MurphyA/hacker-news huggingface dataset:
Show HN: Wiredoor adds OAuth2 login to protect self-hosted services
by dmesad | 2025-05-07 13:28:24+00:00
[Wiredoor](https://www.wiredoor.net) is an open-source tool that securely exposes internal services (like Home Assistant, Grafana, etc.) to the internet using WireGuard and NGINX(no open ports required).

I’ve just added support for OAuth2 Proxy, which means you can now protect your exposed services with login via Google, GitHub, Authentik, or any OIDC provider.

Full documentation: [https://www.wiredoor.net/docs](https://www.wiredoor.net/docs)

GitHub: [https://github.com/wiredoor/wiredoor](https://github.com/wiredoor/wiredoor)

Would love feedback from anyone running self-hosted services or using OAuth2 Proxy in similar setups.
by gavinray | 2025-05-07 13:28:25+00:00
Have you considered that some people produce music solely for aesthetic purposes?

The main genre of music I listen to is electronic.

Many electronic songs are written to evoke a specific feeling, without meaningful lyrics.

When I produce electronic music, I have no particular lyrics or composition in mind.

I just fiddle around with different sound layers going for a particular "vibe" and mash things together until they sound good to me.

I see AI as another tool to expedite this process.
by twright | 2025-05-07 13:28:26+00:00
When I read articles like this I don't know whether to think I have some decent job security or not. On the one hand, people graduating having used LLM's for a significant majority of their work are almost certainly deficient at critically thinking about computer systems and programming them (there's a good quote in the article stating this much better than I am here). On the other, if they're cheating so much to get well-paying jobs will I --without cheating, relying on just the merits and knowledge from my career-- be competitive enough to find work in the future? Been wondering if anyone else feels this way.
by cs702 | 2025-05-07 13:28:33+00:00
The definition of "cheating" will change... because those students are, in fact, learning.

They are learning how to accomplish a lot more, a lot faster, with AI.

That's a valuable skill -- one of the most valuable skills that students can learn today.

It's not the only valuable skill they should learn, but it's certainly one of the most valuable.

Educators will have to adapt.
by jasonlotito | 2025-05-07 13:28:40+00:00
It is amazing to me the commentary confusing GPL and LGPL on this site. The misinformation being spread about the LGPL, or just assuming the LGPL is the same as the GPL is mind boggling. I can't be to surprised, I guess. GPL happens after the L, and of course, we know GPL "doesn't allow commercial applications" right? So that's all we need to discuss.

Seriously, it's just four characters, and doesn't take long to look up without just assuming it's the same as the GPL.

The argument "the lawyers saw GPL in LGPL and just made an assumption" is all the more plausible when you have people in the field who make the same mistake.
by neil5paul | 2025-05-07 13:29:35+00:00
Interesting, I have used linear – but not for this usecase. How much do you pay per month for linear (assuming you are on the paid plan, since free plan doesn't allow guests?)

Would you be interested in a platform that is built made for this and automatically send reports to customers as well as agency owners?

Also, I'm thinking of a flat pricing with no per-member pricing [unlimited retainers / tickets and members]. Thanks for your reply!
by Nopoint2 | 2025-05-07 13:29:56+00:00
I don't believe that phonemes are real. They are a product of centuries long literacy, and the stereotypically "foreign" accent results from people being taught to construct the words from phonemes.

Not all languages can be neatly split into a nice set of phonemes - Danish phonology in particular seems mostly imaginary, and the "insane grammar" of Old Irish appears to result from the fact that word/morpheme boundaries can occur within the "phonemes".
by mike_hearn | 2025-05-07 13:30:15+00:00
People trust word of mouth much more than other sources of information. That's probably because the person giving you a recommendation has social skin in the game (if they're talking smack you won't trust them again in future), and no conflicts of interest.

Versus asking the manufacturer ("very efficient sir") or the government ("efficient and we ignored every other aspect of the product so it might not actually work", see the dishwasher discussion).
by willcipriano | 2025-05-07 13:30:31+00:00
> offer minor prescriptions, stuff unavailable to over the counter, without doctor oversight.

In Europe you can just buy those sort of things outright in many cases. Things like inhalers can just be had without getting a doctor on board.

