Hacker Newsnew | past | comments | ask | show | jobs | submit | frenchman99's commentslogin

You can always build a small search webservice that you open source and that your proprietary software calls out too, removing the need to open source everything.

Linux is GPL too, didn't hinder companies making trillions on top of it.


Linux is not a good example because of the syscall exemption. The licensing situation is not at all comparable as xapian’s original point of existence was embedding.


you mean, don't compile it and link it within my application, instead wrap it as a separate program then call it via rpc remotely or locally?


Yes, exactly that.


Surprised too, if that is the fix. Wouldnt a whitelist be better than a blacklist?


I'm even more convinced that me being a Fastmail customer is a good thing. Fastmail has been rock solid for years.

Their email, calendar and contacts solutions work well with iOS and android (using the DAVx app).

WebApps work flawlessly on Firefox. They have all sorts of customisation for spam filtering, catch all email addresses, etc.

They don't do all the things (vpn, passwords, drive, what have you). But what they do, they do very well.


Absolutely, very happy Fastmail customer here! My only qualm is that their apps could be better at multi account (switching is too much of a hassle), but that's the only problem I ever had, and I work around it by using different mail/calendar clients.

If you just have a single account with them though, their app is quite excellent and has everything (mail, calendar, notes), no need to get multiple apps and stuff like DAVx unless you want to.


Fastmail Employees Form a Union (6 months ago) https://news.ycombinator.com/item?id=38656727

Fastmail lays off 60% of union bargaining committee in surprise restructure (9 days ago) https://news.ycombinator.com/item?id=40778214

It's a good product, no longer so sure about the company.


This reddit comment makes me thinks it reasonable. Who knows what's true though.

https://www.reddit.com/r/fastmail/comments/1do3ede/comment/l...


Ugh...what? That's bad.


Uh, that doesn't look nice, gonna keep an eye on that. This kind of stuff is usually a warning sign for approaching enshittification.

Luckily I have a few alternatives in mind (like mailbox.org), albeit without neat apps.


I love the service but hate their android app. It fails to load any content when offline. Absolutely maddening when you need to look up anything, like gig tickets, in a low reception area.


this, I like Fastmail, but their app being online-only is a shame


How do you deal with spam in Fastmail?

I switched from GMail to Fastmail about a year ago, but ever since my Inbox is just filled with lots of spam. I tried writing email filters, and have about 50 now, but it is just not cutting it.

And also those promotional mails that I don't want to mark as "spam" but still shouldn't end up in my Inbox ... they drive me nuts.

Since I started using Fastmail, my main means of communication is shifting away from e-mail, which is sad.


My experience on fastmail doesn't align with yours. While spam has slightly increased over the years, I attribute that to just using my email more often. It's very rare that I get spam in my actual inbox. In fact, my experience is that the spam filter is a bit too strong and I actually have to check the spam folder now and then.

For the promotional emails, there are some general rules you can set up to catch a lot of it, such as https://pietrorea.com/2021/10/22/filter-emails-by-the-list-u.... However, the best way to manage them is to actually just unsubscribe to them as you receive them. If unsubscribe is ignored, then blacklist the sender.

For general spam, there's a setting under "privacy and security" to make the filtering more or less aggressive. My setting is on "standard" and I haven't had any problems, but you could try adjusting that.


OK, I will try that.

But I still think migrating away from GMail should be less painful.


Here's one little-known tip I learned from Fastmail support some time ago: it's only possible to train the spam filter using their Web UI. If you're using a 3rd-party client, simply moving messages to your spam folder will have no effect on your filter quality. So to truly flag a message as spam, you must switch to your browser, login to FM, and handle it from there.


But I don't want to mark everything that should not grab my immediate attention as spam.

Some stuff like promotions or social messages deserve their own folder. Google did this right.


Google does it right because they don't respect your privacy.

They have millions of users and they use aggregated data from all of them to manage the automatic categories.


Why dont you use their masked/alternate addresses. That was one of the primary selling points for me. Any questionable site/service gets its own address and is easily removed or filtered if spam starts showing up.


I have those too. But the problem is I migrated away from GMail, where everything worked even with 1 email address, so now I'm stuck with that email address being used by all the people and companies that want to send me email.

(By the way, in GMail you can move emails to "promotional" and "social" folders, and then GMail automatically does that for you for future emails; this is quite handy, but after migrating to Fastmail this is leaving me with quite a mess in my Inbox, since Fastmail doesn't have this option).


You're not stuck; slowly change addresses with the different companies, people, etc. I did it over the course of a few years without hassle. If you spend $10/year for your own domain, then you can use a catchall, and if you ever decide to leave Fast ail for another provider, you don't have to change all the addreses again.


The fact that it requires slowly changing over years is a sign of getting stuck no? We can theoretically slowly migrate anything. But when effort > X, we consider it being stuck.


>in GMail you can move emails to "promotional" and "social" folders, and then GMail automatically does that for you for future emails

It's not quite as elegant, but you can create a rule from an existing email in the mail options. It will try to guess at the best set of filters to match that type of email (and obviously you can refine that manually if needed), so you can send those types of mails to a Marketing folder.


That only works with something you actually signed up for. When your email gets leaked in a database and sold a thousand times you just start getting spam for all types of things.


My solution was to start over with a new "root" email address and then keep it private. Having unique email addresses for each service (which then forwards to the "root" email address) is a bit of a pain but it does work for spam and, depending on what else you share with the service, privacy as well.

For better or worse if you want to reliably control who you receive email from you need to control who knows your email addresses and have the ability to disable/filter them.


the same is true for SMS/call spam - my phone number is a single digit off from my wife's, she gets 6-10 total spam messages and calls a day, i get one a year. It's because she uses her cellphone number to sign up for fuel rewards and stuff, and they immediately sell it. I use my voip number to sign up for anything, and i have notifications shut off for SMS - and a phone tree for calls. Spam calls never get through a phone tree/IVR.


spam as in unsolicited? I get 0 in any of my inboxes. I get lots of stuff i don't care about from spammy businesses (E Y E GL A S S // S A L E 80% O FF) that i've used before. But there's a way around that as well, it's more expensive. Buy a domain name. Set up DNS. Let fastmail host the actual mail service. Set up a catchall account *@domain.tld. Give per-site/whatever emails whenever you give an email.

If the email gets sold, just tell the fastmail UI that everything sent to that address is spam. It hasn't failed yet, and i've been using fastmail since it was $5/year. It's $15/yr now and they recently doubled my storage from 500mb to 1000mb!


I'm using the Hey approach in Fastmail, so my main folders are Inbox and Screener, with a filter like this:

Matches NOT fromin:contacts -> Move to Screener

I'll check the Screener less frequently, and whenever I feel like it I'll take a message from it and use Actions -> Add rule from message.. and send messages from that sender to a Newsletter folder.

I still get lots of crap in the Screener, but then again I don't really use e-mail to communicate with humans, so in a sense all e-mail is automated nonsense from systems where I have some kind of user account.


In the spam protection settings, you can choose a protection level of off, standard, aggressive or custom. I choose custom.

Then, I send everything with a score of 5 or more to spam.

I don't delete any spam.

And I mark it all as read.

That cuts down on spam drastically in my inbox while still retaining it all in the spam folder should any legit email end up there.


Promotional mails you've subscribed to aren't spam, just add a rule and label them "Ads" and click the "Archive (skip inbox)"

That's what I've been doing and my inbox is pretty much empty from useless stuff.


I'll second this, I've had absolutely zero issues with Fastmail over many years. It always just works, and is super fast.


I agree. I also like their explanation on why they don't offer PGP.

https://www.fastmail.com/blog/why-we-dont-offer-pgp/


(another happy paying customer of Fastmail here)

I am pleasantly surprised that Fastmail has no AI cruft in it especially that Fastmail is founded by one of the godfathers of modern AI, Jeremy Howard.


> android (using the DAVx app)

It borderlines on the insulting that Google refuses to support CardDAV and CalDAV OOTB.


That's what happens when you give your project a common name as a name.


I agree with you. And at the same time, I often feel like it is more difficult being heard when being nuanced. It seems like what gets discussed most are strong opinions.


Yep. It’s easier for a simple message to be carried by the wind.

But the process of growing up is one of increasing capacity for discernment. Ie, you learn more subtlety discerning when thing A or B is a better idea in any given moment. Will a hard or soft approach work better? Use my old tools or learn this new framework? Make a long term or short term decision here?

It’s hard to communicate because this kind of learning takes a lifetime to accumulate.


The hardest part is when you're being nuanced and people misconstrue it as you being indecisive xD


could you give an example? my approach is usually something like "I've come up with three options here, I think the first two are equally good, I'm mentioning the third for completeness, but I don't think we should do it because...."


Time is limited, why waste time talking about a third when you've already decided against it?


Who’s to say he’s necessarily right? The third approach (or pieces from it) could actually be the right one, even if he doesn’t know it.


You have a point, but that's also where you come off as indecisive. Since the question was explicitly about that that, presenting 3 options, one of which you have reasons against, when we're all busy and meeting time is constrained, is, in the abstract, a waste of everybody's time. If later on, someone comes up with objections; options A won't work because problem X, option B has issues Y and Z, then sure, bring up option C, which addresses X and Y but has other issues, for further debate, but unless that happens, that's time wasted. imo.

This does hinge on you knowing what you're talking about, and rejecting option C for unbiased reasonable logical reasons you're sure about.


Maybe we need to work on Sound bites

- The only thing every project has in common is that they are all different projects.

- Success in one project doesn't guarantee success in another.


My approach is to have strong opinions (weakly held), and ask if people have objections to the tradeoffs. That tends to keep the focus on specific reasons to choose a given path rather than you and someone else just having different preferences. Doesn't always work, but it's a lot easier than fighting over whether option A or option B is just universally better.


I've definitely seen that happen, and in my opinion its just a sign of bad culture or bad leadership. That's not to say its toxic or widespread, maybe its just a poorly run meeting, but nuance should be a focus of any important discussion rather than the voice that goes ignored.


Depends on your audience. Maybe you need to dumb it down for some people sometimes. That's life. I just try to stay in situations where the audience appreciates nuance if I can


Yeah, so it presents a real conundrum. If you read the article, then he still presents arguments in favor of microservices.

> I often feel like it is more difficult being heard when being nuanced. It seems like what gets discussed most are strong opinions.

I really resent this phenomenon. It traps us in poor local maxima because our systems optimize for engagement over actual development of complex, nuanced opinions. It feels like the dopamine-addled end up indirectly pulling the levers on how we talk even if they're less interested in the actual craft.


Open AI not being open means it will be used in ways that will benefit shareholders, not humanity as they initially planned it, unless it so happens that humanity's goals are aligned with shareholders', but I've rarely seen this happen with the big four.


You say yourself that the time data could be tampered. It's trivial to change commit dates in git. So this analysis means nothing by itself, unfortunately.


I wouldn't say that. This guy seems to have tried hard to appear Chinese (and possibly tampered the time stamps this way) – but based on that analysis, it seems plausible they did a bad job and were actually based out of Eastern Europe.


Not at all. For instance, I don't know what the next steps are, but I run SSH servers behind Wireguard, exactly to prevent them being accessible in the case of such events. Wireguard is simple to setup, even if I lack the expertise to understand exactly how to go forward.


I was thinking about reinstalling, because I'm on Manjaro Linux, which has the version in question.

But it's unclear if earlier versions are also vulnerable.

And if it did nasty things to your machine, how do you make sure that the backups you have do not include ways for the backdoor to reinstate itself?


Sure, the backdoor could have e.g. injected an libav exploit into a video file to re-backdoor my system when I watch it... that's too paranoid for me.

I don't backup the whole system, just a specific list of things in /home.


Totally agree. With things like Dependabot encouraged by GitHub, people now get automated pull requests for dependency updates, increasing the speed of propagation of such vulnerabilities.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: