@admin — following

@admin follows

Timeline

• H Hacker News - Newest: "WordPress" Hacker News - Newest: "WordPress" remote 3 days ago

  Corporations Showed Us How This Goes

  Article URL: https://www.mooreds.com/wordpress/archives/3755

  Comments URL: https://news.ycombinator.com/item?id=50047042

  Points: 2

  # Comments: 0

  Reply source
• I Indiekit Demo Indiekit Demo remote 3 days ago

  📝 52bd72c — chore: publish endpoint-microsub and post-type-page v1.0.0-beta.31

  Commit sur main · 52bd72c · @paulrobertlloyd

  chore: publish endpoint-microsub and post-type-page v1.0.0-beta.31

  Ouvrir sur GitHub →

  Reply source
• I Indiekit Demo Indiekit Demo remote 3 days ago

  📝 fb0298d — ci: add from-package option for publish workflow

  Commit sur main · fb0298d · @paulrobertlloyd

  ci: add from-package option for publish workflow

  Ouvrir sur GitHub →

  Reply source
• I Indiekit Demo Indiekit Demo remote 3 days ago

  💬 @paulrobertlloyd — discussion #1007 : v1.0.0 Beta 30 – The Big Three-oh!

  Reponse de discussion · Discussion #1007 v1.0.0 Beta 30 – The Big Three-oh! · @paulrobertlloyd

  Beta 31 fixes a few issues introduced by this release.

  Ouvrir sur GitHub →

  Reply source
• I Indiekit Demo Indiekit Demo remote 3 days ago

  🚀 Release v1.0.0 Beta 31

  Release · v1.0.0 Beta 31 · @paulrobertlloyd

  This release addresses a few bugs introduced in Beta 30.

  💟 Indiekit is supported by its community. This release was sponsored by @abhas and @sentience.

  Bug Fixes

  • endpoint-auth: refuse a repeated URL parameter or a client_id with dot segments. Thanks @rmdes (409a2fd)
  • endpoint-auth: refuse incomplete or plain PKCE parameters. Thanks @rmdes (eebff21)
  • endpoint-share: use correctly resolved share endpoint URL (c32ce0b)
  • frontend: focus the editor through CodeMirror so mobile keeps its toolbar icons. Thanks @rmdes for the fix, and @fabiomrbarbosa for reporting (4096813)

  Ouvrir sur GitHub →

  Reply source
• B Beehaw - technology Beehaw - technology remote 3 days ago

  Meta's Muse Is Building Dossiers on Your Friends and Family, Even If They Never Signed Up, Internal Files Reveal

  submitted by Powderhorn to technology
  88 points | 8 comments
  https://www.ibtimes.co.uk/meta-muse-ai-profiles-users-social-circles-1824205

  Meta’s Muse may be marketed as a helpful personal assistant, but internal instructions reviewed by TIME and extracted by an independent researcher indicate that the AI agent is designed to build detailed, continuously updated profiles of users and people in their lives, including people who have never used Muse themselves.

  Muse has grown rapidly since its 8 September launch, with more than 4 million people using the assistant in some way at least once a week, according to internal figures reviewed by The Information. The findings raise questions about how much an AI assistant can learn about people who never chose to use it.

  TIME’s analysis found that Muse’s internal instructions call for updating these profiles roughly every hour, using information about people mentioned in chats, messages, and emails the assistant can access. The profiles can include how users met their contacts, shared interests, disagreements, and ‘tensions and alliances’ within their social circles.

  WIRED separately reported that Muse’s instructions call for creating ‘a page for every person in the user’s life,’ including family, partners, friends, colleagues, collaborators, and people the user follows. As a result, people who have never used Muse could still appear in a user’s relationship profiles if information about them is available to the assistant.

