skysight-inc/HackerNews huggingface dataset:
Ask HN: A Better Docker Compose?
In docker compose you have a flat list of services and you manually weave them together with configuration.
Then in an effort to secure things you add on frontend/backend networks to isolate containers from each other.

services:
proxy:
build: ./proxy
networks:
- frontend
app:
build: ./app
networks:
- frontend
- backend
db:
image: mysql
networks:
- backend

You add config to share credentials between services.

services:
app:
build: ./app
environment:
DB_PASSWORD_FILE: /run/secrets/db_root_password
secrets:
- db_root_password
db:
image: mysql
environment:
MYSQL_ROOT_PASSWORD_FILE: /run/secrets/db_root_password
secrets:
- db_root_password

secrets:
db_root_password:
file: ./secrets/db_root_password.txt

Is there a way to abstract away these extra configuration steps and keep it simple yet secure by default?

If you would express db as a dependency/resource of app, could you infer that you could put it in a seperate network and have the credentials automatically link?
'As a developer' I'm not really interested in the network specifics or which credentials, I just want them to talk securely and minimize any attack vectors and keep any configuration to a minimum.
With tens of apps, their databases and transversal connections, how to do you keep the configuration to a minimum?

Googling around I found;

humanitec:
https://docs.humanitec.com/integrations/resource-types/mariadb
They express something as 'resources', a dependency type that can be provisioned automatically with inputs and outputs that then can be injected in the application env vars:
mysql://${externals.my-db.username}:${externals.my-db.password}@${externals.my-db.host}:${externals.my-db.port}/${externals.my-db.name}

you're limited to a limited set of drivers ofcourse and how would you express an app1 to app2 dependency?

juju:
https://juju.is/

Each app is packaged in a charm which seems to be a yaml declaring inputs, dependencies and other meta data and optional python code that can respond to certain lifecycle hooks

https://discourse.charmhub.io/t/implementing-relations/1051

name: my-node-app
...
requires:
database:
interface: mongodb
provides:
website:
interface: http

Things can seemingly be autowired based on what interface they provide and require?
So just make a list of apps until everything resolves?

Does anyone have experience with these tools or others like it?

How do you stop others and yourself from drowning in credentials, certificates, env vars, jvm params and k8s yaml(times every environment)
How do you do (not the configuration management) but manage an inventory of what configuration is needed to run your environment (or a subset for ci)?
For the larger channels such as LTT, the YouTube ad revenue is likely approaching rounding error compared to their sponsorship/merch/platform revenue.
Use gRPCurl.
Ask HN: Escaping the Andromeda–Milky Way Collision
Appears Andromeda–Milky Way collision will happen in 4-5 billion years and to escape it would require traveling millions of light years to reach next the galaxy. Has anyone ever detailed likely issues related to the topic in a single place?

Are there any other well known events besides heat death of the universe that for sure will impact humanity?
Thanks. I really appreciate your feedback :).
> My hypothesis has been that renters stopped voting.

Who are these renters who stopped voting? I can only speak for Australia, however the average age of renters has been rising for decades. Most of Gen Y have come to terms with the fact they will likely never own property in a major city. These people keep voting, but their vote isn't accomplishing anything.

> Density hurts landowners by decreasing property values and landowners vote.

How does density actually hurt landowners? If you own a house in a heavily consolidated urban area your property value will hardly have decreased. Look at the value of houses in Ultimo, Chippendale, Pyrmont, for instance. Also consider that maybe people just don't want to live in a highrise legoland, or think that endless urban consolidation is a good thing for our cities.
robots.txt is like a UN strongly worded letter

Bad actors have ignored them from the start, and are good enough at faking headers/using multiple ips such that they are very difficult to block
Interesting idea and approach!

Just a thought on the design: I really feel like the gold gradients make the whole site feel 'cheap', not trustworthy and not very 'professional'. Actually makes me not want to use it. Replacing them with a simple warm yellow improves this a lot.
That might be just me, but maybe it's something for you to consider.

Good luck!
> I've never heard of someone destroying residential property directly through chemicals or radioactivity

Are you kidding me? Look up Superfund sites, and tell me they didn’t affect property values around them.
Just do it like any big Asian city:

1) build high-rises

2) build more metro lines

Look at Tokio or Shanghai, as an example.
I believe the acceptable mold level in Michigan is 10x that of Ohio. Price is only one component, many people like a tightly regulated medical market to ensure safety.
> mostly middle-aged males

No, most viewers were 18-44.

"Middle-aged" is 45-65.
Folks will be using gameplay video and AI to reconstruct games in 5 years. Could send a 1 hr video through an ML model and all the game assets could come out the other side.
This is fantastic information and very sobering for those of us with smaller channels. I had 10-50 views per month until two weeks ago and I got 200k views suddenly thanks to the algorithm, but it's already peaked so I expect I can't make more than a few dollars per month. See what happens though!
Considering they are betting their future on this, that seems a stretch.
I just did a long highway trip in an MX-5 and got about 38 mpg on the recommended 93-octane gasoline. I was not driving the vehicle to optimize for mileage. The article quotes the same. I mention it because it is an obtainable 38 mpg.
> So my understanding is that both Rust and Val are providing the same guarantee to the program (exactly one writer or any number of readers to values) but choose to do it in very different ways. The interesting thing from the PL design side is that both implementations leak into the semantics of the language (Rust through explicit lifetime annotation, Val through implicit references)

Interesting. Can't Val references (based on my reading of https://verdagon.dev/blog/generational-references) be implemented in Rust as smart pointers? It seems that the requirement from the language is ownership (to detect when the reference needs to be freed), besides the error handling.
Politics is pretty complicated, sadly. It has nothing to do with reason, but has everything to do with interests.
> I believe this also explains the rise of progressive political factions that propose a lot of policies that seem to favour the disenfranchised but in reality benefit the rich and the asset owners.

This, so much. Segregation has once again become overt Democrat Party policy, only now it's disguised as "fighting against gentrification".
That would have costed extra and made things more complicated for the crew who assembles the setup at the venues.
I've had the exact opposite experience with recreational stores. A wide selection of accurately labelled and high quality products, instead of just a bag of weed that's way too strong for me, like the black market primarily provides. It's a million times more convenient and not much more expensive overall (unless you buy some premium products maybe).
Do not mistake a convenience feature for a security feature.

Follower-only posts are not about hiding something from prying eyes, but about removing noise and clutter from those who don't care about certain topics.
Continuing to work on the soroban-sdk[1] and soroban wasm environment[2], but after spending last year completely immersed in Rust, which was exhilarating learning experience, I'm really hoping to find some ways to spend more time back developing in Go soon and hope to do more of that this year, but unclear on exact plan for that yet.

Also hoping to find some small uses cases for cutting my teeth on using Zig beyond the toying around I've done recently.

[1]: https://docs.rs/soroban-sdk

[2]: https://github.com/stellar/rs-soroban-env
I don't blame Canada. The country is running out of space really fast and they lack the technology to build more than 1 floor of house. Unlike massive countries like South Korea, they can't fit 50 million people.

Can you imagine being forced to live in slum like conditions without a half-acre yard or at least 3 parking spots? We are a developed country, do you expect us to park on the streets like the 3rd world ?

If only Canada had access to hammers & wood & nails. They could have built something. But, where might someone be able to buy any of those I wonder ?

____________

Watching sprawly nations one up each other with moral grandstanding while acting as if no one sees the elephant in the room is frustratingly funny.

If you are going to go this route, at least institute a high tax penalty for unit vacancy.

_________

edit: didn't think it was possible for people to miss such obvious sarcasm, but here we are
Can someone explain to me why the number of PBKDF rounds actually matters?

When they are saying 100,000 rounds, they mean 100,000 rounds WITH the key right?

If you wanted to brute force this password, and there are no vulnerabilities in the hashing algo, then you need to try aaaa with 100,000 runs, and aaab with another 100,000 runs right? So if you use a long random key, it wouldn't matter if it was 1 cycle or 1 billion effectively, right?

Or am I missing something? I'm assuming there is a hash table exploit for PBKDF2 and that the number of rounds really does matter?
Neat; but if I were non-technical person, the next question I would ask would be, why can't Mallory just forge Ted's certificate and use that to fool Alice or Bob? In this scenario, Alice or Bob would receive a box which has a certificate which looks very similar to what they remember Ted having.

What would be a good non-technical metaphor for that?

In reality of course, we use trustworthy browsers such as Firefox which (relatively invisibly) enforce certificate validity for us. I'm wondering where that would fit in the metaphor.
Not a designer, I appreciate this advice immensely, I’ll try!
Well, wage theft is technically a crime in some jurisdictions, but almost never prosecuted even where it is, leaving only civil compensatory remedies. Treating far more minor (both in absolute value and relative to the wealth of the victim) cases of tangible personal property theft in the form of shoplifting, which has basically mirror-image class dynamics, the same way way doesn’t seem unfair.
It would be funny though, if you were trying to say that Chinese foreign ownership isn't a problem in places in the world, because I mean, it's absolutely smashed Sydney's housing prices.

Not saying there's anything "wrong" with any ethnic group, but there are sources of money in this world and some are particularly more present than others.

I don't know why but I'd say Chinese foreign ownership is much lower in the USA than in Australia, parts of Asia. Either way, I'd say 4% is still a pretty large part of American real estate ?
But about half of average Australian household assets are held in the value of the home, accounting for an average $A509,000 out of a total average household assets of $A1.1 million.

----
Source: https://pursuit.unimelb.edu.au/articles/too-many-eggs-in-the...
I have no idea what you're talking about or how that relates to the problem of people stealing from stores.
ArchiveBox – Open-source self-hosted web archiving
$10000/video seems crazy to me, but it makes sense if each video is averaging 10M views for ad-friendly content.

It'd be interesting to see how many Youtube channels make it to this size, and if there is anything that differentiates successful channels from obscure ones (beyond quality).
SEEKING WORK | Copenhagen | Remote or relocation (SF, NY, London)

Very experienced iOS and mac developer

- 3 years at a FAANG, 10 years total
- Degree in theoretical physics
- Especially strong at developing excellent user experiences
- Swift since day 1
- SwiftUI since day 1
- Experienced user of Combine and RxSwift before that

Email: info(a)keeptalking.fm
Height is just one metric. You might have a stellar face - which is actually the most important metric in todays dating market.

But having a great face and being short, bald, and obese isn’t going to lead you to winning results either.

The standards are high and some people will always be alone due to looks - please stop using the just world fallacy.
I'm continuing with my domain parking tool Newsy

https://newsy.co

It's a modern take on domain parking (I know I know) that I'm using for my own ~50 domains.

I will most likely also be re-working on SideProjectors - a marketplace for buying and selling side projects.

https://www.sideprojectors.com

I am also about to launch HN+ (Create your own HN!)

https://hn.plus
This idea is pure fantasy. This condition of classifying people as NIMBYs if they disagree with you on this topic is incredibly toxic. There are a plethora of totally valid reasons why people would be opposed to endless urban sprawl, consolidation, and population growth.
Following your point through to a conclusion, the only way to improve educational outcomes would be for everyone to just become better people, and for the country to actually start respecting academic achievement instead of sneering at it. Which would be great - but is not very actionable. Some parents just don't have the capacity to lift up their children, and it is not the child's fault they were born to less-than-ideal patents. So, our aspiration should always be to give those children the best shot. Is this as economically advantageous as filtering kids early, with the help of parental spending as a proxy for "caring that the child succeeds"? Probably not, but the latter model feels pretty dystopian to me.
That's like saying it's OK to pour your used oil down the storm drain because Exxon-Mobil pollutes in the Gulf of Mexico.
Most interesting number to me is the 90$ per hour. Seems like solid money. And since the channel might grow more this might not be the end.

But I guess it's hard hard work to grow a channel to this size and also not a guaranteed success.
I don't think you can split the thinking into those two groups, when the maintainers of the large instances that are pushing back against search are also lead developers.
what have you been programming in the past 20 years?
To push back against the hoards of commenters taking issue with the last line: An entity the size of CF shouldn't need to perform mass blocking to deter DDos attacks, both from the perspective of their customers or their resources. Would it be difficult to delay requests from "low-reputation" sources? Tor users are used to delays when browsing and the automated "ddos-protection" JS challenges appear to do that (even if not by design).

What ever happened to read-only websites? Using one's browser to render static content? An underrated concept in 2023, when almost every website wants to run some sort of code on your computer.

Your pain is felt, OP!
Western countries are all trying to encourage immigration because without it their populations will collapse. Right now populations are rising and causing house prices to rise but soon boomers will start dying leaving huge numbers of homes empty.
Huh? The json number spec does not specify a precision or size. Any limitation is from your parser.
Apparently there is now.
Turning Sports Statistics into Riveting Cinema
There’s a few things in there:

- Sponsorships may pay a bunch more than YT ads. This Chanel doesn’t do them(?).

- More videos means (potentially) more total views means more revenue. This channel doesn’t post as often as some big channels

- Some people are more desirable to advertisers. If those people are in your audience, you get paid more. So some channels get paid more per view than others
Location: Seattle, WA

Remote: Preferred

Willing to relocate: No.

Technologies: AWS (AppRunner/CDK/CloudFormation specifically), Linux, KVM, ARM64, Docker, Golang/C (particularly embedded)/C#/Python.

Résumé/CV: https://tsunami.zaibatsutel.net/cv.pdf

Email: hn@zaibatsutel.net

Github: https://github.com/indrora

social: https://social.sdf.org/@indrora

I'm currently a support engineer looking to return to the speaking circuit, doing talks focusing on developer productivity and project management in some capacity, Close customer interaction and impact preferred. I turn developer talk into words your customers can understand.

Current job precludes me from doing what I like because Reasons (AWS folks will understand when I say "speaker policy" though it's gotten better).
Maybe you didn't send it right. Better do another just to be sure. Best case scenario, you get double-rich.
Most of the food I eat comes from hundreds of thousands of miles away. I'd imagine a bigger issue with inhabiting that area is lack of logistics.
https://archive.ph/ugd6k
There seems to be a general lack of political will for big projects in the west.

Looking at Asia now is like what the west used to be like.

I am unsure about the cause but I suspect that a lot of it is that people seem a lot more worried about consultation with locals and such.

In the past the government might just decide “we are building a highway here” or “we are building all this infrastructure for houses there” and there seemed to be a lot less consideration for how people affected would feel about it.

Media has gotten more pervasive, so we might imagine that politicians are more concerned about things flaring up there, but Asia has plenty of media access too, so that doesn’t really explain it.
Whilst I agree strongly with your general point: Android is not GNU Linux (that is, the Linux kernel plus a userland largely based on and around the GNU's Not Unix toolchain), there is Termux, an Android app which provides a Linux-like userland, including X11 applications for what it's worth. You'll need to install it through a third-party app store or source, such as F-Droid.

Software is packaged under APT, and whilst the package selection is markedly less than, say, Debian (roughly 70k distinct packages last I checked), there are now several thousand available packages, plus more available through Python, Ruby, Perl, and Node.js package managers (and probably others).

You're still subject to Android limitation:

- No general filesystem access outside Termux's and specifically-shared areas.

- Very limited file permissions options unless rooted.

- No privilege escalation unless you've rooted your device.

- Android's mysterious and quite frequently annoying app process management killing off sessions with no discernible rhyme or reason, let alone owner-based control.

But you'll get all the standard base shell utilities, scripting and programming environments, a selection of networking tools (which function again depends in part on whether your device is or isn't rooted), editors, and even a number of servers, though typically running on high-numbered (unprivileged) ports. There's also a slew of tools for interacting with Android itself, including clipboard, screen brightness, wifi, flashlight (if available), "toasts" (alerts/messages), and more.

Termux has long been the one Android app Which Does Not Precisely and Exactly Suck. It was the first app I found which made the OS vaguely useful to me rather than a captured walled-garden toy.
Well, Golang? Pascal? They have similar ways of declaring data types, for instance.

This guide is not going to magically teach you Rust is there's nothing to compare it to; there are other guides to help those without a background. But it could somehow help people who already have similar concepts in their mind to link them to corresponding concepts in Rust.
Mastering SvelteKit on S3 & Lambda with DynamoDB as my go-to stack. Using it to build a personal PWA to manage my budgets, reminders, journal, whatever.
Conveyance is the act of transferring ownership, done by real estate lawyers. If you, as a foreign investor, bought before this law came in, then when you tried to sell it, your identity as a foreign investor could be noted, triggering a check of when you purchased it with respect to this law. but the point here isn't to look around and find all the foreign investor owned properties. It's that investments are bought and sold, and getting into that step is sufficient to carry out action. In this case, the foreign investor would have to sell to someone who's a Canadian citizen, which returns housing stock to being locally owned.

Something that's not been brought up much in this discussion is that foreign real estate investment is a diversification tactic: they're buying to get money into a different market than the rest of their wealth. That's why it isn't Canadians driving most of this. Foreign real estate is primarily a safe offshore hedge.
OK, simple issue that a beginning Rust user runs into immediately:

- function arguments are moved into the called function

- you can call a function with a ref, and then you can keep using it in the calling function, because there is a blanket impl of Copy for refs

- you can call a function with a ref mut, and then you can keep using it in the calling function because ... ???
I'm still shocked we don't have a weed emoji. There's at least 7 for booze.
Sergei Strelec is the bomb.
Location: Paris, France

Remote: Yes
Willing to relocate: No

Technologies: Elixir/Phoenix, PHP/Symfony, TypeScript / VueJS (mostly)

Résumé/CV:
https://www.linkedin.com/in/lionel-cocatrix-57484543/
https://github.com/conradfr

Mostly looking for an Elixir role. I have professional experience in it + side-projects .

Email: contact at funkybits.fr
Rob Adams, former City Architect at City of Melbourne, did a study a little while ago that showed you could fit in 1 million more residents if you filled in grayfield sites with medium density, and without impacting on existing heritage zoning. Grayfield being existing under-utilised land (i.e open carparks that can could be built over).

It's been a while since I watched this video but the proposal is for 5 storey high developments along transport corridors that do not tower over suburbs like high density developments, but which also serve to engage with street life more effectively than existing low density.

https://www.youtube.com/watch?v=ZYJpdH-VGwc

It can be done. But obviously needs a departure from existing low density suburban sprawl, and a tight control over overdevelopment. But it can actually result in better amenities, faster transport, for residents.
If you criticise someone for liking Joe Rogan, you have to explain why and convince them. You can’t dunk on them and get cheered by your side automatically. You have to deal with the other person’s perception of you, and listen to their rebuttal. This makes people a lot less intense.
FDA Non-Retaliation Policy
A full half of the voting base, or more, fervently vote against their own best interest. Seems like it’s happening in Europe and has taken deep roots in places like Brazil, too. People can’t really be surprised that bad things are happening when they explicitly vote for bad things to happen.
I'd also read the books from Teach Yourself CS (https://teachyourselfcs.com):

- Structure and Interpretation of Computer Programs

- Computer Systems: A Programmer's Perspective

- The Algorithm Design Manual

- Mathematics for Computer Science

- Operating Systems: Three Easy Pieces

- Computer Networking: A Top-Down Approach

- Readings in Database Systems

- Crafting Interpreters

- Designing Data-Intensive Applications

Other books I've seen:

- Computer Graphics From Scratch

- Haskell Programming From First Principles

- Zero To Production In Rust
No, it's not. You are making stuff up on the fly. RPC does not mean "Transferring bytes between computers across networks using some protocol."

RPC = Remote Procedural Call.

REST = Representational State Transfer. REST is closer to file transfer than RPC.