HNHacker News
TopNewBestAskShowJobs

dolni

1,277 karma · joined October 13, 2020

submissionscomments
dolni··on The first release of OpenVox, the OSS implementation of Puppet
If you like Python, consider pyinfra.

https://pyinfra.com/

dolni··on The Origins of Wokeness
The number of people making the claim is not small.

You probably just cut all the people out of your life who disagree with you.

That is the liberal way, these days.

Donald Trump, among the worst presidents the US ever had, won the 2024 election. This kind of nonsense was absolutely a factor.

dolni··on The Origins of Wokeness
Maybe that is the problem.
dolni··on Today I learned that bash has hashmaps (2024)
I write a lot of shell and my advice is don't use plain POSIX shell. Write bash.

It is 2025. bash is present almost everywhere. If, by chance, your script is run somewhere that doesn't have bash then guess what?

Your POSIX script probably won't work anyway. It will be a different system, with different utilities and conventions.

Line count is not a good reason to choose or avoid bash. Bash is quite reliably the lowest common denominator.

I dare say it is even the best choice when your goal is accomplished by just running a bunch of commands.

All that said, bash is gross. I wish we had something as pervasive that wasn't so yucky.

dolni··on The Origins of Wokeness
Isn't it interesting that your response here is questioning and perhaps dismissive?

If a minority were sharing their perspective about whatever their lived experience was with regards to racism, would you respond this way?

I'll answer that: no, you wouldn't.

Which very quickly lifts the curtain. The movement is not about empathy or understanding. It's about empathy and understanding for people you deem worthy of receiving it.

dolni··on Nvidia announces next-gen RTX 5090 and RTX 5080 GPUs
One edge that PCs have is massive catalog.

Consoles have historically not done so well with backwards compatibility (at most one generation). I don't do much console gaming but _I think_ that is changing.

There is also something to be said about catalog portability via something like a Steam Deck.

dolni··on U.S. appeals court strikes down FCC's net neutrality rules
This site doesn't lean further right. It leans exactly the same way it always did.

The left moved further left.

dolni··on Technical debt vs. technical assets: What's the difference?
Only if the features you accrue through the debt are worth anything.

Sometimes your product people aren't good. Sometimes the features aren't worth a damn.

dolni··on Php.net Is Down
It's Sunday in the United States.

It's not Sunday everywhere.

dolni··on New iMac with M4
This video describes one: https://youtu.be/UJrdKKmb9tQ
dolni··on New iMac with M4
There is a reason that the old saying is "reduce, reuse, recycle". The effectiveness is in that order: reduce consumption, reuse what you have, and recycle what you can no longer use.

There is a very straightforward opportunity here for Apple to enable "reuse". They absolutely should be doing that.

dolni··on Please ban data caps, Internet users tell FCC
My ISP's advertised rate is the download speed I get during speed tests.
dolni··on Response to DHH
This article tries to provide cover for slamming DHH by opening with "this is a respectful debate".

DHH, like anybody else, is imperfect. But the author acts like he is superior. He isn't.

But I will say there is not much worse than a person who feigns respect and then goes on to say things like:

"toxic personality and inability to scale teams"

"it would be good to explore with a therapist or coach" (therapist really being the dig, here)

"Why are you still so small?"

"Instead of bragging about your beautiful office in the clouds, you should question why you can’t scale teams."

If your respect for DHH was real, you would have given your feedback in a respectful way instead of writing some blog post with such incendiary comments.

dolni··on Do not use secrets in environment variables
> The dev secrets tend not to be as useful from the internet as they are from the intranet.

For many companies this is a myth.

Once you reach a critical mass of complexity and scale, you figure out that simple database seed files you can bundle into an app repo are not sufficient to test your application.

So what solution do people look to? Taking data from prod and feeding it into lower environments. Depending on what regulation you are subject to, some amount of data scrubbing may be required. But even if it isn't, leaking users' data is a bad look.

Is data scrubbing easy to do perfectly? The answer is 100% unequivocally no.

You mentioned intranet too, and the thing about that is making dev services available externally is a common enough problem that Ngrok is financially viable.

TL;DR: the assertion that dev secrets are low value is often not true.

dolni··on Do not use secrets in environment variables
This article has about as much insight as I would expect from a "nodejs-security.com" article.

This article spends a good deal of time conflating two things: putting stuff in .env and using environment variables.

The application-parsed .env file is one of the most poorly thought-through ideas that has taken hold in modern application development. It takes something you can do in literally a couple lines of shell (as a container entrypoint) and adds a bunch of complexity for something that is actually just worse.

In local dev scenarios, app-parsed .env files suck because you often end up with some kind of dev-specific secret that you don't want committed to the app repo. In my experience this means developers figure out how to pass a .env file around.

If you use an actual shell instead, the local-dev .env can shell out to something like the AWS CLI to get secrets from parameter store. Or you could grab them from Hashicorp Vault if you run that.

And because a shell fetches it at run time, secret updates are seamless and properly access-controlled in one spot.

In proper deployment scenarios, .env sucks because your deployment system (container orchestrator, Lambda, etc) will need to set those values appropriately for their current environment anyway. And by having a .env file the app loads, now you have two places for configuration.

Applications simply should not have any involvement in setting values for their own environment variables. They are typically used for core infrastructure-level configuration. The source of truth for this is probably going to be available via something like Terraform. So the application should ultimately inherit they configuration through Terraform.

Additionally, this article is simply wrong on environment variables being readable by any user on a Linux system. On Linux, a process's environment can be read by the superuser and the user who owns the process. That's it.

dolni··on Linux dev swatted and handcuffed live during a development video stream
> Well it kind of makes sense if you believe people are generally going to follow social norms and not make false accusations for no reasons.

It kinda doesn't. If one in 10,000 people watching livestreams would do this kind of shitty thing, then at one million people watching livestreams, you can expect 100 instances of this crap.

It's small relative to global population but not small enough to ignore completely.

dolni··on Better Dotfiles
What happens when you need to link a file that does not support comments like that? For example, something which stores its config as plain JSON.

Or how about when you want to symlink an entire directory? For example something like neovim, considering that you may want to split config into separate files for organization. My neovim configuration has an "autoload setup" so any lua files inside the config directory are automatically required.

Lastly, this approach does not appear to support running commands. My dotfile install script ensures that tmux plugins are installed, the terminal font I use is available, and some other stuff that you need to invoke a command or script to achieve.

I like that the approach is simple, but I do not think it can support even relatively common use cases very well.

dolni··on Memos: stick private notes on your email
Some use cases are described in the blog post.

I have wanted a feature like this before and worked around it by replying to the email but sending the reply only to me.

dolni··on NHS 'soup and shake' diet puts almost 1/3 of type 2 diabetes cases in remission
I have recently started making a concerted effort to eat better due to high cholesterol. My BMI is in the normal range, but at the high end of normal.

Given my recent experience eating better, I think junk is probably even worse than many people realize.

Refined sugars increase appetite astronomically. When I flipped to healthy food, I had a good few days of "suffering" as my body adjusted to lower calorie intake. After that, I never felt better.

My daily calories are something like 1/4 what they used to be. I lost 10 pounds in a few weeks without even trying. My mental clarity is coming back, which I thought slipped a bit due to age. Maybe age is a factor -- but diet fixed it!

dolni··on Ask HN: How do browsers isolate internal audio from microphone input?
> The "OS" isn't special here, apps can listen to system audio.

Even if this is true, it's easy to imagine such functionality being exploited by malicious apps as a security and/or privacy concern, particularly if the user needs a screen reader.

It definitely makes sense for the operating system to provide this functionality.

dolni··on Amazon fined $5.9M for breaking labor law in California
The fine doesn't even amount to a slap on the wrist.

It's like if someone stole $1000 worth of merchandise from a store and the only punishment is a $1000 fine... and you get to keep what you stole.

Why be law abiding when you could break the law and potentially make more money? You'd have to be stupid to be law abiding in a system like that.

dolni··on Things to avoid in Ruby
The problem is that is one example of MANY you will run into issues with.
dolni··on How Bad Are Ultraprocessed Foods, Really?
> Why shouldn't the burden of proof be on the people making these meal replacements?

So we can have what, one source on the issue with a very obvious conflict of interest? What kind of sense does that make?

> The NOVA system is more interested in the wider effect of ultraprocessed foods replacing existing eating and cooking habits.

I wasn't make a comment on what they do. I was making a comment on what I would find useful.

I don't find saying "ultraprocessed bad mmmm'kay" particularly interesting or insightful. All processes and preservatives are not equal. Pretending they are (or even just glossing over the details) is unscientific and a waste of time and money.

dolni··on How Bad Are Ultraprocessed Foods, Really?
> for public health policy it's easier

Your entire explanation seems to rest critically on this point.

After COVID, I cannot support what's "easier" for public health policy. Do the work.

"Easier" got us "N95s don't protect against COVID" and then it was "oh wait, actually cloth masks do!"

A lot of this stuff relies on trust.

I won't sit here and try to pretend that you will find health eating Doritos or McDonald's Big Macs. But is something like a low-sugar protein bar a decent option? How about Soylent?

These are the nuanced questions that are actually useful to answer. Nobody actually thinks "ultra processed foods" are good for you to begin with.

dolni··on Utilities for refactoring and upgrading Ruby code based on ASTs
Worse than that, Rubocop will complain about things that change the meaning of your code.

For example, Rubocop’s default configuration insists on calling “.zero?” over using “== 0”. Not all objects have a “.zero?” method, and even if they did it isn’t guaranteed to be the same as “== 0”.

dolni··on Ask HN: What's the most life-changing blog post you've ever read?
Respectfully, I think your take that this "has nothing to do with the ultra wealthy" is exceptionally naive.

We know with absolute certainty that much worse atrocities happen in places like Russia and China. What makes you think that the US is immune to that kind of thing?

We don't have quite the same problems and they aren't so obvious.

But every once in a while, the curtain comes down and you get to see how things really are.

Wide-scale domestic surveillance. The US government chasing so hard after people like Snowden and Assange. Bernie Sanders being completely ignored by the Democratic Party in 2016. Epstein being mysteriously killed.

The US does not openly speak about its corruption, but there is plenty of it anyway.

While we are a democratic country don't forget that democracy is something you fight for every day. And if you look around, when is the last time there was a serious fight put up for democracy?

dolni··on Ask HN: What's the most life-changing blog post you've ever read?
I think at least some of the battlefronts talked about by this blog post were started by the ultra-wealthy in the US to draw the peasants attention away from Occupy Wall Street. That was the last "big thing" before identity politics took center stage. It pits us all against each other instead of pitting us against the rich.

China and Russia are likely responsible for some of these battlefronts, too.

dolni··on Do Best Practices Matter?
What if everything were written in C? Or Python? Or Java?

We'd have massive consistency across the software industry and yet that would be an absolutely terrible idea.

dolni··on Quality is a hard sell in big tech
> Quality is expensive. Even a fairly minor improvement in basic Quality can double the cost of implementation.

Quality is expensive, but lack of quality is also expensive.

Low-quality software causes customer churn, increases implementation time for new features, causes more incidents, negatively affects your reputation, etc.

Moving fast is the right thing sometimes. But overall, quality is the way.

dolni··on Python types have an expectations problem
I have written type-annotated Python for as long as type annotations have been a thing.

"Number of bugs will drastically increase" is simply wrong.

Type checking prevents bugs before they ship.

← PreviousPage 2 of 18Next →