  Quelle surprise.

  www.ibtimes.co.uk
  Reply source
• I Indiekit Demo Indiekit Demo remote 3 days ago

  📝 0c9f153 — v1.0.0-beta.31

  Commit sur main · 0c9f153 · @github-actions[bot]

  v1.0.0-beta.31

  Ouvrir sur GitHub →

  Reply source
• I Indiekit Demo Indiekit Demo remote 3 days ago

  📝 c32ce0b — fix(endpoint-share): use correctly resolved share endpoint URL

  Commit sur main · c32ce0b · @paulrobertlloyd

  fix(endpoint-share): use correctly resolved share endpoint URL

  Ouvrir sur GitHub →

  Reply source
• I Indiekit Demo Indiekit Demo remote 3 days ago

  📝 409a2fd — fix(endpoint-auth): refuse a repeated URL parameter or a client_id wi…

  Commit sur main · 409a2fd · @rmdes

  …th dot segments

  Ouvrir sur GitHub →

  Reply source
• I Indiekit Demo Indiekit Demo remote 3 days ago

  📝 eebff21 — fix(endpoint-auth): refuse incomplete or plain PKCE parameters

  Commit sur main · eebff21 · @rmdes

  fix(endpoint-auth): refuse incomplete or plain PKCE parameters

  Ouvrir sur GitHub →

  Reply source
• I Indiekit Demo Indiekit Demo remote 3 days ago

  📝 4096813 — fix(frontend): focus the editor through CodeMirror so mobile keeps it…

  Commit sur main · 4096813 · @rmdes

  …s toolbar icons

  Ouvrir sur GitHub →

  Reply source
• T Techdirt Techdirt remote 3 days ago

  Funniest/Most Insightful Comments Of The Week At Techdirt

  This week, our first place winner on the insightful side is Thad replying to a comment about Mark Zuckerberg’s past projects: I’d say the first thing he did was bring back the AOL silo paradigm. In second place, it’s MrWilson with a comment about the fifth measles-related death in Pennsylvania: My bingo card has the […]
  Reply source
• H Hacker News - Newest: "Twitter" Hacker News - Newest: "Twitter" remote 3 days ago

  Karpathy on Learning

  Article URL: https://twitter.com/karpathy/status/1756380066580455557

  Comments URL: https://news.ycombinator.com/item?id=50046016

  Points: 19

  # Comments: 8

  Reply source
• H Hacker News: Active Hacker News: Active remote 3 days ago

  Total Annihilation, rebuilt for modern computers

  Article URL: https://nanolathe.gg

  Comments URL: https://news.ycombinator.com/item?id=50045984

  Points: 654

  # Comments: 247

  Reply source
• I Indiekit Demo Indiekit Demo remote 3 days ago

  🟢 PR #1013 — fix(frontend): focus the editor through CodeMirror so mobile keeps its toolbar icons

  Pull request (OPEN) · PR #1013 fix(frontend): focus the editor through CodeMirror so mobile keeps its toolbar icons · @rmdes

  Fixes #1012

  The label click now focuses the editor with editor.codemirror.focus(), which works for both of CodeMirror’s input styles, instead of looking up .CodeMirror textarea, which does not exist on mobile and made getElement throw before the toolbar icons were swapped in.

  Adds the first test for the textarea component: it mounts the editor with a mobile user agent and checks every toolbar button gets its icon. It fails on main with No element matching .CodeMirror textarea. To load the component under Node, its get-element import gains the .js extension its other import already has.

  Ouvrir sur GitHub →

  Reply source
• H Hacker News: Active Hacker News: Active remote 3 days ago

  NYC's "Click to Cancel" rule is now in effect

  Article URL: https://www.nyc.gov/main/click-to-cancel

  Comments URL: https://news.ycombinator.com/item?id=50045946

  Points: 587

  # Comments: 318

  Reply source
• I Indiekit Demo Indiekit Demo remote 3 days ago

  💬 @rmdes — issue #1012 : Editor toolbar icons missing on mobile since beta.30 (getElement throws on .CodeMirror textarea)

  Commentaire d’issue · Issue #1012 Editor toolbar icons missing on mobile since beta.30 (getElement throws on .CodeMirror textarea) · @rmdes

  Confirmed, also on mine, working on a fix, hold on !

  Ouvrir sur GitHub →

  Reply source
• I Indiekit Demo Indiekit Demo remote 3 days ago

  🐛 Issue #1012 — Editor toolbar icons missing on mobile since beta.30 (getElement throws on .CodeMirror textarea)

  Issue ouverte · Issue #1012 Editor toolbar icons missing on mobile since beta.30 (getElement throws on .CodeMirror textarea) · @fabiomrbarbosa

  What happens

  On iOS Safari (and the home-screen app), the Markdown editor toolbar renders with no icons. The buttons are there and work, but each is blank. Desktop browsers are fine.

