@admin following

Label	Kind	State	Action
indiekit-demo.rmendes.net	source	—	—
fediversereport.com	source	—	—
wedistribute.org	source	—	—
hnrss.org	source	—	—
hnrss.org	source	—	—
hnrss.org	source	—	—
hnrss.org	source	—	—
hnrss.org	source	—	—
hnrss.org	source	—	—
hnrss.org	source	—	—
hnrss.org	source	—	—
9to5google.com	source	—	—
hnrss.org	source	—	—
hnrss.org	source	—	—
cvefeed.io	source	—	—
thebeatcommunity.com	source	—	—
contabo-status.com	source	—	—
www.techdirt.com	source	—	—
beehaw.org	source	—	—
beehaw.org	source	—	—

Timeline

Hacker News: Active Hacker News: Active remote 3 days ago

I paid people to try and follow my README

Article URL: https://shkspr.mobi/blog/2026/10/i-paid-people-to-try-and-follow-my-readme/

Comments URL: https://news.ycombinator.com/item?id=50042219

Points: 392

# Comments: 195
Reply source
Indiekit Demo Indiekit Demo remote 3 days ago

🗣️ Discussion #1007 — v1.0.0 Beta 30 – The Big Three-oh!
Discussion · Announcements · Discussion #1007 v1.0.0 Beta 30 – The Big Three-oh! · @paulrobertlloyd

This release adds a number of new features, fixes a suite of bugs and adds many quality of life improvements.

Key new features include:
- A new page post type
- Support for profile scope in authentication flows and new userinfo endpoint
- Ability to add multiple files at once, or pick from previously uploaded media files
- Select syndication targets when using the share bookmarket
It also begins adding support for Microsub, initially by providing the ability to interact with channels and timelines.

Much of this release wouldn’t be possible without the help of @rmdes, who incorporated many of these improvements and fixes from his fork. Thanks also goes to @aciccarello for several authorisation improvements and feedback on other issues.

💟 Indiekit is supported by its community. This release was sponsored by @abhas and @sentience.

Features
- add fromCaught method to IndiekitError (cbf3654)
- add page post type (8f1fdbe), closes #954
- create-indiekit: log full error if setup cancelled (f337e01)
- create-indiekit: offer the file system content store (577ba98)
- endpoint-auth: support profile scope and add userinfo endpoint (7a27fa6), closes #885
- endpoint-auth: use url filter for endpoint urls (07f959e)
- endpoint-files: upload several files at once (0c10dc7), closes #952
- endpoint-micropub,endpoint-media: store a UUIDv7 uid on create (e1f3ae7)
- endpoint-micropub: discover post type from its vocabulary (1878252), closes #950
- endpoint-micropub: filter the list of posts by text and category (b792c1a)
- endpoint-microsub: add core Microsub server with channels and timeline (b6a74a5), closes #975
- endpoint-microsub: add localised strings (e8bc4df)
- endpoint-posts: pre-fill the create form from url and name query parameters (2f89cd1)
- endpoint-share: let the share form choose syndication targets (54f193e)
- endpoint-syndicate: log full error when syndicating to targets (fcbb89b)
- endpoint-syndicate: syndicate every post awaiting syndication (f8c7376)
- endpoint-webmention-io: require token (e67466f)
- frontend: choose an existing media file from the editor and file fields (4d71529)
- frontend: replace markdown-it-prism with microlighter (2d21f8c)
- frontend: use url filter for absolute urls in default layout (0f8640e)
- indiekit: add a UUIDv7 backfill for posts without a uid (2581772)
- indiekit: backfill missing UIDs before serving requests (59b0ff2)
- indiekit: declare a collection’s indexes with addCollection (df0b8f8)
- indiekit: index post and media data on properties.uid (42fe338)
- indiekit: log full error when getting serviceworker.js (ed98b43)
- indiekit: simplify homepage guidance (526ed5d)
- indiekit: show more configured endpoints in homepage guidance (5637cf4)
- store-bitbucket: require user, repo and token (13275e7)
- store-ftp: require user and password (5d7feaf)
- store-gitea: require token (58136d3)
- store-github: require token (22c8903)
- store-gitlab: require token (65e5444)
- store-s3: require access and secret keys (ffde16e)
- syndicator-bluesky: make link text in post content clickable (7b38485), closes #948
- syndicator-bluesky: require password (8c91c9f)
- syndicator-internet-archive: require access and secret keys (ab5bb9f)
- syndicator-mastodon: require access token (ebf6225)
- util: paginate on properties.uid (b2a1d2f)
- util: provide clearer debug message when connecting to MongoDB (8b8a351)
- util: remove getObjectId helper (5827617)
Bug Fixes
- only use a status code from an Indiekit error (1dfa574)
- report an invalid syndicator URL instead of throwing (f553c34), closes #930
- return 401 for GET requests with invalid bearer token (69910bf), closes #825
- create-indiekit: check node compatibility against major and minor version (06cab9e)
- create-indiekit: generate a Dockerfile that runs, on a patched MongoDB (46f17f1)
- create-indiekit: handle command-line arguments (8914c57)
- create-indiekit: resolve error when getting file contents (5fe21db)
- create-indiekit: use correct character for configuration message (57204af)
- endpoint-auth: accept code exchange without grant_type at /auth (d649606)
- endpoint-auth: bind code exchange to the code’s own claims (456cd6d)
- endpoint-auth: limit missing response_type to indieauth.com (fa1d368)
- endpoint-auth: refuse a missing code_verifier instead of failing (b7ad28a)
- endpoint-auth: use publication me when signing authorization code (0e900a7), closes #911
- endpoint-files: look up files by uid so older files don’t 404 (5394361), closes #924
- endpoint-files: only show a thumbnail for photos (19a0ced), closes #956
- endpoint-media: normalise caught error in action controller (ba30ff4)
- endpoint-micropub: count other posts of a type when rendering the n token (2634ac0), closes #746
- endpoint-micropub: don’t let a client reassign a post’s uid (b5a7ce1)
- endpoint-micropub: drop unawaited count() check that leaked an operation past the test (a354434)
- endpoint-micropub: keep uid when deleting a post (737cb1b)
- endpoint-micropub: localise the database error and keep post-type errors distinct (676ed0b)
- endpoint-micropub: normalise categories on write (77a6266)
- endpoint-micropub: normalise caught error in action controller (f4430f8)
- endpoint-micropub: reject unconfigured post type on update, delete and undelete (057a0ac), closes #928
- endpoint-micropub: throw a clear error reading posts without a database (5d30610)
- endpoint-posts: handle non-Error value for syndication target (5d54559)
- endpoint-posts: look up posts by uid so older posts don’t 404 (becdf26), closes #924
- endpoint-syndicate: call Array.isArray when wrapping a single target (3a2b7cf)
- endpoint-syndicate: ignore syndication values that aren’t URLs (9dcbc57), closes #932
- endpoint-syndicate: retry targets a post has not syndicated to yet (40647cb)
- endpoint-syndicate: syndicate posts awaiting syndication oldest first (9a4d0a4), closes #584
- endpoint-webmention-io: cope with authors without a photo or a valid URL (98dbd80), closes #934
- frontend: close the tabindex clause in add-another’s focusable selector (47b995d)
- frontend: don’t drop attributes after one without a value (24b659a)
- frontend: don’t throw looking up elements that may be absent (88287f1)
- frontend: ensure photo in card layout retains 1:1 aspect ratio (d143206)
- frontend: handle missing values in components (1637377)
- frontend: handle non-Error values in component error paths (7a2170e)
- frontend: load the app script once the page is parsed (1bdd4df)
- frontend: serve cached page on a slow network, skip cross-origin and auth requests (c4619ae), closes #936
- indiekit: accept local redirect paths containing -, . and % (f326f60)
- indiekit: advertise the userinfo endpoint as an absolute URL (fcad0d3)
- indiekit: derive application URL from each request (2e20ad0)
- indiekit: make the uid backfill resumable and concurrency-safe (8b9fb87)
- indiekit: only send stack traces and error causes in development (5df480a)
- indiekit: trace the uid backfill even when it’s a no-op (9058317)
- preset-eleventy: write posts where the advertised URL resolves (0047ea8), closes #902
- syndicator-bluesky: remove useless try/catch (10a6022)
- syndicator-bluesky: thread replies to Bluesky posts (471577c), closes #946
- syndicator-mastodon: remove useless try/catch (9951ad9)
- syndicator-mastodon: thread replies to statuses on other servers (db3ed51), closes #926
- util: return correct page when paging backwards (38fab19)
- util: throw getting canonical URL from path without base URL (525ebe3)
This discussion was created from the release v1.0.0 Beta 30 – The Big Three-oh!.

Ouvrir sur GitHub →
Reply source
Indiekit Demo Indiekit Demo remote 3 days ago

🚀 Release v1.0.0 Beta 30 – The Big Three-oh!
Release · v1.0.0 Beta 30 – The Big Three-oh! · @paulrobertlloyd

This release adds a number of new features, fixes a suite of bugs and adds many quality of life improvements.

Key new features include:
- A new page post type
- Support for profile scope in authentication flows and new userinfo endpoint
- Ability to add multiple files at once, or pick from previously uploaded media files
- Select syndication targets when using the share bookmarket
It also begins adding support for Microsub, initially by providing the ability to interact with channels and timelines.

Much of this release wouldn’t be possible without the help of @rmdes, who incorporated many of these improvements and fixes from his fork. Thanks also goes to @aciccarello for several authorisation improvements and feedback on other issues.

💟 Indiekit is supported by its community. This release was sponsored by @abhas and @sentience.

Features
- add fromCaught method to IndiekitError (cbf3654)
- add page post type (8f1fdbe), closes #954
- create-indiekit: log full error if setup cancelled (f337e01)
- create-indiekit: offer the file system content store (577ba98)
- endpoint-auth: support profile scope and add userinfo endpoint (7a27fa6), closes #885
- endpoint-auth: use url filter for endpoint urls (07f959e)
- endpoint-files: upload several files at once (0c10dc7), closes #952
- endpoint-micropub,endpoint-media: store a UUIDv7 uid on create (e1f3ae7)
- endpoint-micropub: discover post type from its vocabulary (1878252), closes #950
- endpoint-micropub: filter the list of posts by text and category (b792c1a)
- endpoint-microsub: add core Microsub server with channels and timeline (b6a74a5), closes #975
- endpoint-microsub: add localised strings (e8bc4df)
- endpoint-posts: pre-fill the create form from url and name query parameters (2f89cd1)
- endpoint-share: let the share form choose syndication targets (54f193e)
- endpoint-syndicate: log full error when syndicating to targets (fcbb89b)
- endpoint-syndicate: syndicate every post awaiting syndication (f8c7376)
- endpoint-webmention-io: require token (e67466f)
- frontend: choose an existing media file from the editor and file fields (4d71529)
- frontend: replace markdown-it-prism with microlighter (2d21f8c)
- frontend: use url filter for absolute urls in default layout (0f8640e)
- indiekit: add a UUIDv7 backfill for posts without a uid (2581772)
- indiekit: backfill missing UIDs before serving requests (59b0ff2)
- indiekit: declare a collection’s indexes with addCollection (df0b8f8)
- indiekit: index post and media data on properties.uid (42fe338)
- indiekit: log full error when getting serviceworker.js (ed98b43)
- indiekit: simplify homepage guidance (526ed5d)
- indiekit: show more configured endpoints in homepage guidance (5637cf4)
- store-bitbucket: require user, repo and token (13275e7)
- store-ftp: require user and password (5d7feaf)
- store-gitea: require token (58136d3)
- store-github: require token (22c8903)
- store-gitlab: require token (65e5444)
- store-s3: require access and secret keys (ffde16e)
- syndicator-bluesky: make link text in post content clickable (7b38485), closes #948
- syndicator-bluesky: require password (8c91c9f)
- syndicator-internet-archive: require access and secret keys (ab5bb9f)
- syndicator-mastodon: require access token (ebf6225)
- util: paginate on properties.uid (b2a1d2f)
- util: provide clearer debug message when connecting to MongoDB (8b8a351)
- util: remove getObjectId helper (5827617)
Bug Fixes
- only use a status code from an Indiekit error (1dfa574)
- report an invalid syndicator URL instead of throwing (f553c34), closes #930
- return 401 for GET requests with invalid bearer token (69910bf), closes #825
- create-indiekit: check node compatibility against major and minor version (06cab9e)
- create-indiekit: generate a Dockerfile that runs, on a patched MongoDB (46f17f1)
- create-indiekit: handle command-line arguments (8914c57)
- create-indiekit: resolve error when getting file contents (5fe21db)
- create-indiekit: use correct character for configuration message (57204af)
- endpoint-auth: accept code exchange without grant_type at /auth (d649606)
- endpoint-auth: bind code exchange to the code’s own claims (456cd6d)
- endpoint-auth: limit missing response_type to indieauth.com (fa1d368)
- endpoint-auth: refuse a missing code_verifier instead of failing (b7ad28a)
- endpoint-auth: use publication me when signing authorization code (0e900a7), closes #911
- endpoint-files: look up files by uid so older files don’t 404 (5394361), closes #924
- endpoint-files: only show a thumbnail for photos (19a0ced), closes #956
- endpoint-media: normalise caught error in action controller (ba30ff4)
- endpoint-micropub: count other posts of a type when rendering the n token (2634ac0), closes #746
- endpoint-micropub: don’t let a client reassign a post’s uid (b5a7ce1)
- endpoint-micropub: drop unawaited count() check that leaked an operation past the test (a354434)
- endpoint-micropub: keep uid when deleting a post (737cb1b)
- endpoint-micropub: localise the database error and keep post-type errors distinct (676ed0b)
- endpoint-micropub: normalise categories on write (77a6266)
- endpoint-micropub: normalise caught error in action controller (f4430f8)
- endpoint-micropub: reject unconfigured post type on update, delete and undelete (057a0ac), closes #928
- endpoint-micropub: throw a clear error reading posts without a database (5d30610)
- endpoint-posts: handle non-Error value for syndication target (5d54559)
- endpoint-posts: look up posts by uid so older posts don’t 404 (becdf26), closes #924
- endpoint-syndicate: call Array.isArray when wrapping a single target (3a2b7cf)
- endpoint-syndicate: ignore syndication values that aren’t URLs (9dcbc57), closes #932
- endpoint-syndicate: retry targets a post has not syndicated to yet (40647cb)
- endpoint-syndicate: syndicate posts awaiting syndication oldest first (9a4d0a4), closes #584
- endpoint-webmention-io: cope with authors without a photo or a valid URL (98dbd80), closes #934
- frontend: close the tabindex clause in add-another’s focusable selector (47b995d)
- frontend: don’t drop attributes after one without a value (24b659a)
- frontend: don’t throw looking up elements that may be absent (88287f1)
- frontend: ensure photo in card layout retains 1:1 aspect ratio (d143206)
- frontend: handle missing values in components (1637377)
- frontend: handle non-Error values in component error paths (7a2170e)
- frontend: load the app script once the page is parsed (1bdd4df)
- frontend: serve cached page on a slow network, skip cross-origin and auth requests (c4619ae), closes #936
- indiekit: accept local redirect paths containing -, . and % (f326f60)
- indiekit: advertise the userinfo endpoint as an absolute URL (fcad0d3)
- indiekit: derive application URL from each request (2e20ad0)
- indiekit: make the uid backfill resumable and concurrency-safe (8b9fb87)
- indiekit: only send stack traces and error causes in development (5df480a)
- indiekit: trace the uid backfill even when it’s a no-op (9058317)
- preset-eleventy: write posts where the advertised URL resolves (0047ea8), closes #902
- syndicator-bluesky: remove useless try/catch (10a6022)
- syndicator-bluesky: thread replies to Bluesky posts (471577c), closes #946
- syndicator-mastodon: remove useless try/catch (9951ad9)
- syndicator-mastodon: thread replies to statuses on other servers (db3ed51), closes #926
- util: return correct page when paging backwards (38fab19)
- util: throw getting canonical URL from path without base URL (525ebe3)
Ouvrir sur GitHub →
Reply source
Hacker News: Active Hacker News: Active remote 3 days ago

What driving across Europe costs in tolls, vignettes, bridges and fuel

Article URL: https://copilot.travel/tolls/europe-2026

Comments URL: https://news.ycombinator.com/item?id=50042149

Points: 47

# Comments: 61
Reply source
Beehaw - technology Beehaw - technology remote 3 days ago

NetMirror APK — stream movies and series on Android (setup guide)

submitted by StreamGuide to technology
4 points | 2 comments
Hey everyone — I recently started using NetMirror APK for watching movies and series on my Android phone and figured I’d share a short setup guide since a few friends asked how it works.

NetMirror is a free third-party streaming app for Android. It pulls together movies and TV shows in one clean interface, with HD playback, subtitles, and a watchlist so you can keep track of what you’re watching. It’s not on the Play Store, so you install it by downloading the APK file directly — that takes about two minutes.

Safe install steps: 1) Grab the installer from the official NetMirror APK for Android page. 2) When Android asks, allow your browser to install unknown apps — just for that one install, then switch the permission back off. 3) Open the downloaded file, tap install, and launch the app. Keep the app updated from the same official page so you always have the latest version.

One caution: only download from the official site. Random APK mirrors and ‘modded’ builds floating around forums are the classic way junkware reaches phones.
Reply source
Hacker News: Active Hacker News: Active remote 3 days ago

AI is creating a 'human premium' for art created by people

Article URL: https://www.bbc.com/news/articles/c5vgjm3gk7rzo

Comments URL: https://news.ycombinator.com/item?id=50042107

Points: 70

# Comments: 114
Reply source
Indiekit Demo Indiekit Demo remote 3 days ago

💬 @rmdes — PR #997 : feat(frontend): choose an existing media file from the editor and file fields

Commentaire de pull request · PR #997 feat(frontend): choose an existing media file from the editor and file fields · @rmdes

Have slightly tweaked the design and fixed a small bug that appeared in Safari, but otherwise, this is a great addition. Thanks!

My pleasure!
I really missed this feature 6 month ago when I started with indiekit, I’m soo glad to be able to contribute back!

Ouvrir sur GitHub →
Reply source
Indiekit Demo Indiekit Demo remote 3 days ago

📝 0738758 — v1.0.0-beta.30

Commit sur main · 0738758 · @github-actions[bot]

v1.0.0-beta.30

Ouvrir sur GitHub →
Reply source
Indiekit Demo Indiekit Demo remote 3 days ago

📝 b7ad28a — fix(endpoint-auth): refuse a missing code_verifier instead of failing

Commit sur main · b7ad28a · @rmdes

fix(endpoint-auth): refuse a missing code_verifier instead of failing

Ouvrir sur GitHub →
Reply source
Indiekit Demo Indiekit Demo remote 3 days ago

📝 fcad0d3 — fix(indiekit): advertise the userinfo endpoint as an absolute URL

Commit sur main · fcad0d3 · @rmdes

fix(indiekit): advertise the userinfo endpoint as an absolute URL

Ouvrir sur GitHub →
Reply source
Hacker News: Active Hacker News: Active remote 3 days ago

Using AI for just 10 minutes erodes your ability to persist at hard things

Article URL: https://vcresearch.berkeley.edu/news/using-ai-just-10-minutes-erodes-your-ability-persist-hard-things

Comments URL: https://news.ycombinator.com/item?id=50041765

Points: 81

# Comments: 87
Reply source
Indiekit Demo Indiekit Demo remote 3 days ago

💬 @paulrobertlloyd — PR #997 : feat(frontend): choose an existing media file from the editor and file fields

Commentaire de pull request · PR #997 feat(frontend): choose an existing media file from the editor and file fields · @paulrobertlloyd

Have slightly tweaked the design and fixed a small bug that appeared in Safari, but otherwise, this is a great addition. Thanks!

Ouvrir sur GitHub →
Reply source
Indiekit Demo Indiekit Demo remote 3 days ago

📝 4d71529 — feat(frontend): choose an existing media file from the editor and fil…

Commit sur main · 4d71529 · @rmdes

…e fields A “Browse media” button next to the editor’s image upload and next to file-input’s upload button opens a dialog listing the media endpoint’s files (q=source, paged by uid). Choosing one inserts it into the editor, as an image for photos and a link otherwise, or fills in the file field. The dialog is a native whose markup and strings come from a localised component template, so the script holds no copy of its own.

Ouvrir sur GitHub →
Reply source
Hacker News: Active Hacker News: Active remote 3 days ago

Nitter: Update Oct 10th seeking funding and legal help

Article URL: https://nitter.net

Comments URL: https://news.ycombinator.com/item?id=50041682

Points: 460

# Comments: 241
Reply source
Hacker News: Active Hacker News: Active remote 3 days ago

"Robot" Is a Social Construct: Why Your Dishwasher Is Not a Robot

Article URL: https://robotgirlgang.com/2026/10/08/robot-is-a-social-construct-why-your-dishwasher-is-not-a-robot/

Comments URL: https://news.ycombinator.com/item?id=50041667

Points: 37

# Comments: 48
Reply source
Hacker News: Active Hacker News: Active remote 3 days ago

Bot traffic from Yandex

Article URL: https://radar.cloudflare.com/bots/as13238?dateRange=7d

Comments URL: https://news.ycombinator.com/item?id=50041619

Points: 630

# Comments: 251
Reply source
Hacker News - Newest: "Twitter" Hacker News - Newest: "Twitter" remote 3 days ago

Show HN: THX-01 – Free API for our open-source decision model

Article URL: https://twitter.com/reversedoofz/status/2109005792246657448

Comments URL: https://news.ycombinator.com/item?id=50041545

Points: 2

# Comments: 0
Reply source
Hacker News: Active Hacker News: Active remote 3 days ago

IRCv3

Article URL: https://ircv3.net/

Comments URL: https://news.ycombinator.com/item?id=50041540

Points: 394

# Comments: 334
Reply source
Indiekit Demo Indiekit Demo remote 3 days ago

🐛 Issue #1006 — Introspection endpoint answers without authorization

Issue ouverte · Issue #1006 Introspection endpoint answers without authorization · @rmdes

The introspection endpoint answers without any authorization. introspectionController in packages/endpoint-auth/lib/controllers/introspection.js returns { active: true, ...claims } for any valid token posted to /auth/introspect (or sent to GET /auth/token), so anyone holding a token can read back who it belongs to and its scope. The IndieAuth spec asks for the introspection endpoint to require some form of authorization.

This fails S801 and S802 in the IndieAuth test suite: https://dev.indieauth.rocks/implementations/2 (run against main, see #967).

Before a PR, a question on the form it should take. Core’s introspectToken (packages/indiekit/lib/token.js) sends the token being checked as its own Bearer header, so requiring a bearer token would only mean a token can introspect itself. Should Indiekit’s own calls skip the HTTP round trip and verify locally when the endpoint is its own, with the HTTP endpoint requiring a separate credential (for example a token with a dedicated scope), or is self-introspection with a bearer token enough here?

Ouvrir sur GitHub →
Reply source
Indiekit Demo Indiekit Demo remote 3 days ago

📝 d143206 — fix(frontend): ensure photo in card layout retains 1:1 aspect ratio

Commit sur main · d143206 · @paulrobertlloyd

fix(frontend): ensure photo in card layout retains 1:1 aspect ratio

Ouvrir sur GitHub →
Reply source
Indiekit Demo Indiekit Demo remote 3 days ago

🟢 PR #1005 — fix(endpoint-auth): refuse a missing code_verifier instead of failing

Pull request (OPEN) · PR #1005 fix(endpoint-auth): refuse a missing code_verifier instead of failing · @rmdes

Fixes #1004

A code issued with a challenge now needs code_verifier; without it the token endpoint returns 400 (missing parameter) instead of a 500. Test added alongside the invalid verifier one (fails with 500 before the change).

Ouvrir sur GitHub →
Reply source
Indiekit Demo Indiekit Demo remote 3 days ago

🐛 Issue #1004 — Token request without code_verifier returns 500

Issue ouverte · Issue #1004 Token request without code_verifier returns 500 · @rmdes

When a code was issued with a code_challenge, codeValidator in packages/endpoint-auth/lib/middleware/code.js calls verifyCode(code_verifier, code_challenge) whether or not code_verifier was sent. Without it, createHash().update(undefined) in lib/pkce.js throws ERR_INVALID_ARG_TYPE and the token endpoint answers 500.

The request is refused, but as a server error rather than a 400. Found with the IndieAuth test suite (S311), see #967.

Ouvrir sur GitHub →
Reply source
Indiekit Demo Indiekit Demo remote 3 days ago

🟢 PR #1003 — fix(indiekit): advertise the userinfo endpoint as an absolute URL

Pull request (OPEN) · PR #1003 fix(indiekit): advertise the userinfo endpoint as an absolute URL · @rmdes

Fixes #1002

Adds userinfoEndpoint to the endpoints getEndpointUrls resolves against the application URL. The metadata test asserted only that userinfo_endpoint was present, which is how the relative value got through; it now checks the URL.

Ouvrir sur GitHub →
Reply source
Indiekit Demo Indiekit Demo remote 3 days ago

🐛 Issue #1002 — userinfo_endpoint is advertised as a relative URL

Issue ouverte · Issue #1002 userinfo_endpoint is advertised as a relative URL · @rmdes

The authorization server metadata lists userinfo_endpoint as /auth/userinfo. Every other endpoint is made absolute by getEndpointUrls in packages/indiekit/lib/endpoints.js, but userinfoEndpoint (added in #938) isn’t in its list, so it reaches /.well-known/oauth-authorization-server as the relative default from endpoint-auth.

A client can’t fetch a relative URL from metadata. The IndieAuth test suite at dev.indieauth.rocks fails S116 (endpoints use https) and every userinfo test on it (S701–S703), see #967.

Ouvrir sur GitHub →
Reply source
Indiekit Demo Indiekit Demo remote 3 days ago

💬 @rmdes — discussion #967 : IndieAuth Spec Testing
Reponse de discussion · Discussion #967 IndieAuth Spec Testing · @rmdes

I ran it against rmendes.net, which runs endpoint-auth from main (no code difference): 46 passed, 11 failed, 16 warnings, 11 skipped. https://dev.indieauth.rocks/implementations/2

Three look like small fixes:
- userinfo_endpoint is advertised as /auth/userinfo, a relative URL: getEndpointUrls in packages/indiekit/lib/endpoints.js doesn’t list userinfoEndpoint. That fails S116 and every userinfo test.
- A code issued with a challenge but redeemed without code_verifier gives a 500 (createHash().update(undefined)), not a 400.
- The introspection endpoint answers without authorization (S801, S802).
Bigger ones: a code can be redeemed twice (S302), the consent screen has no deny button (S207), a registered cross-origin redirect_uri is refused (S209), and there is no refresh or revocation (#535).

