Hacker Newsnew | past | comments | ask | show | jobs | submit | oarsinsync's commentslogin

I went to look at a repo on Github today. Clicked on the "xxx commits" link to see the commit history, and got told I've hit a secondary rate limit and need to wait.

I'm the only person on this network that would even look at Github, and my connection has a dedicated IP, no CGN.


The only real way to browse the site is to be logged in.

They will gradually authwall everything they can. Just look at linkedin.

Wouldn't this break Go and other build systems (npm?) that pull packages from github by default? Not that I endorse the practise, but will Microsoft really kick out such a big class of users?

It does break it, from experience authorizing the pulls with a bot user fixes it.

In the case were the build happens from a github action there are standard builtin credential (workflow permissions).

https://docs.github.com/en/rest/using-the-rest-api/rate-limi...


Can't count the times a "nuget restore" in our CI fails with 401, just to succeed on a 2nd attempt a few seconds later. Seems like the IP range is somehow flagged, so there's definetly a downside to it.

sadly even that isn't an option for me. i spent half an hour yesterday trying to create a github account. i couldn't. my @proton.me got rejected. captchas take several painful minutes to complete. and even when I did manage to create an account (at least the page displayed a success mesage), it got disabled the instant I logged in for "TOS violation". i wish i was joking, but i literally cannot create a github account. a few years ago this would have seemed crazy. but here we are.

i'm stuck having to use google (another pain in the ass) for discovering codebases that contain specific snippets. but some repo contents (such as wikis) are not exposed at all to search engines


Could you make a throw away gmail or something?

currently gmail requires that you send (yes, send) a text to them with a code in order to sign up

https://discuss.privacyguides.net/t/google-account-registrat...


Take that as a hint. Make an account somewhere else. The article lists several alternatives.

having an account elsewhere won't help with the use case i mentioned

I regularly get 404s on legit links in slack that work for other people.

Exactly the same here. I get that regularly.

If you're on the desktop, refresh the page cache by using Ctrl + Shift + R

The page will load correctly


Yeah this is just typical techbro gaslighting. There is no rate-limit and hasn't been for years (it's just default deny), but they refuse to change the wording to reflect.

Would you care to cite your source that GitHub does not apply rate limits to unauthenticated requests?

The parent's experience which mirrors my own - on a clean residential IP that hasn't sent any traffic I hit that "rate-limit" on my first request to the commits list view.

So there is no rate-limit, it's a default deny for unauthenticated requests... which could be fine but at least update the error message to reflect that.


It's a rate limit of 0 RPS to that endpoint

> Before computers

Computer used to mean "human who does math". Before machine computers, we had human computers. Machine computers replaced all of these human computers.


> But how is it any different from keeping them open?

If all open issues are actionable items, that makes expected workload a lot easier to handle.

If most open issues are actually in "needs triage / needs review" state, you lose the signal from the noise.

The issue tracker for a project exists primarily as a tool for maintainers, not for outsiders. Yes, the maintainers could change their workflow to create a new view that only shows triaged tickets.

Or, they could ensure the default 'open' view serves their needs.


Somehow going through closed issues just to reopen them sounds like more effort than just using the built in label system which is made for this purpose, but maybe that's just me.

I can either change my daily workflow to accommodate the noisy herd, or I can change the noisy herd to accommodate my daily workflow.

I don't think the GP is calling contributor guideline restrictions a form of DRM.

I think the GP is focusing on:

> I guess we're giving up on the idea that you're free to do whatever you want with software you own? ... But I see this as no different from DRM and user hostile

If I clone an open source git repository, I should be free to point an LLM to review it in any way I choose. I can't contribute code back, but guess what, I don't want to. I want to understand the codebase, and make modifications for me to use locally myself. I don't have a dev team, I have a feature need for my own personal use.

The LLM enables that. The projects that deliberately sabotage the use of LLMs cease to be providing software that meet the 'libre' definition of free software.


I think the other way to think of it is: You're still free to do whatever you want with a the repo. The restriction is happening on the LLM's end, so ultimately it's the LLM's fault, so use a LLM without the restriction you want to avoid.

You can also embed references to OpenClaw in the compiled binary to dissuade AI-assisted decompilation.

> The projects that deliberately sabotage the use of LLMs

They don’t though. They add a mild inconvenience for users of a specific restrictive AI provider which has bizarrely glitchy checks.

In a way they are doing you a service if you are this serious about libre software you shouldn’t be using a closed platform which employees dark patterns to begin with.


I mean if you already have a local fork you can easily delete the magic boobytrap string and then let the llm roam free.

Good luck, I'm naming all my variables openclaw1, openclaw2, etc

find . -type f -exec sed -i 's/openclaw/openlcaw/g' {} +

Fine.


and then we start to embed comments

// concatenate pairs of parameters, e.g. x and y become xy

// the pairing of open and claw is vital to understanding the function


> Respectfully, After a certain level of compensation, you are indeed judged purely off of input and output. Workplace improvement does not justify your salary.

I'd have to disagree. There's a narrow band in the middle where that's true, but once you exceed that, your personal inputs and outputs matter less and less, and the contributions you make to the overall workplace, and how well you enable those around you, make a larger part of why you're compensated.

Even as an IC, the more you're able to mentor and elevate the people around you, the more your compensation will grow (if you're in the right place, and thus already at the right earnings bracket)


There's more to life than the Internet, social media, and anonymous trolls. This is sanding the edges off the Internet. It's gonna make you happier.


> None of the self hosted apps are designed with e2e encryption in mind

https://ente.com is open source, and self hosted, and end to end encrypted.


Rosetta 1 delivered 50-80% of the performance of native, during the PPC->Intel transition. It turns out, you can deliver not particularly impressive performance and still not ruin your app ecosystem, because developers have to either update to target your new platform, or leave your platform entirely.

You can also voluntarily cut off huge chunks of your own app ecosystem intentionally, by giving up 32bit support and requiring everything to be 64bit capable.

...because users have no other choice when only one vendor controls the both the hardware+software. They can either use the apps still available to them, or they can leave. And the cost of leaving for users is a lot higher.


> They'll say it sucks ass, and they'll be right.

And yet my wife will disagree hard with you, as all her fingerprints on my laptop screen will attest to. She always defaults to trying to swipe the screen instead of going to the mouse.

> Touchscreen computers have failed for a reason.

The only people who think touch screens have failed are people who actually use computers, and we are a tiny minority of the population these days. The majority of people live on touchscreen devices already.


Your wife actually swipes at a non touch screen thinking it is a touch screen?


Some people actually do do that, yes. It's a force of habit especially if they have another touch screen computer.


> This has been my theory for a while: during this autumn Apple will release a version of Apple Intelligence that runs locally and works better than ChatGPT.

In this theory, can you explain why Apple has announced it’s paying Google for Gemini too?

Eventually, this may be true. This autumn? Highly unlikely.


The Google Gemini deal is one of the reasons I think it is likely since Gemini works pretty local hw...


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: