HNHacker News
TopNewBestAskShowJobs

acaloiar

1,540 karma · joined December 12, 2014

email: hn@adriano.fyi web: https://adriano.fyi
submissionscomments
acaloiar··on Ask HN: How do you share and sync .env files and secrets with your team
I use `ess` (env sample sync) to sync my `.env` with `env.sample`: https://github.com/acaloiaro/ess.

This of course does not share the secrets themselves, but helps document what secrets an application requires.

acaloiar··on retronews: TUI browser for HN and Lobsters emulating classical Usenet readers
This is awfully cool to be sitting at 4 points after 7 hours. Luckily lobste.rs appreciates it :)
acaloiar··on Aerc: A well-crafted TUI for email
Using it with local mail dirs is definitely preferable. I would assume that most people use mail TUIs in conjunction with `mbsync`, `notmuch`, and similar utilities that improve the overall experience.
acaloiar··on Aerc: A well-crafted TUI for email
Your are indeed! Many people like myself prefer the lightning fast interaction of keyboard navigation, the mastery of the bindings to improve workflows, and the customization of bindings to create new ones.
acaloiar··on Nomad, communicate off-grid mesh, forward secrecy and extreme privacy
I'm afraid you're redefining what a blockchain is. A blockchain is a distributed ledger. Distributed ledgers are an application of distributed conensus, which is a truly interesting field within computer science.
acaloiar··on Launch HN: Hatchet (YC W24) – Open-source task queue, now with a cloud version
I love seeing commercial activity around using Postgres as a queue. Last year I wrote a post titled "Choose Postgres queue technology" that spent quite a bit of time on the front page here. I don't think it's likely that my post actually sparked new development in this area, but for the people who were already using Postgres queues in their applications, I hope it made them feel more comfortable talking about it in public. And I've seen a notable increase in public discussions around the idea, and they're not all met with derision. There's long been a dogma around Postgres and relational databases being the wrong tool for the job, and indeed they are not perfect, but neither is adding Redis or RabbitMQ to our software stacks simply to support queue use cases. Kudos to the Hatchet team! I hope you all find success.
acaloiar··on Statement by President of Signal app about EU chat control for mass scanning
On Mastodon: https://mastodon.world/@Mer__edith/112633664440348608
acaloiar··on Ruby's Timeout is dangerous and Thread.raise is terrifying (2015)
Exactly!
acaloiar··on Ruby's Timeout is dangerous and Thread.raise is terrifying (2015)
The context done channels are clearly the way when dealing with all native Go code.

Allthough to the grandparent's point, whne you're dealing with executables or libraries outside of your control, the only true way I know of to get a "handle" on them is to create a process, with its pid becoming your handle.

In situations like image processing, conversion, video transcoding, document conversion, etc. you're often dealing with non-Go-native libraries (although this problem transcends language), and there's no way to time-bound processes. That is to say that you often need to consider the Halting Problem and putting time bounds and preemption around execution. So what I've had good success with is adding a process manager around those external processes, and when a timeout or deadline is missed, kill the pid. You can also give users controls to kill processes.

Obviously there are considerations with resource cleanup and all sorts of negative consequences to this, depending on your use case, but it does provide options for time bounding and preempting things that are otherwise non-preemptable.

acaloiar··on Pre-Work for Setting OKRs
Having not worked in a large corporate environment in a couple of years now, and thus having not seen every type of meeting and organizational process under the sun prefixed with "pre" in quite a while, this title gave me a bit of a flashback to that time.

I'd forgotten how emblematic "pre"-prefixed meetings are of larger organizations that have meetings to plan for other meetings, e.g. "Pre-planning", "Pre-OKR brainstorm".

Seeing pre-meetings always reminds me of a scene in Office Space where "The Bobs" are seen [1.] in front of a whiteboard that clearly reads "Planning to Plan". It's a subtle visual of the movie's central theme of poking fun at corporate culture.

It's been a real treat being in an environment where we don't plan to plan, or have such a vague concept of our meetings that they're best described as a "syncs".

[1.] https://i.imgur.com/4d0FE.jpeg

acaloiar··on Show HN: Openkoda – Open–source, private, Salesforce alternative
I can't speak specifically for Odoo's quest for monetization because I'm not a user; it very well may not be a healthy one. But in general I think FOSS monetization should be celebrated. Successful open source software businesses are generally good for everyone except for closed source software businesses.

Is there something in particular that's flawed with Odoo's business?

acaloiar··on Show HN: An SQS Alternative on Postgres
A similar argument can be made of many primitives and their corresponding higher order applications.

Why build higher order concept Y when it's simply built on primitive X?

Why build the C programming language when C compilers simply generate assembly or machine code?

---

A sensible answer is that new abstractions make lower level primitives easier to manage.

acaloiar··on The NSA is just days away from taking over the internet
I think it's accurate to say that the median American is insured, with only 8% of the population uninsured [1]. Although, to put that percentage in perspective, that's 26 million people and likely thousands in excess mortality relative to the insured poplulation.

I believe you're referring to the ACA's "individual mandate", which imposed a federal tax penalty for being uninsured. I won't argue whether that makes it illegal or not, but I can say that the individual madate was eliminated by the Tax Cuts and Jobs Act in 2019 [1]. There's no longer a federal tax penality for being uninsured.

[1] https://www.census.gov/library/visualizations/interactive/pe...

[2] https://www.ncbi.nlm.nih.gov/pmc/articles/PMC5944881/

acaloiar··on The NSA is just days away from taking over the internet
The uninsured. The underinsured. People on the "wrong" insurance plan. People without the budget slack for $100s or $1000s per month for the medication they need. Poor people who don't bother going to the doctor to get needed prescriptions because they can't afford the initial visit. Rich people whose doctors fail to mention the drug that costs $250k because no past patients cleared for it could afford it. People going to the doctor who gets financial kickbacks from the inferior drug's drugmaker. People prescribed drugs that kill them.

If your question was actually serious, this is a non-exhaustive list.

acaloiar··on Dell Says Remote Employees Won't Be Eligible for Promotions: Report
Meanwhile, a large portion of qualified candidates say Dell won't be eligible to employ them.
acaloiar··on What happens when an HTTP client raises $225M at a $5.6B valuation
If I was a hoppscotch user, I'd fork the project from this person's PR and never look back.
acaloiar··on The $100M Deal for Kickstarter to use Blockchain
> I think this space has a big inherent trust deficit and Kickstarter can never solve it because Kickstarter will always have strong local incentives to not kick sketchy founders off of the platform

I understand where you're coming from; I believe the premise is that because Kickstarter receive their fee whether projects deliver or not, that it's profitable to not remove any projects. That's of course true in the short term.

But the cumulative effect of that myopia is that the projects seeking funding on the platform has plateaued for years. The resulting lack of trust in the system has culminated in fewer projects using Kickstarter, because fewer users trust Kickstarter to adequately police projects. Robust project policing would lead to greater trust, a greater number of projects reaching funding goals, and ultimately more fees for the company. It's emphatically in their interest to remove unsavory projects, regardless of the immediate fee loss. The increase in trust is a multiplier that'll far exceed any immediate loss.

acaloiar··on Show HN: Hatchet – Open-source distributed task queue
A related lively dicussion from a few months ago: https://news.ycombinator.com/item?id=37636841

Long live Postgres queues.

acaloiar··on Open-sourcing our progress on Tailwind CSS v4.0
This is handy for that specific need: https://github.com/dobicinaitis/tailwind-cli-extra

But I strongly agree.

acaloiar··on Open-sourcing our progress on Tailwind CSS v4.0
Bummer, but thanks for resetting my expectations :)
acaloiar··on Open-sourcing our progress on Tailwind CSS v4.0
> Standalone CLI — we haven’t worked on a standalone CLI for the new engine yet, but will absolutely have it before the v4.0 release.

This part is the most exciting to me. Given the rest of the release announcement, I'm assuming this means that it'll be built in Rust rather than embed Node. While I'm not a Rust zealot of anything, I'm very partial to not embedding Node. Particularly when it depends on using Vercel's now-abandoned pkg[1] tool.

[1] https://github.com/vercel/pkg

acaloiar··on Apple to wind down electric car effort after decadelong odyssey
> The two executives told staffers that the project will begin winding down and that many employees on the car team — known as the Special Projects Group, or SPG — will be shifted to the artificial intelligence division under executive John Giannandrea. Those employees will focus on generative AI projects, an increasingly key priority for the company.

This line really excited my PR-spin senses. The set of people working on automobile R&D who are good candidates to work on "generative AI projects" is so small that it's hardly worth mentioning. "Many employees" will be moving to jobs within Apple only insomuch as ~5% of 2000 people is arguably "many" (or whatever the size of the autonomous vehicle software team is).

I understand this line as a large layoff announcement that reads more like an internal team reassignment.

acaloiar··on The /unblock API from Browserless: dodging bot detection as a service
I'm not a customer, but I have a use case that in my opinion should be legal.

For years I've used my own terminal UI player (di-tui) for di.fm. At some point in the not-so-recent past, di.fm added Cloudflare's WAF, which prevents me from using one of my app's features: managing channel favorites within the app.

To be clear, I'm a paying di.fm customer, and my app only works for paying customers. But now my preferred method of listening to di.fm is slightly hamstrung because Cloudflare's WAF sits between me and little string token available to every browser that accesses di.fm (even non-paying customers).

acaloiar··on Context Control in Go
> it’s an anti-pattern for libraries to start their own goroutines. Best practices dictate that you should perform your work synchronously and let the caller decide if they want it to be asynchronous.

This line reminded me that we all need to beware of the "anti-pattern" police. Some develpers use this term effectively by explaining precisely why something is an "anti-pattern".

But more often it's used as a way to shut down conversation and any actual critical thinking. There's a lot of nuance behind what makes something an "anti-pattern", and simply declaring something an anti-pattern isn't enough. "This is an anti-pattern and this is why ..." is enough. But I still avoid using the term regardless.

FYI I'm not saying the author is the anti-pattern police, but it does sound like they've found themselves on the police's radar.

acaloiar··on PostgreSQL is enough
It's a decent question. I believe there's a simple answer that explains a large part of the reason people choose databases over flat files. People want ACID compliance _and_ data distribution, and databases are traditionally the only things that provide both.
acaloiar··on Hardening cellular basebands in Android
Yikes. Google put my grug brain [1] synopsis on full display?

Google, please use less grug brained explanation of baseband processors [2]. ty

[1] https://grugbrain.dev/

[2] https://en.wikipedia.org/wiki/Baseband_processor

acaloiar··on Hardening cellular basebands in Android
For those who don't eat and breathe this stuff, "basebands" are the processors that do all the cellular radio stuff on your smartphone. They're separate from device CPUs (referred to as the Application Processor), and are loaded with firmware.

This post is about securing the firmware that runs on these little processors. When baseband firmware is compromised, it can lead to complete device compromise.

acaloiar··on Beeper Mini is back
a) The issue with Microsoft was that it had a monopoly in operating systems. At the time it was about ~95% market share. Gates woke up one morning, decided web apps were a threat to this, saw Netscape as their major competitor and decided to eliminate them. It didn't try to compete with them. It went straight for elimination by bundling IE and coercing OEMs e.g Compaq to not bundle Netscape. Using a monopoly in one market to force a monopoly in another is exactly what the laws were designed to prevent.

I don't dispute these facts. And I don't think they dispute my comment. By mentioning US v. Microsoft, I pointed out that there are similarities between Microsoft in the 90s and Apple today.

> b) Global and domestic iMessage usage is relevant. In fact it is the whole point. You need to demonstrate that there is an absence or distortion of a market for anti-trust laws to be applied.

Thank you for the correction.

> c) Apple is not trying to eliminate Beeper, they have no monopoly in anything and there is clear evidence of a fair and functioning market by the presence of WhatsApp, Messenger, Telegram, Signal etc.

Unless one can believe that Apple is both willing to block Beeper and not eliminate it, then Apple is trying to eliminate Beeper as a Messenger competitor. From their statement: "We took steps to protect our users by blocking techniques that exploit fake credentials in order to gain access to iMessage."

I think Apple has a reasonable argument for doing so. Though, in a world where Apple controls the only App Store where iOS users are blocked from downloading alternative SMS applications, they do hold a monopoly over both how iOS users install applications, and the only SMS application available on iOS: Messenger. Non-iOS users who want to message iOS users with the same quality of service as iMessages may only do so by installing 3rd party software. Otherwise they need to implicitly agree to having messages treated as second class, to Apple's likely enrichment. I think reasonable people can perceive some amount of anti-competitive intent in Apple's action. Should Apple be able to block 3rd parties from using the iMessage service infrastructure? Possibly, but it's hard to argue that doing so is pro-competition.

I think most of the concern over Apple's refusal to admit 3rd party iMessage clients will be eliminated if and when they make good on their promise to support RCS next year.

acaloiar··on Beeper Mini is back
I'm not a lawyer.

But I do believe there's reason to consider Apple's policy relative to iMessage clients monopolistic. Apple's behavior is not significantly different from Microsoft's, which instigated US v. Microsoft [1]. That case largely took issue with Microsoft's mandatory bundling of IE with Windows and the extent to which Microsoft created an inorganic monopoly. In addition to how Microsoft's monopoly came to be one, the judge also took issue with Microsoft's methodology in quashing threats to that monopoly. One could claim that Apple is taking similar quashing action relative to Beeper now.

Microsoft of course appealed the judgement, and prevailed. But they prevailed only because the judge had broken his code of conduct in discussing the case with media; not because Microsoft's behavior was not monopolistic.

I don't believe global or domestic iMessenger usage is relevant.

[1] https://en.wikipedia.org/wiki/United_States_v._Microsoft_Cor....

acaloiar··on Gooey: Turn almost any Python command line program into a full GUI application
Adding Textual support to camply [1] was apparently very easy. I didn't to the implementation; I just contribute to the project sometimes: https://juftin.com/camply/command_line_usage/#tui

[1] https://juftin.com/camply/

← PreviousPage 3 of 9Next →