Hacker Newsnew | past | comments | ask | show | jobs | submit | ejlxsh's commentslogin

Doesn’t work on Safari (iOS), scroll is broken so only see the top 6 or so jobs


I think that's because there are only six jobs or so.


Not bad seeing as he solved this while working as an intern at SpaceX too!


I cannot wait for HackerOne or similar bug bounty sites to have a go with this

https://developer.tesla.com/docs/fleet-api#door_unlock

Oh my god, what a cool sounding endpoint https://developer.tesla.com/docs/fleet-api#set_bioweapon_mod...

Edit: This is coming up to EOL, Tesla has an SDK you should use now


I hate to tell you this but there is a "login" and "password_reset" API on Google.com!


How dare they! I only log in via fax request/response. Although the cookie values have gotten longer and longer -- a pain in the butt to type from the fax reply into my web browser. Any ideas?


These or equivalent APIs have been available and unofficially documented and used by third parties for many, many years. And Tesla has been doing Pwn2Own and bug bounties for a long time.



Automotive software is a regulated space, there's no way the idea of these APIs is developers tinkering with their Tesla for fun (it allows remote execution!) but rather large businesses integrating their apps with Tesla, like Microsoft or OpenAI or something.


Someone could start a business to enable such tinkering. However, that doesn’t seem like a profitable business to be in at all. Potential downsides seem huge, and potential upside seems tiny.


Or fleet owners. The docs have a lot of stuff useful for fleets.


> I've being developing my own micro-cloud for the last ten years - There I've wrote my own email client, password manager, finance book, OTP, movies, music, notes, calendar, backup... and a lot of other micro apps

> My problem with org-mode, Obsidian, etc is that they are attention black holes, you focus all of your time installing plugins and configuring your workspace that by the time you're done with that you don't really feel like doing the real work

Seems so contradictory ha!


Not really, in the sense that the idea of a lot of these apps are "customization and plugins", and I wanted something that had it all, required 0 config and was totally opinionated. I can set up a new environment just by doing docker-compose up, that simplicity was always my goal 0.

Yes, it took time to develop it, but I would be working on another shiny thing anyway as I like to work on side projects, so I see that as a net gain.


Chances are games will be added to the gamepass, meaning we get these for essentially free.


> meaning we get these for essentially free.

There is no such thing as "free". We will pay for it later.


I'm paying now. Like $15/mo or so. And I download $300/mo worth of titles. So what's the concern?


That’s called a bait-and-switch. Once physical games are no longer a thing, I would expect to see the GamePass library shrink, the subscription get more expensive, or some other unanticipated switch that drives up the cost. Companies don’t operate at a loss[0] for the benefit of their customers. They’re conditioning players to later extract more value later.

0 - https://www.thegamer.com/microsoft-xbox-game-pass-negatively...


Legislation can prevent these things from happening.

That said, your scenario is probably more likely without a massive cultural shift or the introduction of Ranked choice voting.


The same thing that happened with Netflix. Everybody loved it when it started, now things come in and out of the catalog, quality has gone down, prices have gone up ads have been added, and you need to subscribe to 10 other services as well.

Why are people acting like gamepass is a good thing


Because it is for now. If they mess with it then it'll not be a good deal and folks will leave it.


The first part of all the shit that's bad, is to have a phase where it's good first.

"It's good for now" is just the typical path to it becoming shit.


This is as equally true of "it's shit now and will continue to be". Capitalism demands profits and enshitification ensues. Might as well enjoy what you can while you can.


My guess is that they'll introduce tiers where your current price gets much less access. Presumably this will be done when customers have no where else to go for the titles that they want. Customers will get angry, many tweets will be sent, many articles will be written, maybe MSFT will even issue a statement saying they will pause the plan until they can "better communicate the value to our customers". Then, they will jam the plan thru anyways and their customers will deal with it. This movie is a remake.


I'm more concerned that I won't have access to the games because I don't play on Xbox or Windows.


So you campaigned against Sony buying Bungie too, right?


I thought it was terrible news. But Bungie is so much smaller than ActiBlizz - they have one active franchise in one genre and maybe another one starting soon in roughly the same genre. Meanwhile ActiBlizz has something like a dozen popular franchises.

It's like the difference between Comcast buying a small, local ISP vs. Comcast buying Verizon in terms of scale and number of people impacted.


I've been campaigning against this consolidation since EA bought Westwood in '98.


To be frank, Sony seem to have bought Bungie more for its live service expertise than its IP. Not fond of this direction but it's hard to argue that Sony bought them to starve Microsoft of game releases - Bungie has like one franchise that's so-so in popularity.


I do agree here, but also I think if a company is acquiring to give an even better service to their own users it's a good thing (as one of those users). I'm sure I read they've agreed to keep them cross-platform so it won't impact Playstation users (maybe a delay with new games being released on Playstation, like how FF16 isn't on Xbox yet) - but what I am really hoping for is the games simply become part of the Xbox Ultimate subscription.


For me personally, neither Activision nor Blizzard has released a game I wanted to play since Legacy of the Void (2015). This will not have any impact on how I play games for at least the next 3 years.

I have long term fears that month-to-month game subscriptions will eat the world and in 15 years people pay for games in the same way they currently pay for streaming videos ($10-$20/mo to many content providers).


You can play via cloud streaming on other devices.


That's just playing on Xbox/Windows with extra steps.


What are you doing to try hit that 500k target? Running a SaaS, consulting, etc?


I am giving away my code as FOSS, so I'm doing the following, in this order:

1. Charging for bug reports or feature requests.

2. Support. (And I have great examples of public support as marketing.)

3. Consulting. (This would be exclusively to help companies trying to use my software, but unlike support, it would be about writing the stuff that uses my software and ensuring the client understands it so that I could do a handoff. The result would be carefully commented and documented code, probably just short of literate programming [1].)

4. SaaS. (If I did this, the server might not be FOSS, but the client would be, and it would use encryption.)

[1]: https://en.wikipedia.org/wiki/Literate_programming


Can you elaborate on charging for bug reports or feature requests?

Do you charge per report / request? Or is it a subscription (storygraph has this model)?

It seems like a great idea to lessen the workload and focus on people who actually might turn into customers.


I will do either; it depends on what will work.

And that will only be for companies. For individuals and their personal projects, I'll respond when I have time, for free, for bug reports. (Not feature requests, obviously.) This is to build a clientele of people that might bring my software into their work. And it will reduce bugs.


Sorry to pry, but "will"? Does that mean the business model is yet to be validated? Not pushing back just curious - if it's worked out for you I'd be interested in hearing more, because it sounds like a business model I could adopt for a FOSS project I'm working on.


Correct. Sorry.

That's why I have four ways to try to make money.


Best of luck!


Can you say what the software is? I do like the model you have laid out.


It depends on what companies have interest in. Below is a list of the ideas I have.

* A build system that is also a package manager like Nix, but usable by mere mortals. Also, it will have an easy way to restrict what builds can do. This one is almost done (well, usable for early adopters, not done); my HN annoucement should be in about three months.

* A VCS that, like Fossil, is self-contained with a bug tracker and everything. It will be able to handle binary assets and HUGE files. It will also be easy-to-use. (I'm going to be testing it on my non-technical wife without telling her how. Once she can use it naturally, I'll probably have a good model.)


I’m definitely interested in the build system / package manager. I have (idly, in a daydreaming sort of way) considered building something like it myself.

I tried to get into Nix recently, but found it difficult to accommodate my workflows within its uncompromising nature. My goal was to set up a reproducible development environment, where anyone at my company could easily get set up to work on our code with a single (or concise set of) action(s). I also tried to use home-manager, which I have heard might have been a mistake.

Anyway, Nix is really only designed to manage the entire world. I wasn’t able to use Nix to build a development environment where other developers and I could work inside of it using our existing tools and workflows, including other package managers that want to mutate things — it seemed that Nix was all-or-nothing. This was too disruptive and a large barrier to adoption for me.

I would love a tool designed for reproducible builds and development environments that can compromise, and do as much as possible immutably while allowing for local mutation on top. That can be a package manager, but also make it easy to use existing package managers too — with the understanding that these other package managers are typically also able to reliably reproduce a build, within their own mutable state. It’s OK if this potentially needs to mutate “the system” in the process to try to reach a goal state (e.g. installing system-wide package managers, xcode, etc.)

Nix really did not seem to be designed to allow me to use other package managers inside it like npm or cargo. It has some support for directly vending packages from those via Nix itself, but that’s not what I want right now; it’s too disruptive to my workflow. We already have all of the build reproduceability that we need via those package managers and via a container based build process. Still, a fair number of development and operational tools are required to develop the software, and I would really have liked a one-click way to set up a development environment that doesn’t require a container (which is not native on Windows or MacOS).

(I admit that it is possible that this idea fundamentally could not work for technical reasons, but it seems plausible that it could.)

Another challenge that I had was with the complexity of the Nix config and file format. It’s basically a programming language, and there isn’t always one right way to do something. That made it considerably more complicated to solve tasks that would be just a single line command if I was using e.g. Homebrew to solve the same goal (brew install xyz).

From a user experience perspective, I would like a tool that provides a simple command line porcelain for mutating the state of the environment, while tracking it immutably under the scenes, so that it’s reproducible. For example, “cmd install foo” should add the “foo” package to my environment (and rebuild it). So at the end I have a declarative description of my environment contents, but I can build that configuration using a sequence of familiar install commands.

I admire what Nix is trying to do, and see a lot of merit to the approach for defining an entire machine’s state immutably. For managing and defining the state of servers, it seems like a great idea. However, the cost to adopt it seems high, and the value would probably be marginal in our case, since we don’t need to manage servers to deploy software (instead deploying only containers); and since existing package managers provide a way to build those containers reproducibly. But containers aren't ideal for defining the tooling used by an interactive local development environment.


Before your comment, my design could not do that. After your comment, I'll make sure it will.

As a build system, it can incorporate other build systems and run them natively. It only makes sense that it should do that for package managers as a package manager. So as long as you understand that most other build systems give you opaque binaries, I can make that happen.

But on the other hand, I think I can make your mutable environment idea work and cross-platform to. My design will require that the environments all be on the same disk because it will use hard links and a SQLite database, but those work on any platform.

But anyway, I also think I could set up mutable environments such that, as long as you only modify it through my tool, it could record those modifications and generate a file to recreate that environment elsewhere. That sounds like Nix, but again, my tool will use other build systems and package managers.

Is that what you want? Or did I read it wrong?


You description reminded me of Salt Stack [0] on Qubes OS. I'm no expert and may be mistaken that it's relevant, but did you consider it?

[0] https://www.qubes-os.org/doc/salt/


Is the vcs offline first?


I'm not sure what you mean by "offline first." Can you elaborate?

(I've heard people use that term in multiple ways.)


With Fossil I pull in the full issue tracker and forum and have it stored locally, if I'm offline I can then make my changes, comments etc. and when I'm online it all syncs.


Yes, it will be offline like that.


Feel free to link your product. Self promoting is allowed


Thanks! But it's not ready yet. My HN announcement will be in about three months.


I don't get why anyone would pay for bug reports. Users reporting bugs is doing the developers a favor, they are doing QA for free.


Not individuals, but companies.

And the reason why is because companies aren't doing QA; they have things that need to get done.


iPhones often turn off around -20c with a warning about temperature, it happens to me every time I travel to Lapland in the Winter.


I can't imagine writing something like this while also serving in the Ukrainian Army as an active soldier. The 'Irks and Quirks' of Ruby would seem much less important to me in that position!


I am surprised just how much Cardano is responsible for the funding of GHC and what would happen if that stopped - 4 of those supporters are directly related to Cardano and a fifth is somewhere related. I don't know what GitHubs relation is with Haskell and wonder if that's some hosting/CI runners or something?


GHC uses self hosted gitlab for its source hosting and review. The gitlab-runners are largely provided by the mentioned support in the announcement, including anonymous and in-kind contributions. The ZW3RK stake pool provides 7 linux, 2 windows, and 3 mac builders.

I only see two directly related supporters? IOG and the stake pool?


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: