Your Static Site Build Shouldn't DDoS Your Own API
Liquid syntax error: Unknown tag 'endraw'
This is an AI-generated summary. ShortSingh links to the original source for the complete article.
Liquid syntax error: Unknown tag 'endraw'
This is an AI-generated summary. ShortSingh links to the original source for the complete article.
A Hacker News post highlights a growing trend of open-source projects banning contributions produced by AI. The linked site, osssaysno.com, appears to collect projects that have adopted such policies. The post gathered 18 points and 13 comments from the community. The article text provided contains no further details on specific projects, dates, or reasons behind the bans.
Hoki, a virtual Chinese lucky cat (招财猫), has released version 3.2.0 with a Windows app featuring a live 3D desktop cat that follows the mouse. An offline Android app and home-screen widget are also available, along with an installable PWA. Tapping the cat gives a luck boost, and lucky numbers trigger a bell and blessing alongside a daily fortune. The Windows app is single-instance, so relaunching hands focus to the running app, and all data stays on the user's device with no account, ads, or tracking. The project is MIT licensed, written mostly in JavaScript, and hosted for free on GitHub Pages.
An integration host running partner adapters in Docker Compose lost connectivity to a carrier reached over a VPN after a new project was deployed. Docker automatically assigned the new project a subnet, 172.25.0.0/16, that overlapped with the carrier's address range, which the host's default gateway routed through the tunnel. The new local bridge route redirected the carrier's traffic into an empty network, so bookings timed out until the project was stopped. The team fixed the issue by setting Docker's default address pools to a reserved block, recreating existing projects, and adding a pre-start check that compares bridge subnets with partner ranges.
Copying a firewall rule between cloud providers can unintentionally widen access, even when the port and intent appear identical. AWS security groups are stateful and allow-only, while Azure relies on priority-ordered rules with explicit denies and built-in defaults. Google Cloud applies an implied egress allow at the lowest priority, which can undermine a deny-everything policy if egress is not handled explicitly. Oracle security lists are stateless by default, so a rule copied from a stateful platform can break return traffic and tempt teams into overly broad fixes. The article warns that translating security group references into broad CIDR ranges and differing logging behaviours can silently expand exposure and hide evidence until an audit or incident.
Discussion (0)
Log in to join the discussion and vote.
Log in