I believe it's a uniquely US thing where the doctor needs to collect a well visit fee on you treating yourself for a common or chronic illness.

"You still have asthma? OK, here is permission from my caste to breathe, pay the fee on your way out." Is bonkers when you think about it.
by koliber | 2025-05-07 13:30:35+00:00
The words of Lee in this essay highlight the problem. Paraphrasing: "I didn't do it because I did not feel like doing it, because it felt unimportant/irrelevant/dumb."

This is the hubris of youth talking.

While this kind of thinking will teach you some practical skills, ultimately you become an operator, and not an engineer.

CNC machine designers earn more than CNC machine operators.

Car engine designers earn more than car mechanics.

Computer chip engineers earn more than people who put computers together.

Production line engineers earn more than production line workers.

In software development, the titles are unclear, but there is a clear distinction between operators and engineers. Unfortunately we call them all programmers or developers or engineers, as the titles don't truly reflect the kind of work they are doing. When you work with someone though, you know which title they really deserve.

It's hard to put it into words, but going forward, the operators will have a harder time finding work as automated AI-based tools will replace them. The only solution is to learn to become engineers, but with the kind of mindset that Lee flaunts in the above article, that is not going to happen.

My advice: Learn the fundamentals. Don't cheat. Be curious and strive for deep understanding. It's tempting to cut corners, but already today I see a deluge of people who just don't have what it takes to engineer software.
by gosub100 | 2025-05-07 13:30:35+00:00
Why is it a moral outrage when students do it, but universities cheat students in many ways and we just grumble and accept it as a necessary evil. Just accept cheating as the same, maybe attack financial aid itself instead of the students. Say "this money is disproportionately being siphoned directly into the organizations coffers and very little of it is being used to teach anyone anything whatsoever. Therefore we are restricting access to financial aid, capping it to $X million total" etc. What's the point of a scholarship if there's no "school" being taught?
by horsawlarway | 2025-05-07 13:30:37+00:00
Based on the title, I expected more from this.

It's not so much "migrating a javascript project" as it is "marketing material style compare/contrast".

Not touched at all is the actual migration process for any real project. Costs, upsides, problems, headaches, etc.

And ultimately, the sales pitch basically boiled down "it's faster because rust/threads". Which... is fine I guess, but just not all that compelling.

Prettier and ESLint are plenty fast in the sense that they process the file I just saved faster than I can react. Anything else I'm going to push off to CI anyways, where the difference between 10 seconds and 1 second is pretty meaningless.

So speed is great and all, it's just WAY down the list of things I actually care about. Show me the reduced config files after migrating a real project, or the reduced time copying boilerplate for configs. But... it doesn't look that exists based on this article, since it's basically just "ESLint and Prettier configs combined".

Why even show me the discrete lint/format steps if the whole pitch is that the tool combined them? Just show me the check command.

---

As a tool, this looks fine - would love to see a real successor to Rome, including the bundling step.

Otherwise this is a pretty bland & boring marketing pitch.
by AStonesThrow | 2025-05-07 13:31:15+00:00
It's funny. During tax season this year, I was engaging with several "tax professionals" from H&R Block in order to answer some, hopefully elementary, questions about my tax situation. And you know what, I could never ever get a straight or clear or definitive answer from them! It was infuriating. It seemed that my business was too small or insignificant to them to bother. They missed appointments and most of their branches were closed. I believe that they're a significantly understaffed industry.

When I finally got an in-person tête-a-tête, the guy was just Googling stuff -- I mean he was not even looking on IRS.gov, just Google -- and I got so pissed I walked right out.

So ironically, the best advice I found, the best distillation of good information, was through Google's Gemini LLM. I asked Gemini many tax questions, and it was able to cogently answer them with correct terminology, and enough correct advice that I was able to navigate the IRS.gov publications and corroborate them from the horse's mouth.

So at this point I feel like engaging an LLM in particular topics is far more productive than engaging a human on the front-lines. The humans are poorly trained, underpaid, overworked, and unreliable.
by mschuster91 | 2025-05-07 13:31:21+00:00
> After months of slow back-and-forth over email trying to find a compromise, including offering to exclude LGPL code from the assets, Unity basically told us we were not welcome back to their Store, ever. Even if we were to remove all LGPL code from the Unity package.

It's high time the EU clamps down on Unity as well and classifies them as a gatekeeper. This behavior is absolutely unhinged.
by hiq | 2025-05-07 13:31:54+00:00
I'm curious about what non-commercial means in practice.

> Common examples of non-commercial uses include learning and self-education, open-source contributions without earning commercial benefits

What if I start writing code, let's say 80% of a codebase, then for the next 3 months I switch to another editor to write the next 20%, and then commercialize the support (so open-source but with commercial benefits)? Would it be about intent, i.e. it'd be fine if I had no plan to make a business out of it at the beginning, but as soon as there's the idea of a business I should have switched?

I guess in practice this mostly targets companies with 10+ employees so it's fine not to draw the line that clearly?
by ben_w | 2025-05-07 13:32:19+00:00
The algorithmic feed is the default one whenever you visit the site. It doesn't mean people like it, only that this is where they go first before clicking through to the "Friends" feed — sure, they could bookmark the friends feed, but will they? I mean, I vaguely remember that a fresh install of safari has facebook.com itself as a default bookmark, though I always delete such things and memory is fallible.

And that's without counting the addictive vs. valuable distinction that the other replies are making.
by rolph | 2025-05-07 13:32:40+00:00
if you rely on substitution only, your doing it wrong. the cypher or text is subject to alternate rules of grammar, syntax, spelling, euphemisms, and hardening rules, such as not repeating words, dropping vowels or other frequent characters, intentional misspelling, and interleaving of red herrings.

also:

https://en.wikipedia.org/wiki/Code_talker
by edude03 | 2025-05-07 13:32:42+00:00
> I'm a software developer with a flexible work schedule paid hourly, the act of going to grab the food myself and not working for 30 minutes would cost me way more than delivery costs (even cooking my own meals can be more expensive when time is factored in, compared to food price at restaurant + delivery cost (for ~2 portions prepared in 30 minutes

Off topic but I quit consulting because I had this exact realization. Sure making $1000 to fix a production outage in 15 minutes on a Saturday was amazing but it made me always think about life in billable hours to the point where I was not hanging out with friends or going to the gym anymore
by sitkack | 2025-05-07 13:32:46+00:00
As someone who has 35 years of programming experience and now vibes half the day, this is a refreshing take from a junior programmer.

One way you could use LLMs w/o inducing brain mush would be for code or design reviews, testability, etc.

If you see codebases you like, stash them away for AI explanation later.
by fastball | 2025-05-07 13:33:29+00:00
Yep this "study" is drivel.

To provide a scenario that takes this argument to its logical conclusion: if one person owned 100% of the only oil & gas company in the world, and all 8 billion people on earth used that oil & gas for their cars and their stoves, etc. and this in turn constituted the entirety of emissions that caused warming, then by this metric it would actually be that one businessperson who is "responsible" for all warming.

Even if that person doesn't consume any oil & gas themselves and lives off-grid on a farm somewhere.
by eqvinox | 2025-05-07 13:33:58+00:00
Reminds me of editing NVMe support into my Supermicro X9DR7-LN4F server mainboard (Sandy/Ivy Bridge) I have at home. It involved "unpacking" the 'BIOS' (UEFI) image, adding an NVMe module that was published somewhere (I think it was actually generic, as in plain UEFI and not specific to the BIOS vendor, AMI in this case), repacking it, and then flashing it on the mainboard (with clenched buttcheeks — I'm not sure this board has a recovery mode…)

(It works perfectly to this day.)

It's a little sad that Supermicro didn't do this at their end, it's maybe an hour of work, two with testing…

> inclusion of the NVMe DXE trifecta (Nvme, NvmeSmm, NVMEINT13)

Now that I think about it, this sounds very much like what I threw into the X9DR7-LN4F BIOS image.

Ed.: apparently these are the files I used, though I cannot dig up how or where I did this :)

-rw-r--r-- 1 41917 May 28 2020 P-X9DR7-E-LN4F_BIOS_3_3_release_notes.pdf -rw-r--r-- 1 30493975 May 28 2020 FD12LITE.zip -rw-r--r-- 1 16293994 May 28 2020 Aptio_V_AMI_Firmware_Update_Utility.zip -rw-r--r-- 1 818096 May 28 2020 UEFI_Shell_Spec_2_0.pdf -rw-r--r-- 1 2104626 May 28 2020 AMIBCP 4.53.zip -rw-r--r-- 1 5910147 May 28 2020 UEFITool_v0.27.0.rar -rw-r--r-- 1 10665 May 28 2020 NvmExpressDxe_4.rar -rw-r--r-- 1 404236 May 28 2020 MMTool 4.50.0.23.zip -rw-r--r-- 1 6150536 May 28 2020 Aptio_4_AMI_Firmware_Update_Utility.zip

(…10kB compressed for the actual NVMe DXE…)

..A.... 20832 2018-04-18 00:00 NvmExpressDxe_4.ffs
by evelant | 2025-05-07 13:34:14+00:00
YMMV, but I've found it really does work and isn't a gimmick. It gets problems right that Cursor, Roo, Windsurf, etc trip up on because somehow it finds exactly the relevant stuff for context at a granularity you can't really achieve by @mentioning whole files/directories in other tools. I'm going to enjoy it at least until something better comes along. I think the "relevant accurate context is better than just adding more context" approach is the way to go.

I find the autocomplete model a lot better than cursor/copilot as well. IMO it does a much better job of understanding the intention of your changes and generating relevant changes across files. I think that's also due to the context engine, it checks for relevant changes to the task at hand across files rather than being mostly "local".
by FirmwareBurner | 2025-05-07 13:34:18+00:00
>LLMs have ended the need for white collar junior work.

I think the high interest rates, poor consumer economic situation and remote work with outsourcing did way more to damage that jobs market than LLMs right now.

I am yet to hear jobs being replaced with LLMs but I hear about jobs moved to cheaper locations all the time. LLMs make workers more efficient at easy, low-stakes repetitive shit but don't fully replace them. Yet. They also don't replace accountability. A lot of times managers/corporations just hire to have a scapegoat to throw under the bus if the shit hits the fan. You can fire and intern for doing something wrong, you can't fire a LLM that fucks up, it's still the user to blame.

Couple with the bullwhip effect of too many grads going to University chasing those lucrative white collar jobs from the covid boom days and this is what you get.

>Recent grads at this point are just a legal/tax (sec 174) liability

Sounds like a US specific self inflicted problem.
by dec0dedab0de | 2025-05-07 13:34:24+00:00
I don't know why you're being down voted, of course you can't test for everything, and you're going to start with the most likely causes.

The frustrating part for me is when people think of the symptom as the cause. Like they understand that multiple things can cause a fever, but they don't understand that multiple things can cause bronchitis.

When I was a kid I had "sinusitis" multiple times a year, but my doctor never explained to me that it could be the same or different causes. When I learned that '-itis' just meant inflammation, it blew my mind. I have done my best to spread that knowledge ever since.
by diggan | 2025-05-07 13:34:33+00:00
> Investing in fossil fuels makes you responsible for the people who use those services?

Maybe not responsible, but not exactly a great move if you cared more about our world than your own financials.

Said another way, if the top 10% stopped investing in companies continuing with fossil fuels, and instead tried to aim to invest into renewables, couldn't that potentially A) make companies dealing with renewables more attractive as investments increase and B) make companies dealing with fossil fuels less attractive or potentially make them change towards something else?

Basically "Vote with your wallet" but for the ultra-rich, and "Vote" is really "Make Earth still be habitable in the future".
by evanjrowley | 2025-05-07 13:34:34+00:00
Consider that college tuition is often equal to what an employer would pay you to do similar levels of work. The opportunity cost for attending college is therefore 2x the tuition. The system is exploiting students who need a paper to get a job, so why shouldn’t students exploit it too?

* Mostly applies to degrees where "learning on the job" would have resulted in equivelant knowledge and skills.
by matheusmoreira | 2025-05-07 13:34:38+00:00
> There is no auto-download

There is. Linux distributions have package managers whose entire purpose is to distribute and manage applications and their dependencies.

The key difference between Linux distribution package managers and programming language package managers is the presence of maintainers. Any random person can push packages to the likes of npm or PyPI. To push packages to Debian or Arch Linux, you must be known and trusted.

Programming language package managers are made for developers who love the convenience of pushing their projects to the world whenever they want. Linux distribution package managers are made for users who prefer to trust the maintainers not to let malware into the repositories.

Some measured amount of elitism can be a force for good.
by indymike | 2025-05-07 13:35:48+00:00
They are pretty good at most white collar jobs. Blue collar not so much.

> Colleges need to pivot fast.

The problem is the same everywhere - the management (administration) has grown like a mushroom. We need more profs and instructors because oral exams are the only way to verify knowledge that can't be easily gamed - aside bribes. That's scary because ethics are not what they once were.
by ty6853 | 2025-05-07 13:35:51+00:00
Yes, but this is the kind of thing Kaczynski wrote about in his manifesto. If you don't produce the product using the externality heavy process that reduces the cost, someone else will, and put you out of business. The whole economic system demands it, it is unavoidable. USA mostly solves this by just offloading the problem onto China.

That is why some people argue for a more capitalist system where the referee of industry job is to make sure businesses pay for externalities, enabling free trade rather than just shitting on the next guy.
by jasonlotito | 2025-05-07 13:35:56+00:00
So... not that it really matters I imagine, but JetBrains doesn't do pure subscription. Rather, you buy your IDEs, and effectively have a perpetual license to the product you bought. You get free upgrades, and if you keep paying, your license gets updated along with it.

If you don't continue paying, you still have the IDE you paid for. You just don't get updates. This seems like a subtle distinction, but I think it's an important one in the world of subscription services.

https://sales.jetbrains.com/hc/en-gb/articles/207240845-What...
by superkuh | 2025-05-07 13:37:10+00:00
I guess I can no longer fly in commercial aircraft (unless I want to gamble and try the "have airport security call up Homeland Security in DC and have them grill me about my life" trick). Yikes. It's sad to see the states loose this battle against an ever increasingly authoritarian federal government. People said realid would be no problem because the federal government is reliable. Welp.
by happytoexplain | 2025-05-07 13:37:36+00:00
"Anything market-rational is also moral" is the plainest fallacy in all the world, and yet one of the most common and devastating. Clearly if you invest in something popular, you are assisting in its ability to be popular. That those consuming the thing are also at fault has no impact on that fact. That the next guy would do the same if you hadn't has no impact on that fact. You may very reasonably argue degrees, but anything else is nonsense to the point of being essentially a lie.
by akudha | 2025-05-07 13:37:59+00:00
There was a video of Zuck on reddit, lecturing about how nations should work together on climate change. While his mega yachts burn 2000 gallons of fuel per hour. The level of hypocrisy of these people is off the charts.

https://www.reddit.com/r/climateskeptics/comments/1hk9nwc/ma...

https://voz.us/en/society/240508/9963/launchpad-mark-zuckerb...
by coder543 | 2025-05-07 13:37:59+00:00
> Privacy and Security by Default [...] you can also run custom models on your own hardware via Ollama.

That's nice for the chat panel, but the tab completion engine surprisingly still doesn't officially support a local, private option.[0]

Especially with Zed's Zeta model being open[1], it seems like there should be a way to use that open model locally, or what's the point?

[0]: https://github.com/zed-industries/zed/issues/15968

[1]: https://zed.dev/blog/edit-prediction
by pixl97 | 2025-05-07 13:40:20+00:00
> I do think products with clearly defined technical specs should in general be reported to the consumer.

A historic example is things was Linksys WRT54G wireless routers. The exact same product number had completely different amounts of memory and core chipsets.

Another one that's common is the first batch of particular SSDs in a model contain more/faster/any cache which gets good benchmarks and great reviews, but later neutered releases of the same 'model' perform like crap.
by kimbernator | 2025-05-07 13:40:39+00:00
Fossil fuel companies actively lobby against renewables and environmental regulation because it's in their financial best interest. By investing in those companies, one aligns their personal financial interests with the industry.

I don't think blanket divestment is a good solution, but there is clearly a perverse incentive. You don't get to profit significantly from these companies while being absolved of blame.