Hacker Newsnew | past | comments | ask | show | jobs | submit | williamjackson's commentslogin

    At sufficient scale, Dependabot’s analysis will time out before completing, effectively rate-limiting the number of PRs it can generate. This natural throttling prevents notification fatigue while maintaining the appearance of active security tooling.
Am I being trolled?

I believe so

Thank you for expressing my thoughts as well. The article seems to be full of contradictory “advice”.

Use a dependency cooldown, okay … but don’t commit your lockfile so you are always running the latest transitive deps? That’s nuts.


Depends on the package manager. With some you'll get the oldest transitive deps that meet all dependency requirements, not the newest.

I was surprised, then not really surprised, when I found out this week that Tailscale's native file sharing feature, Taildrive, is implemented as a WebDAV server in the network.

https://tailscale.com/kb/1369/taildrive


What else would you expect, just out of curiosity? SMB? NFS? SSHFS?


A proprietary binary patented protocol...


and do what, implement virtual filesystem driver for every OS ?


Only if adding that complexity locks in more subscribers for premium features and support.



Thanks for fixing the link!


I don’t like writing YAML. I like writing Python. So I write Python that generates YAML config files. JSON is in the standard library but YAML isn’t. So I generate JSON and name the file “file.yaml”.

GitHub Actions, Dependabot, and Docker Compose never complain.


And it only took 20 years!


Access to contacts for iOS apps is no longer all or nothing. You can grant an app access to only specific contacts. This is what I do for WhatsApp.

Also, I know in the past I used WhatsApp without contacts access. It just showed phone numbers instead of names, but it was functional.



(The comments before 2022 are all the same; the newest comment is only on Github.)


I run an instance of FreshRSS [0] and access it from a browser, but I also use NetNewsWire [1] as a client on platforms where it is available.

[0] https://freshrss.org/

[1] https://netnewswire.com/


I use FreshRSS as well and I use it exclusively from Android (Firefox Browser). Works surprisingly well even if it looks a bit dated.


I'd love recommendations for a good Android client. Right now I just have the site installed as a web app. It works, but I have a foldable phone and the site displays a little weird when unfolded in landscape.


FocusReader works well, the free version has some ads.


gReader Pro is pretty good on Android, doesn't get in the way too much.


I’m run an instance as well. I use Lire as client for iOS.


Lire is hands down the best reader on iOS, and a one-time purchase too. I really love it.


I use Flask a lot too. I generally just add keyword arguments to url_for() to automatically add querystrings to URLs.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: