HNHacker News
TopNewBestAskShowJobs

chucky_z

1,215 karma · joined June 16, 2015

[ my public key: https://keybase.io/chuckyz; my proof: https://keybase.io/chuckyz/sigs/TE7_P8BlEovO4suPMF-Ul1FrCWsehSIgTOp-NxZbW9g ]
submissionscomments
chucky_z··on Toothpaste made with keratin may protect and repair damaged teeth: study
To everyone reading this you should still use flouride! Flouride and nanohydroxyapetite together both strengthen the outside layer of your teeth while strengthening the inside of them. Either alone is good, both together are great.
chucky_z··on Toothpaste made with keratin may protect and repair damaged teeth: study
Smart mouth has a flouride + hydroxyapetite. I’ve been using it for a few months now and all my tooth pain is completely gone. I’ve been dealing with issues for years and have a wonderful dentist but really had to get myself in shape and brush 2x and really floss correctly. Anyway, that toothpaste also helped compared to only stannous fluoride paste.
chucky_z··on Zero-day flaws in authentication, identity, authorization in HashiCorp Vault
I'll +1 this. I've personally committed code to Vault and the OpenBao changes go hand-in-hand with the style of the Vault codebase. I enjoy both projects and appreciate that they both exist.

It's all Go anyway, it all looks pretty similar. I think if anything it looks/feels this way because it's a security-first project. By that I mean the way the code is written tends to care more about security over anything else.

Also the Hashicorp projects in general tend to use a lot of their own libraries/code so it's just a little different than other stuff. Code quality isn't too important so long as the code is maintainable (clearly it is, it's had a lot of versions) and works (again, clearly it does. a lot of folks use vault just fine, including me).

All previous CVEs are handled in a very straightforward manner with reasonable notifications as well, just like this one. This just has a big fancy article attached to it because it's Blackhat week and folks want to get a big fancy release. If you need further proof of the Blackhat effect go look up the 'death of http/1.1' article.

chucky_z··on Researchers Uncover RCE Attack Chains in HashiCorp Vault and CyberArk Conjur
Almost all of these except the enterprise MFA control group stuff will be in OpenBao yeah
chucky_z··on Studio Ghibli marks 40 years, but future looks uncertain
As I've gotten older, I have grown to understand that while a lot of these films are popular for good reason (and are extremely good!) some of the best films, objectively to me, are some of the 'quietier' ones.

I'd say that Up On Poppy Hill is probably my partner and I's favorite Ghibli film. It's 'small' and 'quiet' in that the scope is a single town, and there's nothing super fantastical about it. Every time I watch it I see and hear something new. This is definitely Goro's best film as a director at Ghibli.

The film that hit me the hardest though is The Wind Rises. If you are a married man this is a film that will absolutely effect you emotionally. There are some films that are targeted as extremely specific audiences and this is one of those. I think everyone can enjoy it, but there's a handful of scenes that are so specific that I connected with so directly that I could feel every moment that Miyazaki was trying to convey at that exact time.

There's another film that is definitely more biased to adults, that is Only Yesterday. It's probably the slowest paced film that Ghibli has made, however it's one that's stuck with me so thoroughly. Especially the final few scenes, which only when they're over do you realize was something like 15-20 minutes with maybe a handful of dialogue lines. This is also another non-Miyazaki film that is extremely good.

chucky_z··on Gemini 2.5 Flash
I have access to this now and I want it to work so bad and it's just proper shit. Absolute rubbish.

They really, truly need to fix this integration. Gemini in Google Docs is barely acceptable, it doesn't work at all (for me) in Gmail, and I've not yet had it do anything other than error in Google Sheets.

chucky_z··on OpenAI Codex CLI: Lightweight coding agent that runs in your terminal
what
chucky_z··on OpenAI o3 and o4-mini
Honestly I popped on sora.com the other day and the memes are great. I can totally understand where folks are coming from and why this is happening.
chucky_z··on Target suffers 10th consecutive week of foot traffic decline since caving on DEI
Yes my family has stopped shopping at Target unless everyone else is out of stock of something we know they carry. I’ve been there once since they did this while previously we would go once a week or so.
chucky_z··on Utah becomes first US state to ban fluoride in its water
The main study I can find referenced to this was based in China where levels of flouride in water appear to be much higher than in the US.

Even the study itself calls out 'low-flouride' vs 'high-flouride.' Not 'no flouride.'

Utah is going to have a dental crisis in a few years, as there already too few dentists.

chucky_z··on A powerful free and open source WAF – UUSEC WAF
I would take this as two things at once, from personal opinion:

- There is probably a PRC backdoor somewhere in this

- This is probably very high quality software

I've dealt with Huawei security a little bit and in general Huawei as a company is really serious about security and handles low-level/deep security software pretty well.

Also based on what the top commenter posted about the license... I don't know how usable this actually is for anyone, lol.

chucky_z··on Wine Releases Framework Mono 6.14 in Taking over the Mono Project
It 100% is! I've used Mono years ago to run older .net in VMs and containers. I found a single service that didn't really work well and we spent our time working on that instead of rewriting the world.
chucky_z··on Show HN: Instantly Translate Manga – TranslateManga
I don't actually think it's 'the end game.'

