HNHacker News
TopNewBestAskShowJobs

Yeroc

537 karma · joined February 26, 2009

submissionscomments
Yeroc··on How Container Filesystem Works: Building a Docker-Like Container from Scratch
I think the real genius of Docker was the image packaging. The pieces were there but delivery and scripting it all wasn't easy.
Yeroc··on Shai-Hulud malware attack: Tinycolor and over 40 NPM packages compromised
There are things that are potentially possible such as templating pom.xml build files or adjusting dependencies based on user properties (this that what you're suggesting?), but what you're describing is definitely not normal, or best practice in the ecosystem and shouldn't be presented as if it's normal practice.
Yeroc··on Shai-Hulud malware attack: Tinycolor and over 40 NPM packages compromised
> Maven land is full of plugins with automated pom.xml version templating that has effectively the same effect as lax versioning, but without any strict adherence to any kind of standard like semver.

Please elaborate on this. I'm a long-time Java developer and have never once seen something akin to what you're describing here. Maven has support for version ranges but in practice it's very rarely used. I can expect a project to build with the exact same dependencies resolved today and in six months or a year from now.

Yeroc··on How to use Claude Code subagents to parallelize development
I think it's likely that these agent-based development will inevitably add more imperative tools to their arsenal to lower cost, improve speed and accuracy.
Yeroc··on ChatGPT Developer Mode: Full MCP client access
Imagine running an MCP server inside your network that grants you access to some internal databases. You might expect this to be safe but once you connect that internal MCP server to an AI agent all bets are off. It could be something as simple as the AI agent offering to search the Internet but being convinced to embed information provided from your internal MCP server into the search query for a public (or adversarial service). That's just the tip of the iceberg here...
Yeroc··on Claude for Chrome
Most browser extensions you need to manually enable in incognito mode. This is an extension that should be disabled in normal mode and only enabled in incognito mode!
Yeroc··on Containerization is a Swift package for running Linux containers on macOS
I wonder why Apple cared so much about the security aspect to take the isolated VM approach versus shared VM approach. Seems unlikely that Apple hardware is going to be used to host containerized applications in production where this would be more of a concern. On the other hand, it's more likely to be used for development purposes where the memory overhead could be a bigger concern.
Yeroc··on DuckDB is probably the most important geospatial software of the last decade
Since when is strong SQL knowledge not a core skill for developers? I suppose it's the rise of frontend vs backend specialization that is the cause?
Yeroc··on TLS certificate lifetimes will officially reduce to 47 days
I was just digging into this a bit and discovered ACME supports a something called DNS alias mode (https://github.com/acmesh-official/acme.sh/wiki/DNS-alias-mo...) which allows you to add a static DNS TXT record on your core domain that delegates to a second domain. This would allow you to setup a second domain with DNS API (if permitted by company policy!)
Yeroc··on TLS certificate lifetimes will officially reduce to 47 days
Last time I checked there's no standardized API/protocol to deal with populating the required TXT records on the DNS side. This is all fine if you've out-sourced your DNS services to one of the big players with a supported API but if you're running your own DNS services then doing automation against that is likely not going to be so easy!
Yeroc··on Canada considering charging for road access from USA to Alaska
Canadians certainly have differing opinions on politics however it's definitely a tiny minority that share your opinion on being happy if Canada became part of the USA.
Yeroc··on Bitwarden is turning 2FA on by default for new devices
It wouldn't be so bad if the window closed but at least remembered the entry. I often have the issue where I had to search up an entry (credit card info for example) and then when I reopen the extension window I have to start the search all over again.
Yeroc··on Claude for Desktop
Yes, I'm aware of @gemini on Chrome. If you look at how it's implemented they are purposely stashing the query into a HTTP header so it's not possible to use a simple bookmark to launch it.
Yeroc··on Claude for Desktop
For those that use LLMs in a similar manner to a search engine the Anthropic team (unlike Meta AI and Google Gemini) have made it easy to use Claude from right within your browser. In Firefox add a bookmark with the following values:

- Name: Claude AI

- URL: https://claude.ai/new?q=%s

- Keyword: ai (or whatever you'd like to use as a shortcut)

Now from the URL bar you can type: ai <my question>

For ChatGPT use https://chatgpt.com/?q=%s as the URL and for Microsoft Copilot use https://www.bing.com/search?showconv=1&sendquery=1&q=%s.