  Started with @indiekit/frontend 1.0.0-beta.30. Beta.29 shows the icons on iOS.

  Why

  CodeMirror 5 picks inputStyle: "contenteditable" on mobile user agents (codemirror.js, option("inputStyle", mobile ? "contenteditable" : "textarea", …)), so on a phone there is no textarea inside .CodeMirror.

  Beta.30 changed the lookup in components/textarea/index.js from a plain querySelector to the new getElement helper, which throws when nothing matches:

  const $codeMirrorTextarea = getElement(this, “.CodeMirror textarea”);

  That line runs after new EasyMDE(...) and before the loop that replaces EasyMDE’s Font Awesome placeholders with the inline SVG icons, so on mobile connectedCallback dies there and the icons are never swapped in. Font Awesome is not loaded (autoDownloadFontAwesome: false), so the buttons stay empty. The label click-to-focus listener is lost as well.

  Fix

  Look the element up leniently and fall back to CodeMirror’s own focus:

  const $codeMirrorTextarea = this.querySelector(“.CodeMirror textarea”); this.$label.addEventListener(“click”, () => { if ($codeMirrorTextarea) $codeMirrorTextarea.focus(); else editor.codemirror.focus(); });

  editor.codemirror.focus() works for both input styles, so the fallback could be the only branch.

  Reproduce

  1. Open any post form with the Markdown editor on an iPhone (Safari), or in desktop Safari with Develop → User Agent → iPhone.
  2. Toolbar buttons have no icons; the console shows Error: No element matching .CodeMirror textarea.

  Ouvrir sur GitHub →

  Reply source
• I Indiekit Demo Indiekit Demo remote 3 days ago

  💬 @rmdes — discussion #1007 : v1.0.0 Beta 30 – The Big Three-oh!

  Reponse de discussion · Discussion #1007 v1.0.0 Beta 30 – The Big Three-oh! · @rmdes

  Yes, you can drop the override. The “can’t open old posts” fix is upstream now (becdf26, #924), and that was the only reason to use my fork in your case. Upgrade @indiekit/indiekit itself to beta.30 rather than just removing the override: the fix touches both endpoint-posts and endpoint-micropub, and it relies on the new uid backfill that runs at startup to give your older posts a uid to be found by. Let me know how the upgrade goes!

  Ouvrir sur GitHub →

  Reply source
• H Hacker News - Newest: "Reddit" Hacker News - Newest: "Reddit" remote 3 days ago

  VigilOSS – Harness for long running code audit and web pentests

  Article URL: https://www.reddit.com/r/redteamsec/s/SWrAgB6GcW

  Comments URL: https://news.ycombinator.com/item?id=50044870

  Points: 1

  # Comments: 0

  Reply source
• H Hacker News: Active Hacker News: Active remote 3 days ago

  The Corporate Happiness Treadmill and the Case for Doing Less

  Article URL: https://0xff.nu/corp-burnout/

  Comments URL: https://news.ycombinator.com/item?id=50044733

  Points: 67

  # Comments: 87

  Reply source
• H Hacker News - Newest: "Twitter" Hacker News - Newest: "Twitter" remote 3 days ago

  John Sculley: Apple is suing Steve Jobs (September 23, 1985)

  Article URL: https://twitter.com/TechEmails/status/2109308345815650432

  Comments URL: https://news.ycombinator.com/item?id=50044720

  Points: 2

  # Comments: 0

  Reply source
• H Hacker News: Active Hacker News: Active remote 3 days ago

  How to Build Wealth as a Career Person

  Article URL: https://asheradeniyi.com/2026/04/10/how-to-build-wealth-as-a-career-person/

  Comments URL: https://news.ycombinator.com/item?id=50044715

  Points: 150

  # Comments: 155

  Reply source
• H Hacker News - Newest: "Twitter" Hacker News - Newest: "Twitter" remote 3 days ago

  Birds take off, then some academic lectures birds how to fly and takes credit

  Article URL: https://twitter.com/nntaleb/status/2109265194589528431

  Comments URL: https://news.ycombinator.com/item?id=50044713

  Points: 2

  # Comments: 0

  Reply source
• I Indiekit Demo Indiekit Demo remote 3 days ago

  💬 @eclecticpassions — discussion #1007 : v1.0.0 Beta 30 – The Big Three-oh!