A vast majority of AI translations are usually enough to get the gist of the story but tend to miss a lot of really important with-context story clues. What I've found is that the best case is that you can get a 'speed translation' with AI, and then have a translator come in behind and clean it up. Much like using AI to generate the base of an image and then painting over top of it to fix any artistic choices it's made that the artist doesn't agree with.

chucky_z··on There isn't much point to HTTP/2 past the load balancer
gRPC?
chucky_z··on We were wrong about GPUs
Yes this is what I'm referring too. :)

Maintaining a lot of clusters is super different than maintaining one cluster.

Also please don't actually try to get near those limits, your etcd cluster will be very sad unless you're _very_ careful (think few deployments, few services, few namespaces, no using etcd events, etc).

chucky_z··on We were wrong about GPUs
At a certain scale, let's say 100k+ nodes, you magically run into 'it depends.' It can be kubernetes! It can be bash, ansible, and ec2! It can be a custom-built vm scheduler built on libvirt! It can be a monster fleet of Windows hyper-v hosts! Heck, you could even use Mesos, Docker Swarm, Hashicorp Nomad, et al.

The main pain point I personally see is that everyone goes 'just use Kubernetes' and this is an answer, however it is not the answer. It steamrolling all conversations leads to a lot of the frustration around it in my view.

chucky_z··on We were wrong about GPUs
I consider a '60+ node' kubernetes cluster is very small. Kubernetes at that scale is genuinely excellent! At 6000, 60000, and 600000 nodes it becomes very different and goes from 'Hey, this is pretty great' to 'What have I done?' The maintenance costs of running more than a hundred clusters is incredibly nontrivial especially as a lot of folks end up taking something open-source and thinking they can definitely do a lot better (you can.... there's a lot of "but"s there though).
chucky_z··on Firing programmers for AI will destroy everything
$1 for the pencil, $1000 for the line.

That’s the 5% when it does matter.

chucky_z··on Writing secure Go code
My understanding is that the primary goal is to determine that if a program is pulling in a dependency, and only using a small part of it, to determine if that part is vulnerable or not. This allows a program owner to know if they need to do an emergency version bump in the face of a CVE or something like that. For some businesses doing emergency deployments is a massive deal.
chucky_z··on A deep dive into Linux's new mseal syscall
You can override the mseal call wrapper but not the syscall itself.

This is an interesting thought so I looked it up and this is how (all?) preload syscall overrides work. You override the wrapper but not the syscalls itself so if you’re doing direct syscalls I don’t think that can be overridden. Technically you could override the syscall function itself maybe?

chucky_z··on Meta Movie Gen
… something more productive than art?

that’s quite a productive thing. art has tremendous value to society.

why don’t we automate the washing machine more instead of automating the artist?

chucky_z··on Meta Movie Gen
VFX artists cannot sleep well, they're already being displaced with AI or being forced to use it to massively increase their output.

Here's an example thread: https://www.reddit.com/r/vfx/comments/1e4zdj7/in_the_climate...

I am not trying to be negative, however it is the reality that ML/LLM has eliminated entire industries. Medical transcription for example is essentially gone.

chucky_z··on Serialization Is the Secret
https://hexdocs.pm/elixir/Stream.html

Although I don’t think it’ll be quite as elegant as the Haskell code.

chucky_z··on S6 – Skarnet's small supervision suite
I really like s6. I've been using it for a couple of years now as it's how HAProxy runs all of their containers, and modifying it has been pretty simple. The docs are excellent, and it's in 'just works' territory. I'd place it alongside redis and beanstalkd for 'just works' territory.
chucky_z··on Show HN: Pg_replicate – Build Postgres replication applications in Rust
I’m curious in your experience how many clients can run pg_replicate at once?

With MySQL I saw the interesting use-case of the black hole storage engine to scale out replication logs but ultimately the only usage I’m aware of was for scaling other mysql read replicas.

The idea of scaling an application by tailing logs from a database sounds very interesting to me, and I’m curious if you’ve explored this at all. There’s of course things like Kafka (and then things like Debezium), but it’s hard to beat direct!

chucky_z··on How we migrated onto K8s in less than 12 months
You can setup dependent stacks in CDKTF. It’s far from as clean as a standard TF DAG plan/apply but I’m having a lot of success with it right now. If I were actively using k8s at the moment I would probably setup dependent cluster resources using this method, e.g: ensure a clean, finished CSI daemon deployment before deploying a deployment using that CSI provider :)
chucky_z··on AWS Operational issue – Multiple services in us-east-1
This is just starting to effect us, looks like SQS is the biggest loser right now.
chucky_z··on Hiding Linux Processes with Bind Mounts
Pretty sure you can do this with standard MAC ala SELinux/AppArmor.
chucky_z··on CrowdStrike Update: Windows Bluescreen and Boot Loops
Take a look at their stock right now.
chucky_z··on Synchronization Is Bad for Scale
Consul has an entire locking system that’s based on Chubby in the KV system. I’ve used it at pretty big scales and it seems fine.

If you want actual OSS you can use an older release, the KV system guts haven’t changed much in awhile iirc.

← PreviousPage 2 of 16Next →