Hacker Newsnew | past | comments | ask | show | jobs | submit | Etheryte's commentslogin

Not sure I agree. The correct thing is to not mess with the URL at all if you're unsure about what to be doing to it. Doing nothing is the easiest thing of them all, why not do that?

because the you need some consistency or normalisation before applying ACL or do routing?

URL normalization is defined and it doesn't include collapsing slashes.

Not that you can include custom normalization rules (like collapsing slashes, tolower()ing the entire path, removing the query part of the URL), but that's not part of the standard. If you're doing anything extra, the risk of breaking stuff is on you.


If someone gives you a nonsense URL, the correct response is 404, not to try and guess what they could've maybe meant.

The whole world can't migrate all of their hardware on a whim. There was a period of time when it was a very common quip to say that Amazon would have to buy every new IPv6 compatible router in the world for a year if they wanted to upgrade their infra. I don't know if the urban legend is true or not, but the fact that it sounded plausible is a good enough of an example.

And packet forwarding was done in hardware pipelines, can't software update them to handle new protocols.

A reminder that a gun [0] would also work as a bicycle bell that works despite noise-cancelling headphones.

[0] https://xkcd.com/1217/


Predictability matters. The whole point of paying someone else to handle a problem for you is that you don't have to worry about it. If you go all in on a provider and then suddenly find out that you've been switched to a paid plan in the middle of your vacation, that's not a place anyone wants to be. Saying there's no lock-in is nice, but that overlooks the fact that there most definitely is friction. What if there's no mass export? No mass import? Or you need to reset 2FA? Or etc, there's a thousand things that can shoot you in the foot, especially if you have a lot of services you need to migrate.

It's impossible to generalize over free vs paid in regard to predictability. E.g. a provider I paid for simply disappeared once when I was quite busy while my old free gmail still works. Realistically CF's free tier is more predictable than many paid options on market.

My threat model here focuses on what the provider gets out of the free tier. Cloudflare gets a broad view into activity on the internet for building the models they use for their paid offerings. Free Gmail puts people on a path in to Google's ecosystem with basically zero marginal cost.

Or your provider randomly decides you need to be on an enterprise plan: https://robindev.substack.com/p/cloudflare-took-down-our-web...

>What if there's no mass export? No mass import? Or you need to reset 2FA?

1. For DNS we have standardized AXFR requests which the DNS provider needs to support as they are part of the DNS standard. There is not an option of not having that unless you have a really shitty provider that you should change anyway.

2. Same for Mass Import because again DNS already defines these things at the protocol level.

And resetting 2FA or whatever is just the cost of using any service

Personally I have used CF for ~10 years so I have saved $240 and I simultaneously use GitHub Pages and CF Pages for CDN because again I just need to give them a bunch of static files. Adding a third CDN provider would literally be a single command at the end of my build pipeline.


Really drives home how bloody empty almost all of space really is.


The truth is most apps have no business having a menubar icon, but many of them cannot even be disabled out of the box. There's a number of third-party tools that help with the issue, but really this should be handled at the OS level. I want a permission similar to notifications to control whether an app can litter the menubar or not.


One thing's for sure: No application should be allowed to have a menubar item without a ToolTip. WTF, that should have been obvious from day one.

At the moment, I have 11 of them on my system (not counting the clock), a mix of third-party and Apple ones. NOT ONE of them has a ToolTip.

Even worse, if you click on them, the resulting menu does not show the name of the owning application. This too should be forced. For example, I unfortunately have to run Microsoft Teams, and its toolbar menu gives you no indication of what application it belongs to.


It is in Tahoe, which is on the short list of things I strongly, genuinely like about the update.


Thank you! I did not know about this change, even though I already am on Tahoe. Much appreciated.


You’re welcome! I stumbled across that myself. It wasn’t exactly a premier feature, yet still one of my favorites.


Whenever you combine two things into one, the complexity and cost go up considerably. A regular coffee machine is pretty cheap. Add high pressure so it can make espresso and it gets considerably more expensive. Add milk so it can make cappuccino, again more complex and expensive. The same holds for electronics. Isolating power when it's alone is fairly straightforward. It gets considerably more tricky and hence more expensive the moment you want to place any kind of a meaningful data signal in its vicinity.


So you mean they're developing the iPad, an insanely popular device, and you're not sure why they would make such a device?


I have been around touch screen Windows laptops for I don’t know how many years now, and I have never felt even the slightest compulsion to touch the screen.


It might be a generational thing; my kids get touchscreen laptops from their school, and they interact with them almost exclusively by touching the screen. I agree, I'd much rather use a mouse (or even better, a trackball; i wish most laptops still had those)


The US could make homelessness a thing of the past with a minuscule fraction of what it is spending on the military. It is very much a choice.


DoD spent $1.43 trillion in FY2026

Around ~1 million homeless in US

Let’s say it costs $10K/month/person so $120K/yr/person. Probably a big overestimate but gotta include healthcare and help people with long term stability.

That’s 120,000 x 1,000,000 = 120,000,000,000 or $120 billion USD.

Idk what the Nth order effects would be but yea I think what you’re saying tracks in the numbers


For an ideal ('spherical cow in a vacuum') type of homeless person, sure.


You cannot just throw money at a problem like homelessness in order to fix it. That is such an incredibly reductive viewpoint. It's akin to saying 9 mothers can birth a child in a month - oh look, we solved the population decline crisis! Someone go tell Japan!


This is not what the article is about though?


It could have used a screen shot.



This is disgusting. Like, I'm using macOS but just seeing this standalone makes me cringe.


Consider applying for YC's Summer 2026 batch! Applications are open till May 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: