HN2new | past | comments | ask | show | jobs | submit | nonoesp's commentslogin

> What's moon plus sun?

"Monsoon," says ChatGPT.


"moonsun" says JavaScript, 1-0 to JS I'd say.


I create a playlist for each month (e.g., 2026.01) inside of a folder of the corresponding year (e.g., 2026) and add new tracks there (instead of using Spotify likes). This allows me to jump back to a specific year/month. You can also hit play on the folder to play all songs from a specific year.

I used to have a single Inbox playlist to save music and keep the date when I saved each song.


WTFPL (Do What The F*k You Want To Public License) https://en.wikipedia.org/wiki/WTFPL


This seems like a bad idea. Surely the warranty and liability disclaimer found in licenses like MIT exists for a reason.


Off the top of my head the CAPITALIZED WARRANTY DISCLAIMER is specific to a subset of states in the US. If you’re outside those jurisdictions (or any other where it is required) then for aesthetic or principled reasons I can see why you wouldn’t kowtow to the legalese spiral.


Maybe don't drop the warranty disclaimer just yet.

> The MMWA requires conspicuous disclosure of warranty terms (e.g., designations like "Full" or "Limited" as prominent titles).

> The common practice of ALL-CAPS WARRANTY DISCLAIMERS (e.g., "AS IS, NO WARRANTY") stems primarily from state adoptions of UCC § 2-316, which requires disclaimers of implied warranties to be "conspicuous" (and suggests all-caps as one way, especially in plain text).

- Grok https://grok.com/share/bGVnYWN5_5c7db73a-ffd2-48b2-bb36-296f...

That said, maybe it wouldn't be too hard to argue there is obviously no implied warranty with a crass license like WTFPL.


> Surely the warranty and liability disclaimer found in licenses like MIT exists for a reason

Obviously IANAL, but I entirely don't see how the WTFPL (which does not ask the consumer to accept any restrictions) would create an implied contract (which would seem to be a necessary precondition for a warranty obligation)?


IANAL either, so my own legal theories are as creative as yours, but I'd like to offer the following data point: All unrestricted open-source licenses that were written by actual lawyers, from MIT to CC0, have found it necessary to include such a liability clause.


In what sense is the MIT license "unrestricted"?


In the sense that when people want to use a piece of MIT-licensed software in another piece of software, they don't in practice find themselves restricted from doing so by the conditions of the license. "Permissive" might be a word I should rather have used.


The MIT license does place one specific license restriction on its users. Specifically: "subject to the following conditions: the above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software"


This is what I was getting at. The MIT license has restrictions, so calling it "unrestricted" doesn't make sense.


Sharing a short post I posted a year ago with some thoughts on password managers.

## The password-management promise

> I don't buy the promise behind 1Password or LastPass.

> You only need to remember one password. The last password you'd need to remember.

> They don't tell you that you're also building a one-stop shop for hackers to steal it all at once.

> The solution?

> Store hints, not passwords.

> Don't reuse passwords. Use algorithmic passwords instead.

> Use passkeys and security keys.

https://sketch.nono.ma/the-password-management-promise

---

I've always preferred 1Password and Bitwarden to LastPass.

I still prefer to encrypt sensitive data and "secure notes" with custom workflows (GPG keys, for instance) instead of relying on third parties, and even more when the data would be store in the cloud, in a centralized location.

I can't imagine the nightmare of having all your secrets exposed, not just for the risk of it but for having to reset all your exposed accounts.

(+1 to GPG encryption.)


I used to be really skeptical of online password vaults. I thought they were an obvious Honeypot begging to be hacked. But if I understand the technology behind 1password correctly, there is literally no way for a hacker to sign into my account on a new device without having one of my other devices or my secret key (the actual 34 digit encryption key used to verify my account and set up new devices).

So even if they know my 1password username and password they still can't really do anything with it. And if they steal my device, they would need to know my login password. Or cut off a finger, I guess, but I've got bigger issues if that happens.

They don't all work this way, but 1Password seems to be by far the best and most secure option, and IMO the convenience of an online password vault simply outweighs the tiny risk with a proper vault like 1password.

No idea why anyone has stayed with LastPass after the fiasco a couple years ago though.


> So even if they know my 1password username and password they still can't really do anything with it. And if they steal my device, they would need to know my login password. Or cut off a finger, I guess, but I've got bigger issues if that happens.

https://xkcd.com/538/


Yeah pretty much.



The only thing WordPress and Laravel have in common is that both are written in PHP.

But if you've used Laravel, you know it's pleasant to write apps with it.


> "If it’s finished, the applause, the thanks, the gratitude are something else. Something extra and not part of what you created. If you play a beautiful song for two people or a thousand, it’s the same song, and the amount of thanks you receive isn’t part of that song." (Seth Godin, The Icarus Deception: How High Will You Fly?)


You can write and run code in the browser with p5.js's playground, and even create an account to store your code sketches.

https://editor.p5js.org/nonoesp/sketches/ruSYeEUEH


> To get started, simply SSH to our CMS.

pico.sh is a content management system (CMS) for hackers.

That's what I infer from the site, but it would be helpful if they added a one-liner to the home page and repo.


Descript acquired Lyrebird years ago and already have a product that can synthesize your voice.

They require training data longer than 15 seconds, which could lead the out out to resemble more the actual voice.

I've seen weird behaviors where the AI voice forces a British accent to pronounce certain words which I don't have.

Descript also uses voice synthesis to regenerate edited portions of conversations with a noticeable cut to smoothen the transition, which is pretty useful.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: