HNHacker News
TopNewBestAskShowJobs

belthesar

1,094 karma · joined May 7, 2008

[ my public key: https://keybase.io/belthesar; my proof: https://keybase.io/belthesar/sigs/JEWdr1ik37zcC15gBkrWDSAk5zgAD80jPaJsUvEmINY ]
submissionscomments
belthesar··on Incus – Next-generation system container, application container, and VM manager
There is a Terraform provider that is actively maintained, in addition to Ansible integration. https://linuxcontainers.org/incus/docs/main/third_party/

I'm a Pulumi user myself, and I haven't seen a Pulumi provider for Incus yet. Once I get further into my Incus experiments, if someone hasn't made an Incus provider yet, I'll probably go through the TF provider conversion process.

belthesar··on Zorin OS
There's a joke that "the most stable Linux ABI is Win32". Like sibling commenters have pointed out, many Linux game ports either used system libraries that may or may not be compatible after years of changes, or bring along vendored libraries that may not play well. Valve tried to encourage Linux builds for games during their first foray into Linux gaming with the Steam Runtime, but even they have largely abandoned updating it in lieu of advancing WINE and sibling systems like DXVK, vkd3d-proton, dgvoodoo2, et al. Much more engineering effort goes into the Windows game tech stack than native Linux ones have.

For older games, the biggest advantage WINE has over Windows is WINE's prefix model, which lets you essentially build purpose built environments, not dissimilar to vendoring your dependencies into an OCI container. And if you're running a file system with CoW powers, those separate environments don't even take up a great deal of storage since the vast majority of the prefix is bit for bit identical.

belthesar··on The Windows Subsystem for Linux is now open source
There is more nuance to the anti-cheat systems supporting Linux argument than "it supports it but they won't use it". Turning on Linux support does weaken the security posture of the anti-cheat system, so it's not simply a decision of "it works with Linux, but they won't do it". It is moreso a question of whether the security posture changes for the game with this platform support enabled meet the business requirements. It's not a surprise that games with high MTX revenue do not turn this on, as I imagine this would be the biggest concern with this weaker security posture.

One of the boons of console hardware is also the strict execution environment that is presented on the system. While this of course doesn't prevent all cheating behavior in online games, a large selling point of it as a platform to publishers is not only the market segment available, but the security aspects of the runtime environment.

belthesar··on I ruined my vacation by reverse engineering WSC
The dynarec systems in QEMU aren't as efficient as the native dynarec systems in Windows and macOS (Rosetta 2). You can definitely run x86 Windows with UTM, and it works, but the performance characteristics are pretty poor. From a utility perspective, I've found that running an ARM Windows VM and using Windows' dynarec system to run x86 apps, or using WINE (both using native compiled subsystem code) is a much better experience. It's one of those things where it's okay if you need to run a workload in a pinch.

I'm not sure if performance characteristics are part of what the OP considers "sane", but if it is, I get the position.

belthesar··on On loyalty to your employer (2018)
I have seen the opposite happen, but I'm fairly confident that few people that felt the pendulum swing from good to bad stick around long enough to feel the upward swing.
belthesar··on Mark Zuckerberg says social media is over
The key thing that Facebook Groups and Pages solved was the network effect. If you were on Facebook already, you could join a group or a page without signing up users. If a post from a Group or a Page came in, it came in through a common notification platform. It was the place where people already were, and if they weren't there, eventually there was enough pressure to join because "everyone else was already there". And all of this was good for Facebook, because it was at the time when they were trying to capture more users, which brought more eyeballs to ads.

I think any startup trying to solve this problem is going to have a really hard time because it will ultimately be external to the platforms where people already are, and user behavior has shown that they're inherently sticky to platforms. I wish it wasn't this way, because I think it'd be great for folks to be able to do this on their own.

belthesar··on Normal Boyhood Is ADHD
DHH is always amusing in that there are times when I think he's totally spot on, and there are times when I have to laugh and shake my head, as the words that he spouts sound intelligent, but are abjectly off-base. On the subject of ADHD, this feels squarely in the latter.

I received an ADHD diagnosis a few years ago, into my late 30's, after struggling through and relishing the superpowers of my own behavior. I was suspected of having AD(H)D as a kid, and was assessed but ultimately didn't get a diagnosis. It also turns out that, being a life long technologist, you put me in front of a computer to do an assessment and I will hyperfixate on it because I was given yet another opportunity to be between chair and keyboard. Wild.

I do find that medication helps me. So does structure, and external pressures that help conform me to a healthy routine. Most importantly though, I'm incredibly interest-driven. If I am uninterested in actually solving the problem, it requires moving mountains to convince me that I actually should. Medication is a tool that helps me to do things that suck with less mental effort.

It's not about wanting to eat stimulants for fun. Hell, aside from caffeine, I'd never had a stimulant before starting my meds. And yeah, when I first started taking it, I was high as a kite. But once I leveled off, the new normal was good. It's not a silver bullet - healthy habits, and setting myself up for success are essential, and no amount of meds compensate for when I fall out of a healthy groove. But it has helped.

I'm not a psychiatrist, let alone medically trained at all, so unlike DHH I don't feel like I'm capable of commenting as to whether ADHD diagnoses in kids and providing them access to medications is the right call. What I can say though is that had I had better support as a kid to learn self-reflection, I think I would have been more aware of what I needed to be successful and could have muscled through my younger years with a little less stress and confusion.

belthesar··on Show HN: Badgeify – Add Any App to Your Mac Menu Bar
I agree that xbar's seemingly not getting as much love as it once was. I was also having some weird CPU resource issues with it, which all but went away with SwiftBar, so I'd definitely recommend swapping it out. The script backend is compatible with xbar/BitBar scripts, so migration should be pretty pain-free. I'm currently running SwiftBar on 15.4 with no issues (minus some interesting nuance with how it handles to menu bar items which I think is more of a macOS menu bar thing than a SwiftBar thing, as I had the same issues with xbar).
belthesar··on Tailscale has raised $160M
I have this happen largely with Apple OS devices. Apple's DNS service can be notoriously persnickity (I've had issues with it outside of Tailscale as well), and I usually need to bounce interfaces or flush DNS cache (where I can on macOS) to resolve issues. WRT Tailscale, I also have issues with it on my phone. I currently have my phone configured to connect to my Tailnet when I leave networks I don't control so that I can maintain access to my personal cloud on the go, however after a few connections and disconnections, I have to bounce several interfaces in order to correct both DNS and routing.
belthesar··on Tailscale has raised $160M
Tailscale is definitely more than "Wireguard with a GUI", but I don't think that diminishes your point that Tailscale, if they're not already, would be great stewards if they were contributing more than code back to the Wireguard project.
belthesar··on Show HN: Badgeify – Add Any App to Your Mac Menu Bar
This seems like a polished, limited in scope version of what xbar[1] and SwiftBar[2] does. Personally, I love using the menu bar as the place for at-a-glance information. I currently use SwiftBar to provide status indicators for my audio devices with some hacky scripts I wrote to talk to my mixer.

[1] https://xbarapp.com/

[2] https://swiftbar.app/

belthesar··on Veloren – Voxel action-adventure role-playing
I'm kinda there with you. The first game I ever played that used Voxels extensively was Command and Conquer: Tiberian Sun. All the 2nd gen Westwood games of that era used voxels for their units and projectiles, and nothing about the art style was intended to be heavily cubist like Minecraft popularized. Ultimately I think we built around technology that modeled physics differently, both in hardware and software.
belthesar··on DJ With Apple Music launches to enable subscribers to mix their own sets
Interesting! This product looks to be the spiritual successor to MixMeister Fusion, another app that I used to use to make offline mixes back in the mid-late 2000’s.
belthesar··on Shef
Not at all! I think there's a pretty natural flow for folks to have a love affair with YAML over the past decade or so of comp sci. You're seeing plenty of folks with "YAML DSL fatigue" because folks have seen this pattern many many times, and I imagine are a bit gunshy of "yet another YAML thing". That said, I have regular conversations with someone who would rather do everything he could in Ansible if he could, where I've become a fan of using CDKs since the power of an existing language's primitives combined with specialized knowledge distilled and packaged in an API I can call gives me superpowers. You're comfy in YAML and that's awesome. Keep making stuff that vibes with you!
belthesar··on Salty game dev comments, easier mods are in Command and Conquer's source code
These were released almost instantly when the game was released: https://github.com/electronicarts/CnC_Remastered_Collection
belthesar··on You're not a senior engineer until you've worked on a legacy project (2023)
This harkens back to Chesterton’s Fence. It’s always worthwhile to interrogate why things were done the way they were, especially when first coming onto a project. Knowing the why of a decision is essential to understanding if and how it should be changed. Especially if the reason is “this is what we had the time and knowledge to do at the time.”
belthesar··on Sonos CEO steps down after app update debacle
I think you're underselling the technical complexity of doing what Sonos did. It was a pretty impressive feat for them to do what they did over WiFi. The reason your Google Home can do it is because, while it's a pretty decent technical challenge, it's not insurmountable, and Google decided that the price tag Sonos put on themselves was more expensive then Google dedicating a reasonable quantity of their highly talented engineering staff to recreate the technology.

I think that's the kicker. It was revolutionary when it came out, and it's a solid technical solution, but Sonos was novel over a decade ago.

belthesar··on In my life, I've witnessed three elite salespeople at work
Having just went through the process of buying a car, and the amount of work, research and effort needed on my part to ensure that I didn't pay through the nose on a car, this is, in my opinion, squarely in response to the car sales industry almost universally adopting predatory sales tactics.

If I could go into a dealership and trust that everyone in the building wasn't out to get me, and instead wanted to build a longterm relationship with me from sales to service, advertised the actual cost of the vehicle instead of a BS pre-fees, pre-additional markup price, then I wouldn't do that. Perhaps I'm not seeing the whole story, but as I understand it the dealerships changed their behavior first, and the customer _had_ to get more savvy as a result.

You put enough customer predatory sales practices everywhere, and you raise a generation who just doesn't trust sales staff. It doesn't have to be this way though.

I gotta be careful though, I'm dangerously close to getting on my soapbox about how difficult it is to be a sustainable lifestyle business in today's day, and how much I wish a return to that.

belthesar··on AI, Encryption, and the Sins of the 90s
I hear this argument often times when relating to gun laws in the US as a defense for the status quo, and yet the US continues to have the second highest gun deaths per capita. I can’t say that this argument is fallacious because of that parallel, but it does end up being a weaker argument in my eyes because of it.

There has to be another option besides letting the arms race continue unchecked. That’s the only option that, in my opinion, ensures that we all lose.

belthesar··on 'I'm running a Mud so I can learn C programming ' (1993)
I think this highlights one of the tenets that I try to advocate for when folks ask me how to get started on some sort of computer science journey. Find a thing that interests you, and work to make that. Whether it's working on a game (from scratch, a mod, whatever), building a hosting platform, writing a little utility to make your life easier, making a website, picking a project that has problems you are motivated to solve does wonders to help you through the initial suck of getting started. And as Jake the Dog says, "sucking at something is the first step to being kinda good at something", so anything that helps offset the suck can be essential.
belthesar··on Dear friend, you have built a Kubernetes
I've personally been investing heavily in [Incus](https://linuxcontainers.org/incus/), which is the Linux Containers project fork and continuation of LXD post Canonical takeover of the LXD codebase. The mainline branch has been seeing some rapid growth, with the ability to deploy OCI Application Containers in addition to the System containers (think Xen paravirtualized systems if you know about those) and VMs, complete with clustering and SDN. There's work by others in the community to create [incus-compose](https://github.com/bketelsen/incus-compose), a way to use Compose spec manifests to define application stacks. I'm personally working on middleware to expose instance options under the user keyspace to a Redis API compliant KV store for use with Traefik as an ingress controller.

Too much to go into with what Incus does to tell you everything in a comment, but for me, Incus really feels like the right level of "old school" infrastructure platform tooling with "new school" cloud tech to deploy and manage application stacks, the odd Windows VM that accounting/HR/whoever needs to do that thing that can't be done anywhere else, and a great deal more.

belthesar··on Ask HN: What are your favorite tools for taming your email?
A couple of years ago or so, when Google was flirting with axing free Google Workspace domains, I ended up switching my email over to 37signals’ HEY platform. I have been pretty happy with the result overall. While I don’t like that I’m forced to use their client, the benefits (and the fact that I can reasonably trust them to give me my mailboxes going forward) have been pretty great.

Unsubscribing aggressively is pretty great, and helped a lot prior to switching to HEY. What has been stellar for me however was that I can also choose to screen out emails, silently dropping their receipt. It’s a selfish choice, in that I’m not sending feedback to the list owner, but with the amount of lists I end up on, I’m not sure I totally care all that much, and the workflow to screen things out is fast and simple.

I definitely don’t think it’s for everyone, but I’ve been pretty happy with the switch and the nits I do have are vastly outweighed by the things I do like about the system.

belthesar··on VMware Workstation Shifting from Proprietary Code to Using Upstream KVM
Ironically, x86 performance of Win applications on UTM is faster when using Windows' ARM to x86 translation rather than using QEMU virtualization, because it can do Rosetta 2 like translation of only the specific application code and not the dependent libraries.
belthesar··on We're Leaving Kubernetes
I too am rallying quickly to the Incus way of doing things. Also of note, there's an effort to build a utility to write Compose manifests for Incus workloads that I'm following very closely. https://github.com/bketelsen/incus-compose
belthesar··on Winamp deletes entire GitHub source code repo after a rocky few weeks
The source wasn't open though, it was available, and it was provided in a sense that fully showcased that they did not understand what they were doing. Everything from licenses that were fully unenforceable and non-compliant with Github's license agreement to illegally distributing proprietary code to fundamentally misunderstanding how to use git.

It's one thing to provide a source available codebase. That's a choice, and it's fine for various definitions of fine. What they did was legally put themselves in hot water with the inclusion of proprietary dependencies, misrepresent what their intentions were, and likely irrevocably damage their reputation to a small, but vocal minority, who likely have a sizeable overlap with folks that know what Winamp is/was.

It's okay if none of that matters to you, or if it doesn't resonate with you, but the things that were done were comically awful in terms of sharing a codebase.

belthesar··on BorgBackup 2.0 supports Rclone – over 70 cloud providers in addition to SSH
Rather than avoid tools that work well, I would encourage you to adopt solutions that solve your use cases. For instance, if you aren't getting notifications that a backup is running, completing or failing, then all you've set up is a backup job, and not built a BDR process. If you're looking for a tool to solve your entire BDR plan, then you're looking at a commercial solution that bakes in automating restore testing, so on and so forth.

Not considering all the aspects of a BDR process is what leads to this problem. Not the tool.

belthesar··on Hacking Kia: Remotely controlling cars with just a license plate
That's not a benefit to me if I can't control how someone gets access to my vehicle, dealership or not. If I want a dealership to be able to assist me, I should have to authorize that dealership to have access, and have the power to revoke it at any time. Same for the car manufacturer. It ideally should include some combination of factors including a cryptographic secret in the car, and some secret I control. Transfer of ownership should involve using my car's secret and my car's secret to transfer access to those features.

If you feel like this sound like an asinine level of requirements in order for me to feel okay with this featureset, I'd require the same level of controls for any incredibly expensive, and potentially dangerous liability in my control that has some sort of remote backdoor access via a cloud. All of this "value add" ends up being an expense and a liability to me at the end of the day.

belthesar··on Ask HN: What tools should I use to manage secrets from env files?
I'm a huge fan of SOPS, especially since it can integrate with numerous crypto providers, from `age` for a fully offline crypto source to Hashicorp Vault and big cloud secret / crypto providers.

I wanted a tool that allowed me to store secrets safely without tossing them in plain text env files called `sops-run`. It manages yaml manifests to store your environment variables based on the name of the binary you're running, and only applies the environment variables to the context of app you're running. I never did tidy this up into an installable python package so it can't be easily installed with pipx yet (I keep putting off finishing all of that, pull requests welcome ;-) ), but I like it better than simply using direnv or equivalents, since it doesn't load the environment variables into the shell context, though it could probably be combined with it to hot-load shell aliases for the commands you want to run.

https://github.com/belthesar/sops-run

belthesar··on Show HN: iFixit created a new USB-C, repairable soldering system
"Better" is definitely the wrong word, but the jist is sound with the right framing. A better tool often allows you to do work safer, and that is what was attempted to be conveyed. Applying the approach to one of your examples, a faster car doesn't make you a better driver, but a car with more safety features makes your driving experience safer than one with less.
belthesar··on Fman Build System
Interesting! This appears to be an alternative to the BeeWare Project and its suite of tools. I'd be interested in looking at them head-to-head. https://beeware.org/project/overview/
← PreviousPage 2 of 11Next →