HNHacker News
TopNewBestAskShowJobs

boleary-gl

487 karma · joined October 12, 2017

Developer Relations at Kilo Code (kilocode.ai)
submissionscomments
boleary-gl··on On Code Review
GitLab employee here - that is true of GitLab too.

But I agree the bigger challenge than any tooling challenge is getting the team convinced that starting a PR/MR early is not only okay but also the way to operate. Creating physiological safety around it as well as making iteration a part of the day to day workflow is a challenge but an important one.

boleary-gl··on Username ending with MIME type format is not allowed
It doesn't represent any XSS - the details are here: https://gitlab.com/gitlab-org/gitlab/-/issues/26295
boleary-gl··on Username ending with MIME type format is not allowed
I meant to say Rails.

Note to self: Never say Ruby when you mean Rails on HN

boleary-gl··on Username ending with MIME type format is not allowed
GitHub doesn't allow a "." in usernames at all.
boleary-gl··on Username ending with MIME type format is not allowed
GitHub doesn't allow a "." or really an special characters besides "-" and "_" in usernames
boleary-gl··on Username ending with MIME type format is not allowed
Of note, GitHub doesn't allow periods in usernames either. I'm not a Ruby expert but I wonder if file extensions give some specific Ruby gotchas that means both GitLab and GitHub operate this way.
boleary-gl··on Is the official Git default master or main?
The documentation says master: https://git-scm.com/docs/git-init#Documentation/git-init.txt... but "may be subject to change"

When running "git init" on a fresh install, you also get a hint that the branch name may change. So I think they are still working on changing it to main upstream: https://lore.kernel.org/git/pull.762.git.1605221038.gitgitga...

boleary-gl··on AWS federation comes to GitHub Actions
I believe it should be - though I've not done it myself. One example I found was https://dev.to/stack-labs/securing-access-to-aws-iam-roles-f....

In addition, you can just assign IAM roles to the runner EC2 instances themselves, placing ALL of the authentication and authorization in AWS rather than in GitLab. Then the runner will only be able to access the things that you allow through its IAM policy.

boleary-gl··on GitHub Actions limitations and gotchas
I ended up writing this thing out: https://boleary.dev/blog/2021-09-08-responding-to-github-act...
boleary-gl··on GitHub Actions limitations and gotchas
GitLab team-member here. Obviously coming in with a lot of bias, but I wanted to address how each point relates to GitLab CI/CD’s view of the world. I’m also thinking about writing a longer post with more details as I have a lot of thoughts (™) about this topic.

2.1 Caching isn’t available: GitLab has this everywhere.

2.2 GitHub Enterprise Server is behind GitHub Enterprise Cloud: GitLab ships the same code to GitLab.com as it does to our self-managed customers. This was a tough decision but has a lot of benefits...the central being feature parity and scalability for self-managed folks

2.3 Using Public GitHub.com Actions: This is a symptom more than the problem itself - relying on third-party plugins for build jobs is scary, and leads to many of the same issues we’ve seen in the Jenkins ecosystem - easy to get started, hard to maintain.

2.4 Dockerhub pull rate limiting: for self-hosted runners, you can use a registry mirror or Dependency Proxy to reduce your number of pulls from Docker Hub. The key is the entire platform has to be there to enable the right workflows.

3.1 No dropdowns for manually triggered jobs: GitLab also doesn’t have drop downs, but does have the ability to pre-fill these values.

3.2 Self-hosted runner default labels: I think this is also more of a symptom than a problem. 3.3 Being able to tag and use runners for specific tasks is key - so I understand the frustration and we’ve spent a lot of time on this.

3.4 You can’t restart a single job of a workflow: You can do this with GitLab.

3.5 Slow log output: I haven’t seen this be a problem, and is a benefit of our scalability features being built into the self-managed code.

3.6 You can’t have actions that call other actions: There are lots of ways to relate pipelines (parent/child, triggers. etc.) in GitLab.

3.7 Metrics and observability: The GitLab runner has Prometheus build in, and the dashboards we use to manage GitLab.com are partially public: https://dashboards.gitlab.com

3.8 Workflow YAML Syntax can confusing: This can be really hard to get right. I learned to stop worrying and love the YAML long ago, and I know we’ve got through a lot of iterations to try and get this right.

I'd love to know where folks think I got this assessment wrong. And is there value in writing more about it?

(edited for line spacing)

boleary-gl··on Gitlab 14.2 Released
GitLab employee here. I'm really excited about Build Cloud for macOS beta. If you want to get in on that beta, let me know either here on olearycrew on the bird site.
boleary-gl··on Gitlab 14.1 Released
GitLab employee here

In GitLab 14.1, we added 91 features to our Core (free) offering, 8 to Premium, and 12 to our Ultimate ($99/user/month) tier.

We're always working to sustain and add to our open source offering while also using our buyer-based open core mythology to select the right tier for features. https://about.gitlab.com/company/stewardship/

More details here: https://gitlab-com.gitlab.io/cs-tools/gitlab-cs-tools/what-i...

boleary-gl··on Gitlab Pages, Gitlab Registry and Docs.gitlab.com are down
GitLab team member here

These services have been restored. More information on the root cause can be found in the linked issue.

boleary-gl··on GitHub Copilot is not infringing copyright
I’d agree with this conclusion if it wasn’t clear that it is very possible - if not common - for Copilot to just completely copy code. That isn’t fair use - that’s a clear violation of copyright regardless of license.
boleary-gl··on Gitlab 14
The majority of the features covered in the video (close to 100%) are features in our Core (free) edition.

In addition, my #1 feature I shared was us moving our SAST feature from our paid version to the open source version. We're very proud of the value in our open source version, and are constantly reinvesting in it.

boleary-gl··on Gitlab 14
There's also the releases on the project that are formatted more like that: https://gitlab.com/gitlab-org/gitlab/-/releases

Does that help at all?

boleary-gl··on Gitlab 14
What iOS version / phone are you on? I'm not able to reproduce that.
boleary-gl··on Gitlab 14
GitLab team member here. I made a 5 minute summary of our GitLab 14 meetup for folks interested in "what's new": https://labwork.dev/go/GitLab14
boleary-gl··on Ask HN: What's your experience working for a YC backed startup?
That’s typically how a job works…
boleary-gl··on “AI promised to revolutionize radiology but so far its failing”
This is a really good point and example. I spent 10 years in mammography software, and I saw first hand how many outside factors can impact a physician's decision to biopsy or not a given artifact on an image.

Things like family history, patient's history, cycle timing, age, weight, other risk factors all play a role in a smart radiologist making the right decision for that patient. And the pattern recognition on top of that is really hard - it's not just about the pattern you see at a particular spot in an image, it's the whole image in the context of what that looks like. Could ML get better over time with this? Sure...but they've been using CAD in mammography for decades and it still hasn't replaced radiologists at all.

Could a model be made to include those over variables? Sure...but again the complexity of that kind of decision making is something that requires a lot more "intelligence" than any AI or ML system exhibits today and in my mind in the foreseeable future. Just collecting that data in a structured, consistent way is more challenging than people realize.

boleary-gl··on “AI promised to revolutionize radiology but so far its failing”
That's the way it is used today - for instance in mammography there is Computer aided detection (CAD):

https://www.ncbi.nlm.nih.gov/pmc/articles/PMC1665219/

That's been in use for some time. But like many parts of radiology it really only can be a second look tool that as you mentioned proposes alternatives or suggests things. The false positive rate for CAD is substantially higher than for humans because of the human ability to see symmetry and patterns in very diverse tissue sets like one sees in screening mammography.

And the nature of screening tests like mammography means that actually percentages like "89%" isn't really good enough. You have to be more specific and sensitive than that to have a successful program, and I'm not sure that ML will ever be able to get there...there's a lot of experience and human intuition involved at some point that would be hard to replicate...and I know that because people have been trying to do that for decades.

boleary-gl··on We’re all paying for someone else’s 4-hour work week, not ours
Part of the point of the article is that Tim was born in East Hampton, NY and went to Princeton - he never truly faced the possibility of complete financial ruin when building what he's built. That gave him the freedom to do what he did - without that privilege would he have been able to do thing?

I don't know...but for him to NOW turn it into a cult of personality and sell a fake story about "working hard" is at a minimum disingenuous

boleary-gl··on Apple pays out millions to student after repair techs shared her personal images
I wonder how many times this has happened and they didn't find out about it. Posting it to her own Facebook made it pretty obvious.

My father was an accountant for many years and he always said if you found evidence of fraud you shouldn't be congratulatory because what you found is maybe 10% of what is actually there if you found it by chance.

boleary-gl··on Phacility is winding down, Phabricator no longer actively maintained
GitLab employee here.

It started that way for sure, but we’ve evolved with boards, milestones, epics, swim lanes, burn down charts and a lot more.

We have a whole group in our engineering and product org focused on making it even better: https://about.gitlab.com/direction/plan/

boleary-gl··on Phacility is winding down, Phabricator no longer actively maintained
GitLab team member here.

What are biggest task management features from Phabricator you don’t find in GitLab?

boleary-gl··on Gitlab's 2021 Survey uncovers a new DevOps maturity model
FWIW I don't get the popup in Chrome, only in Firefox. Confused face...
boleary-gl··on Gitlab's 2021 Survey uncovers a new DevOps maturity model
GitLab employee here...that's an issue with our learn.gitlab.com platform not the survey itself.

I've filled an issue with our vendor to try and figure out what's going on with the modal.

boleary-gl··on Gitlab's 2021 Survey uncovers a new DevOps maturity model
I completely agree - it's why I love the title "Software Engineer in Test". QA should be a critical engineering role that supplements the team - not a place that people see as a stepping stone for later roles.

There should be the same career progression possible in your QA department as any other engineering department.

boleary-gl··on User tracking inspection result for about.gitlab.com
Are you sure it scanned a repo and didn't redirect to the about.gitlab.com page? Can you provide a link to these results?
boleary-gl··on Removed gem breaks Rails ActiveStorage
Looks like there is a proposal to completely replace the gem: https://github.com/rails/rails/pull/41751/files
← PreviousPage 3 of 5Next →