MurphyA/hacker-news huggingface dataset:
by Hendrikto | 2025-10-22 10:22:35+00:00
> When you always published and built Docker images for the public you are creating an expectation

That expectation does not entitle anybody to anything though.

> people will rely on that and will chose your software based on that expectation

That is their decision. Without any contract or promise, there is no obligation to anybody.

> You suddenly deciding that you won't be offering updated Docker images […] is approaching malicious-level actions.

I really don’t get this entitlement. “You are still doing unpaid work I benefit from, but you used to do more, therefore you are malicious.” is something I really cannot get behind.
by ivann | 2025-10-22 10:22:36+00:00
Your own link said it 33%, so not the majority. A union has no obligation of "independence". Being member of a union does not mean you agree with everything, just that you think it's the best to defend your interests. The "Fête de l’Huma" is not the Communist Party's annual conference but it is indeed left leaning. There is no need to write communist in all caps, it's not an insult. For your last point you'll need to provide sources.
by simondotau | 2025-10-22 10:23:37+00:00
It’s hard to believe Musk suddenly decided to flash a Nazi salute in one random moment. If that were his intent, he’d have owned it as he always does with controversial takes. Occam’s Razor applies: a famously awkward guy made a clumsy gesture because he was too caught up in the moment to think about how he is comporting himself.
by jraph | 2025-10-22 10:23:46+00:00
Rant about the concept of open source freeloaders: there's no such thing as open source freeloaders. If the license explicitly gives you the right to use the stuff for free, there's nothing wrong in using this right. While it would be the right thing to give money / otherwise support the projects you rely on, it's on the software developers who decide to give these rights (I also think it's the right thing to do though) to figure out the business model.

There's also nothing wrong in being upset about something you relied on disappearing overnight. If someone decides to provide something for free, they should give time for people to stop relying on this free stuff if they can.

However, I also believe you should own it if you decide to ever rely on prebuilt Docker images. More specifically, if you are relying on prebuilt Docker images, you are letting someone else decide on a part of your infra. And yes, this someone else can decide to stop providing this part of your infra overnight. This is on you.

I also don't find anything wrong in deciding to not provide binaries for your open source project, or to stop providing binaries, including docker images.
by CuriouslyC | 2025-10-22 10:24:07+00:00
> To solve problems. Coding is the means to an end, not the end itself.

100% this. I think a lot of the people who are angry at AI coding for them are "code calligraphers" who care more about the form of the thing they're making than the problem that it solves. I can't see how someone's who's primarily solution focused would shed a tear at AI coding for them.
by amanaplanacanal | 2025-10-22 10:24:17+00:00
The way things are funded in the US is pretty crazy. New projects usually rely on federal government grants, but that money normally can't pay for maintenance. So states and cities have to pay for their own maintenance. The federal government just prints new money for these new projects.

Everything is so car oriented and spread out, that there isn't enough value to tax to pay for the maintenance on all the spread out infrastructure. So states and cities are always on the brink of default, scrambling to maintain all this stuff.
by CaptainOfCoit | 2025-10-22 10:25:08+00:00
> it's safe to assume AI is involved in some way nowadays

I don't think it's safe to assume so at all. Granted, I only know one journalist, and they've told me they only use LLMs in their work to gather further sources/references to check, everything else they still do "manually" with their own hands.

The editorial team should know exactly the scope of their teams AI usage. The snark mostly comes from them not knowing if AI was used or not, and they be upfront about them not knowing it. Feels like they're missing integrity if they don't know such things.
by Ekaros | 2025-10-22 10:25:36+00:00
Food is probably the one where free market will do better. Or what should universal basic food look like? And how would it operate?

With education and healthcare. Well good enough systems already exist as examples. So nothing really to do there with UBI receivers spending payments.

Housing is more balanced question, but maybe involving money with public housing could allow better allocation. More popular locations being more expensive and less popular cheaper. Thus moving demand around.
by marginalia_nu | 2025-10-22 10:26:55+00:00
FUTO sent me money for a production server with no strings attached. Seem to be nice people, if possibly a bit inexperienced with charity work. Eron came off as very much the archetype of a Gen-X tech bro what little I spoke with him.

Whether a donor's politics are red or blue, their dollar bills are still green. Turning money down, especially when no strings are attached, is just self sabotage.

Dunno if that puts me on Drew's Pepe Silvia wall but whatever.
by imiric | 2025-10-22 10:27:18+00:00
There's nothing "hacky" about port knocking. It was never meant to be a complete security solution—nothing is.

But it works very well as an additional layer of security. Sec nerds often scoff at "security through obscurity", but it is a very valid strategy. Running sshd on a random high port is not inherently more secure, but it avoids the vast majority of dumb scanners that spam port 22, which is why all my systems do that. Camouflage is underrated, yet wildly effective. You can see how well it works in nature.

In any case, this is not a port knocking solution anyway, as I mentioned in another comment.
by flail | 2025-10-22 10:27:24+00:00
I think these two are two dimensions. You can have any combination of: a) single branch vs feature branches b) code review as a norm vs not required

(I'd rather draw a line with code review being/not being a norm, rather than whether it's mandatory. It can be mandatory and still shit.)

And as you suggest, I would expect that trunk-based development leads to greater care for quality. Add to that code reviews that seem to improve quality even further. I don't see a contradiction here.

Also, what the data suggests is that, for good productivity, it may be more important to have short lead times (from development to production) rather than just "no mandatory code reviews."

If you can expect code review to be done just-in-time, you retain the context, limit the tax of context switching, avoid Zeigarnik effect (https://en.wikipedia.org/wiki/Zeigarnik_effect), etc. So I guess this may be a sweet spot reconciling two sources.
by Imustaskforhelp | 2025-10-22 10:27:24+00:00
https://github.com/coollabsio/minio

I was reading the github discussion and found out that coollabs has taken on the decision to make docker images for these.

https://github.com/coollabsio/minio

https://github.com/minio/minio/issues/21647#issuecomment-342...

>Until we (the community) figure out something, I made an automated docker image version here: https://github.com/coollabsio/minio

The latest release is already available on ghcr and on dockerhub for amd and arm.

Well they have locked the discussion right now it seems but hope the community does something since my brother once asked for how to store audio and I thought that something like S3 could be perfect for it and wanted him to use minio or check it out.

Idk what I will recommend now? Garage? Seaweedfs?
by CaptainOfCoit | 2025-10-22 10:27:56+00:00
> Foreign powers will still have the ability to shut down or manipulate traffic, which is hardly sovereignty at all.

Apparently, some partners/"friends" are more likely to take military action against you than others.

If you're considering sovereignty and you have a choice between one partner who've said "I'll protect you" and another that said "Well, we'll never rule out military action against you", working together with one of those are obviously better for your sovereignty than the other.
by konart | 2025-10-22 10:28:33+00:00
>America cannot possibly win the space race again, because it has already been won.

How so? Because you decided that reaching the Moon equals winning? Why not Mars?

Same way we can say that USSR won the race because they were the first ones to put man into space and bring him back.

https://www.youtube.com/watch?v=cy_H2BeE_Nk Neil deGrasse Tyson on topic.
by sjw987 | 2025-10-22 10:28:41+00:00
I feel so glad I retrospectively moved all of my ebooks away from Amazon at the beginning of the year. It was weird to hear just days after I exported it all that Amazon had announced they would no longer allow downloading for USB transfer.

Now I have all of my epubs, unlocked, DRM-free, backed up, and I place them on whatever my ereader of the time is (currently Kobo), or read them on my own self hosted web reader.
by CuriouslyC | 2025-10-22 10:28:46+00:00
Git doesn't just have warts, its DX is actively bad. If it was good you wouldn't have so many tools designed to make it not suck to work with 20 years after release. The graph first and diff first design decisions are both bad choices that are probably burning millions of man hours per year fixing things that should just work (to be fair, they were the right decisions at the time, times have changed).
by fragmede | 2025-10-22 10:29:48+00:00
If it were for a feature request, it would feel more justified. People feeling entitled to making feature requests is one thing. Like they can get fucked. Contribute code or pay me. But if I let something loose out into the world that suddenly started causing problems because someone discovered you could stab people with it, I'd be going around making sure all of the copies I gave out it had a knife guard put in place.
by gear54rus | 2025-10-22 10:30:15+00:00
Or one can just use old images. Which is what many people started doing after their other fuckup - removing perfectly working web UI from free version.

They just can't stop shooting themselves in the foot that didn't even heal from last time.

The last tag with a working web UI is RELEASE.2025-04-22T22-12-26Z btw.
by mvx64 | 2025-10-22 10:30:41+00:00
If you keep resolution low, manage your scene complexity carefully and commit to the art style, you can make reasonable 3D games that run even on 20 year old hardware. I did so as an experiment on my game [1] [2] and now that I can see that it works, I am working on a second, more "serious" and complete one. Computers are fast.

[1] https://news.ycombinator.com/item?id=45270981

[2] https://totenarctanz.itch.io/a-scavenging-trip

Really cool news about raylib. I will seriously consider using this.
by Imustaskforhelp | 2025-10-22 10:31:20+00:00
https://github.com/coollabsio/minio

Coolify is already doing it but your comment is on the verge of being passive agressive. I wouldn't say these are open source freeloaders because they could be using things like watchtowers etc. which automatically update and it could be a very huge deal for automated updates especially after I saw that some recent CVE of minio happened.

Simply put this just hurts the security of people running minio, I wouldn't say its freeloading, its actively harming the community. There are people in that thread who are paid customers as well saying that they lost a customer. I wouldn't say its freeloading. Minio already has some custom license or paid offering and I think that they make decent enough money out of it, providing docker files and then stopping to is kinda a shitty behaviour if they are unable to explain the reasons exactly why. I couldn't find the exact reasons on why they are doing what they are doing except making it hard for people to self host.
by sjw987 | 2025-10-22 10:31:23+00:00
Dropping in popularity, but not relevance.

Reading is still a completely different thing from a book, a stream of consciousness between a writer and a reader, than it is reading in almost any other format. The way we read online from websites and apps is changing how our brains work and how we process text for information (not for the better). We're slowly becoming like the look-up tools that we use in Google and other search engines and LLM agents.

The best way for many chronically online dopamine fried people today to revert their brain back to some normality would be for them to read books and to fight through the distractions as they read.
by kragen | 2025-10-22 10:32:20+00:00
Not the original poster, but if I were doing it with find rather than fd (or ag or rg, which I think can do it without fd or find) I'd do (untested)

(find "$projroot" -name .git -prune -o -name node_modules -prune -o \ \( -name '*.[tj]s' -o -name '*.[tj]sx' \) -print0 ; find "$projroot"/node_modules \ \( -name '*.[tj]s' -o -name '*.[tj]sx' \) -print0 ; find "$projroot" -name .git -prune -o -name dist -prune -o \ \( -name '*.py' \) -print0 ) | xargs -0 grep /dev/null "$search_pattern"

And, although that approach does work (and maybe even that script will work without any bug fixes) it probably goes a substantial distance toward showing why fd was written.

Doing the three searches separately and exiting after one succeeds is only slightly more code.
by georgehopkin | 2025-10-22 10:33:41+00:00
University of Birmingham research published today reveals that London’s ultra-low emissions zone delivered substantial reductions in nitrogen-based pollutants following its 2019 introduction. However, high vehicle compliance appears to have left little room for further improvements after the 2023 expansion.

The study, published in npj Clean Air, shows nitrogen dioxide fell 19.6 per cent at roadside sites in central London within three months of ULEZ implementation in April 2019, whilst nitrogen oxides dropped 28.8 per cent in the same period. The improvements reached areas later covered by the 2023 expansion.
by weli | 2025-10-22 10:33:51+00:00
> There is absolutely nothing malicious or suspicious about deciding not to provide docker images or binaries. Doing so does not hide or guard you against CVE's, which are entirely unrelated to such optional processes.

Agree. But that's not my point. If you start an oss project from scratch and you don't want to provide builds that's fine.

If you start your oss project, provide public docker images since the beginning, start getting traction, create a commercial scheme for you to monetize the project and then suddenly make a rug pull on the public builds; that is indeed irresponsible, and borderline malicious when you do it without: 1. sufficient warning time. 2. after a recent cve.

Is it malicious? I don't know. I prefer to believe in Hanlon's razor. Is it irresponsible? 100% yes.
by exasperaited | 2025-10-22 10:34:27+00:00
It is a bit, though "ditch" could mean both "discontinued using" and "abandoned a deal at the last minute".

For example particularly in the UK and I think in Australia, the expression "ditched at the altar" is not uncommon.

If Greenland was legitimately close to a finalising a deal with Starlink, my semantics brain cells will accept "ditched" here.
by defrost | 2025-10-22 10:34:38+00:00
You might just as well say “The bifurcation of neural spines in sauropods can be likened to Marcel Proust’s seven-volume masterwork À la Recherche du Temps Perdu.” It would be exactly as meaningful.

You Asked, We Listened: https://youtu.be/hS4qu8MNqIA?t=68
by BSDobelix | 2025-10-22 10:34:45+00:00
No big fight, you just have to exclude the devices at boot so the vm can take them over [1] and if you have a AMD-System add that [2] and use the nvme virtual harddisk [3]

[1] https://dflund.se/~getz/Notes/2024/freebsd-gpu/#bhyve-passth...

[2] https://wiki.freebsd.org/bhyve/pci_passthru#Additional_Notes

[3] Creating a Windows Server 2019 VM using vm-bhyve : https://klarasystems.com/articles/from-0-to-bhyve-on-freebsd...
by belorn | 2025-10-22 10:35:31+00:00
Local hosting can make sense. Being able to drive to your provider and talk to them in person is quite valuable, and if you want to get the highest support tier from a large cloud provider you will often pay several times more compared to the same service with no support, assuming you are a large enough customer that they are willing to sell it. Cooperation with local businesses can also result in some fair amount of additional sales (sending customer to each other, buying services from each other, word of mouth, ectra), so the product cost may not represent the complete picture.

Local hosting can also be comparing apple with oranges. A local data center that provide a physical machine is very different from a cloud provider, especially if that cloud is located in a different continent and under different jurisdictions. Given that they were providing SSL certificates, was this a local php webshop? Data centers should be a bit more proficient with things like IP addresses and setting up any cast, but less so in providing help with php or certificates, and if they sell that it may not be their area of expertise.

What prevented them from scaling to more tenants?
by lucideer | 2025-10-22 10:37:42+00:00
Fwiw I bought an Asus router that came with Wireguard pre-installed & has a nice management UI. It handles client onboarding via a simple QR code that integrates with the Wireguard mobile app - even my mother had no issue setting it up.

Buying hardware is an investment (& not something everyone can do) but I've really never understood the point of the control server from the perspective of an open-source self-hoster (for a business like Tailscale it makes sense as it introduces an element of control, user dependency & likely analytics of some value).

There's still a lot that can be done to improve Wireguard's UX but I think the Asus example proves it can be done well. Headscale seems to be doing the worst of both worlds (promoting an architecture & user-flow of a proprietary closed-source competitor, while still requiring CLI setup & instance maintenance). For example, it seems to me like it would be better for them to wrap Wireguard directly & integrate with the actual Wireguard mobile app instead of having people install proprietary Tailscale app on their phones to use your own open-source self-hosted control server.
by Flamingoat | 2025-10-22 10:37:44+00:00
I haven't touched Gentoo in 20 years.

If you use archinstall as I said you can be up and running in 20 minutes on a fast connection. You literally just state what you want setup through a menu, make a hot drink and you have a working desktop. It is pretty hassle free in my experience.

I haven't tried the FreeBSD installer in a couple of years but I always find that I end up lost in the menus or something doesn't work correctly. Then I am kinda left faffing trying to get X working, ports or something else working. I couldn't set the desktop resolution properly and I suspect there was some magic flag I had set somewhere or install firmware.

I just can't be bothered when I can install Debian or Arch in about 15-20 minutes and everything works fine.
by Bender | 2025-10-22 10:37:50+00:00
That's a more complex path I avoided discussing when I referenced CGroups. When I started doing these things kube clusters did not exist. These tips were for people using bare metal that have not decided as a company to go the k3/k8 route. Some of these settings will still apply to k8 physical nodes. The good people of Hetzner would be managing these settings on their bare metal that Kubernetes is running on and would not likely want their k8 nodes getting all broken, sticky and confused after a K8 daemon update results in memory leakage, billions of orphaned processes, etc...

Companies that use k3/k8's they may still have bare metal nodes that are dedicated to a role such as databases, ceph storage nodes, DMZ SFTP servers, PCI hosts that were deemed out of scope for kube clusters and of course any "kittens" such as Linux nodes turned into proprietary appliances after installing some proprietary application that will blow chunks if shimmed into k8's or any other type of abstraction layer.
by jphoward | 2025-10-22 10:38:37+00:00
Have you not seen some of the replies at the link?

For example:

"You are joking ?!

The commit about source only is 4 days old (9e49d5e)

We are currently paying for a license while using the open source version, you already removed the oidc code from UI console and now docker images. We are not happy by this lock-in. We will discuss this internally, but you may loose a paying customer with this behavior."
by tialaramex | 2025-10-22 10:39:42+00:00
"Real-World Software" maybe but not real world effectiveness.

A lot of effort was expended on modelling the hypothetical thing Argon2 is good at, but a reasonable question is: Does that make any real world difference? And my guess is that the answer, awkwardly, is approximately No.

If you use good passwords or you have successfully stopped using passwords in the decades we've known they're a bad idea, Argon2 makes no difference at all over any of the other reasonable choices, and nor does its configuration. If you figure that nobody will remember your password is hunter2 then Argon2 can't help you either. If the attack being undertaken is an auth bypass, Argon2 can't help. If they're stealing credentials, Argon2 can't help.
by exasperaited | 2025-10-22 10:39:43+00:00
Indeed —- choosing Starlink would be a security risk since Musk is totally willing to black out a country's service based on his own interpretations of situations.

I have no knowledge of who has deals and who doesn't, but more countries will find themselves in this situation — if you were picking countries who might see quasi-state embargo from a Trump-aligned oligarch this week, you'd pick Venezuela, Trinidad and Tobago, Brazil, Colombia. Next week, who knows.
by konart | 2025-10-22 10:40:43+00:00
Most "firsts" are terrible at what they do, especially compared to the follow ups.

>first animal? laika died.

Yes, but Belka and Strelka lived. They were the first to go to orbit and back. USSR too.

>first *naut? yuri gagarin didn't even have manual controls.

And Alan Shepard didn't even had a bath. I say this one doesn't count too.

In fact - nothing counts until your nation\program can't deliver a human to Alpha Centauri and black alive and well. Ideally in less than a year.
by Cold_Miserable | 2025-10-22 10:40:59+00:00
I see what you're doing. 13 bytes, 3 cycles. Why does newline not work?

lzcnt ecx,ecx

mov eax, 00100 0011 0010 0000 0001b shl ecx,2 shrx eax,eax,ecx and eax,15
by eitland | 2025-10-22 10:41:25+00:00
"The practice of System and Network administration" by Tom Limoncelli and Christine Hogan[1] was, together with "Principles of Network and Systems Administration" by Mark Burgess have probably been the books that influenced my approach to sysadmin the most. I still have them. Between them they covered at a high level (at least back when I was sysadmin before devops and Kubernets etc) anything and everything from

- hardware, networks, monitoring, provisioning, server room locations in existing buildings, how to prepare server rooms

- and so on up to hiring and firing sysadmins, salary negotiations[2], vendor negotiations and the first book even had a whole chapter dedicated to "Being happy"

[1] There is a third author as well now, but those two were the ones that are on the cover of my book from 2005 and that I can remember

[2] Has mostly worked well after I more or less left sysadmin behind as well