skysight-inc/HackerNews huggingface dataset:
SPA is HTML/JS served by the server. We don't need client-only solutions. We need devs to understand how HTTP and browsers work.

It means that we simply keep using what actually works, i.e. serverside component that obtains authorization and we use simple mechanisms to ensure token stays at the server and FE speaks to the server which in turn speaks to the target app. Proxying is not that difficult of a problem and we don't have to run in circles, inventing different flows only to cater to devs who can't learn their field.
Engineers like to spend time tinkering with things and some of them consequently devalue convenience.

For example:

https://news.ycombinator.com/item?id=29043420
Terraform is still the dominant tool in the "cloud infrastructure as code" field. All the solutions I've seen have lock in because they have their own DSL, but I think they're comparable feature-wise.

The main difference to me is that Terraform explicitly doesn't want a Turing-complete language for the predictability of outcomes, and Pulumi wants Turing-completeness for expressiveness.

Both approaches seem reasonable to me. I like knowing that Terraform can't create infinite loops, but those constraints can be annoyingly restrictive. Pulumi gives me a familiar environment and an expressive language, with the risk that I could end up trying to create infinite EC2 instances.
I had a lot of trouble with the quality of Hanes socks in recent years, and Fruit Of The Loom seemed not much better. Switched to Dickies and haven't looked back. Still far cheaper than Bombas.
Show HN: MIDI Recorder, the easiest way to record MIDI
The website linked in the description is down, and digging up the Twitter account, the last tweet is from Feb 7 saying the marbles are "nearly ready".

Looks to me like that niche is not filled yet after all!
Working as a contractor wasn't bad - you had full control over your tools, training, ways of working and so on. Unfortunately agencies that source workers thought this is a threat to their business model so they lobbied governments around the world to end any benefits of working as a contractors - e.g. not being able to deduct legitimate business costs from the tax.
So the contracting will be dead in the near future. Your only choice will be working for a big consultancy or directly with the company (if you are lucky).
It's a shame, because this is a road to serfdom.
If you want to monitor things around you, and you have an SDR dongle set up, rtl_433 is handy. I have a Pi 3 running it to graph temperature and humidity readings from a couple of remote-reading sensors, plus barometric pressure from a Sense Hat and voltage, load, and battery readings from my UPS. It will display selected readings on the LED display, but I mostly just let mrtg/rrdtool do its thing.

https://github.com/merbanan/rtl_433
Nice article !

Super curious about your plan for persistence and compression ?

With TSDB interning labels, do you expect any increase of size for the label part ?

And finally any specific reason for not having this under the Parca repo ? IMHO working across multiple repo in go can be a PITA.
This is ab irrelevant tangent on the mid level phone comment. We all know you don’t need any compute power at all to make “2-3 login attempts per hour” even on the slowest of IOT devices.
I got bored long before then. It's a terrible piece of self-backslapping drivel
Microsoft Rebrands Its Data Governance Service to Microsoft Purview
It’s a good idea to try things and make up your own mind, sure.

But a lot of folks who buy high-end stuff think they are being value-conscious when in reality they are just parroting the features and benefits copy the manufacturer or retailer gave them. I’ve worked specialty retail and did this for years.

Here’s a great example: a rain jacket for kids had a tag advertising that the special high-end fabric was “wind proof up to 60 mph.” At first you’re like, wow that is really wind proof. But if you think about it, who the hell is going to take their little kid out in 60mph wind?? It is pointless marketing copy.

Most higher-end-features are pointless, or overkill. My mattress does not have “pocket springs” and I sleep just fine. And how great does underwear need to be? For most people, not that great.
Are there a lot of binaries "over a few gigabytes"? On x86_64 you can only have 32-bit offsets for relative jumps. How would you build and link something that large?
A few years ago (2016-2017 maybe?) I ordered a pair of underwear from several of these brands, like Saxx, MeUndies, 2undr, and Calvin Klein. After some time passed and I had given them all a fair shot, I ordered like ten pairs of my favorite one and I have never regretted it. Only one has not survived to this day and they’re still wicked comfortable.
I have a server at home with file syncing, personal media, and home automation. I want to be able to access it remotely, but I’d rather some of those things not be publicly accessible for security. I could always do HTTP auth with an nginx reverse proxy, but it’s not a very smooth workflow and it relies on me being able to configure my server/services correctly.

Instead I can bind my services to Tailscales network interface and access it anywhere that I’m connected to my Tailscale network. It’s like authentication for free.

As a side note I know this is an anti pattern since one intruder can access all of my services, but that’s not a vector I’m really concerned about since I’m not exactly a high value target.
> a direct ring of trust with friends

The vision you outlined is great, except it doesn't work. The trust assumptions are too high, and even a great product like Tailscale seems to rely completely on centralized identity providers (you have to choose Google, Microsoft, or Github on sign-in).

Ultimately, if you want to maintain full control of your online identity and network, you'll probably need some of the decentralized (but economically aware) resources you seem to have issues with — or at the very least a means of transitioning authentication to private key methods with DIDs.
Interoperability in Education
So is "vindication' in the "hipster's credo" alignment conclusion.

Don't get me wrong, I eat Coconut Cult yogurt. It's yummy and good for my tummy. But I am not going to adopt a human-head-shaped-food diet.
What happens when your financial institution or your doctor, whose IT departments run Linux on their servers to handle your personal data, install such insecure software?
WireGuard in Docker - then open a firewall port.

However to get it actually simple, Tailscale. It’s truely ludicrous. I had it running inside 10 mins, but only because I wasted 5 minutes trying to work out what to do next, when it was already running.
Fixed supply is deflationary in a world where population increases. Whether or not population will continue to increase is another question.
A Medical Thought Experiment
I'm going to assume OP was being sarcastic.
Usually we like for replies here to reply what the person above wrote.
What about a use case where you want to use a hashmap to store 3 different types of keys independently. Would you implement the hashmap once and just store a union of the 3 types and then assert the correct type has been stored at each call site? Would you implement the hash map 3 different times? What happens if later on, some years later, the code needs to change and another type needs to be stored in a map? Generalizing a map via void pointers is the most pragmatic solution.
The world is full of cowards. I try to adopt cowards compensating strategies (while at the same time working on increasing bravery).
In the last year, there has been a concerted push by certain influential engineers to split our mono repo up. This was first done by splitting things into two repos that were supposedly independent. But they really weren't. Naturally, there was code and configuration that we wanted to be common between the two repos. So now, the solution to every one of these problems is to break off more code its own repo. As the saying goes, as soon as you have two objects, soon you will want a third. It has become a complete nightmare to work with, and as far as I've seen so far has had zero tangible benefits.
Oh, that is a shame. I can see why they do it like this for businesses, but for personal accounts I refuse to use SSO. Been bitten by that a few times too many.

I _could_ use my github account, but I don't trust them at all anymore. And I'm not going to setup an account with some other service just to use this. So that is a hard pass for personal use.

For a company it makes sense to have to use whatever sso provider you are already using i guess
I left Intel in late 2020. Worked a bit on Meteor Lake in the pre-silicon design phase starting around '18 or so. I never really got over the lag between the most intense period of my day to day on a particular product and launch.
God I am sick of these apologetics every time someone expresses skepticism.

> Get it wrong another way and you end up overwhelmed by traffic, unable to scale in response and forever fighting fires.

To nitpick this specifically, over my 12-year career toiling over this stuff there has never been a scenario where this has required a radical rework to solve. Boring-ass B2B shit rarely requires that level of engineering and, at least in my case, the workloads were fairly predictable and increased in a linear fashion. The one time I did accidentally end of DDoSing ourselves, I temporarily stood up nginx instead of our aging Apache install and was able to serve enough requests to fix the problem. (We then transitioned our app to run in nginx)

It was one fire, and it took a little bit of brainpower to fix. Then the DO droplets were humming along perfectly, and last I heard they continue to do so to this day.

The operational aspects of this double-digit-millions-per-year business ran on a postgres database that compressed to 6gb.

The next business I worked for did billions per year in business value and, until HQ mandated migrating everything to GCP, was humming along perfectly fine on Heroku for a monthly spend well under five digits. Ironically, I think they initially wanted us to be on-prem but couldn't support our stack and would have left all of that to our devops guys. GCP was the compromise (oof!).
Or FreeBSD.
You landed on the surprising root cause:

“Doesn’t add business value”

But do you know how the business makes money (the actual processes)? Can anyone tell you how to add value in concrete terms?

Because in over a decade of consulting on technical leadership, Agile, lean and DevOps, the most consistent issue I’ve seen is that those questions are unanswerable for almost anyone in almost any company.

In the absence of a clear path to value creation, everyone optimizes locally for “best practices” because…

the root problem is almost all decisions have to be explained to people who know next to nothing about your area & you need to still sound rational.

The local maximum for that usually is “this is how _____ does it & it’s the new trend now.”
Yeah like every other technology it will either ultimately prove its worth or fade into obscurity like everything else. I just don't see the point with these extreme viewpoints.
At least at Google, map[T]bool is more common, by an order of magnitude. Probably because map[T]bool is recommended by our official style guide, which tends to favor readability over a negligible performance difference.
Isn't the stereotype that every tech bro in silicon valley only wears lululemon? $50 t-shirts and $130 pants don't exactly scream lowest cheapest grade to me.
I've used many solutions, even built my own in the end. Problem is that there's no software that can make SSO easy to understand if you don't know everything about SSO to begin with.

SSO is not that complicated to work with, the docs are just stupidly difficult to read and the point of the whole process is rarely explained. Learning how without knowing why is nearly impossible.
History repeats; always.

Our nation is currently on the downward slope of the bell-curve for civilizations.
What was the motivation for building your own instead of using something like DuckDB which support parquet out of the box? What are the differences?
jellyfin, plex, gitea, heimdall, vaultwarden, traefik, authelia and some usenet stuff all behind 2FA with authelia on docker
I'm not sure what your point is. I didn't claim memory unsafe languages aren't used, they obviously are. C is in fact not an easy language to verify. There have gone trillions of dollars into that and it's still not solved. You can't verify C. You might be able to verify a subset of C. But if you are in any position to choose any other language you should run, run, run quickly and far away from C.
Just install wireguard yourself. With Bullseye on the RPi, it is easier than ever. There is a learning curve, but it is worth it.
I thought google did this versioning thing for libraries before, but it was stopped for reasonable reasons (g3 components).

Basically if you could pin lib versions everyone would be stuck on old versions for a long time, causing difficult debugging work for each user of the library. You'd then also have all sorts of diamond problems: what if you want newest absl but older bigtable client?

It's a difficult problem no matter which way you go.
Honestly I haven't noticed and I use 1Password on all of my devices every day. I heard some grumblings about 1Password changing to electron months ago and just assumed that they already made the transition. In whatever case, I haven't heard a peep until this thread. I don't like electron in theory and the industry should collectively come up with a solution that incentivizes app developers away from electron rather than hoping they swim against the current of incentive.
Yes it was mostly micro services, with a separate frontend repo, and a separate repo for deploy scripts, some separate libraries that were shared between the microservices, there may have even been a separate repo for documentation, I don't remember exactly.

I think it really just came down to dividing the repos into chunks that the deployment scripts could use/trigger off of. Instead of developing in a way that makes sense for developers and bending the deployment to fit. Since it was all in one directory on his computer, it was basically a mono repo from his perspective. Committing from the IDE just committed to whichever repo was changed, and since he was the only developer he never saw the downside. When I had to take it over ghorg[0] really came in handy. It's a script to clone all repos from a user/organization on gitlab, github, and others. Then once I opened up all the repos as one pycharm project I was able to get some stuff done, but at that point I might as well just had one repo with a separate directory for each.

[0]https://github.com/gabrie30/ghorg

EDIT: I also just remembered that gitlab is much better than github if you are going to go the route of multiple repos for one project. Gitlab lets you create namespaces to group your repos, so if they're all in the same namespace, you could have documentation to just tell people to clone all of them.
By that logic, there’s no need to ban beating your dog because you can simply _choose_ not to beat your dog.
Yes, it's usable with every tailscale client (except for iOS). You provide an argument to make headscale your controller, and then it works much the same as the hosted Tailscale service, with some only minor differences in configuration.
pay for colocation with BGP access with a fake ID or compromise any BGP-announcing router in the entire world (I've found cisco routers with announce access, with default credentials, on networks that don't do any kind of prefix filtering many times before) and you can trivially MITM most any network in the world with very minimal impact. I recommend you watch to Kapela and Pilosov's talk from DEFCON 16 to see how easy it is: https://www.youtube.com/watch?v=oWdjsfsS_Do

or if you don't want to do it via BGP announcement you can just compromise any of the devices that are along the route between the client and the server. BGP is the rocket launcher of worldwide circuit compromise, but there's many other guns you can pick up
A Pi will run a lot. Next step up is an Intel Nuc. An old one is fine but the newer the better. The 11th gen is rather powerful, but even the 8th is pretty great.
Depending on how pedantic you want to get, my most-used self-hosted application is SSH followed closely by nginx and gophernicus.

To give an answer more in line with what the post author appears to want, I've been playing around with Pleroma lately, so it's my most-used self-hosted application until I find something newer and shinier to distract me.
What will happen over time is that as we disrupt old-school IT and re-introduce the idea that you can own your own compute (disrupting the everything-cloud model) the various participants in this new area will find niches in which their specific strengths and features shine the most. This always happens. Look at databases. There are like 10 decent sized database vendors for a reason, not to mention several paradigms: SQL, NoSQL, NewSQL, GraphQL, etc.

But if we don't succeed in disrupting the actual competition everyone fails.

At least that's how I look at this market.

Of course I'm also a mostly-follower of the "ignore your market peers, focus on the customer" philosophy. Your greatest competition is always your own shortcomings.
Thank you for the follow-up! Very thorough. Sorry if I was being rude.

I do use the mouse buttons on occasion. I can't actually remember the last time I used the trackpoint. I did in some cases, but the annoyance over the dirty screen became too much and it had to go. ;)

Re. lid pressure, that will certainly make it worse, but the T460s I use at home rarely goes outdoors, so I don't think that's the cause. I see dirt build-up on the screen even now that the trackpoint is below the keys, so there's probably finger oils rubbing off the keys as well. Oh, and maybe using the rubber a lot will flatten it so rubbing is less of a problem.

> My suggestion there would perhaps be along these lines

Thanks. I still find it amusing that politness and humbleness is not the implied default, but something that needs to be made explicit every time. I should have taken the time to write something longer. :\ Next time.
It handles a lot more than that, right? It does all of the key distribution and rotation which is a pain.
I believe in digital currency as an incredible exercise in human logic and reason. If there's a value assigned to that, so be it, but I want and need to be involved in this whole algorithmic exercise because I live and work in the industry.

Am I relying on crypto to retire? Hopefully not, and anyone who does may want to reconsider balancing their portfolio. It can go away as easily as it arrived. I don't think it will, but there's a chance that it's a Palm Pilot in a world if iPads.
> Fixed supply is deflationary in a world where population increases

This assumes the whole world uses the currency, which is untrue for every currency in the history of humanity, and that per capita output per person using the currency is at least flat, which is also questionable.

Demographics are an input into monetary policy. But the effect is way fuzzier than you imply [1].

[1] https://ssl.nbp.pl/publikacje/materialy_i_studia/284_en.pdf
Gitlab on LXC
The inclusion of butyric acid has been an intentional choice for the majority of Hershey's existence at this point. It's been shown repeatedly that American consumers prefer it that way.
Driving also brings great value. Using C over another language "Because you can't tell me what to do" does not. The more apt comparison would be if we had fully self driving cars that are proven to make almost no mistakes. And then still wanting to drive a car yourself on public roads, endangering yourself and others.
I don't know your situation, but can't you use an old PC to start your self-hosting journey?

It's what I did. It costs me less in electricity than a VPS but it's way more powerful.

The only thing I eventually bought was an UPS, because for some reason I regularly have micro power cuts at home.
I'm not affiliated with either, but I use rathole (https://github.com/rapiz1/rathole) and kamatera (https://www.kamatera.com/) as my own kind of ngrok. But I've also heard good things about tailscale (https://tailscale.com/pricing/) which has a free hobby tier. Gonna give that a try after work today.
Can you go to a mall and try on Tommy John underwear or bombas socks? Tommy John is selling on specs. $36 is a big price to just try out a pair of underwear to see if you like them.
What are the best examples of catastrophic resource shortages?
As I understand it the inner ear performs a Fourier transform such that each location within in corresponds to a frequency detected in the sound.

That way, an interval or chord has a geometric shape plotted into the inner ear. The distance between detected points can be detected but not their absolute position.

It's probably a bit like how the eye detects objects: you see points of light that have set positions relative to each other (shape and size of the object), not the "absolute" positions in your field of view.
Simply, it is a bad point of view, and deserves discouragement in exact proportion to the amount of promotion it gets. He wants it both ways, and does not deserve that.
That's not a variant, it's just 2 optional fields: one called "foo" and one called "bar". A validating parser then has to know that they are semantically linked. Admittedly this is what protocol buffers does in the binary wire format, because oneof's are just a frontend hack (iirc the latest value decoded gets kept), but it's not the same.
I believe in price signals and market adjustments more than any of those doomsday projections. Unless for unknown reasons, all oil reserves suddenly disappear overnight, I am not concerned.
Did the post make you so angry because you've invested a lot of your identity into the things you own?
Assuming the vendors are not lying, then the setup for these services is that your master password encrypts all data before it is sent to the server, and the service cannot see your master password or any of your contents.

That said, I use KeePass on Windows and Android, sync my safes once a month/as needed, and call it a day.
Very good question! While we may add a textual query interface (maybe even SQL) in the future, we very intentionally started with this abstraction, since most Observability projects out there (eg. Prometheus, Grafana Loki, Parca) have specialised query languages that we wanted to have a lower level abstractions that those languages could be implemented on top of, instead of having to transpile to SQL (or whatever proprietary language we might have come up with).
Even if you can't tell the difference in quality, for some of us (thank god we're all different!) there's a certain feeling attached to purchasing things. Like being a kid and getting Jordan's as opposed to a regular basketball boot - thrilling! We may be buying the brand, we may be buying the dream, we may be buying the experience, we may just enjoy the placebo effect - it doesn't really matter. If you have no interest in paying for it, don't buy it. If no one has an interest, they go out of business.

Sometimes I buy cheap things, sometimes I spend far more. Maybe no one ever sees my $50 underwear and maybe the quality isn't 10x my cheaper ones. But also maybe I have just a little more confidence on the days when I put them on in the morning.

Life doesn't always have to be so rational.