My favorite genre of hacker news comment is when someone lacks sufficient imagination to wonder why something that’s commonly used by many people is still in use
FWIW, there's no real need for imagination here. The comment says "mostly", and added a parenthetical comment that was simply meant to name the viola as a prominent remaining use.
In particular, trombones have almost entirely stopped using the tenor clef in jazz.
It's true that jazz charts are unlikely to use tenor clef. Nonetheless, it remains career limiting for a trombonist to be unable to read clefs.
Commercial players are likely to use the skill for transposing Bb treble lead sheets, or playing in a pit. Tenor clef shows up in modern musicals regularly.
Not to mention being shunned from quartet or choir opportunities that are the basis of networking in the industry.
Transposing is an important skill for all instruments. It's true that trombonists get some cases for free if they learn the tenor and alto clefs, but it's possible to learn it without knowing the C clefs.
And even trombonists have to learn how to handle sharps and flats in chromatic passages, so there's a lot more to transposing than using a different clef.
> Tenor clef shows up in modern musicals regularly.
And that isn't a nuanced opinion; a common one among rigid materialists. Its not the best piano for a stage, but I am sure it could fool your ears in a recording. Morpheus would think it was a piano too. "What is real? ..."
Because they slow down and often block access to websites, particularly for people that try to avoid being fingerprinted or otherwise tracked. Pretty evil behavior.
It is very challenging to distinguish individuals interested in privacy from bots acting maliciously or with reckless indifference. If you devise a way to do this more effectively than Cloudflare, you should start a business to sell this as a service.
My employer is a small business that has an e-commerce website that is attacked by fraudsters trying to validate stolen credit cards or obtain customer information hundreds of times per day. Operations like CloudFlare are the only way to foil these actors. Just trusting you is not a viable strategy.
I had this problem too for all my clients e-commerce websites, then solved it 3 years ago with very little code changes.
Happy to share it with you. Using small businesses for credit card testing is one of the most evil things on the Internet, so anything to stop it is worth it.
Your rate limits on adding and removing credit cards? Your input sanitization? Designing your system to not just disclose details around anything but that relevant to a logged in/authenticated user?
There are many practical ways to handle that sort of thing that isn't Cloudflare. It just requires thinking and a bit of dev time.
t. Been there, done that, cartels used an app to try to launder money through loyalty programs. Management was deadset against doing the one single thing that would make it impossible to do that at scale.
Ulterior motives abound everywhere but especially behind people claiming X is the only answer. Fingerprinting is far more intrusive than just only allowing one to add at max 2 cards a day per user.
> Your rate limits on adding and removing credit cards?
All those requests will appear from different ip's and different browsers, made by someone who can spend months on trying to defraud you. How do you differentiate this from valid customer who happens to try to buy something between 20 tries by bots?
> Your input sanitization?
All those fraud requests will give you valid credit cards which will work perfectly, but then defrauded people or banks will try to chargeback later.
> Designing your system to not just disclose details around anything but that relevant to a logged in/authenticated user?
They can register as normal buyers.
> It just requires thinking and a bit of dev time.
And they can spend months trying to outthink you, then will drain your service in 4 hours when you are asleep.
> Management was deadset against doing the one single thing that would make it impossible to do that at scale.
So, did you actually ever implemented and checked a good solution? Cloudflare isn't perfect, but not everyone has resources to implement their own solution that is better than cloudflare.
> Fingerprinting is far more intrusive than just only allowing one to add at max 2 cards a day per user.
The fraudsters will appear as completely new users each time, adding only one card and making one purchase.
> All those fraud requests will give you valid credit cards which will work perfectly, but then defrauded people or banks will try to chargeback later.
How are they getting pass 3D-S?
If they are able to get past it, then your liability drops off.
Yes it could be designed better, but that is a separate discussion.
It doesn’t matter that they can’t get past 3D-S, because the whole point of what they’re doing is checking what security features are enabled for a card, and whether their address and other validation data will pass. The fact that the scammers are testing so many cards that fail gets you banned from those payments providers, whether or not any payments go through. And this is ignoring all the attackers using bots for other purposes such as taking control of the website to obtain user or client data.
The technique is simple: don't publicly serve expensive (CPU/RAM-wise) pages. A simple blog like the linked article can be 100% cached and served to anyone without needing CloudFlare.
Performance optimization for website already is a business. It's just that product managers mostly don't care and optimize for other metrics (eyeball retention, SEO, etc).
Don't listen to these hecklers, you have every right to your privacy, and should demand it. Anonymity is paramount if people want to be able to talk without repercussions. Gaslighting, heckling and other forms of harassment are to convince you to self censor. Don't take the bait. Ignore them.
> Because they slow down and often block access to websites, particularly for people that try to avoid being fingerprinted or otherwise tracked. Pretty evil behavior.
Bots and scrapers and hackers also try and avoid being tracked, which is by far a bigger problem for them and most websites than the 15 of us using tons of antifingerprinting techniques. Evil? No, that's silly.
Hanlon's Razor is especially effective at getting Good people to put out their own eyes to keep them nice and soft targets for the malicious. I'll take being a harder to find likable by people I have no desire to be liked by to make myself a harder mark. The honest ones will understand. The malicious were never worth being close with, and I'm doing the world a service by getting the borderline enlightened.
Sufficiently advanced stupidity being indistinguishable from malice is also something to keep in mind.
Getting past cloudflare can be a problem if you are from a less reputable country or a VPN or if you use a less conventional browser.
There is also a larger problem of a private entity being the MITM for a large portion of internet traffic. But i don't think this is the point GP was trying to make.
It regularly blocks me too. I've begun search Google for: what does [url] say about [search query]
It'll make a Gemini summary of the page, and can be prompted for more details. It's really the only use for Gemini I've found reliable. I'd still rather directly view the output of the scraper bot, though.
If anyone knows a good scraping bot that lets you view the output directly, without running it through an LLM, please let me know.
Most CF sites I try to visit only give me an endless captcha loop, so I cannot visit them at all.
I suspect it's simply because my ISP regularly rotates IPs, and so I unfortunately have to share "reputation" with other users who can't behave online.
Are you asking if people use apps to get directions? I don’t have data to back this up, but I’d guess that nav integration is one of the most popular features of CarPlay and Android Auto.
I depend on it for road trips, navigating to unfamiliar destinations, or even just sharing ETAs with people
It makes perfect sense to me. Type in a prompt like “how can I make the cheese on my pizza stringier” and maybe it’ll tell you to use different cheeses, but maybe it’ll tell you to add glue.
If you don’t like the answer, don’t worry, they’re building more data centers in poor neighborhoods so you can keep submitting the prompt until you get a better one.
I trust that you can use your reading comprehension skills to understand that by referring to a famous example of LLMs producing garbage, I’m simply using it to illustrate the phenomenon at large, rather than to suggest that I am still struggling to find glue-free ways to make my pizza stringier.
If you still need help breaking down what I meant in the previous post, feel free to ask. Sentences can be tricky.
It was a red flag because artificial intelligence doesn’t exist, and anyone claiming to use it or work on it is either lying or delusional in thinking they could accomplish it.
Nowadays people just say “AI” when they mean “LLM,” which is an unrelated thing entirely, but people want people who use it.
reply