Hacker News

Top stories

Live mirror
30 storiesupdated just nowView source snapshot
  1. Human brain is two separate organs, Stanford Medicine-led research finds(stanford.edu ↗)
    24comments
  2. San Francisco Onion Futures Company(onionfutures.com ↗)
    52comments
  3. If math is more than proof, we need to better celebrate the rest of it(terrytao.wordpress.com ↗)
    7comments
  4. Android 17 is the first since 3.x to add new APIs without releasing to the AOSP(grapheneos.social ↗)
    368comments
  5. Typesafe-computer-use drives a Mac toward a goal for 1/50th of a cent per step(github.com/awlevin ↗)
    22comments
  6. GPT-6 Astra Solves a WWI German Radio Cipher(prinzai.com ↗)
    discuss
  7. SDCC – Small Device C Compiler(sourceforge.net ↗)
    15comments
  8. Science Is Open Software(jepedersen.dk ↗)
    25comments
  9. Cloudflare Quick Tunnels(cloudflare.com ↗)
    275comments
  10. Why building a Rust LSP is hard(rust-glancer.github.io ↗)
    24comments
  11. Saving another 100TB of RAM(cloudflare.com ↗)
    64comments
  12. NASA-IBM Lunar Foundation open-Source Geospatial AI Model(usra.edu ↗)
    1comments
  13. How to Write with an LLM(sockpuppet.org ↗)
    315comments
  14. How OpenAI Used Its Own LLMs to Design Its Jalapeño Chip(ieee.org ↗)
    77comments
  15. Ctenophores: Wonders of Biology(quantamagazine.org ↗)
    4comments
  16. Goroutine Leak Profiles(go.dev ↗)
    2comments
  17. You can run Git on object storage if you re-make packfiles(tigrisdata.com ↗)
    6comments
  18. The first new cat species discovered in 100 years(nationalgeographic.com ↗)
    90comments
  19. Show HN: Cactus Needle 3: 8-29MB automation models can match DeepSeek V4 Flash(cactuscompute.com ↗)
    87comments
  20. OpenJev(openjev.com ↗)
    257comments
  21. Photon-Emission-Guided Laser Fault Injection Enables RP2350 Secure Debug(ledger.com ↗)
    66comments
  22. Stepfun Step 5 Preview (LLM): On AA Pareto frontier(artificialanalysis.ai ↗)
    1comments
  23. Cache-to-Cache: Direct Semantic Communication Between LLMs (2025)(arxiv.org ↗)
    12comments
  24. The Farnese letter(simonklee.dk ↗)
    6comments
  25. Minimal Phone 2(minimalcompany.com ↗)
    211comments
  26. Xcode 27.1 Beta Release Notes(developer.apple.com ↗)
    95comments
  27. Cyclomatic Complexity in C#(ndepend.com ↗)
    18comments
  28. Inside ZCode: Silently uploading your Git history to the cloud(ferstar.org ↗)
    97comments
  29. Warez: The Infrastructure and Aesthetics of Piracy (2021)(archive.org ↗)
    49comments
  30. Google's Gemini AI hacked three companies in security test(bbc.co.uk ↗)
    discuss

Utterances: Lightweight comments widget built on GitHub issues

80 pointsby 7y agoutteranc.es
56 comments
7y agoHN ↗

This is awesome! Great work. Any support for nested replies coming?

7y agoHN ↗

Not likely, since it sits on top of GitHub issues.

7y agoHN ↗

That doesn't preclude them from building nested replies. For example, they could add a line like `Reply-To: <comment-url>` to the comment to establish its parent.

7y agoHN ↗

Yeah, but that feels like a square peg/round whole.

What if someone comments in the issues directly, on GitHub?

7y agoHN ↗

Might be possible to leverage comments on issues for that use case.

7y agoHN ↗

I have been using utterances for a couple months and absolutely love it. It simplified my stack so much as I could finally shutdown my crappy REST comment api

7y agoHN ↗

I looked into using Utterances a while back, but decided against it.

From my blog post [0]: This product requires an external server to be up and online at all times. And while they do promise to be always free without ads, they don't promise to be always available. And while they are open-source and I could always decide to host my own Utterances server/bot, I'd prefer to host nothing at all. This isn't a super deal breaker, because in the end, all content is stored in GitHub Issues.

[0] https://pknopf.com/post/2018-10-13-comments-for-static-sites...

7y agoHN ↗

you could have pushed solution a bit more to create the github issue when creating blog posts - like use a github token to generate issue when the issue does not exist for blog posts.. utterances feature that I liked is the bot that creates the issue for you automatically and also scans the github repo for comments based on title..

7y agoHN ↗

you could have pushed solution a bit more to create the github issue when creating blog posts

I guess, if my solution were a "product", as opposed to a one-off.

7y agoHN ↗

So this is a comments app that uses Github's issue tracker service as a data store. Is this a round hole / square peg mismatch of problem and solution?

I'm asking honestly what other people's opinions of this are because whilst it looks good it: 1) looks like the kinda of hacky solution I try to avoid building when trying to fit together incompatible data objects and data storage. 2) uses Github's systems for purposes other than they were intended, which seems slightly unethical or at least impolite to me.

7y agoHN ↗

uses Github's systems for purposes other than they were intended, which seems slightly unethical or at least impolite to me.

I wonder where the line is drawn here, and whether it really is unethical to use GitHub to store comments. Is something of this sorts explicitly or implicitly mentioned in their ToS?

Along the same lines, will hosting files on directly on Github and using that as our primary resource (raw.githubusercontent.com...) be considered unethical or impolite?

7y agoHN ↗

I hadn't thought to look at GitHub's ToS as that would have been too obvious! I did just have a quick look now. Nothing too specific in there, but then these things often are general so that discretion can be used later. A couple of things that might catch this out:

- "Abuse or excessively frequent requests to GitHub via the API may result in the temporary or permanent suspension of your Account's access to the API. GitHub, in our sole discretion, will determine abuse or excessive usage of the API."

Utterances uses the GitHub API and its demo page makes 4 requests to api.github.com. The API docs state a limit of 5000 requests per hour. That's quite a lot and within what a low volume blog would get, which I think is the main use case for this app. But if your blog gets really popular then you might ring alarm bells at Github.

- "Responsibility for User-Generated Content" As this is all user generated content you, as GitHub account owner, are responsible for it not breaking GitHub's content guidelines and you had GitHub permission to do with it as they see fit. GitHub are the ultimate decision makers about your user's content, not you or Utterances.

https://help.github.com/en/articles/github-terms-of-service

7y agoHN ↗

I can't imagine GitHub are going to be very thrilled with this. Maybe as a one off you'd fly under the radar but making it more widely available seems kinda silly.

I like how it's marketed as 'no ads, always free'! Not so difficult to do when you're (ab)using someone else's service to handle all your data.

7y agoHN ↗

I think GitHub is okay with "creative" uses of their system, as long as one doesn't push the limits and doesn't make a business from it.

Infamously, CocoaPods was serving directly from GH, maxing out out five server CPUs and using terabytes of traffic, and their response was fairly sympathetic: https://news.ycombinator.com/item?id=11245652

7y agoHN ↗

I think GitHub is okay with "creative" uses of their system, as long as one doesn't push the limits and doesn't make a business from it.

Being on the front page of hacker news feels a lot like "pushing the limits".

7y agoHN ↗

No lock-in. All data stored in GitHub issues.

How is that not a proprietary lock-in if all your data is stored on a single company's servers?

People keep on treating GitHub and other corporations as public services. They're not.

7y agoHN ↗

GitHub is at an interesting inflection point. Before the acquisition, VCs stoked the growth by giving away bandwidth and storage. Now that GitHub is a Microsoft property, the same continues because MS has been on a ten-year mission to build goodwill in the developer community.

That may not last forever. The original GitHub people will gradually drift away once their vesting concludes. If overall growth stalls, Microsoft management may yet feel the temptation to start squeezing GitHub for cash.

I suspect they'll acquire NPM along the way too, to have a better lock-in in place.

7y agoHN ↗

NPM could use some cleaning. It's a single point of failure without the governance, the worst of both worlds kind of thing.

7y agoHN ↗

I suspect they'll acquire NPM along the way too, to have a better lock-in in place.

No matter if someone is going to acquire npm or not, npm registry is clearly degrading in value provided to users, while trying to earn a profit.

I recently started a project to do something about it, called Open-Registry (https://open-registry.dev).

Basically, it's a new package registry compatible with npm (proxy to the npm inc registry) that is 100% community funded and has a explicit governance that the community owns it.

7y agoHN ↗

Microsoft won't acquire npm for sure.

I highly doubt MS will ever squeeze GitHub for cash also. It's about integration and azure.

They have proved by now that they are not Oracle and they are doing the opposite of them.

- making development more open ( .net core vs Java)

- making tools more open ( eg. Sms vs MySQL, vscode, ...)

Both have clouds. Microsoft is adding/creating more free tools/services as their onboarding funnel. Development ease is their motivation.

Oracle buys popular things and starts licensing them. They try to force existing clients into their cloud ( MS makes it optional). Oracle's motivation is management influencing

7y agoHN ↗

Microsoft (like many companies before, and many companies in the future) change. The went from cool, to not cool, to cool again in the eyes of the developer hive-mind.

I don't think we can say for sure that Microsoft will forever act the way they are acting now, as in the end it's run by people and those people eventually become replaced with others.

Saying that a company has "proven" something and that means they will act a certain way forever seems unhealthy.

7y agoHN ↗

How is that not a proprietary lock-in if all your data is stored on a single company's servers?

Even more than this, I'm a big fan but IIRC GitHub is pretty infamous for making it excessively hard to extract issue data/move to other platforms? (I think the wiki pages are available as a repo, so at least that's easy to get).

7y agoHN ↗

Citation needed. Almost all issue data should be available from the API, and I have seen cases where issue contents are copied over with a bot from an obsolete repo to a new repo.

7y agoHN ↗

No, wiki pages are not available through git on GitHub. You're thinking of GitLab which does have this feature.

EDIT: TIL, turns out they are. And the syntax (add .wiki to the repo name) is the same as GitLab.

7y agoHN ↗

Yes, they are. For example, the GitHub repository ethereum/wiki can be cloned by doing

    git clone https://github.com/ethereum/wiki.wiki.git

You basically add `.wiki` after the repository name, and it's exposing a git repository you can clone.

7y agoHN ↗

"(I think the wiki pages are available as a repo, so at least that's easy to get)."

This is true, but other components of a github project, such as the issues, are not available as a git repo that you can clone, etc.

7y agoHN ↗

People keep on treating GitHub and other corporations as public services. They're not.

Good point! Maybe there should be such a public service as an option.

7y agoHN ↗

Public services, as in, run by who exactly? There is no Internet government to run Internet public services.

7y agoHN ↗

Not sure.

A start might be a standards body offshoot, or a similar organization.

Maybe the UN? Maybe an org like IEEE?

Seems like an interesting discussion topic.

7y agoHN ↗

How did people became so incapable in social interactions that they need a public service to share code they make together?

7y agoHN ↗

A public service is exactly people interacting. It just prioritizes posterity over profit.

7y agoHN ↗

No, people interacting is people talking together and then doing things together. Please don't try to act like voting or otherwise going the political route is anything like that. I will believe you once there is no government in the middle. There is absolutely no need for a third party, especially given we're talking about code sharing and not about saving dying people.

7y agoHN ↗

If only we had a federated communication mechanism and the frictionless ability to run any server we wished from any IP.

7y agoHN ↗

Sounds like a great project for someone to work on.

You know, those Mastodon folks have built some interesting stuff on top of ActivityPub. Maybe we should build a text-based communication protocol on ActivityPub in addition to more social features. Then we could also give some file-sharing mechanism, wherein a user could send a message with a tightly linked file, like the message and file are attached to one another.

Then we could let users run a server to send these sorts of messages over a federated ActivityPub network.

Perhaps we could normalize this protocol so much that ISPs would include a basic option of an address and some storage. This would really help to separate us from these mega service companies like Google and Facebook.

/s

7y agoHN ↗

Funny you should say that! I'm currently starting a concept I'm tentatively call "Open-Services". The main points are:

- Strong community governance

- Everything done needs to be in favor of the users

- Funding should be by the community

- Metrics, finances and management has to be transparent and done in the open

- Obviously, 100% of the code has to be under a open source license as well

Basically, a Open Service is a public utility for the internet.

My first service I'm creating like this is https://open-registry.dev which replaces the npm inc registry with a community owned one.

7y agoHN ↗

I've seen a couple apps like this now where the app is basically a parasite on something else. Seems like a an abuse of goodwill.

"Check out SnooFS: the free cloud storage solution built on Reddit comments! Basically instead of paying for your own storage, SnooFS generates you a personal subreddit and uploads your data as text, video, and images to be hosted on Reddit's servers! No limit to storage - upload as many TB as you want!"

7y agoHN ↗

This is not a good comparison. While I agree with you that a project like SnooFS is using other people resources in a bad way, projects like this are more of a proof-of-concept than anything else. I don't believe people would actually trust their files in a manner like this.

On the other hand, whereas GitHub issues are not intended for external blogs comments, it is already used like this and for blogs hosted on GitHub Pages. This is just an automation tool. If GitHub sees a problem with this in the future they can always change their terms of use (and that's why anyone should only use a system like this for ephemeral stuff).

7y agoHN ↗

GitHub is owned by Microsoft though, so there's no guarantee they won't have problems with someone else doing this.

7y agoHN ↗

Just embed a real comments platform for free like Disqus, or Discourse. There are plenty of better options that make this pointless for anything more than a "just because" project.

7y agoHN ↗

This is brilliant! If your blog is hosted on GitHub it's even more useful and comments will be closer to the source.