Ouvrir sur GitHub →
Reply source
Indiekit Demo Indiekit Demo remote 3 days ago

📝 1bdd4df — fix(frontend): load the app script once the page is parsed

Commit sur main · 1bdd4df · @rmdes

fix(frontend): load the app script once the page is parsed

Ouvrir sur GitHub →
Reply source
Indiekit Demo Indiekit Demo remote 3 days ago

💬 @paulrobertlloyd — PR #1001 : fix(frontend): load the app script once the page is parsed

Commentaire de pull request · PR #1001 fix(frontend): load the app script once the page is parsed · @paulrobertlloyd

Oh, good spot. I’ve removed the defer attribute too.

Ouvrir sur GitHub →
Reply source
Hacker News - Newest: "Twitter" Hacker News - Newest: "Twitter" remote 3 days ago

Brothers Karamazov was Einstein's favorite novel

Article URL: https://twitter.com/patrickc/status/2109122600630952282

Comments URL: https://news.ycombinator.com/item?id=50041004

Points: 4

# Comments: 1
Reply source
Hacker News - Newest: "Git" Hacker News - Newest: "Git" remote 3 days ago

Git Documentation, Rewritten for Humans

Article URL: https://jvns.ca/blog/2026/01/08/a-data-model-for-git/

Comments URL: https://news.ycombinator.com/item?id=50040834

Points: 2

# Comments: 0
Reply source
Hacker News - Newest: "WordPress" Hacker News - Newest: "WordPress" remote 3 days ago

Hello World, AI Doompop

Article URL: https://radimentary.wordpress.com/2026/10/10/hello-world-ai-doompop/

Comments URL: https://news.ycombinator.com/item?id=50040737

Points: 2

# Comments: 0
Reply source
Hacker News: Active Hacker News: Active remote 3 days ago

I wish you the best in the Offline

Article URL: https://daverupert.com/2026/09/i-wish-you-the-best-in-the-offline/

Comments URL: https://news.ycombinator.com/item?id=50040625

Points: 79

# Comments: 53
Reply source
Hacker News: Active Hacker News: Active remote 4 days ago

3rd Yandex Cloud Data Center Was Hit

Article URL: https://status.yandex.cloud/en/incidents/2136

Comments URL: https://news.ycombinator.com/item?id=50040547

Points: 609

# Comments: 751
Reply source
Hacker News - Newest: "WordPress" Hacker News - Newest: "WordPress" remote 4 days ago

From WordPress to Astro: Zero Maintenance, Maximum Control

Article URL: https://www.mikeroberto.com/wordpress-astro-migration

Comments URL: https://news.ycombinator.com/item?id=50040319

Points: 1

# Comments: 0
Reply source
Hacker News: Active Hacker News: Active remote 4 days ago

LineageOS 24

Article URL: https://lineageos.org/Changelog-32/

Comments URL: https://news.ycombinator.com/item?id=50040276

Points: 427

# Comments: 174
Reply source
Beehaw - technology Beehaw - technology remote 4 days ago

Commodified Intelligence

submitted by alyaza to technology
16 points | 9 comments
https://herecomesthemoon.net/2026/09/commodified-intelligence/index.html

Ignoring extinction and singleton risks, the bare minimum you should be horrified of is a commodification of intelligence, and what that means in a world with an uneven distribution of power and resources.

Commodified Intelligence.

That’s the phrase I’ve been trying to put a finger on for a while now.

The reason why dead-end so-called unskilled labor sucks is that you are fundamentally replaceable. The market enforces a pretty brutal equilibrium. White-collar jobs suck less because you are less replaceable, and maybe even get to convince yourself that your work matters, either for yourself or for society. You have some narrative arc attached to it that just isn’t there if you’re completely replaceable.

Whether you have a white-collar job or not, commodified intelligence fundamentally makes workers more replaceable, and this is bad for them.

It doesn’t matter that we’re all subjected to horrible AI-generated slop food posters as long as the margins are positive. It doesn’t matter that some diffuse component of quality, or a human touch are missing. Not as long as the margins are positive.

herecomesthemoon.net
Reply source
Beehaw - technology Beehaw - technology remote 4 days ago

The death of web development education

submitted by alyaza to technology
26 points | 4 comments
https://molily.de/web-dev-education/

molily.de
Reply source
Hacker News - Newest: "Twitter" Hacker News - Newest: "Twitter" remote 4 days ago

Assorted things I've been mulling over regarding agents in the economy

Article URL: https://twitter.com/patrickc/status/2108706907859116280

Comments URL: https://news.ycombinator.com/item?id=50039813

Points: 1

# Comments: 0
Reply source
Hacker News: Active Hacker News: Active remote 4 days ago

AI agents in a stand-up call

Article URL: https://atoll92.github.io/agent-standup/

Comments URL: https://news.ycombinator.com/item?id=50039630

Points: 45

# Comments: 45
Reply source
Hacker News: Active Hacker News: Active remote 4 days ago

Satya Nadella says we should assume all AI models are 'compromised'

Article URL: https://www.theverge.com/ai-artificial-intelligence/1009337/satya-nadella-says-we-should-assume-all-ai-models-are-compromised

Comments URL: https://news.ycombinator.com/item?id=50039627

Points: 40

# Comments: 68
Reply source
Hacker News: Active Hacker News: Active remote 4 days ago

Ask HN: Do you want a router that has DD-WRT pre-installed?

I sometimes run across comments where someone says they want an open-source router. I wonder if this is a viable idea for someone to start as a small company. What makes me hesitant is that, first, it looks like this already exists in several wireless and non-wireless routers (like the GL.iNet Flint or OpenWrt One), and second, I assume hackers would just make their own.
I have been flashing DD-WRT to my routers for many years. My current setup is an Archer C9 that connects via cable to an Archer C8, which then wirelessly bridges to an R7000. All of them run DD-WRT. If I had "fun money," I would buy a low-power SFF PC with dual NICs, run OPNsense or OpenWrt, and use the wireless routers strictly as access points. Since I don't have that much to spend, I look for older DD-WRT friendly routers, usually under $30, on Craigslist or Facebook Marketplace, and flash them myself.
I see that Ubiquiti and MikroTik make quality routers with proprietary OSes for around $65 new. Protectli and Netgate offer pfSense routers starting at $259.00. The GL.iNet Flint 2 is $169.00, and the OpenWrt One is $89.
According to ResellBot (because eBay now requires a login to see sold listings with prices), the sold "DD-WRT Routers" generally go for under $160. These include the WRT3200ACM, Netgear AC1750, Linksys EA9300, and Linksys R7350.
When I asked an AI how I would go about judging interest, building, raising funds, and manufacturing, it seems doable but expensive (said $125,000 minimum in total made up of $30,000 for regulatory approval, engineering and protoyping $10,000+) and time-consuming just to get to a "golden prototype" for demos.
So if I were a "hacker" and wanted an open-source router, depending on my funds, I would either:
1. Flash DD-WRT to an existing router (used or new).
2. Buy one with it already installed, like the OpenWrt One or a Protectli device.
3. Get an SFF PC and build my own.
I remember when some comments about DropBox said it was a waste because any hacker could make that. I also know DropBox was marketed to the average person and businesses. I don't really see how a hacker friendly router could take off like that unless hackers are choosing the hardware and setting up the networks for average people. And I assume that most people setting up the networks want different qualities like brand name recognition, ease and speed of purchasing equipment (Walmart or BestBuy), and the ability to point a customer or family member to the number of solid reviews and articles saying it a good router to qualify their choices.
So, do you actually want a router that you can buy with DD-WRT pre-installed?

Comments URL: https://news.ycombinator.com/item?id=50039291

Points: 104

# Comments: 110
Reply source
Hacker News: Active Hacker News: Active remote 4 days ago

500B tokens later: Letting AI agents decompile a first-person shooter

Article URL: https://momo5502.com/posts/2026-10-09-game-decompilation/

Comments URL: https://news.ycombinator.com/item?id=50039092

Points: 198

# Comments: 139
Reply source
Hacker News: Active Hacker News: Active remote 4 days ago

European Alternatives

Article URL: https://buy-european.net/en/alternatives

Comments URL: https://news.ycombinator.com/item?id=50039063

Points: 130

# Comments: 97
Reply source
Hacker News: Active Hacker News: Active remote 4 days ago

Anthropic asks users to stop being mean to Claude

Article URL: https://www.theregister.com/ai-and-ml/2026/10/09/anthropic-asks-users-to-stop-being-mean-to-claude/5302218

Comments URL: https://news.ycombinator.com/item?id=50038865

Points: 50

# Comments: 50
Reply source
Beehaw - news Beehaw - news remote 4 days ago

Trump says Ukraine needs a new leader after diesel deal with Russia

submitted by Powderhorn to news
32 points | 6 comments
https://www.theguardian.com/world/2026/oct/10/ukraine-russia-strikes-war-trump-diesel-deal-zelenskyy

Donald Trump has said Ukraine needs “a new leader”, a day after making a deal with Vladimir Putin to buy large quantities of Russian diesel.

The US president suggested Volodymyr Zelenskyy has not done enough to end the war with Russia and blamed him for high diesel prices in the US.

“I suggest they get a new leader who can make a deal because he could have made many deals and for some reason he never does,” Trump said.

Deals? It’s a fucking war! Speaking of … how’s Iran working out for you?

Andy Burnham reiterated his “complete solidarity” in a call with Volodymyr Zelenskyy and the leaders agreed to meet in person in the coming days to continue talks.

The prime minister said he recognised the past day had been “difficult for Ukraine” and the two talked about the importance of keeping up pressure on Russia, No 10 said.

The diesel deal disrupts four years of western financial pressure on Moscow and leaves Kyiv’s allies in Europe and Nato scrambling to adapt their sanctions plan. The EU’s top diplomat, Kaja Kallas, said the diesel deal “provides Moscow with more revenues to wage war”.

“This is not the time to ease pressure on Russia, and Europe won’t,” she said on Saturday. “On Monday, EU foreign ministers intend to approve the biggest set of sanctions listings targeting Russia’s war machine since the start of the war.” She was referring to plans to formally add 1,600 new individuals and entities to the EU’s sanctions blacklist.

This is going to end well.

www.theguardian.com
Reply source
Hacker News: Active Hacker News: Active remote 4 days ago

Generative AI scandal has come to one of Nikon's competitions

Article URL: https://www.dpreview.com/news/generative-ai-scandal-has-come-to-one-of-nikons-competitions/

Comments URL: https://news.ycombinator.com/item?id=50038640

Points: 33

# Comments: 55
Reply source
Hacker News: Active Hacker News: Active remote 4 days ago

Show HN: WallHop – 12ft.io is gone, so I built a replacement

Hi HN, I'm Josh. WallHop is a free paywall bypass: paste an article URL (or prefix any URL with wallhop.io/) and you get the readable article without the paywall popup, ads or clutter. No signup, no extension.
I built it after 12ft.io went away. The News Media Alliance took it down in July 2025 and I missed having something I could hit from my phone.
How it works: it started as a fork of everywall/ladder (GPL-3.0) and I've modified it heavily since. Instead of relying on one trick, it chains several bypass methods per request and falls back to archive.is when they all fail, so one site blocking one technique doesn't break it.
Things that might be interesting:
- iOS Shortcut: on iPhone, tap Share > WallHop from any article in Safari or another app. This is how I use it 95% of the time. - It works on Medium member-only posts, which 12ft never handled. - Bookmarklet for desktop, plus /raw/ and /api/ endpoints if you want to script it.
I've tested it against most major news outlets and a bunch of local papers. It won't work everywhere. There are SOME server-side paywalls that are out of reach, and I'd rather say that up front. If you find a site that breaks, I'd love the link, and I can likely figure out a way to bypass it!

Comments URL: https://news.ycombinator.com/item?id=50038634

Points: 267

# Comments: 117
Reply source
9to5Google 9to5Google remote 4 days ago

Googlebook improving ‘Better Together’ Android sync features, Samsung support rolling out

The big selling point for Googlebook is that it’s a desktop platform that deeply integrates with your Android phone but, at launch, those “Better Together” sync features are in a messy place. Google is now rolling out updates, including the bafflingly-missing support for Samsung devices.
more…
Reply source
Hacker News: Active Hacker News: Active remote 4 days ago

Ask HN: Why aren't Americans rising up against tipping?

I've read lots of articles about how Americans hate their tipping culture. But tipping is optional so why don't they just stop? If you don't tip you both help society improve and you save money. Win-win.

Comments URL: https://news.ycombinator.com/item?id=50038458

Points: 52

# Comments: 135
Reply source
Hacker News: Active Hacker News: Active remote 4 days ago

Anthropic Bans Cruelty to Claude, Still Won't Say What It Protects

Article URL: https://rews.cc/a/anthropic-bans-cruelty-to-claude-still-won-t-say-what-it-pro-bd99f6

Comments URL: https://news.ycombinator.com/item?id=50038383

Points: 67

# Comments: 140
Reply source
Hacker News - Newest: "Twitter" Hacker News - Newest: "Twitter" remote 4 days ago

Personal agents are not aligned with consumer long-term interests

Article URL: https://twitter.com/BrendanFalk/status/2109068824293351774

Comments URL: https://news.ycombinator.com/item?id=50038302

Points: 3

# Comments: 0
Reply source

Older posts

@admin — following

@admin follows

Timeline

I paid people to try and follow my README

🗣️ Discussion #1007 — v1.0.0 Beta 30 – The Big Three-oh!

Features

Bug Fixes

🚀 Release v1.0.0 Beta 30 – The Big Three-oh!

Features

Bug Fixes

What driving across Europe costs in tolls, vignettes, bridges and fuel

NetMirror APK — stream movies and series on Android (setup guide)

AI is creating a 'human premium' for art created by people

💬 @rmdes — PR #997 : feat(frontend): choose an existing media file from the editor and file fields

📝 0738758 — v1.0.0-beta.30

📝 b7ad28a — fix(endpoint-auth): refuse a missing code_verifier instead of failing

📝 fcad0d3 — fix(indiekit): advertise the userinfo endpoint as an absolute URL

Using AI for just 10 minutes erodes your ability to persist at hard things

💬 @paulrobertlloyd — PR #997 : feat(frontend): choose an existing media file from the editor and file fields

📝 4d71529 — feat(frontend): choose an existing media file from the editor and fil…

Nitter: Update Oct 10th seeking funding and legal help

"Robot" Is a Social Construct: Why Your Dishwasher Is Not a Robot

Bot traffic from Yandex

Show HN: THX-01 – Free API for our open-source decision model

IRCv3

🐛 Issue #1006 — Introspection endpoint answers without authorization

📝 d143206 — fix(frontend): ensure photo in card layout retains 1:1 aspect ratio

🟢 PR #1005 — fix(endpoint-auth): refuse a missing code_verifier instead of failing

🐛 Issue #1004 — Token request without code_verifier returns 500

🟢 PR #1003 — fix(indiekit): advertise the userinfo endpoint as an absolute URL

🐛 Issue #1002 — userinfo_endpoint is advertised as a relative URL

💬 @rmdes — discussion #967 : IndieAuth Spec Testing

📝 1bdd4df — fix(frontend): load the app script once the page is parsed

💬 @paulrobertlloyd — PR #1001 : fix(frontend): load the app script once the page is parsed

Brothers Karamazov was Einstein's favorite novel

Git Documentation, Rewritten for Humans

Hello World, AI Doompop

I wish you the best in the Offline

3rd Yandex Cloud Data Center Was Hit

From WordPress to Astro: Zero Maintenance, Maximum Control

LineageOS 24

Commodified Intelligence

The death of web development education

Assorted things I've been mulling over regarding agents in the economy

AI agents in a stand-up call

Satya Nadella says we should assume all AI models are 'compromised'

Ask HN: Do you want a router that has DD-WRT pre-installed?

500B tokens later: Letting AI agents decompile a first-person shooter

European Alternatives

Anthropic asks users to stop being mean to Claude

Trump says Ukraine needs a new leader after diesel deal with Russia

Generative AI scandal has come to one of Nikon's competitions

Show HN: WallHop – 12ft.io is gone, so I built a replacement

Googlebook improving ‘Better Together’ Android sync features, Samsung support rolling out

Ask HN: Why aren't Americans rising up against tipping?

Anthropic Bans Cruelty to Claude, Still Won't Say What It Protects

Personal agents are not aligned with consumer long-term interests