MurphyA/hacker-news huggingface dataset:
Show HN: Sentrilite: a hybrid-cloud control plane for observability and security
by gaurav1086 | 2025-09-14 04:17:32+00:00
We built Sentrilite, a lightweight unified control-plane to observe and secure hybrid multi-cloud fleets (AWS, Azure, GCP, on-prem) from one place. The goal is fast onboarding, live kernel-level telemetry, fleet-wide rule targeting, and an audit-ready PDF—without stitching together 5 tools.

What’s in the demo

Fleet onboarding in seconds: upload a two-column CSV (ServerIP,Group) and the fleet view auto-populates with tiles, health, recent alerts, and AI insights.

One-command deploy to EKS: kubectl apply -f sentrilite.yaml sets a DaemonSet (one agent per node); images are auto-pulled. Click a node to see live process/file/network events enriched with Kubernetes metadata.

High-risk rules (hot-reload): target rules by Group (e.g. only aws, azure or prod). We flag nc/netcat, sensitive file reads, etc., and show the alerts immediately.

Fleet health signals: detect OOMKilled containers with exact pod/container context for fast triage.

Export PDF: one click to generate a chronological report with summaries, tags, and k8s context.

Why we built it

Hybrid fleets need a single control plane to target rules to subsets and see uniform telemetry across clouds.

We wanted eBPF-level visibility with Kubernetes context, but make onboarding dead simple.

How it works (high level)

Agents run as a DaemonSet per node, stream events to the dashboard, and apply local rules (hot-reloaded).

Grouping (Group in CSV) drives selective policy: test rules on a small slice before rolling out fleet-wide.

Quick start # fleet.csv ServerIP,Group 10.0.12.34,aws 10.1.5.7,azure 10.2.9.11,gcp 192.168.1.20,private

# Deploy agents to EKS kubectl apply -f sentrilite.yaml

# Generate a couple signals in a debug pod nc -l 5000 & # listener gets flagged cat /etc/passwd >/dev/null # sensitive file read

# Simulate OOMKilled kubectl run oom-demo --restart=Never --image=busybox:1.36 \ --overrides='{"apiVersion":"v1","spec":{"containers":[{"name":"hog","image":"busybox:1.36","command":["/bin/sh","-lc","i=0; while :; do dd if=/dev/zero of=/dev/shm/f$i bs=1M count=64 conv=fsync; i=$((i+1)); done"],"resources":{"requests":{"memory":"32Mi"},"limits":{"memory":"64Mi"}}}]}}'

Try it

Demo video: https://youtu.be/FmFUs0ZhdIY

GitHub quick start (free): https://github.com/sentrilite/sentrilite

Notes

Runs in your cluster; you control data flow.

Looking for feedback on: rule UX, fleet grouping model, and what you’d want in the PDF/alert context.

Happy to answer questions and share more internals if folks are interested.
by pstuart | 2025-09-14 04:17:36+00:00
The right is a master class in political messaging. They learned this One Weird Trick™ to manipulate the masses: people are stupid and vote their emotions. By defining the language they win almost by default: family values, school choice, pro life, death taxes, etc.

They learned that it doesn't matter if it's true, relevant, or hypocritical, as long as it feeds fear and anger in their constituents.

The left fails because the issues they support can require nuance and consideration and that's a lot to ask of a voter who just wants to be told who to vote for.

My assessment isn't meant to be tribal, there's plenty to critique on the left from DNC leadership to "overexubernt" members whose excess is used to define the left as a whole (wokism).

It's heartbreaking that the divide is now complete and is not likely to change without some unfortunate actions.
by C-Loftus | 2025-09-14 04:18:01+00:00
I am a part of the Talon community mentioned here, use Orca, have contributed to the Rust atspi bindings and feel like I know Linux accessibility quite well.

It is true to in Wayland you can write protocol extensions or custom compositors to get around these limitations. However, what many fail to realize is that the primary challenge in Linux accessibility is not just a technical problem as it is getting people to actually implement specs and care about it. Even with atspi itself, a standard that has existed for over a decade, major apps like Firefox often do not implement the atspi Collection interface. This is not a criticism but rather a practical statement that accessibility needs to be standardized and easy to implement for it to actually have any use. Orca works on Wayland but only in certain compositors. For assistive technology software developers, this pattern of supporting specific compositors is not feasible. It is important to understand that we need to support assistive tech generally. Not just ad hoc extensions for certain types of disabilities.

Wayland has no concept of global coordinates or global key bindings. The protocol itself is designed around atomicity which is a nice concept, but is fundamentally in conflict to the need of assistive technologies to control the entire state of the desktop globally. As such, atspi methods like get_accessible_at_point are impossible in Wayland.

I agree that X11 cannot be carried on forever, but with the current state of Wayland, the phasing out of X11 will have the effect of drastically harming the accessibility ecosystem. Accessibility is not a "nice to have", it is essential to the mission of community inclusion and wider goals of adopting desktop Linux in education and government.
by 0xbadcafebee | 2025-09-14 04:18:22+00:00
All of this was well known when Wayland was developed. They just didn't give a shit about end-users. They had one or two specific things they personally wanted done, and they made sure that was supported, and that's it. And then a few major players decide they're going to push for this new system to become the system, so it's not just "a bad alternative", it's an unavoidably bad fate.

This isn't the first case like this. The Linux desktop ecosystem has been getting worse for years, as a few major players force systemic changes that make the system more complex, more brittle, and less compatible [with anything that came before it, or that doesn't use the same core components]. I've been using a Linux desktop for 25 years and it's never been more complicated or broken.

It's part of a larger trend of tech enshittification, but seems especially sad in the Open Source world. I always figured a decentralized, leaderless ecosystem could fight incumbent stagnation and selfishness, through the creation of alternatives. But some things there's just no alternative to. And apparently the list of things without alternatives grows.
by sparrish | 2025-09-14 04:21:18+00:00
I wonder if they're confusing the cause and effect.

Do people who live above 8k feet not die of heart disease or do people with heart disease find it too difficult to live above 8k feet so only people without heart disease live above 8k feet?

I live at 7200 feet and I know several people who have moved to lower altitudes because it's "too hard to breath" here.
by vijucat | 2025-09-14 04:21:53+00:00
Somewhat related: sentence completions / fill-in-the-blank templates are shockingly effective at eliciting your inner thoughts which even you didn't know you were feeling. The idea is from Nathaniel Branden's work.

"What I regret right now is ____"

"What I should now is ____"

"I am become aware that ____"

You don't need to journal these on paper. Don't do these in public. You might find yourself overwhelmed by what comes out.
by watersb | 2025-09-14 04:25:19+00:00
I found 10 Intel Galileo dev kits, new in box, left at our local recycling center on the "Free: Take Me Home" shelf.

And just today, I received the Intel Edison dev kit that I'd purchased on eBay.

The Galileo is a Quark X1000 SoC, two P54C cores. In-order, original 32-bit Pentium.

https://en.m.wikipedia.org/wiki/Intel_Galileo

.

The Edison is a modern System On Module about the size of an SD card but about 3x the thickness of one. It's far more capable: dual 64-bit Silvermont Atom cores, Super scalar out of order. And an additional Quark core as a system monitor, running an independent RTOS. There's also 4GB eMMC, 1GB RAM, WiFi, and Bluetooth on the module. Its quite a remarkable curiosity.

Ten years ago, Intel tried to catch up to ARM in tablets and smartphones, but it was already too late, and this entire segment of Intel was cancelled within a year or two.

https://en.m.wikipedia.org/wiki/Intel_Edison

Next up is building more recent Linux images for these via the Yocto Project and the now cancelled Intel Board Support Packages (BSP).

If you like low power tiny systems, there's a strange amount of fun to be had.
by dotnet00 | 2025-09-14 04:28:02+00:00
Why are you, in one post, talking about how you will never stop pirating, while in this thread you're calling for executions for that very action?

https://news.ycombinator.com/item?id=45236861

> IlikeKitties 2 hours ago | unvote | parent | prev | next [–]

Just to be clear: There are people like me that will NEVER EVER stop pirating media. I've done it my whole life and I will do it for the rest of my life. You can now chose to accept that because I and others like me exist, your freedoms must be destroyed or recognize that freedoms necessarily allow for "abuse" and realize that these media conglomerates would rather see the internet, the only truly global technology, fundamentally destroyed before giving you just enough freedom to maybe abuse it.
by like_any_other | 2025-09-14 04:32:08+00:00
No, but they did condition employment based on being left-wing:

Required ‘diversity and inclusion’ statements amount to a political litmus test for hiring - https://www.wsj.com/articles/the-universitys-new-loyalty-oat...

Diversity Statements Required for One-Fifth of Academic Jobs - https://www.schoolinfosystem.org/2021/11/11/study-diversity-...

Berkeley Weeded Out Job Applicants Who Didn't Propose Specific Plans To Advance Diversity - https://reason.com/2020/02/03/university-of-california-diver...

A recent report from the Goldwater Institute found that 80% of job postings for Arizona’s public universities required applicants to submit a statement detailing their commitment to diversity, equity, and inclusion. - https://www.goldwaterinstitute.org/policy-report/the-new-loy...

Mathematicians divided over faculty hiring practices that require proof of efforts to promote diversity - https://www.sciencemag.org/news/2020/01/mathematicians-divid...

“If you write: ‘I believe that everyone should be treated equally,’ you will be branded as a right winger,” Vinod Aggarwal, the chair of Asian Studies at the university, said in an interview. - https://www.nytimes.com/2023/09/08/us/ucla-dei-statement.htm...

UC Berkeley’s rubric for evaluating diversity statements penalized candidates for saying that they prefer to “treat everyone the same,” or for objecting to racially segregated affinity groups. As my reporting has shown, by the early 2020s, the Berkeley rubric had become something of a gold standard, used by search committees across the country, including at the University of New Mexico, University of South Carolina, Northwestern University, and Ohio State University. - https://www.city-journal.org/article/a-death-knell-for-diver...

(to debunk the usual counterpoint that these diversity requirements merely test for being able and willing to teach all demographics of students)
by arunabha | 2025-09-14 04:32:24+00:00
The issue is, the current administration seems to be hell bent on speed running the course to a similar destination. The overt attempts to politicize the Fed and key govt institutions has sown the seeds to distrust in US govt data and monetary policy.

Whether we water and fertilize the seeds, or let them dry and wither will decide the level of credibility we get in the future.

Strong institutions are absolutely critical for long term economic success. Enforcement of the rule of law, accurate data and credible monetary policy are the bedrock on which long term economic prosperity is built. Right now, we seem to be taking a jackhammer to that foundation.
by beeflet | 2025-09-14 04:33:02+00:00
Those are just slogans. But in terms of arguments, I would say he had one major negative argument "Her Emails" and two major positive arguments "Make America Great Again" "Build a Wall".

The most important thing is that these are points that are so simple even an idiot can understand them.

I can't even keep track of all of trump's controversies because they are so numerous and complex. But if I was a democrat I would just stick to one or two points that even moderates can resonate with like the "Epstein Files" or Palantir or the nuclear secrets or something.
by fourthark | 2025-09-14 04:35:01+00:00
That's fair.

I guess I've had various reasons to count time, and every once in a while check how well I count time, and if I didn't, perhaps I would start to count time faster. Thanks for the reference and clarification.

Seems counter-intuitive to me, because common sense tells us that old people think slower and therefore the world seems fast to them. So why would they be counting faster than actual time?

It also seems to contradict the thesis of the OP, as others pointed out. Years flying by is the opposite of counting time faster than the clock.

Oh well. Time is confusing!
by logicalmind | 2025-09-14 04:36:36+00:00
This is why. In the other reply to me you said "This is a silly example: beauty is subjective. Thus, what you are doing you are insulting a person, and of course there are consequences for that." So you clearly understand that insulting people can have consequences. I take your combined arguments to either be that everything Kirk said was objective (as if it being objective would automatically mean people can't be insulted). Or nothing that he said should have insulted anyone and therefore should not have consequences.

If you can't find quotes in context made by Kirk that people would find insulting, then that is a search issue. Does that mean he should have been killed? Absolutely not. But again, it is quite obvious that saying things that insult people can lead to consequences. And those consequences can vary because people vary.
by branko_d | 2025-09-14 04:36:52+00:00
> You want all of your query logic to be versioned with your application code.

SQL can be stored in version control just as well as any other code. This can include application-level queries as well as the DDL SQL which defines the actual structure of your database.

It's sad that tooling for this kind of workflow doesn't seem to be particularly good across the board, Visual Studio being somewhat of an exception.
by gm678 | 2025-09-14 04:36:58+00:00
I hate getting that 'is this LLM output?' feeling halfway through so many articles these days. The article is good but sentences like "This wasn't a minor limitation; it was a fundamental capability gap." are painful to read.

> Currently, logs and traces live in separate worlds. You can see that a trace has an error, and you can see related logs, but you can't query them together.

I've looked into SigNoz a few times but still using Grafana. The former does look promising, and features like this would start to make the case for maybe switching.
by beeflet | 2025-09-14 04:38:09+00:00
I think you're right actually. Now that I reflect on it, there are many times where the roles are reversed. For example, with this recent assassination of charlie kirk, the right wingers are role playing as the oppressed and are practicing the crybulling tactics of getting people fired from their jobs for politically incorrect speech.

But I think the right generally appeals to people with a more tyrannical personality, and vice versa.
by int_19h | 2025-09-14 04:38:44+00:00
> You need something more sophisticated than using smart pointers for everything. In the limit, smart pointers for everything is just called "Python".

I don't see how that follows at all. What makes Python Python (and slow!) is dynamic dispatch everywhere down to the most primitive things. Refcounted smart pointers are a very minor thing in the big picture, which is why we've seen Python implementations without them (Jython, IronPython). Performance-wise, yes, refcounting certainly isn't cheap, but you just do that and keep everything else C++-like, the overall performance profile of such a language is still much closer to C++ than to something like Python.

You can also have refcounting + something like `ref` types in modern C# (which are essentially restricted-lifetime zero-overhead pointers with inferred or very simplistic lifetimes):

https://learn.microsoft.com/en-us/dotnet/csharp/language-ref...

It doesn't cover all the cases that a full-fledged borrow checked with explicit lifetime annotations can, but it does cover quite a few; perhaps enough to adopt the position that refcounting is "good enough" for the rest.
by gucci-on-fleek | 2025-09-14 04:39:41+00:00
> Assuming you're running your own DNS server, you could also check the logs to see how many queries you get for the "port" SvcParamKey.

Any DNS responses for an HTTPS/SVCB record will always include all parameters, so you can't really test things that way. But I do run my own DNS server, and in the past 90 days, it issued 206 071 A responses, 122 314 AAAA responses, and 4 426 HTTPS responses, so HTTPS RR requests are still fairly rare.
by int_19h | 2025-09-14 04:41:59+00:00
Proper union types would get you there. If you have them, then each specific integer constant is basically its own type, and e.g. uint8 is just (0|1|2|...|255). So long as your type algebra has an operator that excludes one of the variants from the union to produce a new one, it's trivial to exclude whatever, and it's still easy for the compiler to reason about such types and to provide syntactic sugar for them like 0..255 etc.
by ModernMech | 2025-09-14 04:42:03+00:00
It's funny, because government officials, journalist, healthcare workers, and educators are exactly the kind of people Kirk attacked as a podcaster, and generally have been the primary targets of the MAGA right. Podcasters are apparently not high enough on the trust ladder to be held to a higher standard for what they say.

We are at a place where the president of the united states gets to mount an insurrection and pardon people who beat cops with the American flag then claim the opposition is "fostering violence"; gets to claim that educators are "grooming and indoctrinating kids", that journalists are the "enemy of the people", that government officials are the "enemy within". While those people on the left are expected to summarily disarm their rhetoric because they are in positions of trust. Sure but what about: gestures toward the president of the united states.

Or what about, I don't know, the world's richest man, Elon Musk? He has so much power and therefore responsibility. Why isn't he expected to speak with prudence and responsibility? He's on Twitter spouting off about how the left is "the party of murder" before anyone even knew anything.

AOC, Bernie, and Zohran are often labeled "radical left socialists", but they offered nothing but calls for peace and calm from them. Meanwhile Musk was calling them murderers! No one is going to fire him for that rhetoric!

So if you're going to demand accountability for words from people in positions of trust -- which to be clear I agree with -- let's be honest about the fact that some people are put in higher positions of trust, and some people should be, but for some reason (money/power) are not ever, never, not once held to account for what they say. So maybe if we want to actually change something as a society, we should stop doing the same thing, and instead hold people at the highest echelons of power responsible for the things they say and do.
by Aloisius | 2025-09-14 04:42:12+00:00
> Anyway, poor UX. But of course TZ names could also be argued as poor UX. What if you just did PST/PDT as Los Angeles, CA; Oregon, OR, and Seattle, WA all on separate line items? Sure, it's duplicate data but a backend system (Postgres config files, say) should only store the value of the TZ, i.e. -7 / -8.

Because that doesn't tell you when the timezone changes. Two locales can share timezones but start or end daylight savings time at different times.

For instance, Cuba and Florida are both -4 / -5, but Cuba starts and ends daylight savings time 2 hours and 1 hour, respectively, before Florida.

Then there's the fact that locales, once in a while, will change what timezone they're in (like Samoa in 2011) or stop/start observing daylight savings time. Having the timezone set to a place largely solves this problem.
by bix6 | 2025-09-14 04:43:34+00:00
> The best defense is to start at 5,000 feet and stay there for 3 days, drinking water like crazy and resting. Then, come up to the higher elevation and give yourself a day or two to adjust. That usually works.

This is crazy to me as I usually only get 1 acclimation night in before going up. I’m curious how people can find their limits / needs?
by westurner | 2025-09-14 04:43:48+00:00
> The old social media was more like going out

>> [Social media] is about connecting businesses to customers, not the other way around

Originally there were no business accounts, ads, or news feeds on Facebook, for example.

From https://news.ycombinator.com/item?id=35877603 :

> for the record, e.g. Facebook did originally require a .edu email address at an approving institution

What were the other pivots from that original - textual personal profile and you can only write on other peoples' walls - product to profitability?
by AngryData | 2025-09-14 04:44:20+00:00
There are certainly a lot of people like you describe, but there also many "hippy" types that just like to grow plants or DIY makers. Often they have to do more with less, but cheap land can give people the freedom to do stuff like loud metal working or space to repair older equipment for cheap or grow large gardens.

One of the biggest problems though is just the poverty, options are limited and wages are shit and like you mentioned innovations don't make their way into rural areas until like 10+ years later. And if you don't move away to a big city the majority of people are never going to make a lot of money and will often be ignored for most everything except as a source of revenue for podunk courts and cops. Of the highly intelligent and aspirational few that are left, most end up severely stifled by lack of financial opportunity even if they are doing great work because most of their potential customer base are poor too.