Yeroc··on A new approach to error handling
I'm one of the naysayers as an experienced Java developer that supports checked exceptions. I find the move to runtime exceptions very disheartening though I will say that in a world dominated by web applications with a clear request/response cycle it's very easy for the container/application to implement a high-level error-handler so I think this skews people's sense of the value proposition of checked exceptions. I've done a fair bit of work over the years writing daemons of various types and having checked IO exceptions among others has been a lifesaver. I also feel that vilifying use of generic exceptions (IOException, SQLException) in favour of implementation-specific exceptions was a mistake. If instead, we had encouraged a smaller set of mostly platform-defined exceptions I believe people would have found the exception "noise" to be lesser. While there are cases where a custom exception sub-type can be useful, in many cases they are not. I agree with the grandparent comment that we may have been better off without runtime exceptions at all, leaving us with simply checked exceptions and errors.
Yeroc··on Raspberry Pi Ltd is considering an IPO
I don't see any connection between going public and giving the average consumer more input into the direction of the company. Making a company public means the company is beholden to operating in a way that maximizes return to the shareholders. Sure an average consumer can buy shares in the company but the average consumer isn't going to be sitting on the board.
Yeroc··on Show HN: A web debugger an ex-Cloudflare team has been working on for 4 years
Do you have a similar wall of fame for companies that _don't_ charge extra from SSO support?
Yeroc··on Show HN: A web debugger an ex-Cloudflare team has been working on for 4 years
On the pricing aspect do viewers of Jam reports get charged as a seat or just the staff that are creating the Jam reports? Eg. if a Jam report is attached to a JIRA ticket does everyone who might ever need to view that report need to have a Jam license/login to view that information?
Yeroc··on Show HN: A web debugger an ex-Cloudflare team has been working on for 4 years
It would be great to have a FAQ page on your site mentioning this. I was on your docs page and did a search for "firefox" as well as "safari" in the search box and there were no hits at all. Seems like something that people would often be checking for.
Yeroc··on Wprs – rootless remote desktop for Wayland (and X11, via XWayland) applications
I looked at the Sunshine / Moonlight combination at one point as I thought something focused on latency would also be great for interactive desktop applications. It turns out though that clipboard synchronization isn't even supported so that was a complete non-starter for me.
Yeroc··on A fourteen-day free trial ain’t gonna cut it
Sadly, the only micropayments implementation we have is ad-supported apps. It's essentially micropayments. Albeit a very annoying implementation!
Yeroc··on The What, Why and How of Containers
Solaris 10 contained a lot of pretty innovative stuff:

- Containers/Zones (as you just mentioned)

- ZFS

- DTrace

- SMF (similar to systemd)

Yeroc··on Majority of web apps could just run on a single server
#3 is debatable for many, many businesses. The other three are (almost) trivial with a decent load balancer and blue/green deployments. This is something very achievable without an over-complicated architecture.
Yeroc··on Majority of web apps could just run on a single server
Unfortunately many of these super-complicated systems run at odds to having a reliable and fast, system even when every second of downtime can be translated into lost money.
Yeroc··on Pg_hint_plan: Force PostgreSQL to execute query plans the way you want
In a database supporting several applications or even just a large data model it can be rather difficult to ensure a global setting to the query planner doesn't cause a regression to other queries. A query hint can be a nice way to quickly solve a performance issue without risk of regressing elsewhere. Agree they should be used as a last resort and as a sort term fix while a better, longer term fix is investigated but they are a critical tool to have in your tool box especially as postgres moves into the business critical domains occupied by the commercial database vendors.
Yeroc··on Pkl, a Programming Language for Configuration
Those sound like features that will eventually lead to major security issues.
Yeroc··on You do need a technical co-founder [video]
What we describe as common sense isn't actually common. That is, over-hyped things like microservice architectures saturate the Internet. Since content of the Internet is generally what will become content for LLMs etc it stands to reason they'll be similarly biased towards hype.

Yes, it's certainly possible for content to be curated and models to become biased in other ways but...

Yeroc··on Pgroll: zero-downtime, reversible schema migrations for Postgres
How can you properly plan for eg. disk storage requirements etc. Does the tool calculate that upfront via some sort of dry-run mode? For companies with larger datasets this would be a rather important consideration. Also, those backfills will generate a lot of network traffic in clustered environments.
Yeroc··on The WebP 0day
Unfortunately, the readme for image-rs indicates that webp support is provided via the libwebp C library!
Yeroc··on The WebP 0day
That's great, but the fact that the author of this article didn't mention memory safe languages is disturbing and an indication that not everyone is aware!
← PreviousPage 2 of 8Next →