but now, more than 24h later, the attack is still ongoing and nobody seems to be giving a flying fuck about it.

The email is domain-verified (for Autodesk.com) by Google, so it seems the Autodesk email system has been compromised.

Comments URL: https://news.ycombinator.com/item?id=43386742

Points: 2

# Comments: 7

Comments URL: https://news.ycombinator.com/item?id=42962308

Points: 3

# Comments: 0