skysight-inc/HackerNews huggingface dataset:
Launch HN: Stack Auth (YC S24) – An Open-Source Auth0/Clerk Alternative
Hi HN! We're Zai and Konsti, and we're building Stack Auth (https://stack-auth.com/), an open-source managed authentication and authorization platform. Basically, we build your login and signup pages, and everything that comes with that.

Our GitHub repo is at https://github.com/stack-auth/stack, and there’s a zero-budget demo video here: https://www.youtube.com/watch?v=LTkjdPf2E2Q

Stack Auth was born out of years of frustration with the incumbents. We wanted to build something that is developer-friendly and open-source at the same time.

The dominant player in this space is Auth0, who appeals to enterprises but lags behind in developer-friendliness and has strong vendor lock-in. A newer one is Clerk, which markets directly to devs, but is still entirely proprietary. Open-source solutions like Supabase Auth or Auth.js/NextAuth are only authN, and don't provide the rest of the toolchain.

On the other hand, building your own auth infrastructure is tedious work. Rolling your own crypto is already hard enough, but on top you'll have to deal with OAuth flows, access tokens, RBAC, permission syncing, API keys, and so on. Most handcrafted OAuth or password-based applications in the wild are vulnerable in at least some of these areas.

To us, the solution to this was obvious, so we decided to build it. Stack Auth is 100% open-source, licensed under MIT and AGPL. You can self-host, or choose to use our managed hosting. If you choose the latter, there's no lockin. You can export all your data and/or start self-hosting at any time.

Also, we're more than just authentication — we have authorization (orgs, teams, permissions, RBAC) and user management (impersonation, user dashboard, webhooks).

One interesting feature is what we call "connected accounts": we can manage and refresh your OAuth access tokens even for services that your users don't use for sign in, such as when accessing GMail or OneDrive APIs.

We also put a lot of weight into integrating deeply into the tech stack itself. For now, we support Next.js frontends with a bunch of components and hooks for sign-in, password reset, and organizations. Though, we do have a well-documented REST API (https://docs.stack-auth.com/rest-api/auth), so you can access Stack from any language.

For more info, check out our GitHub repo above, or our documentation (https://docs.stack-auth.com).

Would love to hear about your own stories and opinions on auth. Thanks all!
Reading the article states they get trapped in the limescale crust that forms from boiling water, and the crust is strained using a mesh filter like already available on many electric kettles.
It ascribes no purpose to evolution. It's simply that an organism that creates more copies of themselves will replace organisms that fail to do so.
> Or maybe it’s because I’m tired? Tired of all the ads and the hamstrung functionality (e.g. unable to play background Youtube videos on mobile). I know ad blockers exist for desktop and, to some degree, mobile, but is it really worth it?

Yes? Ads suck; using a phone with adblock is easy. If your phone isn't manufactured by vampires that hate you, you can even sideload that stuff for free.

You very clearly are tired; I can't even imagine paying $50 a year for half that stuff. Like, 1Password doesn't need my money if I'm paying iCloud for storage I could put my Keepass in. And I don't have to pay for iCloud if I'm using Syncthing to sync local storage for free. In a lot of ways this sort of lifestyle signals to me that you're not trying alternatives and have given-in to the repeat customer mindset the market wants from you. Google takes your YouTube Premium money and laughs all the way to the bank.

> But lastly, it’s because if I pay for something, it’s with the hope that it leads to a sustainable business. I have less anxiety that software I pay for will shut down, either due to vanishing venture funding or failing to meet metrics

This is the ultimate oxymoron, though! By definition, the only businesses that can shut down your software are the ones trying to hit financial goals. If you support businesses that rely on your money to survive, you are also supporting the act of shutting things down in the name of money.

You know who's never had to worry about this? Free and Open Source software users.
You're right, they're not "stars."

They're still better off than the group struggling to gig at the local bar.
Does it? The odds of birth defects and disorders increase steadily with age.
Neuroticism: High Sensitivity to Stress
I used to live there . . . had 2 major hurricanes go over my house. No major damage, thank God. But that year I was hit with an additional $600 "add on" by my insurance company (not Citizens).

What Citizens did (and maybe still does; it's been about 20-some years), is "tax" the private insurance companies to help pay their deficit bill. Of course, the private insurance companies are legally compelled to pay, but they pass it onto those of us who were insured privately.

So, FL government may have paid as well--I don't know. All I know is we (the privately insured citizens certainly did).
Unfortunately we still live in legal environment where work from office is the norm, so if someone is just an employee not a contractor and not some b2b - all legal setup is that employer sets up where and how you work.

There is no way you can disagree and "expecting to work from the office" doesn't constitute "hostile work conditions" it is just the norm.

For full time employees all laws for remote work is quickly cobbled patchwork that employer can cut right away by saying now they expect RTO and I would be seriously surprised if any employee wins lawsuit.
If rST were actually easy to write and read I would have just used rST instead of creating Markdown.
Their train system is one of the best things about living there.

The grain of salt is that it's a small country that's basically the size of the Bay Area, and it was never car dependent.

https://s3.amazonaws.com/thetruesize.com/mockup.html#?border...
> The article has a single point it repeats over and over again: [7 distinct points]

I don’t think have a single overall thesis is the same thing as repeating oneself. For example “models can’t reason” has nothing at all to do with cost.
there's a pretty direct translation from ECS task definition to docker-compose file
They always optimize for everything except what matters: nutritional value.
Colour in the Photoshop/gamedev world is often handled pretty casually, but if you're interested the moving picture world gets a lot more rigorous about it and there's tons of documentation around the ACES system in particular:
https://github.com/colour-science/colour-science-precis
https://acescentral.com/knowledge-base-2/

As you suggest storage in linear 16-bit float is standard, the procedure for calibrating cameras to produce the SMPTE-specified colourspace is standard, the output transforms for various display types are standards, files have metadata to avoid double-transforming etc etc. It is complex but gives you a lot more confidence than idly wondering how the RGB triplets in a given JPG relate to the light that actually entered the camera in the first place...
It might not even be a fat-finger, they might legitimately use 200C rated tape where it's needed and 155C tape where the higher spec is not needed. I am not a kapton expert but maybe higher temp ratings are less flexible or less resistant to hard vacuum or something like that. This might just be a plain old engineering QA issue. These are complex machines, and these sorts of things happen.

I don't know how space-rated QA works, as I am but a lowly terrestrial engineer, but I imagine there are specs for each portion of the machine calling out electrical ratings, temperature ratings, vibration ratings, etc. If the spec definitions for that section of machine are bad it's hard to do proper QA against those specs.
> If the business is in really dire financial straits, I think you actually fire people.

Then it must be reported to investors who might think your business is in trouble. But if you hire contractors (who do everything a full timer does, just with fewer rights) or have high attrition you can fly under the radar.
I was on dev teams inside industrial-age companies before I went to FANG, and I saw it go both ways.

In one company, the hourly customer service folks who sat adjacent to our patch of the cube farm (that's right, no noise isolation between the call center and the software development team) complained about engineers arriving half an hour after customer service shift start, so we salaried engineers were instructed to be at work by 8am or whatever. In another company, the hourly people were not allowed in the executive barbershop, the executive dining room, or the executive washroom and had to park in the surface lot instead of the garage. Actually, garage access was denied even to most software engineers but whatever.

I'm sure it's generally true that "MVPs" get exempted to varying degrees. My point is that the policies themselves are fairly capricious in the first place and the identification of MVPs is unreliable too. Performance management for managers is probably more difficult even than performance management for software engineers and my experience makes me highly skeptical about the whole prospect of professional management.
No shit, that was always the goal.

Unless the employees came on under remote work it’s very hard for them to say the work policy is a change in working conditions, even if it fundamentally is.

For instance I now have to drive to work where previously transit was an option, so my commute has changed from work time to just an additional 12 hours of uncompensated labour and thousands of dollars in fuel, maintenance, and tolls.

Hooray!
The problem is that the business has a centralized coordination structure, and for the employees, there isn't any apart from the business that connected them. Maybe a union is what could help.
Is it? Having rights has historically not been a stable configuration. There are constant efforts to abrogate them.

It's amazing the US has lasted as long as it has, although I've lived long enough to see a significant erosion of rights.

For example, civil asset forfeiture.
It's no less terrifying to do it. But speaking as someone who did pull the trigger: it doesn't vanquish your imposter syndrome, it just makes every downturn feel like proof of it.

Ego's also a very dangerous thing in business. You have to have enough of it to get started, but it's also very easy to refuse to change course or deal with an inconvenient reality when you feel like it's a referendum on you. For me, at least, it helps to remember that "I am a smart person who is doing a really hard thing pretty successfully" and "I will be horribly wrong frequently" are not mutually exclusive statements. There's a good reason I wrote thousands of words about how a lot of very smart people ended up not succeeding; it's probably the most important thing I learned at my last job.
> They monitor the world for things they don't like

The police are not inherently justified. They receive their power from We the People and have no business deciding what they "do" and "don't" like. That is our legislators' jobs. The police do not get to arbitrarily decide threats outside of specifically mandated enforcement policy, and they do not get free reign to surveil and act on such information.

As someone with reasonable OSINT experience, I recognize that eventually tracking data like this will be part of a routine, automatic dragnet. However, that does not mean we cannot police the police, that doesn't mean police get to actively build cases using this information, or even consider the information at all while making decisions about who to target.

> requirement that the police need the power to investigate things they do not like

Who required this? I don't remember signing off on anything of the sort, and I do not recognize the authority of any State organization or public servant which fails to follow the rules that We the People have set forth.

> making a list of people isn't threatening enough or easy enough to detect

I grew up in a very small town. I was on such a list, purely by association, and it led to me being stalked by a police officer who ultimately planted cannabis on me at the scene of an accident, and lied in court. I tried fighting it, but the judge and prosecutor were part of the conspiracy, going as far as to switch my public defender to someone they controlled. They also denied my right to a jury, and my defender denied my right for a motion to quash or an appeal due to mistrial, saying, "the judge is my boss and I'm not making my life difficult."

I was convicted, on my first criminal offense, to 6 months in jail. Would have been longer but that was the maximum for a first cannabis offense in my state. I ended up getting denied jobs and it exacerbated my homelessness.

You have absolutely no idea what you're talking about, because you're lucky enough that the policies you're advocating for have not specifically impacted you. You do not understand the depth of corruption that runs through our system, and how police surveillance and "lists" are just the tip of the State oppression iceberg. Not everyone is lucky enough to be a part of the protected class.

> You may not like some specific list.

That is correct. And as a citizen, it's my opinion that ultimately matters, not my local police chief's.
Honest question: what did you expect to find?

Startups are hard. The vast majority fail. Joining YC doesn't mean they run the company and drive the vision for you. It sounds like they give you some money and people connections, and from there, it's almost all you.
> should be
Clearing the Air: Honest Truths About Clean Energy [pdf]
Better to just find a job you want to work at ...

Reward the places that do it right with your efforts.
For a really intuitive introduction to linear algebra, I highly recommend Gilbert Strang's "Linear Algebra and Learning from Data": https://math.mit.edu/~gs/learningfromdata/
That's modified with a userChrome.css
I've heard all of these lip-service justifications before, but I've yet to see anybody actually publish data showing how they saved any money. Would love to be proven wrong by some hard data, but something tells me I won't be.
> tabs and bookmarks should meld into one

I can see the appeal of this, and more broadly, not having to think about tab management. But for me, I find I actively benefit from the process of deciding what to keep around.
It’s still not constructive dismissal in any state I know of. Management is allowed to change strategy, and deciding that having people in office is better for the business is sufficiently good cover.

Using return to office as a way to make people quit is also not a new strategy. Even before Covid, it was an often used tactic to trim headcount. Another common tactic is moving the office to a different location entirely, and that also is not constructive dismissal.
There's no reward function in the sense that optimizing the reward function means the solution is ideal.

There are objective criteria like 'compiles correctly' and 'passes self-designed tests' and 'is interpreted as correct by another LLM instance' which go a lot further than criteria that could be defined for most kinds of verbal questions.
Unless this software is your core business, I would look at a third alternative: contracting the work out to experienced developers to replace the platform.

If it works well, you can bring development in house slowly after the platform is more mature. Worst case, you’ll have a more responsive external party managing the platform for you.
Show HN: WikiCards – Swipe through random Wikipedia articles
Free on iOS, no ads, no subscriptions, no IAPs, no data collection.

Features:

- Swipe through random Wikipedia articles to discover interesting topics and learn something new.

- Bookmark articles to go back to them anytime you want.

- Easily share an article with a simple press of a button.

- Multiple methods of navigation through each card (swipe, button press, or double-tap).

- Designed for easy one-handed use (left-hand mode available).

- Dark mode.
I still miss Opera Presto. It was so ahead of everyone and after 10 years no other browser can compete with it (UI-wise).
The chip will be cheap, probably $0.9 per chip @500 units.
My team has been building custom software for a large german multinational shipping and freight forwarding company for 18 years now. Happy to chat, my email is in my username @ gmail.

Our client has tried what you're discussing several times. They are a bit bigger (10x) than your org, but never built up the software muscle in house despite hiring and firing entire teams to attempt to build stuff in house. We've handled one corner of their offerings for nearly 2 decades while all their other teams have cycled in and out of internal and external suppliers.
Okay, it's better than nothing.
is producing oxides of nitrogen environmentally okay?
"Isn't "just launch over and over until it stops exploding" the way rockets are made these days?"

If the cargo was a bunch of rocks and Boeing paid for the launch, you would have been right.

But this was a manned mission ordered by the US government. At this phase of development, nothing should be left to chance.
> If i am scanning the negatives with a camera and light source and after inverting, a greenish mask is still present, as like in the first conversion example they give, a few tweaks of a few sliders in photo editing software is enough to correct it.

I think this is a major point. I applaud the effort of the post and would (as a Mamiya 7 shooter!) love a whole unit better than the Epson V600, but correcting a color cast in the film scan is trivially easy in an photo editing tools these days. I scan and get tifs and can tweak to whatever. More important are the iris/optics of the scanner itself and how flat the film is inside the bed.
I don't think it was a coincidence that the massive invasion of Ukraine was just a few months from the feckless abandonment of Afghanistan.

I know that there were relatively minor attacks on Ukraine before.
Yep, selective enforcement is rampant. Makes an even stronger case rest it's intended to force attrition.
For all the speculation about the move, the reason is simple. Twitter is going to launch a payments system, San Francisco has a tax on gross receipts, which is so unfair to payments processing companies that several others - square, stripe, and block - moved out of SF to avoid paying that tax, and Twitter is simply following suite. it's too inside baseball for the average reader to follow, so we're left with baseless speculation and conspiracy theories on why they're moving HQ when it's a subplot business decision that has made made by others already.
Somewhat related to this topic, does Cloudflare have a way to proxy requests for, say, example.com but accept a certificate on the origin with a different hostname, such as origin.example.com without also setting the SSL mode to Full instead of Full (strict)?

This makes it a little bit annoying to deploy applications securely, since any self signed cert would be accepted with this setting as well, which is not what I want as it opens up the possibility of MITM attacks.
To people with emotional attachment to businesses? I upset them pretty often, no matter how I police my tone.

Sorry if I hurt your feelings, they'll be hurt quite a bit more if you insist on excusing all of Apple's deficiencies in the same way. It's best to not make a habit out of defending companies that incessantly lie, lest you start taking the truth personally.
Like anything open source it allows you to know and see exactly what your machine is doing. I don’t want to speculate too much but I remember there being discussions around whether or not nvidia could embed licensing checks and such at the firmware level.
Database Building Blocks Seminar Series – Fall 2024
I'm not a business person so I don't know how insane this might sound, but would your best bet perhaps be to reach out to your competitors and other businesses you think are in the same situation and propose some sort of shared software house to replace the 3rd party solution?

It seems rather expensive for a 200 person company to start it's own software division just for internal applications.
At this point it'd probably be money better spent raising up a Blue Origin commercial crew program than propping up the corpse of Boeing.
Believe me, I missed Sonnet too. Thanks for sharing.
Great way to breed resentment, giving some people exceptional treatment. Why not
treat everyone fairly?
What, specifically, do you think should be done better? What style of pedagogy do you think would be more appropriate? What notation? What terminology?

Apart from "argument by year number", what's actually wrong with the book?
Here's what SpaceX put on their website before their most recent (fourth) flight test of Starship.

http://web.archive.org/web/20240601140837/https://www.spacex...

and here's what they posted before the third flight test

http://web.archive.org/web/20240306183144/https://www.spacex...

Both have pretty clear language about them being test flights (especially the flight 3 post), and list what they hope to test.

edit: they have not yet made an official page on their website for the upcoming fifth test flight

https://en.wikipedia.org/wiki/SpaceX_Starship_integrated_fli...

although they have teased about trying to return Booster to the tower for a catch attempt.

https://www.youtube.com/watch?v=j2BdNDTlWbo&t=149s
Do you still need to be running the proprietary nvidia graphics driver, or is that completely unrelated?
Those are reasonable arguments, which I've heard previously indeed. But, truth be told, although the pandemic had an impact, all this mess started to become visible at least a couple of years before it — maybe even earlier.
This is exactly why the House That Jack Built (GE) was made out of cards.

To be fair, running a huge megacorp is really hard and there seems to be no easy answer to getting thousands of people to perform optimally, together, over the long term.
The internet and availability of knowledge has rendered most of these games much easier than the original audience had it
Vertical tab: this is the 1st in my wishlist. I switched to Vivaldi before because of this. Can't wait to try it out.
> The provider is understaffed and unresponsive and the platform is stagnant.

You need a new vendor, if you can't afford it, you may not be able to afford a proper in-house team. I've worked with great vendors that would not give you this experience, and vendors that would you give you far less than you're getting now.

> Besides, can we even attract experienced developers to a non-glamorous industry like logistics?

Yes of course you can. But reach out to engineers in your network that work for non-FAANG companies and understand why.
Working on logistics software has been my day job for 14 years. You can attract experienced developers by giving them autonomy, GOOD pay, and a healthy work environment. I wouldn't trade a "cool project" for any of that.

It does sound like the best solution would be to bring most of the development in house, but integrate with third-party APIs where it makes sense (ie, the data transfer piece you referenced)
A migration with the goal of improving the infrastructure foundation is great. However, I was surprised to see that one of the motivations was to allow teams to use Helm charts rather than converting to Terraform. I haven’t seen in practice the consistent ability to actually use random Helm charts unmodified, so by encouraging its use you end up with teams forking and modifying the charts. And Helm is such a horrendous tool, you don’t really want to be maintaining your own bespoke Helm charts. IMO you’re actually better off rewriting in Terraform so at least your local version is maintainable.

Happy to hear counterexamples, though — maybe the “indent 4” insanity and multi-level string templating in Helm is gone nowadays?