MurphyA/hacker-news huggingface dataset:
by raphinou | 2025-04-01 11:53:11+00:00
Exactly, my first reaction was "I should write a blog post about why I still use Docker Swarm". I deploy to single node swarms, and it's a zero boiler plate solution. I had to migrate services to another server recently, and it was really painless. Why oh why doesn't Docker Swarm get more love (from its owners/maintainers and users)?....

Edit: anyone actually interested in such a post?
by leshenka | 2025-04-01 11:53:48+00:00
I'm not advocating for vendor locking, it's not what I said. I said if they wanted to advertise macs for enterprise video editing they should have implemented this in FCP natively.

This however wouldn't be vendor locking because remoting would still be an option.

Instead they've shown that remote desktop is the most reliable way to do this kind of job because there isn't anything better.
by quickslowdown | 2025-04-01 11:53:53+00:00
Do you run a Nomad cluster? Or just on a single host? This is my desired state, I've set up Nomad a number of times but always get stuck in one place or another. I've gotten much further with Nomad than Kubernetes, but I've kind of always gone back to ol' faithful, writing a docker compose file and running everything that way.
by mingus88 | 2025-04-01 11:54:05+00:00
The word for this is enshittification

The service has become increasingly poor and the prices climb. This is the phase of Netflix’s lifecycle where all the value is being extracted from the customers and given to the shareholders.

They hiked us up to $25/mo only to nag me every time I launched it that I can’t let my brother use one of the four device entitlements that I am paying for.

Top dollar hostility for second run movies, cancelled series, and AI driven true crime slop.
by mavus | 2025-04-01 11:54:11+00:00
> accents, dialects, and degeneration and creolization. There are just as many accents and dialects of English in the Americas as there are in Britain. Even your term "creolization" comes from Louisiana. It's a matter of perspective and something that all language learners will have the face, the difference between 'standard' English/Spanish/German and regional variations both within it's originating country and from abroad.
by kuon | 2025-04-01 11:54:26+00:00
If you self host, do not use containers and all those things.

Just use a static site generator like zola or hugo and rsync to a small VPS running caddy or nginx. If you need dynamic thing, there are many frameworks you can just rsync too with little dependencies. Or use PHP, it's not that bad. Just restrict all locations except public ones to your ip in nginx config if you use something like wordpress and you should be fine.

If you have any critical stuff, create a zfs dataset and use that to backup to another VPS using zfs send, there are tools to make it easy, much easier than DB replication.
by PaulHoule | 2025-04-01 11:55:19+00:00
Is it really React or the stuff it lets you bring in? Many React apps have at least one big widget set (say MUI or reactstrap or …) and then a number of “best of breede” components that do various things. It’s rare for components to be styled with plain CSS these days so you probably have to bring in Emotion and styled-components and Tailwind and …. It is all code that goes into the bundle and it’s a burden on your mind because these are all leaky abstractions and don’t absolve you of understanding CSS.
by doublerabbit | 2025-04-01 11:55:33+00:00
A VPS with a software firewall is more than enough.

Block port 22, secure SSH with certificates only. Allow port 443 and configure your web server as a reverse proxy with a private backend.

You don't need an IDS, you don't need a WAF and you don't need Cloudflare.

Unless you become the next Facebook that's when you start to become concerned about security.
by simoncion | 2025-04-01 11:55:49+00:00
> It's started (cleans up things when they're no longer in your config)...

Would you please call this something else?

"It automatically reconciles", perhaps? I know that a multi-word phrase isn't nearly as snappy, but not only are "it's started" and "started" overloaded with a bunch of meanings, approximately zero of them mean what you want them to mean in this new context.
by SideburnsOfDoom | 2025-04-01 11:55:57+00:00
> and you shouldn't see people living on the streets of a place like San Francisco.

Taking a straight line on the map in San Francisco, we saw people in conditions as grim as I have ever seen, including South African slums. As you say, it's in some ways worse because the USA should not - there must be the ability to improve that, but not the inclination. The dire pockets are smaller in the USA, sure. But there were also extremes of luxury and poverty.
by Aachen | 2025-04-01 11:55:57+00:00
> For some Raspberry Pi (ideally with 8-16GB RAM) + SSD can be enough

Wut? For many, a Raspberry Pi with 1 GB RAM and the regular sdcard can be enough, you really don't need to go fancy if you don't want to run anything particularly heavy. Or if it's cpu-intensive then you might need the newest Pi or something even beefier but still only the lowest RAM and smallest/slowest storage options (like for WordPress). As you say, it depends on needs

I always recommend using an old laptop to start out with because you've already got it anyway and it's already low power yet very powerful: if it can run graphical software from 2020 then it'll be fine as server until 2030 for anything standard like a web server (with half a dozen websites and databases, such as a link shortener, some data explorers, and my personal site), torrent box, VPN server, mail server, git server, IRC bouncer, Windows VM for some special software, chat bot, etc. all at once. At least, that's what I currently run on my 2012 laptop and the thing is idle nearly the whole time. Other advantages of a laptop include a built-in KVM console and UPS, at least while you still trust the old battery (one should detach and recycle that component after some years)
by pron | 2025-04-01 11:55:59+00:00
Well, software today is much bigger and of higher quality that was thought possible in the seventies. That's not to say that it can scale indefinitely, but my point was that unsound methodologies (i.e. not formal proofs) work much better than expected, and the software correctness world has moved from the seventies' "soundness is the only way" to "software correctness is a complex game of costs and benefits, a combination of sound and unsound techniques is needed, and we don't know of an approach that is universally better than others; there are too many variables".
Show HN: I made a map that forecasts where and when morels are likely to grow
by pbaumel | 2025-04-01 11:56:07+00:00
The morel foraging season is well underway in the south of the USA and heading further north by the day!

As a data scientist, I wanted to see if data could help boost people's chances of finding these delicious mushrooms.

A quick summary of how it works:

1. I linked 1,000s of past morel sightings to habitat data (e.g. climate, soil, tree species) and weather data (e.g. temperature, rainfall) from the weeks before [1-6]

2. I used this data to train machine learning models and find patterns in how habitat and weather affect where and when morels are likely to grow

3. These models help identify areas where the habitat is suitable for morels, and produce a daily forecast of the likelihood of finding them based on recent weather

Like any forecast, it's not perfect and more of a guide than a guarantee. But I think it's a good starting point if you don't already know a spot or have a sixth sense for timing.

Let me know if you have any questions!

[1] https://www.gbif.org/species/7904574

[2] https://chelsa-climate.org/exchelsa-extended-bioclim/

[3] https://www.isric.org/explore/soilgrids

[4] https://www.fs.usda.gov/science-technology/data-tools-produc...

[5] https://www.ecmwf.int/en/forecasts/dataset/ecmwf-reanalysis-...

[6] https://www.ncei.noaa.gov/products/weather-climate-models/gl...
by elric | 2025-04-01 11:56:48+00:00
That meme is such a load of hogwash. In many ways, US English is closer to "traditional" than UK English. They've both diverged somewhat from what they were in the 17th century. Neither form has been "simplified" in any way.

As for the Union Jack: the UK has at least 3 rather different languages (English, Gaelic, Welsh), possibly a few more depending on how you count the different kinds of Gaelic.

Using a country flag to represent a language has always struck me as being silly. Only rarely do they map 1-to-1.
by watwut | 2025-04-01 11:57:42+00:00
> It's basically a meme that boomers were telling young people that they're poor because they eat avocado toast - which implies that it got popular (in a niche) before it got cheap.

I do not think this follows. Some boomer oped writers blaming avocado toasts for young poverty does not imply there is causality between the two. Some boomers love to blame whatever is new for them and they do not bother to check prices or actual levels of consumption.
by seba_dos1 | 2025-04-01 11:58:13+00:00
All my "smart home" stuff needs is mosquitto on a OpenWrt router and bunch of cgi-bin scripts that can run anywhere. I already went through a phase of setting up tons of services which ended up being turned off when something changed in my life (moving, replacing equipment etc.) never to be resurrected as I couldn't be bothered to redo it without the novelty effect, so I learned from that.
by tossandthrow | 2025-04-01 11:59:28+00:00
And this is definitely a problem.

Had I had the opportunity to choose a language across the entire stack with mature wide adopted frameworks and libraries, I had done it.

Had there been something line Rust, Go, Java, C#, etc. that would work end to end, that would have been amazing.

In practice, even the weak safety typescript provides catches so many bugs before they hit production that it is indeed worth it - I have more than 140k LOCs of Typescript in production, and that would not be manageable without types.
by littlecranky67 | 2025-04-01 11:59:37+00:00
I pretty much enjoy using MaterialUI with React (MUI) and have statically typed CSS: `<Stack sx={{ alignItems: "center"}}></Stack>` - I get full IntelliSense/autocompletion for the sx props (i.e. alignItems when typing 'al') and their value (i.e. 'center' when typing 'c') etc. Sx-props are composable, so you can centralize common used sx/css etc.

Any typos or invalid props/value will result in a compiler error.
by simoncion | 2025-04-01 11:59:58+00:00
So out of the fifty-to-a-hundred-or-so drivers loaded on your system one gave you problems... and that one was the Nvidia driver, whose closed-source version is known to generally be just absolutely godawful in every aspect other than "provides maximum performance, when you're able to get it installed and working", and whose opensource version is known to be an enormous crapshoot (on account of it being reverse-engineered with zero help from Nvidia).

That sounds about right.
by busyant | 2025-04-01 12:00:10+00:00
I worked at a biotech startup about 20 years ago.

- Two of the VPs at the company were named Jim Collinsworth and Peter Sachs (not their real names).

- For reasons I can't remember, I was able to send emails through the company's Windows email server under any name that I wanted.

- So, I merged the two VP names and I sent an email blast to the entire company from "Peter Collinsworth" (just swapping first and last names).

- "Peter" Collinsworth's email said something to the effect of "In honor of the 765th anniversary of the establishment of the Exchequer and the signing of the Magna Carta, <biotech-startup-x> is declaring April as 'English Unit' Celebration Month. All laboratory generated results will be reported using the following units: Instead of mg/kg/day, we will use pounds/stone/fortnight ...." etc. etc. etc.

- Well, Jim Collinsworth (real VP) saw the email and even he thought that the email had been sent under his own name.

- So, Jim fired off an email blast saying, "I did NOT send this. I don't know what this is about."

- Everyone soon realized it was an April Fool's joke.

- Jim eventually made his way to my office to say ... "That was really funny. Don't EVER do it again."
by palata | 2025-04-01 12:00:42+00:00
> A VPS with a software firewall is more than enough.

So you don't self-host at home, right?

I have been considering setting up a physical DMZ at home, with two routers (each with its own firewall), such that my LAN stays unmodified and my server can run between both routers. Then it feels like it would be similar to having a VPS in terms of security, maybe?
by doublerabbit | 2025-04-01 12:01:28+00:00
I colocate four servers in two DCs all running FreeBSD with PF. My main host is running a jail that hosts a bHyve VM

With four jails, each running their own bHyve VMs they run another FreeBSD OS allowing me to host jails for different services. Email, web and game servers.

I'm not a fan of DMZ as they get messy as you then have to ensure your host is protected correctly. So I use bridges, I have two bridges an outer and inner.

Services requiring outbound internet access are tapped to the outer bridge which are throttled and if required can then load balance between and the inner bridge which is under control of deny all, allow some. To my own set of home IPs.

The outer bridge cannot contact services in the inner but the inner can contact the outer but can only host internally.

This all done with PF within each jail as each jail provides you with its own vnet adapter which can be applied to a bridge.

If you wish to learn further that is what you work up too But for the personal user who wishes self-host and to have internet presence a firewall is just fine.
by Ntrails | 2025-04-01 12:01:49+00:00
> Better a guilty person go free than an innocent person sent to their long, slow, undignified death.

This is a scale thing though right? You'll have some false convictions if you want a justice system. Nothing is perfect, breakage inevitable.

Nobody wants to be the victim of a miscarriage of justice themselves, but everyone wants crime to be dealt with effectively. The trade offs are real and I suspect the average person has an acceptable non-zero rate in the back of their mind
by Phui3ferubus | 2025-04-01 12:03:33+00:00
I think the quoted Reddit comment is very ironic. People are allergic to self-promotion but hand complain that no one writes blogs anymore (beside the corporate ones).

I am not sure what can be done about strong luck impact on HN submissions or publishing Amazon books. It really feels like you have one attempt and the end result is mostly out of you hands.
by tom2948329494 | 2025-04-01 12:04:10+00:00
Just a quick note – the "Configure Your Exercise" step was a bit confusing. It took me a while to figure out what “Number of Gaps” even meant, since that’s not something I’d usually think about configuring.

Also, choosing an input method felt tricky. I hadn’t used the product yet, so I didn’t really know what to pick or what would work best for me.

Once I got into the app, everything made sense, but it wasn’t clear upfront.

Maybe you could let people start with a default setup and explore the options while using it. That way, the learning happens more naturally and the config step doesn’t feel like a blocker.
by mschuster91 | 2025-04-01 12:04:34+00:00
> For reasons I can't remember, I was able to send emails through the company's Windows email server under any name that I wanted.

The glorious days of open relays, back when spam was in its infancy. Today it's mostly done on a whitelist basis to let tools like JIRA or Gitlab send notifications under the name of users themselves instead of some noreply address.
by fm2606 | 2025-04-01 12:04:42+00:00
I'm right there with you, except at times I have thrown caution to the wind and made my sites available.

My current setup is to rent a cheap $5/month VPS running nginx. I then reverse ssh from my home to the vps, with each app on a different port. It works great until my electric goes out and comes back on the apps become unavailable. I haven't gotten the restart script to work 100% of the time.

But, I'd love to hear thoughts on security of reverse SSH from those that know.
by cogman10 | 2025-04-01 12:05:22+00:00
Hurray! I thought I was the only one that understood this. There are two of us!

I've seen so many performance issues with hashcode because devs will put all fields into it. Even though there's an id column or even fields that imply other fields. Hashing 1000 char strings when there's a UUID or int field that guarantees identity is silly.

I think it's because devs have an preference for symmetry. I see the same thing happen when they preferably add setters for all fields even though they aren't necessary.
by ben_w | 2025-04-01 12:06:06+00:00
In real life, even today, a lot of systems have to run fully automatically because humans are too slow to respond: https://en.wikipedia.org/wiki/Phalanx_CIWS

But specifically manoeuvres, rather than weapons systems? Today, I doubt it: the ships are too slow for human brains to be the limiting factor. But if we had an impulse drive and inertial dampers (in the Trek sense rather than "shock absorbers"), then manoeuvres would also necessarily be automated.

In the board game Star Fleet Battles (based on a mix of TOS, TAS, and WW2 naval warfare), one of the (far too many*) options is "Erratic Manoeuvres", for which the lore is a combination of sudden acceleration and unpredictable changes in course.

As we live in a universe where the speed of light appears to be a fundamental limit, if we had spaceships pointing lasers at each other and those ships could perform such erratic manoeuvres as compatible with the lore of the show about how fast they can move and accelerate, performing such manoeuvres manually would be effective when the ships are separated by light seconds. But if the combatants are separated by "only" 3000 km, then it has to be fully automated because human nerve impulses from your brain to your finger are not fast enough to be useful.

* The instructions are shaped like pseudocode for a moderately complex video game, but published 10-20 years before home computers were big enough for the rule book. So it has rules for boarding parties, and the Tholian web, and minefields, and that one time in the animated series where the Klingons had a stasis field generator…
by aborsy | 2025-04-01 12:06:21+00:00
I can self host many applications, but their security must be outsourced to a company. I don’t have time to keep on top of vulnerabilities.

Cloudflare Tunnels is a step in the right direction, but it’s not end to end encrypted.

The question is then, how to secure self hosted apps with minimal configuration, in a way that is almost bulletproof?
by FloatArtifact | 2025-04-01 12:06:40+00:00
Self-Hosting like it's 2025...uhhgg...

Don't get me wrong I love some of the software suggested. However yet a another post that does not take backups as seriously as the rest of the self-hosting stack.

Backups are stuck in 2013. We need plug and play backups for containers! No more roll your own with zfs datasets, back up data on the filesystem level (using sanoid/syncoid to manage snapshots or any other alternatives.
by CharlieDigital | 2025-04-01 12:07:15+00:00
> I have more than 140k LOCs of Typescript in production, and that would not be manageable without types

The Svelte team achieved it with JSDoc. Google's JS style guide also focuses on JSDoc for the same reasons[0].

And to be just a tad pedantic: you have JS in production; your TS is only in dev.

> Go, Java, C#, etc. that would work end to end, that would have been amazing.

It's not that you can't; it's that you choose not to (and yes, generally for good and valid reasons). There are end-to-end solutions for C# (e.g. Blazor), for example, that are perfectly fine depending on your use case (not great for all use cases). Fable is another example using F#[1]

There are also libraries like Bootsharp[2] that are doing interesting things, IMO, and has some of the same energy as OP's project (moving the typing and logic into a runtime that supports runtime static types and interfacing minimally with JS)

[0] https://google.github.io/styleguide/jsguide.html#jsdoc

[1] https://fable.io/docs/

[2] https://sharp.elringus.com/
Show HN: Top Hacker News
by onezhjp | 2025-04-01 12:08:18+00:00
Hi HN, I built a top Hacker News website to help you quickly browse tech news, reducing the burden of information filtering and keeping you focused.

Features:

1. AI immersive translation: 中(简/繁), 日本語, 한국어, ...

2. AI summary

3. Article cover(open graph image), favicon

4. RSS

5. PWA

6. Responsive UI for mobile, pad, PC

7. Dark mode

It's free. Welcome to try.
by mfashby | 2025-04-01 12:08:18+00:00
I moved us off docker swarm to GKE some years back. The multi node swarm was quite unstable, and none of the big cloud providers offered managed swarm in the same way they offer managed k8s.

It's a shame I agree because it was nicely integrated with dockers own tooling. Plus I wouldn't have had to learn about k8s :)
by ivan_gammel | 2025-04-01 12:08:55+00:00
>The site wants to over estimate clicks, the advertiser wants to under estimate

Only if you show the ads. Many companies do not, but still use lots of trackers. Why? Because their performance marketing team is trying to find the right mix of advertisement channels, so they go for paid search and clicks to Google, Meta and lots of other AdTech. In that case trackers are needed to optimize spending by analyzing user behavior. If certain cohort spends more time on the site, they will get more ads of it. If another cohort leaves the site quickly, they will see less ads. The promise of AdTech in general is that they personalize ads as much as possible to reduce your customer acquisition costs (CACs) - you won't waste money on showing ads to people who won't buy your product. So they need the data and they have to own it, because personalization is their competitive advantage.
by BoppreH | 2025-04-01 12:08:57+00:00
I use Oracle Cloud for my personal projects because of their generous free tier[1] which includes 4x Ampere A1 cores, 24 GB of RAM, and 10 TB of outbound data transfer per month.

I was ready to jump ship if they changed the terms, but I was not expecting a security incident.

[1]: https://www.oracle.com/cloud/free/
by oefrha | 2025-04-01 12:09:05+00:00
The bloat isn't coming from "huge frameworks" like React.

To give some concrete numbers: a barebones react project created with `pnpm create vite -t react-ts` clocks in at ~60KB compressed:

dist/index.html 0.46 kB │ gzip: 0.30 kB dist/assets/react-CHdo91hT.svg 4.13 kB │ gzip: 2.14 kB dist/assets/index-D8b4DHJx.css 1.39 kB │ gzip: 0.71 kB dist/assets/index-9_sxcfan.js 188.05 kB │ gzip: 59.16 kB

A vue project (`pnpm create vite -t vue-ts`) is even smaller at ~25KB:

dist/index.html 0.46 kB │ gzip: 0.30 kB dist/assets/index-1byZ3dr3.css 1.27 kB │ gzip: 0.65 kB dist/assets/index-CKXNvRRZ.js 60.77 kB │ gzip: 24.44 kB

I've created plenty of medium-sized projects with React/Vue clocking in at 200-300KB compressed (excluding image assets). You can still realistically use those on 2G — yes I've tried, not just in dev tools, but when I was actually rate limited to 2G.

> When a simple home page dashboard or a notes page takes more than 10s to load on a 10G connection peered within 5ms of the host, and 95% of this is spent in JS.

You can create that kind of garbage with any framework, or without framework. You can actually do worse with the traditional way of using third party dependencies wholesale (the jQuery way), you can be downloading 200KB for 1KB of actually used code.

Edit: Also, the comparison in the article is pretty stupid. A full view in React is not much larger than "a React button", it's upfront cost + marginal cost.