Hacker News new | past | comments | ask | show | jobs | submit | geekrax's comments login

I have replaced all robots.txt rules with simple WAF rules, which are cheaper to maintain than dealing with offending bots.


I do essentially both: robots.txt backed by actual server-level enforcement of the rules in robots.txt. You'd think there would be zero hits on the server-level blocking since crawlers are supposed to read and respect robots.txt, but unsurprisingly they don't always. I don't know why this isn't a standard feature in web hosting.


For my personal stuff I also included a Nepenthes tarpit. Works great and slows the bots down while feeding them garbage. Not my fault when they consume stuff robots.txt says they shouldn't.

I'm just not sure if legal would love me doing that on our corporate servers...


The WAF rule matches based on the user agent header? Perplexity is known to use generic browser user agents to bypass that.


Feedback: Make this shareable by setting a hash in the URL path. Even better if you could include the generated picture in the OG tags.


Thanks for the feedback! Added the link sharing but the OG tags looked like a bigger task (and SVG might not be supported?)


>if you remove the spaces, you get an almost solid block.

Removed spaces for easy copy pasta

AAABACADAEAFAGAHAIAJAKALAMANAOAPAQARASATAUAVAWAXAYAZBABBBCBDBEBFBGBHBIBJBKBLBMBNBOBPBQBRBSBTBUBVBWBXBYBZCACBCCCDCECFCGCHCICJCKCLCMCNCOCPCQCRCSCTCUCVCWCXCYCZDADBDCDDDEDFDGDHDIDJDKDLDMDNDODPDQDRDSDTDUDVDWDXDYDZEAEBECEDEEEFEGEHEIEJEKELEMENEOEPEQERESETEUEVEWEXEYEZFAFBFCFDFEFFFGFHFIFJFKFLFMFNFOFPFQFRFSFTFUFVFWFXFYFZGAGBGCGDGEGFGGGHGIGJGKGLGMGNGOGPGQGRGSGTGUGVGWGXGYGZHAHBHCHDHEHFHGHHHIHJHKHLHMHNHOHPHQHRHSHTHUHVHWHXHYHZIAIBICIDIEIFIGIHIIIJIKILIMINIOIPIQIRISITIUIVIWIXIYIZJAJBJCJDJEJFJGJHJIJJJKJLJMJNJOJPJQJRJSJTJUJVJWJXJYJZKAKBKCKDKEKFKGKHKIKJKKKLKMKNKOKPKQKRKSKTKUKVKWKXKYKZLALBLCLDLELFLGLHLILJLKLLLMLNLOLPLQLRLSLTLULVLWLXLYLZMAMBMCMDMEMFMGMHMIMJMKMLMMMNMOMPMQMRMSMTMUMVMWMXMYMZNANBNCNDNENFNGNHNINJNKNLNMNNNONPNQNRNSNTNUNVNWNXNYNZOAOBOCODOEOFOGOHOIOJOKOLOMONOOOPOQOROSOTOUOVOWOXOYOZPAPBPCPDPEPFPGPHPIPJPKPLPMPNPOPPPQPRPSPTPUPVPWPXPYPZQAQBQCQDQEQFQGQHQIQJQKQLQMQNQOQPQQQRQSQTQUQVQWQXQYQZRARBRCRDRERFRGRHRIRJRKRLRMRNRORPRQRRRSRTRURVRWRXRYRZSASBSCSDSESFSGSHSISJSKSLSMSNSOSPSQSRSSSTSUSVSWSXSYSZTATBTCTDTETFTGTHTITJTKTLTMTNTOTPTQTRTSTTTUTVTWTXTYTZUAUBUCUDUEUFUGUHUIUJUKULUMUNUOUPUQURUSUTUUUVUWUXUYUZVAVBVCVDVEVFVGVHVIVJVKVLVMVNVOVPVQVRVSVTVUVVVWVXVYVZWAWBWCWDWEWFWGWHWIWJWKWLWMWNWOWPWQWRWSWTWUWVWWWXWYWZXAXBXCXDXEXFXGXHXIXJXKXLXMXNXOXPXQXRXSXTXUXVXWXXXYXZYAYBYCYDYEYFYGYHYIYJYKYLYMYNYOYPYQYRYSYTYUYVYWYXYYYZZAZBZCZDZEZFZGZHZIZJZKZLZMZNZOZPZQZRZSZTZUZVZWZXZYZZ


Since nobody has mentioned: iOS 17 and macOS Sonoma brings family sharing to password managerm. Sonoma also brings support for using native passwordsl manager in Chrome using a chrome extension developed by Apple.

For families who are hooked into Apple's ecosystem, this can provide a much better password management than third party tools.


It’s a great way to get further locked into Apple’s ecosystem. Good luck if you ever need to move to an alternative platform.


iCloud Keychain has csv export. There’s no more lockin than there is with other password managers.


Note: This is sort of true but is highly misleading. csv export is only possible on a Mac (https://discussions.apple.com/thread/251108577). So, iPhone/iPad/PC users are pretty much out of luck Additionally, I don’t believe passkey’s are exportable at all. Lack of actual functioning backup options is the primary reason I’m not using iCloud Keychain, so I would love to have these issues fixed.


Good luck ever having a better alternative platform to move to.


Oh there are so many.

Especially ones better than MacOS.


I have been looking to move away from 1Password and did look into this. The thing that prevented me from doing so is that if someone got access to your AppleID (through phishing or social engineering), it allows them to essentially take control of your entire online presence. Right now, I try to keep the single point failures to a minimum (ie don't keep Apple ID in password manager). Is this a concern that's worth thinking about or am I just shifting the problem from one place to another?


Then your iCloud account gets banned and you lose everything.


Should’ve had better backups.


You can’t backup the entire iCloud Keychain, only export to csv which doesn’t contain everything. (For instance passkey secrets)


The title, the preamble, and the content of this article feel so click baity and unnecessarily elaborated.


It feels like it was written by AI. Everything makes sense grammatically, but somehow it says very little in many words.

Or maybe I've just become too paranoid.


I wrote the entire thing with no use of AI, but I did use chatgpt to proofread and improve my English (not my first language).

I'll try to make my next post more concise.


I'm new to blogging about marketing so just doing my best, I usually write about technical topics.

Happy to hear what I can improve for my next post, if you have advice.


Understood that you are not native english speaker and use AI to enhance the content. I would advise to ask AI to share some ways to make the content more concise and incorporate learnings from those suggestions rather than copying them directly. That would keep the human element still around.

These days, I personally find articles with minor grammatical errors more interesting than AI assisted/enhanced/corrected content, because AI generated content often comes off bland and loses the rawness of author's intentions. Just personal opinion of course. :)


It's ' -- the reviews show how' in the title instead of summarising how or even just not saying that that does it for me, I won't click something like that.


I see what you mean, I was trying to come up with a title that gets readers interested in reading the post, but I guess it came out too click-baity.


You could drop the “shows how” bit and go for something more direct: Analyzing the marketing tactics of an iOS app estimated to make $2m/mo


This user also posted the same article on the same website but with a different title, not 24h before this one.


I thought it's allowed to try to post the same article more than once no?


There is absolutely nothing wrong with trying different titles on a story.


Perhaps he / she forgot to add, "But wait! There's more..."? :)


...which actually feels "not" very Adobe like :)


Not sure if you are actually developing the emails or not, but from a front-end developer's perspective, I hate to touch my email templates codebase because it has to be coded in certain way that works with the email provider.

I cannot see what the end result is going to look like until I actually send out a test email and see it in my email clients. This DX indeed feels like 2010 if you compare it with today's DX for developing websites.


Yes, I am.

So this is like Litmus?


Not really "a lot". When you think about providing absolutely best user experience, you gotta leave the engineering efficiencies out at the doors and live with the redundant API calls. The over optimization often comes with sacrificing the UX.


It’s possible to make fewer requests without negatively impacting the user experience. For example, batching requests would result in a more responsive app.


He specifically cited situations where the opposite is true - for example when first opening a subreddit, he requests only 25 posts so the UI can render something quickly, then requests a further 100 posts to prepare for the user scrolling.

He could just request 100 posts first, halving the API requests, but the app would be less responsive.

Your comments seem to have a confidence level that their content doesn't justify.


That’s a great example of something that could be optimized without impacting the user experience. For example, just request the next page of posts when the user starts to reach the bottom. The reason for my confidence is that I’ve worked with Reddit’s API before and I know exactly where the pitfalls are.


> when the user starts to reach the bottom

That’s too late to be sending the request if you want the premium feeling of no loading times while scrolling, especially if you also want to do rich thumbnails of media.


I guess we have come the full circle.

Speaking from a mobile dev's perspective, the native UI design in 2010s was done by XML based files (storybooks in iOS/macOS, XML layout files in Android) and native code would "connect" with the XML files in various ways. Now the development is moving towards declarative approach using frameworks such as SwiftUI and Compose.

This builder pattern resembles quite a bit of how you would declare UI in SwiftUI and Compose.


Alternatively, use the account picker:

  https://accounts.google.com/SignOutOptions?continue=https://bard.google.com
Add:

   https://accounts.google.com/SignOutOptions?continue=
to any Google service to bring up this account picker.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: