skysight-inc/HackerNews huggingface dataset:
Show HN: Depot – fast, remote Docker container builds
Hey HN! We’re Kyle and Jacob and we are excited to show you Depot (https://depot.dev) and get your feedback!

Depot is a hosted Docker container build service, providing fully managed remote builds from CI and from your terminal. We support both Intel and Arm builds natively.

As application and platform engineers, we have experienced the challenge of keeping Docker container build times fast. From optimizing and reoptimizing Dockerfiles, to implementing layer caching in CI, to running & maintaining custom runners for multi-platform images.

Still today, there are limitations with the available tools. CI runners are ephemeral, and saving and loading cache tarballs is slow. CI providers are resource constrained, with limited CPUs and disk space to dedicate to fast builds. And with the increasing popularity of Arm devices like M1, Graviton, etc, building multi-platform images requires slow emulation or self-hosted infrastructure.

We created Depot to directly address those limitations. Depot provides managed VMs running BuildKit, the backing build engine for Docker. Each VM includes 4 CPUs, 8GB of memory, and a persistent 50GB SSD cache disk. We launch both native Intel and native Arm machines, on Fly.io for Intel builds and AWS for Arm.

We have built a depot CLI that embeds the Docker buildx build library, implementing the same CLI flags, so developers can send their builds to Depot VMs just by replacing `docker buildx build` with `depot build`. We also have a depot/build-push-action GitHub Action that can be swapped for docker/build-push-action in CI.

The combination of native CPUs, fast networks, and persistent disks significantly lowers build time — we’ve seen speedups of 2-3x on optimized projects, and as much as a 12x speedup with some of our customers.

We believe that today we are the only hosted CI or build service offering the ability to natively build multi-platform Docker images (--platform linux/amd64,linux/arm64) without emulation.

We are still early though, and would love your feedback.

You can sign up without a credit card at https://depot.dev/sign-up to access a free project with thirty days of unlimited build minutes to try it out.
To everyone mentioning 3D Secure et al, I've only used them on the payments side, but it doesn't resemble the 2FA systems that the original poster was asking about. What's going on when the browser does stuff just before the payment is accepted?
That's another thing that bothers me about motherboard manufacturer's choices around PCIe -- one that I didn't cover in the article. Why on earth are they choosing (even on EATX motherboards) to put the extra PCIe slots within 1-2 spaces of the primary GPU slot, when they are so incredibly likely to be covered up? Instead, that's a great place to put the M.2 slots. Move the few remaining PCIe slots down, so they can actually be used.
Bellatrix upgrade goes live, sets stage for Ethereum’s Merge
Am super interested in the visual editor. It seems a very difficult problem to solve. Are there any examples (screenshots?) you could share?
My wife is pescatarian, which has really lowered my consumption of meat. There is such a weird contrast between meat marketing and the actual use. With my reduced consumption, I am still sometimes pulled in by marketing: the masterfully grilled steak; the shawarma roasting on a spit; the artisanal burger with a delicate balance of ground beef, fat, sausage, and maybe one or two secret ingredients...

...but this expectation rarely meets the reality when I order a meat item. Modern consumers have high demands for consistency and convenience, and that usually means adjuncts, breading, blending, and other techniques to account for the uncertainties of agriculture. I think we are still generations away from indistinguishable lab meat, but there are so many advances that are ready for market.

I don't understand why the industry is so determined to R&D that "replaces" all animal consumption when more specific, modest goals (replacing the chicken nugget, replacing the pepperoni) would have a notable environmental improvement.
The thing about 3-D Secure is that it uses your phone number to verify it's 'you' making the purchase, but if your phone is lost/stolen and you get a new SIM, you're locked out of making any purchases with any cards tied to your old number. You can always update your details on the card provider's site so there is that. Another thing: SMS is not secure and a SIM-swap away from someone being able to make purchases in your name. I wish SMS just got deprecated as a form of verification. It's 2022, come on, we can do this!
This is providing to the user what the organization paying for slack already has available:

“On paid plans, workspace owners can customize their retention policies. They can choose to set a custom time frame to keep messages and files, and they can also choose to retain all versions of an edited or deleted message.”

Whether or not the company toggles the setting is another matter of course.
IPFS is just too slow for it to be usable on a mass scale. It's a neat idea but unfortunately, p2p file storage is tough, you absolutely need a central model to scale up. Offering coins to cash out at casinos where the other side of the order book are people with unlimited supply of it. Doesn't work.
Indeed you are correct about the

> contrast of energy and resource expense between plants and animals is staggering, even if you’re comparing a less demanding animal like chicken.

I would like to see this study[0][1] repeated for various types of beans and legumes:

> Pork, chicken, eggs, and dairy were all pretty similar, but beef was a different story. Compared to the average of the other four, beef required 28 times the area of land per calorie, 11 times the water for irrigation, six times the nitrogen fertilizer, and it resulted in five times the greenhouse gas emissions For reference, they calculated similar impacts for potatoes, wheat, and rice. Compared to the average of those, beef’s footprint ballooned to 160 times the land, eight times the water, 19 times the nitrogen fertilizer, and 11 times the greenhouse gas emissions. Per gram of protein, the story is largely the same except that potatoes, wheat, and rice have less of an advantage due to their lower protein content.

The math listed in the article doesn't completely check out, e.g. they imply that [pork, chicken, eggs, dairy] require 160x (beef:plants) / 28x (beef:chicken) = 5.3x times (chicken:plants) as much land as [potatoes, wheat, rice], which makes sense, but also imply that [pork, chicken, eggs, dairy] 8x (beef:plants) / 11x (beef:chicken) = 0.72x times (chicken:plants) as much water as [potatoes, wheat, rice]. It's not thermodynamically possible for chickens to use less water per calorie than their feedstock. I never opened the actual study[1] though, I'm assuming they have reasonable results inside the study.

I also think that analysis vs. protein is more relevant than vs. calories -- which is why I think they should be compared against high-protein plants like beans and legumes.

0: https://arstechnica.com/science/2014/07/among-meats-beef-has...

1: https://sci-hub.ru/10.1073/pnas.1402183111
Amex offer to email me with a OTP. I guess those without email probably don’t have much to worry about given that they’re unlikely to be doing much online shopping.
There is already a well-maintained third party implementation of the server.
N. Gaiman: Elon Musk doesn't come to me for advice on how to fail to buy Twitter
I don't understand “a row delete should delete just the row and not potentially trigger N cascading deletes”. If you want that to not happen, then define that in the database definition. It sounds like you're saying that a core piece of functionality is somehow ‘wrong’, even though that same functionality can be used to make the desired bahviour for this exact use case explicit?
Right, my new PC has an m2 ssd and a NAS in the closet.
That's bleak. Where does the black box start? CEO to CTO? CTO to VP of Engineering? VP to Director? Director to Team Lead?
I agree but I'm confused how you can use Signal in the same sentence then.

Reminds me at duckduckgo: makes claims and builds big branding about security but nobody (including me) ever questioned them. (Regarding article not at hand but of course also on HN.)

The first question I would ask: how does Signal finances itself when the service is practically "free"...

For the rest I totally agree: I could also convince some for XMPP/Jabber while at the same time it lets me question my relationship to those I couldn't move. I mean it's not that these days you couldn't install a second app if you already have 50 useless i.e. "coupon" apps installed anyway.
> Has anyody done a thourough calculation with statistics and all?

Yes. There's a lot of research comparing dollar cost averaging with lump sum investing. Lump sum investing in a diversified portfolio (total market ETF) almost always wins, even in periods where markets are 'overpriced' (e.g., high CAPE 10 ratios).
You gotta admire the Chinese bureaucracy for not using kid's gloves when dealing with a problem. In the U.S. you would have miners suing the government, or the government suing the miners, the legality of crypto mining would make its way through the court system and eventually reach the Supreme Court. Then you would have governors possibly standing up to the federal government to retain their miners. In China, the government can decide overnight to kick crypto miners to the curb. No lawsuits, no court cases, no grand speeches, just an enforcement action without possibility of recourse.
IMHO it's not the same, very different nonce and factors of control leading to quite different dynamics
from https://thedailywtf.com/articles/directive-595

Dear Database Architect,

Directive 595 Part 2 is as follows.

"Foreign and Primary Key constraints give lack of flexibility, more
costly evolution, inhibit the use of the database acting as a
service to applications and make it an inhibitor to evolution."

As such, please remove from all production databases.

Sincerely,
Chief Architect Gerald
I just built a new PC after like 8 years and had to buy a cheaper mobo in order to get access to more PCIe slots. I was baffled why there were so few on them and was wondering if I could even fit 2 video cards on the one I originally wanted. I almost hit buy before I went wait, no something does look wrong, where the hell are all the slots! Definitely a bit of a worrying trend. I expect mobile devices to get shittier and shittier as they remove expandable memory and headphone jacks, but not my precious PCs with so many components to choose from and customize with. Luckily I didn't really need to put any of my old stuff into my new rig so it does indeed look empty. I got that Fractal case that seems like a dream for customizability and it feels like a waste that I'm not utilizing it.
There may have been a stealthy power move going on back then to kill off the GPU by denying them anywhere to plug in. When Intel successfully killed off 3rd party chipset makers nvidia was clearly quite worried and successfully sued Intel with the result they were required to keep PCIe expansion available on their chipsets with enough bandwidth for GPUs. (This agreement expired some years ago, I think it was only for a decade)

This wasn't an unreasonable worry for nvidia to have. They'd just lost preferred chipset status on AMD platforms when AMD purchased ATi. Intel had released some lower end platforms with only 1x pcie connections (nvidia had responded with nvidia Ion which could work over such a tiny link) and AMD was talking big about their APUs.

It was a reasonable fear back then that Intel and AMD, with a tightened grip on their platforms and their own integrated solutions competing in the same space, might choose to just cut off nvidia's air supply by flooding the market with chipsets that didn't have the connectivity Nvidias cards needed.
This guy knows what he is talking about
Eh, sometimes I want a burger and fries. Cottage cheese/yogurt burger doesn't sound so great to me.
It's important to acknowledge that, and also that the question of sustainability arises only because of population growth. Growing demand encroaches on land (for a variety of reasons) at either a higher or lower rate, but still encroaches. A stagnant global growth rate would render the problem moot, which is going to happen in 100 or so years. In the meantime we're dealing with environmental problems that require immediate rectifying, and varying consumer habits would be wholly insufficient to do that, though still welcome. Waste in particular could be disrupted with better policy, and frankly, so could agriculture. Meat is subsidized. It's practically a matter of policy to encourage consumption as it stands. To say nothing of regulation, the potential for less land-intensive feed, etc.
Bob and Alice each have 1000 balls. I add 1000 balls and add 1000 anti-balls. Alice now has 0 balls while Bob has 2000 balls. What happened? Were Alice's balls annihilated and Bob picked up the new balls? Did Bob steal from Alice while his balls were annihilated? We just do not know without seeing some extra detail within.
> Zig is harder to learn than C with more difficult concepts.

I'm using Zig and C for a good amount of time now and i disagree. Zig has simpler concepts as C, but in C you can just ignore them.

Consider

char buf[4];
float * f = buf;
*f = 32;

Seems simple, compiles, and even executes. Everyone is happy. But that code will just explode randomly on non-x86 platforms as it violates alignment rules. In Zig, this code will give you a compile error, as []u8 does have alignment 1, while a []f32 will have alignment 4. This means you have to learn about alignment before accidently writing code that will randomly crash at runtime depending on the stack position of buf.

And Zig has a lot of these things that require implicit knowledge in C as explicit knowledge implemented in the language itself. Same goes for integer casting, shifting more than sizeof() bits, and so on.

It moves the footguns from the code to the user, and so the user has to learn about all of these concepts before writing Zig code. In C, the code will silently compile and misbehave at runtime. This might feel like additional complexity in a lot of places, but the complexity is there in both languages. One just makes it explicit.

But this is obviously not true for all things in Zig. comptime is a whole new feature that wasn't seen in a lot of languages before and afaik not as it is used in Zig, so it's something new to learn even if you already can do perfect C. The same goes for more precise data types (struct vs extern struct) and so on.

One hard footgun in Zig right now is implicit aliasing of parameter types, which sometimes get passed as a reference and sometimes as a value. This is a known footgun is already on the table to be adressed by better semantics and more safety guards

For me, writing Zig feels way less complex than C because a lot of brain load that went into writing correct C was offloaded to the compiler, which is good. But it also increases the friction when writing code as the compiler forces you to think about alignment and such.
So you will accept nothing less than 0 carbon tech, right now, in a world where there's lots of inefficient uses of fossil fuels we could replace and save money?

Seems a bit extremist.

Also, ICE and hybrids can run on e-fuels. Not ideal as they still have local pollution and arent very efficient but entirely possible without adding fossil carbon to the system. EVs (and bikes and trains) are better though.
British woman Liz Trussell, who tweets as LizTruss, replying to world leaders
You can use Portfolio Visualizer (portfoliovisualizer.com) for this.
Plants grow from seeds, take water and sunlight to grow, etc, regardless of the type of plant or the eventual use thereof.

Use weird pesticides on plants you're growing to feed to animals, and not only do said weird pesticides end up in the water supply that's used for other plants being grown to feed to humans, but also they end up in the animals to which you feed the plants, and therefore in the resultant meat. So when pesticides are banned, they tend to be banned for all uses, not just "plants grown for humans" uses.
SMS tokens are on their way out as they don't satisfy the security requirements.

In this case you need to log in to your bank website and accept the transaction.
I only know IPFS from it being one of the enablers in downloading from Library Genesis, and man am I glad that it works so good for them..
If you feel you can easily achieve a return of 15%, why not make some leveraged investments? What do you mean by "easy"? 90% probability of achieving your goal?
And “best effort” may mean “no effort” for a paid subscription if the payee selects the option to retain edit revisions and deleted messages.
"First nations" is the common term in Canada to refer to the people living in the area now known as Canada before Europeans arrived, similar to "Native American" in the US.
The Dormant Commerce Clause and Geolocation: Introduction
"fake meat" is processed food. That, IMHO, is the main difference over just eating fresh vegetables. It's more expensive because of that, and introduces externalities and risks.

I see "fake meat" as a temporary crutch for people transitioning to vegetarianism.
Even with 8 lanes available a GPU should work fine. If it's a very high end GPU it won't run at full speed but this is a old i3 so probably not a issue. Some low end GPU's only use 4 lanes to begin with.
Did it actually fail to work when you added a GPU?
Exactly the same thing happens to me :)
as long as you are near the shore-line, I can see that working. Though you might also need to be near a port; loading/offloading is less efficient without infrastructure.

However, there may be other uses for the port, which suggests most of the good ports will have cities built around them.

So yes, as long as you constrain your march to the area around friendly cities, boats work great
The other upside to this(at least here in UK) is that it's easy to find a restaurant that serves local meat and produce, but it's extremely hard to find local meat in stores - even "butchers"(I put that in quotes, since I firmly believe that 90% of British "butchers" are basically cosplaying as such and are nothing more than stores that sell factory-prepared meat in a store meant to look like a traditional butcher store) are not that keen to tell you where the meat is actually from - when pushed you might find out that your local "butcher" is actually selling meat raised and slaughtered in Denmark or Poland.
Congrats on the launch.

I’m curious about a few things

Isn’t it better to have a distinct ‘playground’ for marketers, PMs, UX/UI (separate from what Dev is working on)?

Shouldn’t PM/Marketers be dealing with very minimal stuff (like mock-ups, Visio Diagrams)? My immediate thought is that having these folks spend considerable time on (what you have described) almost seems like a waste of man-hours because at the end of the day, what Dev builds for code will be way better and efficient.

Finally, how do you plan to compete with tools like Figma and others which are positioned to allow the people you’re targeting create quick mock-ups (personally, I think those Apps are also not that easy to use)
$10B back in equity, not in profits. Depending on government policy and market sentiments, then it may only require keeping a promising trajectory.
I prefer it. We have good fraud liability laws. If someone steals my card number, it's the bank's problem.

I am a heavy credit card user, and over my lifetime I've only had two instance of unauthorized purchase. Both times, the bank caught it algorithmically and prevented the purchase anyway.
No, it was the neolithic, and in particular animal husbandry that was the culprit rather than simply urbanization which was a later emergence. And when you contrast new world peoples who had very few animals to domesticate, there's only one disease thought to have originated there: syphilis. This is despite the records of highly concentrated populations in various regions in the New World.
How to build a serverless WebSockets platform
I was sitting at a bar eating lunch when in Vegas for a conference a few years back. The Brit (I think) next to me was suddenly "Why did the bartender just take my card away?" and I had to explain that was how things generally work. You do see wireless terminals now and then today but they're not super common.
Bengaluru floods:India's waterlogged IT city sparks memes and anger
Digging into SaaS FCF
Not an iOS developer, but curious what’s the current state of the art for distributing and storing your credentials if the app needs to make AWS service calls?

Or is that considered an anti pattern, and you want to proxy all AWS calls through your own authenticated backend?
I think the question was more around the use of the word “scroogle”.
Who said it is surprising? It's useful to confirm one's assumptions with actual data, which is what this article is doing.
Whatever the fuck do they need this for? I just cannot see any good reason to raise $100M. Hell, $10M might be too much.
The Apple built-in password manager is worse than the Chrome built-in password manager because the Apple built-in password manager is not cross platform. The Chrome built-in password manager is worse than the Bitwarden password manager because it doesn't support credential sharing.
In the 80's PCs and software ate the world, and one of those reasons (apart from DOS/Windows) was that anyone could put something on a PC expansion card which more or less directly spoke to the CPU and extend the hardware.

So the PC acquired a very diverse set of cards and was able to do heavy processing in a very diverse set of roles - from medical equipment, cash registers, MIDI/music composition, graphics, publishing, sound, networking, etc. No business was untouched by the PC in the 80's--the ability of anyone to make hardware for the platform was a significant part of that being as cheap as possible.

PC hardware seems to be slowly moving towards being like a cell phone - everything onboard/builtin, ports picked by the manufacturer (you will get 1 USB-C port and like it), and if you want to add something, your primary option is a USB-type port of some sort - with its own world of firmware, controllers, etc.

Look at a smartphone and a modern ODM-designed cheapo laptop motherboard - they're very similar.

If motherboards stop being expandable it might mean the PC hardware ecosystem isn't going to be able to innovate except at the behest of high-capital firms like Intel, AMD, etc. That might be OK if we are truly at the zenith of what's possible with a PC, and really want to give the keys to the kingdom to those firms.

And who knows - I know somewhere in there USB4/Thunderbolt on some level is able to move PCIe traffic, so maybe it won't be so bad.
I've done the same thing with the word “sticky”.