cmkr

7 ms·

1.
by cmkr 8mo ago
Considering it. Backend is Go on a single-node K8s-"Cluster". Frontend is vanilla JS on the same Hetzner-Box. Code-situation in the midst of this ongoing "HN-Feuertaufe" is a bit … well. What would make it useful for you
2.
by cmkr 8mo ago
EDIT 2 (48h later — shipped based on your feedback after a rough and a good night of sleep): Should be fixed: - Hybrid Geoip + ASN detection (no more nsa.gov/google.com false positives) - AWS, Azure, Google Cloud, Cloudflare, DigitalOc
3.
by cmkr 8mo ago
Update on the Cloudflare point: I now detect Vercel and Netlify hosting via response headers (catches custom domains). Cloudflare as CDN/DNS proxy is intentionally not flagged as US hosting — the origin server behind it could be EU. Th
4.
by cmkr 8mo ago
Fixed. I was matching a link TO GitHub as hosting ON GitHub. Now only embeds and actual hosting count, not href links. Sorry and thanks for pointing me there.
5.
by cmkr 8mo ago
Hey wink () true. some socialmedia was too aggressive - should be resolved. for yt: i tried to fix the lazy-loaded YouTube detection. Tool now catches: - iframes with data-src - web components: <lite-youtube>, <lite-youtube-embed&g
6.
by cmkr 8mo ago
Right. Missed Azure. Fix is live now. Would be great if you could recheck and confirm. Thanks for helping me out by reporting.
7.
by cmkr 8mo ago
Hi, i have fixed the Vercel detection. Also added Netlify header detection (via x-nf-request-id). DNS-proxieng is not taken into account. Maybe will do that in the future. Thanks for reporting!
8.
by cmkr 8mo ago
I know some sites serve incomplete cert chains (missing the intermediate). Browsers fix this automatically, Go doesn't. have your tested a site with broken cert chain? got a url to share? Would help me pin down the issue. Thanks!
9.
by cmkr 8mo ago
Ave Caesari, morituri te salutant. Fixed: 1. GeoIP fallback 2. Links vs embeds 3. Migration costs *GeoIP* - The ASN-only approach was too restrictive (I tested mostly with orf.at and such). Now using oschwald/geoip2-golang with D
10.
by cmkr 8mo ago
1. Link to X profile ≠ dependency on X. Will differentiate links from embeds in v0.2. 2. Registrar check is a good thinking. Already have some stubs in the codebase. Namecheap is US and could theoretically be compelled. Adding to roadmap. T
11.
by cmkr 8mo ago
Thanks for the Bugs Bunny. I'm detecting a LINK to GitHub Pages and marking it as hosting. That's wrong - hosting should only flag when the actual page is served from there. Re fonts: "self-hosted" means fonts served fro
12.
by cmkr 8mo ago
Was a bug. Now some kind of Snowden-Approved-Feature.
13.
by cmkr 8mo ago
Fair points, all of them. The nsa.gov thing: :) The reals: 1. Hosting detection: I'm matching links TO GitHub as hosting ON GitHub. That's wrong. Fix incoming. 2. US-hosted sites getting 100%: My ASN lookup isn't catching eve
14.
by cmkr 8mo ago
EDIT (after 150+ comments of roasting): First: You are legends. Thanks for the massive roasting. Had a Haupt-Mieterversammlung directly after clicking "Submit" and was too tired (and scared) to directly address the issues afterwar
15.
by cmkr 8mo ago
Checks hosting, analytics, fonts, cdn, video, chat, social embeds. Gives you a score from 0-100 and suggests Eu-alternatives.
16.
Show HN: We Built the 1. EU-Sovereignty Audit for Websites(lightwaves.io)
106 points by cmkr 8mo ago|91 comments