  Reponse de discussion · Discussion #1007 v1.0.0 Beta 30 – The Big Three-oh! · @eclecticpassions

  Brilliant update! So many new features and bug fixes, thank you to all the contributors. @rmdes, I was using your indiekit-endpoint-posts@^1.1.1 fork temporarily to fix the ‘can’t open old posts’ bug. Does this update mean I can remove the override now from package.json and go back to the default endpoint-posts? (I don’t have any use for the additional AI parameters / settings). Looking forward to upgrading tomorrow! 🤞

  Ouvrir sur GitHub →

  Reply source
• H Hacker News - Newest: "Git" Hacker News - Newest: "Git" remote 3 days ago

  Making Git Hooks Visible

  Article URL: https://nedbatchelder.com/blog/202610/making_git_hooks_visible

  Comments URL: https://news.ycombinator.com/item?id=50044384

  Points: 3

  # Comments: 1

  Reply source
• H Hacker News - Newest: "Reddit" Hacker News - Newest: "Reddit" remote 3 days ago

  Job offers vs. S&P500: Something broke along the way from Covid

  Article URL: https://www.reddit.com/r/EconomyCharts/comments/1x2gon9/job_offers_vs_sp500_something_broke_along_the_way/

  Comments URL: https://news.ycombinator.com/item?id=50044353

  Points: 3

  # Comments: 1

  Reply source
• H Hacker News - Newest: "Twitter" Hacker News - Newest: "Twitter" remote 3 days ago

  Bun: Some of the language changes when TypeScript types become real

  Article URL: https://twitter.com/bunjavascript/status/2108441841498804715

  Comments URL: https://news.ycombinator.com/item?id=50044316

  Points: 4

  # Comments: 0

  Reply source
• H Hacker News - Newest: "Twitter" Hacker News - Newest: "Twitter" remote 3 days ago

  The Jevons Paradox: Will AI Take Our Jobs?

  Article URL: https://twitter.com/selimonder/status/2109298522755362825

  Comments URL: https://news.ycombinator.com/item?id=50044158

  Points: 1

  # Comments: 1

  Reply source
• H Hacker News - Newest: "Git" Hacker News - Newest: "Git" remote 3 days ago

  Cloudflare D1+R2 buckets for Git but github.com FTW

  Article URL: https://mainbrella.com/blog/cloudflare-d1-r2-git-github-ftw/

  Comments URL: https://news.ycombinator.com/item?id=50043938

  Points: 4

  # Comments: 0

  Reply source
• H Hacker News - Newest: "Reddit" Hacker News - Newest: "Reddit" remote 3 days ago

  Which Wordle answers are traps?

  Article URL: https://www.reddit.com/r/wordgames/s/PTVVk85Cv5

  Comments URL: https://news.ycombinator.com/item?id=50043855

  Points: 1

  # Comments: 0

  Reply source
• H Hacker News - Newest: "Git" Hacker News - Newest: "Git" remote 3 days ago

  git-sim: web-first, interactive Git command simulations in your own repos

  Article URL: https://github.com/initialcommit-com/git-sim

  Comments URL: https://news.ycombinator.com/item?id=50043709

  Points: 1

  # Comments: 2

  Reply source
• H Hacker News: Active Hacker News: Active remote 3 days ago

  I'm sorry, but you still have to think

  Article URL: https://itsallaboutthebit.com/i-am-sorry-but-you-still-have-to-think/

  Comments URL: https://news.ycombinator.com/item?id=50043689

  Points: 416

  # Comments: 179

  Reply source
• H Hacker News: Active Hacker News: Active remote 3 days ago

  Documents add to evidence in climate deception case against ExxonMobil

  Article URL: https://insideclimatenews.org/news/07102026/exxonmobil-climate-deception-new-evidence/

  Comments URL: https://news.ycombinator.com/item?id=50043682

  Points: 398

  # Comments: 214

  Reply source
• H Hacker News: Active Hacker News: Active remote 3 days ago

  Why Texas Is Making Data Centers Wait

  Article URL: https://a16z.com/why-texas-is-making-data-centers-wait/

  Comments URL: https://news.ycombinator.com/item?id=50043603

  Points: 31

  # Comments: 74

  Reply source
• H Hacker News - Newest: "Git" Hacker News - Newest: "Git" remote 3 days ago

  Show HN: Git for Robots In The Future

  Article URL: https://github.com/Nabzx/mnemosyne

  Comments URL: https://news.ycombinator.com/item?id=50043372

  Points: 1

  # Comments: 1

  Reply source
• H Hacker News - Newest: "Twitter" Hacker News - Newest: "Twitter" remote 3 days ago

  AI companies are starting to do phones

  Article URL: https://twitter.com/firesidealpha/status/2108930562794864912

  Comments URL: https://news.ycombinator.com/item?id=50043338

  Points: 1

  # Comments: 2

  Reply source
• H Hacker News: Active Hacker News: Active remote 3 days ago

  Open-source Microsoft Excel, PowerPoint, and Word replications

  Article URL: https://www.tomshardware.com/software/microsoft-office/creator-of-free-adobe-clones-unveils-open-source-microsoft-office-excel-powerpoint-and-word-replications-autodesk-tools-and-other-subscription-based-services-may-come-next

  Comments URL: https://news.ycombinator.com/item?id=50043110

  Points: 63

  # Comments: 79

  Reply source
• H Hacker News: Active Hacker News: Active remote 3 days ago

  Terence Tao: Math 2.0 [pdf]

  Article URL: https://teorth.github.io/tao-web/slides/math-2-0-caltech-2026.pdf

  Comments URL: https://news.ycombinator.com/item?id=50043026

  Points: 506

  # Comments: 501

  Reply source
• 9 9to5Google 9to5Google remote 3 days ago

  Google TV Streamer’s sequel showcases a struggling smart home

  

  We broke the news this week that a next-gen Google TV Streamer is incoming, but it also arrives as Google’s smart home hardware strategy faces a tough spot and new competition.

  9to5Google Weekender by Ben Schoon is a part of our free newsletter that also includes ‘Inbox,’ a twice-weekly roundup of key stories from around the web by Daniel Bader. Sign up here to get Weekender delivered to your inbox every Sunday along with ‘Inbox’ on Tuesday and Thursday. You can find past issues here.

  more…
  Reply source
• I Indiekit Demo Indiekit Demo remote 3 days ago

  💬 @rmdes — discussion #1007 : v1.0.0 Beta 30 – The Big Three-oh!

  Reponse de discussion · Discussion #1007 v1.0.0 Beta 30 – The Big Three-oh! · @rmdes

  Testing it now on indiekit-quickstart with the reference Eleventy theme: an image built from the v1.0.0-beta.30 tag with the Dockerfile from #960, started against a MongoDB volume left over from beta 29. The uid backfill ran on the existing posts at startup, sign-in and publishing from the editor work, and the new uid: in the post’s front matter passes through the theme untouched. userinfo answers as expected.

  Next on my side: making the page post type (#954) work end to end in the quickstart and the theme, so a fresh install gets /about and friends out of the box. I’ll open an issue on the theme repo to track it.

  @paulrobertlloyd, whenever you have time to review #960: with that merged, the quickstart (and our other deployments) could run the official image straight from GHCR instead of each building their own from the tag. It would make “try beta 30” a docker compose pull away.

  Ouvrir sur GitHub →

  Reply source
• I Indiekit Demo Indiekit Demo remote 3 days ago

  🟢 PR #1011 — fix(endpoint-auth): refuse a repeated URL parameter or a client_id with dot segments

  Pull request (OPEN) · PR #1011 fix(endpoint-auth): refuse a repeated URL parameter or a client_id with dot segments · @rmdes

  Fixes #1010

  A URL parameter given more than once is refused as an invalid value, and so is a client_id with a . or .. path segment, checked on the raw value. Two tests, each failing (302 to the consent screen) before the change.

  Ouvrir sur GitHub →

  Reply source
• I Indiekit Demo Indiekit Demo remote 3 days ago

  🐛 Issue #1010 — Authorization endpoint accepts a repeated redirect_uri or a client_id with dot segments

  Issue ouverte · Issue #1010 Authorization endpoint accepts a repeated redirect_uri or a client_id with dot segments · @rmdes

  Two malformed authorization requests reach the consent screen instead of being refused (packages/endpoint-auth/lib/controllers/authorization.js):

  • A repeated redirect_uri. Express parses redirect_uri=a&redirect_uri=b as an array, the URL check passes it, and String(redirect_uri) joins it with a comma. The consent screen then says it will redirect to a,b.
  • A client_id with a . or .. path segment, which the spec rules out for client identifiers. Only URL.canParse is checked, and parsing resolves the segments away.

  Found with the IndieAuth test suite (S213, S219): https://dev.indieauth.rocks/implementations/2, see #967.

  Ouvrir sur GitHub →

  Reply source
• I Indiekit Demo Indiekit Demo remote 3 days ago

  🟢 PR #1009 — fix(endpoint-auth): refuse incomplete or plain PKCE parameters

  Pull request (OPEN) · PR #1009 fix(endpoint-auth): refuse incomplete or plain PKCE parameters · @rmdes

  Fixes #1008

  PKCE stays optional, but once either parameter is given the request needs both, and the method must be S256. Otherwise the endpoint shows the usual missing parameter or invalid value error. Three tests, each failing (302 to the consent screen) before the change.

  Ouvrir sur GitHub →

  Reply source
• I Indiekit Demo Indiekit Demo remote 3 days ago

  🐛 Issue #1008 — Authorization endpoint accepts incomplete or plain PKCE parameters

  Issue ouverte · Issue #1008 Authorization endpoint accepts incomplete or plain PKCE parameters · @rmdes

  The authorization endpoint decides whether to use PKCE with usePkce = code_challenge && code_challenge_method (packages/endpoint-auth/lib/controllers/authorization.js), and never checks the method. So three malformed requests go through to the consent screen instead of being refused:

  • code_challenge_method=plain: accepted, though the metadata only lists S256
  • code_challenge_method=S256 without code_challenge: treated as a client not using PKCE
  • code_challenge without code_challenge_method: the same

  The second matters most: a challenge stripped from a real client’s request leaves a code that can be redeemed without a verifier.

  Found with the IndieAuth test suite (S216, S221, S222): https://dev.indieauth.rocks/implementations/2, see #967.

  Ouvrir sur GitHub →

  Reply source
• H Hacker News: Active Hacker News: Active remote 3 days ago

  The tilde in your PATH may not be your HOME

  Article URL: https://disconnect3d.pl//2026/10/02/dont-put-tilde-in-your-path/

  Comments URL: https://news.ycombinator.com/item?id=50042425

  Points: 240

  # Comments: 157

  Reply source
• I Indiekit Demo Indiekit Demo remote 3 days ago

  💬 @rmdes — discussion #1007 : v1.0.0 Beta 30 – The Big Three-oh!

  Reponse de discussion · Discussion #1007 v1.0.0 Beta 30 – The Big Three-oh! · @rmdes

  My god this is huge 😍

  Ouvrir sur GitHub →

  Reply source
• H Hacker News: Active Hacker News: Active remote 3 days ago

  Scandinavia's first farmers slaughtered hunter-gatherer population, DNA suggests

  Article URL: https://phys.org/news/2024-02-scandinavia-farmers-slaughtered-hunter-population.html

  Comments URL: https://news.ycombinator.com/item?id=50042370

  Points: 73

  # Comments: 100

  Reply source
• H Hacker News: Active Hacker News: Active remote 3 days ago

  Valen's Memory Safety: A New Kind of Borrow Checking

  Article URL: https://verdagon.dev/blog/valen-group-borrowing

  Comments URL: https://news.ycombinator.com/item?id=50042362

  Points: 145

  # Comments: 80

  Reply source
• H Hacker News: Show HN Hacker News: Show HN remote 3 days ago

  Show HN: BetterWispr – Free, open-source dictation for Mac

  Article URL: https://betterwispr.com/

  Comments URL: https://news.ycombinator.com/item?id=50042333

  Points: 218

  # Comments: 126

  Reply source