Thursday, October 17, 2024

New top story on Hacker News: Ask HN: Why is there not more concern about the physical security of Cloudflare?

Ask HN: Why is there not more concern about the physical security of Cloudflare?
27 by dtquad | 23 comments on Hacker News.
Using Hetzner and Azure, we trust that our unencrypted in-memory data and business logic are housed in professional data centers with strong physical security measures. However, Cloudflare has built its Workers and serverless offerings on top of its Cache/CDN and anti-DDoS infrastructure, which operates out of questionable ISP and IXP colocation facilities in various jurisdictions with dubious standards. As an EU-based company, whenever we ask Cloudflare about the physical security of their edge locations, they consistently refer to encryption in transit and at rest—measures that do nothing to address threats like RAM interception or other physical security vulnerabilities in these questionable facilities. Moreover, when we raise these concerns, they attempt to upsell us on their Enterprise EU/FedRAMP offerings. Cloudflare has also deliberately restricted our ability to block non-Enterprise Workers, KV, and R2 from specific regions, leaving us with limited control over where our data is processed.

New top story on Hacker News: NotebookLM launches feature to customize and guide audio overviews

NotebookLM launches feature to customize and guide audio overviews
18 by alphabetting | 2 comments on Hacker News.


New top story on Hacker News: The science of "Zoom fatigue"

The science of "Zoom fatigue"
52 by PaulHoule | 64 comments on Hacker News.


New top story on Hacker News: Show HN: MusicAny – I Build an AI Music Generator with Music Genre Knowledge

Show HN: MusicAny – I Build an AI Music Generator with Music Genre Knowledge
9 by trytrycc | 3 comments on Hacker News.


Wednesday, October 9, 2024

New top story on Hacker News: Show HN: Donobu – Mac App for Web Automation and Testing

Show HN: Donobu – Mac App for Web Automation and Testing
23 by wewtyflakes | 2 comments on Hacker News.
Been working on a desktop app for Mac that lets you create web flows and rerun them ( https://www.donobu.com/ ). You can optionally use AI (BYOK: bring your own keys) to create flows for you and to do other interesting things, like making vision-based semantic assertions. Also, your data lives on your own filesystem, and we do not see any of it (further still, there is no phoning home at all). A nice benefit of this being a desktop app rather than a SAAS product, is that if you happen to be developing/iterating on a webpage locally, this has no problem hooking into it. What this intends to be a good fit for: - Testing web pages, especially locally. - Exploring random webpages with a stated objective. - Automating tedious flows. Rerunning a flow won't get caught up on using a single selector (many websites randomize element IDs, for instance), there is smart failover using a prioritized list of selectors. - Getting a quick draft of an end-to-end test in Javascript. What this is a bad fit for: - Mass web scraping (too slow). - Adversarial websites. What we are still working out: - Click-and-drag operations. - Websites that are primarily controlled from canvas. - Smoothing out UI/UX (we are two backend engineers trying our best, and are handedly outgunned by real frontend engineers). Fun things to try: - Asking it to assert that a webpage has a certain theme. - Asking it to run an accessibility report for a page (uses https://ift.tt/3CnP94J ). - Asking it to run a cookie report for a page. The tech: - Java 21 for the main business logic. - Javalin 6 for the web framework ( https://javalin.io/ ). - Playwright for controlling the browser ( https://ift.tt/w6UnerK ). - Axe for running accessibility reports ( https://ift.tt/3CnP94J ). Critical feedback is welcome. Thanks for trying it out! Cheers, -Justin and Vaz

New top story on Hacker News: DookieDemastered: The punk album re-exploded onto obscure/obsolete formats

DookieDemastered: The punk album re-exploded onto obscure/obsolete formats
52 by nickthegreek | 7 comments on Hacker News.