HackerTrans
TopNewTrendsCommentsPastAskShowJobs

paultendo

no profile record

Submissions

Unicode characters look like Latin letters but aren't in a detection system

paultendo.github.io
1 points·by paultendo·il y a 5 mois·0 comments

I rendered 1,418 confusables over 230 fonts. Most aren't confusable to the eye

paultendo.github.io
113 points·by paultendo·il y a 5 mois·53 comments

[untitled]

1 points·by paultendo·il y a 5 mois·0 comments

[untitled]

1 points·by paultendo·il y a 5 mois·0 comments

comments

paultendo
·il y a 4 mois·discuss
What a fascinating deep dive. 2x with sphere mapping is my favourite - it starts to take on a sort of pointillism-like quality which gives all the objects (or maybe my brain) a sort of understanding of their texture.
paultendo
·il y a 4 mois·discuss
Could be a very useful way to do some overnight tasks using spare RAM. Possibly things like LLM-based categorisation, labelling, data cleansing. That's what comes to mind for me anyway.
paultendo
·il y a 4 mois·discuss
Anyone can be an "ideas guy", very few are good at it.

"I am still waiting to see LLMs build an idea into something other people use at scale" - so Microsoft using Claude Code doesn't count?
paultendo
·il y a 4 mois·discuss
I haven't tried it, but I think you could keep the full transcript by running a pre-compact hook (on Claude Code) to save your entire conversation history to a file.
paultendo
·il y a 4 mois·discuss
As I understand it, Anthropic drew two specific red lines: no mass domestic surveillance, no fully autonomous weapons systems. Seems reasonable to me.

Feels like OpenAI, Google, and Meta have been given a clear path to get federal contracts now by simply not drawing the same lines.
paultendo
·il y a 5 mois·discuss
I agree that rejecting valid non-Latin characters in valid contexts is user-hostile, but I should be clearer about scope: this is specifically about machine-readable identifiers (slugs, handles, ENS names) where the character set is intentionally restricted, not display names or user-facing text.

The approach there should be what wongarsu describes below (imo), to style the UI so official accounts are visually distinct (badges, colour, etc.) rather than policing the character set.

namespace-guard is deliberately opinionated for the slug/handle case where you've already decided the output should be ASCII-safe. If your use case is broader than that, confusables detection without rejection is the right call.
paultendo
·il y a 5 mois·discuss
Thanks Josh - putting this article out there has pushed me to sharpen a lot of my thinking which hopefully should come across in my more recent work. I've updated the article to scope the NFKC recommendation to identifiers and added a note crediting your correction. Thanks for catching it.
paultendo
·il y a 5 mois·discuss
Looks great - well done. Much nicer than stock tmux for sure.
paultendo
·il y a 5 mois·discuss
Of course Google can restrict how their API is accessed. But locking paid accounts with no warning, no explanation email, and no functioning support path while continuing to charge $249/month is a different problem entirely. A reasonable enforcement process would have been a warning email, grace period to stop using the tool, then restriction.

What an awful way to lose trust, locking out their users but billing them all the same.