Hacker News Reader

chucky_zon Engineering management after the cost of code collapsed

I’ve found stating “only call out critical issues, report but ignore everything else” will basically get what you want. Put that in a review skill and you’re good to go.

To be clear I mostly only use Opus and Gemini Flash but this might work for others too.

chucky_zon Caddy compatibility for zeroserve: 3x throughput and 70% lower latency

Nginx was developed to scale a lot of Russian sites, starting with Rambler. As a second point, Envoy was made by Lyft. A lot of web server OSS goes back to big (at the time) corps.

chucky_zon Caddy compatibility for zeroserve: 3x throughput and 70% lower latency

Unfortunately that is likely untrue. Try it yourself, Go with GC disabled isn’t some magic bullet for performance as much as I’d like it to be.

chucky_zon New U.S. college grads now have higher unemployment than the average worker

The absolute wild opposite (for cybersecurity) to this is that higher level individuals are in such insane demand that if you are underpaid even during the current wage suppression, going to over market should be almost completely trivial.

chucky_zon The dead economy theory

The people you know who love it, love it. How many times have you seen a retired age person working? It’s not always because they require it financially. I worked with a gentleman from Bulgaria when I was young who worked 70 hours a week because he was immensely bored otherwise and work brought him purpose. When you become adjusted to working all the time, the work becomes the purpose, and not working becomes death. I watched this happen with one of my grandparents. He retired and died of a heart attack within a year. All signs pointed to him living longer had he not retired. My point is that freedom to some people is work, because work is their purpose and having a purpose provides freedom to enjoy other things.

chucky_zon Migrating from Go to Rust

We’ve developed incredibly strict and comprehensive clippy rules and found that to drastically improve the quality of the code as the LLM now should pass all clippy checks. You can add a clippy skill as well to attempt to turn “should” into “must.”

chucky_zon Copy Fail

https://www.freedesktop.org/software/systemd/man/latest/syst...

`/etc/systemd/system/service.d/${...}.conf`

I think this is what you're looking for.

chucky_zon GitHub RCE Vulnerability: CVE-2026-3854 Breakdown

.... git?

replace it with git.

if you want a whole ui you can use something like forgejo which has far fewer features likely leading to less issues.

chucky_zon GitHub RCE Vulnerability: CVE-2026-3854 Breakdown

It's incredibly fragile. It breaks a vast majority of the time and takes multiple rounds of support on-call to upgrade typically.

chucky_zon This year’s insane timeline of hacks

The more I use AI and my workplace buys into it, the more I’m doing person to person work in a security context.

chucky_zon Leanstral: Open-source agent for trustworthy coding and formal proof engineering

I use mistral-medium-3.1 for a lot of random daily tasks, along with the vibe cli. I'd state from my personal opinion that mistral is my preferred 'model vendor' by far at this point. They're extremely consistent between releases while each of them just feels better. I also have a strong personal preference to the output.

I actively use gemini-3.1-pro-preview, claude-4.6-opus-high, and gpt-5.3-codex as well. I prefer them all for different reasons, however I usually _start_ with mistral if it's an option.

chucky_zon Linux From Scratch ends SysVinit support

I understand where you’re coming from but early systemd with both ubuntu and centos was a fucking mess. It’s good now but goddamn it was painful and the hate is 100% justified.

chucky_zon Jensen: 'We've done our country a great disservice' by offshoring

All shoe sizes should only be small, medium, and large. He really did have a lot of very ridiculous ideas. He also had a lot of extremely good ideas and incredible understanding of socioeconomic conditions.

His book “United We Stand” with modern context is quite amazing considering it came out in the early 90s.

chucky_zon Meta is using the Linux scheduler designed for Valve's Steam Deck on its servers

This isn’t explicitly called out in any of the other comments in my opinion so I’ll state this. Valve as a company is incredibly focused internally on its business. Its business is games, game hardware, and game delivery. For anything outside of that purview instead of trying to build a huge internal team they contract out. I’m genuinely curious why other companies don’t do this style more often because it seems incredibly cost effective. They hire top level contractors to do top tier work on hyper specific areas and everyone benefits. I think this kind of work is why Valve gets a free pass to do some real heinous shit (all the gambling stuff) and maintain incredible good will. They’re a true “take the good with the bad” kind of company. I certainly don’t condone all the bad they’ve put out, and I also have to recognize all the good they’ve done at the same time.

Back to the root point. Small company focused on core business competencies, extremely effective at contracting non-core business functions. I wish more businesses functioned this way.

chucky_zon Floss Before Brushing

There are 'best to brush' timelines around eating/drinking. Usually you want to either:

- Brush no less than 15m before eating

- Do not brush until 45m+ after eating

I don't fully understand the science, as I'm not a dentist, but it's something related to the way that things stick to/are absorbed by enamel and dentin.

I believe water is the exception here, you can drink water and then immediately brush. You should not brush and then immediately drink water though. You want the toothpaste to stick around and form a barrier.

chucky_zon Corrosion

From my literal conversation I'm having right now, 'try to run one big cluster to capture everything' is our active state. I've brought up federation a bunch of times and it's fallen on deaf ears. :)

We are probably past the size of the entirety of fly.io for reference, and maintenance is very painful. It works because we are doing really strange things with Consul (batch txn cross-cluster updates of static entries) on really, really big servers (4gbps+ filesystems, 1tb memory, 100s of big and fast cores, etc).

chucky_zon Corrosion

Back of napkin math I’ve done previously, it breaks down around 2 million members with Hashicorps defaults. The defaults are quite aggressive though and if you can tolerate seconds of latency (called out in the article) you could reach billions without a lot of trouble.

chucky_zon Ask HN: Abandoned/dead projects you think died before their time and why?

systemd-fleet, by the original CoreOS folks. https://github.com/coreos/fleet

I used this when it was brand new for a bit and it was so incredibly smooth and worked so well. It solved the problem of controlling systemd units remotely so well. I'm pretty sure the only reason it never actually took off was kubernetes and coreos's acquisition, however it actively solves the 'other half' of the k8s problem which is managing the state of the host itself.

chucky_zon RediShell: Critical remote code execution vulnerability in Redis

I believe the context is that the CVE is that this bypasses the sandbox entirely; so in this specific case this is a real, full-blown RCE. Your comment makes it seem at a glance that you're saying it's a DOS at worse.

chucky_zon Show HN: Kekkai – a simple, fast file integrity monitoring tool in Go

The CEO would've found it very easy to remove the blocker in that case (me). This is the life of small tech businesses. Also, they were modifying configuration files (php-fpm configurations iirc) and not code.

FIM is very useful for catching things like folks mucking about with users/groups because you typically watch things like /etc/shadow and /etc/passwd, or new directories created under /home, or contents of /var/spool/mail to find out if you're suddenly spamming everyone.

chucky_zon Show HN: Kekkai – a simple, fast file integrity monitoring tool in Go

I've used FIM in the past to catch a CEO modifying files in real-time at a small business so I could ping him and ask him to kindly stop. It's not just about BS _processes_. :D

chucky_zon Cloudflare is sponsoring Ladybird and Omarchy

One was pipped because they were placed on a moonshot, told how amazing their work was, gave internal talks on it, then the moonshot was defunded... so they got pipped over their lack of business impact. Instead of, y'know, being placed on a normal team, like where they came from only a year or so before.

chucky_zon What if we treated Postgres like SQLite?

If it's more than even like 10GB this is going to take _awhile_.

I love the pg_* commands but they ain't exactly the speediest things around.

chucky_zon Cloudflare is sponsoring Ladybird and Omarchy

As someone who's lived in the bay for a bit over 10 years now, when I first moved here Google was very much that company that you think they were. Now, they are not. Every single friend (and it was >50% when I moved here!) has since left Google in the bay area. There is one left at Google entirely, and they're only remaining due to physical location (near family outside the US). I have watched my friends get brutally and relentlessly pipped over the tiniest bullshit reasons. This is all entirely 2nd hand so my perspective is very skewed, but even my friends from Facebook/Netflix/Apple weren't treated that way.

chucky_zon Show HN: Zedis – A Redis clone I'm writing in Zig

spell out 'development' with hammer emojis. bring ascii art back as emoji art.

(i actually do this in slack messages and folks find it funny and annoying, but more funny)

chucky_zon TuneD is a system tuning service for Linux

I did the reverse, I needed something to keep CPUs pegged at 100% power all the time, and for some reason the boxes I was using at the time kept going 'no no it's ok I need to save power,' but that lead to really inconsistent performance. Tuned, in that environment, 'just worked' after I wrote a custom profile.

There was another issue I was able to fix with it in AWS, but I legitimately can't recall what it is.

chucky_zon Intel's "Clearwater Forest" Xeon 7 E-Core CPU Will Be a Beast

Incredibly good. A lot of main GPU board partners are making LLM-focused boards. There was a few previews on Gamers Nexus from... Computex I think? I wanna say lots of memory, dual GPU boards that looked very well built for local LLM usage.

chucky_zon TuneD is a system tuning service for Linux

I've used `tuned` a lot. It's really extremely good for personal machines/workstations, and really okay for servers. In my case I'm almost 50/50 with it in professional cases, where 50% of the time I had a real good time with it, and 50% of the time I turned it off and used startup scripts (like cloud-init per-boot and whatnot).

Overall, I'd say give it a shot as it can be really powerful and I do actually like it. Don't be afraid to go 'no, I know how to do this better, myself' and turn it off though.

chucky_zon About Containers and VMs

lxc is used really frequently in the home space (jellyfin/plex for instance). A lot of Proxmox use cases as well which is growing in popularity extremely rapidly.

chucky_zon The Raft Consensus Algorithm (2015)

It depends!!! If you do something like Consul does where you cram “events” into a radix tree that you send as one big batch it should scale quite well. I wouldn’t expect batched Redis performance but it should be within 70-80% of it in my guess.