Hacker News Reader

FreeBSD jails already provided those containers for over 10 years. Even chroot is some kind of container.

http://en.m.wikipedia.org/wiki/Operating_system-level_virtua...

Refreshing to know that even settled projects have those same problems at their core. Depending on upstream developers is always a big risk you have to calculate well. Was always a pain and only gets bigger in our agile *aaS world.

sarnowskion Show HN: Easy-to-configure Web Server in Go

You have to have your main() in package "main" and all your files in one directory have to be in the same package. So when you want a main() and your logic in a "real" package, your have to seperate them.

sarnowskion Show HN: Easy-to-configure Web Server in Go

Please see my comment to your parent. Additional hint: you should also care about dropping/controlling your user's groups, see https://github.com/sarnowski/mitigation/blob/master/mitigati...

sarnowskion Show HN: Easy-to-configure Web Server in Go

WARNING: I implemented a tiny library for that in go a while ago. Go under Linux is not safe! Linux is not posix compliant and only sets the IDs for the current thread. Go almost always spawned more threads before initializing your code which are then still owned by root and are in the threadpool for your goroutines:

https://github.com/sarnowski/mitigation/blob/master/mitigati...

Comments mentions safe OS and golang bugticket.

sarnowskion Impressions of Go

In fact, since go does not have explicit constructors, it encourages the factory pattern all over the place. You'll find static factories everywhere in the go library.

http://golang.org/doc/effective_go.html#composite_literals

sarnowskion The OpenBSD 5.3 Release

The perception of OpenBSD's usage was always low. OpenBSD was always about network infrastructure and simple, super solid servers. It's never something you write blog posts about because of fancy bleeding edge setups. The chance is high that your packets travel through several OpenBSD boxes while surfing the web. Also virtualization was never a topic for OpenBSD[0] - it is not a use case for such a system.

[0] http://kerneltrap.org/OpenBSD/Virtualization_Security

"x86 virtualization is about basically placing another nearly full kernel, full of new bugs, on top of a nasty x86 architecture which barely has correct page protection. Then running your operating system on the other side of this brand new pile of shit. You are absolutely deluded, if not stupid, if you think that a worldwide collection of software engineers who can't write operating systems or applications without security holes, can then turn around and suddenly write virtualization layers without security holes." -- Theo de Raadt

sarnowskion The OpenBSD 5.3 Release

This.

OpenBSD clean and simple design makes it a breeze to maintain. It's documentation always tells you the whole truth and for most tasks, its so intuitive that you almost always already know where to do your stuff.

sarnowskion The OpenBSD 5.3 Release

OpenBSD's way for system upgrades is so easy: unzip tarballs, run /etc diff, reboot. Its always astonishing how simple and carefree it is to upgrade to the next major.

Contrary to that, most companies would never upgrade a linux system. My feeling is, the most used "upgrade" plan for debian is to not upgrade as long as possible and then do a full reinstall with a new version.

sarnowskion Light Table 0.4 released

Doesn't work with Ubuntu 13.04 :/ Binary is linked to libudev.0 but Ubuntu now uses libudev.1

Any chance me, as a non-tester and interested person, gets a "fix" for that?

edit: linking 1 to 0 works so far, but please consider a migration to new version - e.g. chrome did the same some time ago ago[0].

[0] https://groups.google.com/a/chromium.org/forum/?fromgroups=#...

sarnowskion OpenBSD 5.2 released

Nginx now overtakes the default Apache 1 as the new httpd on OpenBSD. In the process of integrating it, OpenBSD already gave back patches for more security (like chroot support). I am very excited about that decision.

sarnowskion Why is Linux more popular than BSD?

Yeah I had FreeBSD on the route before OpenBSD. FreeBSD was a very disappointing experience for me. This is some years back so the situation may be better. Back then, a lot of ports were broken. It felt that every second port did not compile. The second thing was that FreeBSD is like most Linux distributions: It tries to support everything and that is bad. If you have a problem and ask how you solve that with FreeBSD you mostly get the answer: you can use X or Y or Z. X has this disadvantages, Y was not updated for years and Z has no documentation. I also tried to try NetBSD but it panic'ed on all my machines during boot.

Disclaimer: I am an OpenBSD fanboy because it opened my eyes. OpenBSD's base system already solves 90% of my problems with exactly one, perfectly maintained and documented solution. You want a firewall? Choose between pf, netfilter or something else on FreeBSD. On OpenBSD the answer is "use pf" (which is btw by far the best paket filter I every experienced). The port system just works, is up-to-date and has good default configurations (and I never missed a package). Maintenance is very easy. It is not as easy as apt-get update && upgrade but the release upgrade (every 6 months) never broke anything on my systems (and takes just 10 minutes). Besides that, there is nearly nothing to do. Here is the bug/update list of the current release (5 months old): http://openbsd.org/errata51.html The last thing I want to mention now is the consistency in all tools. For network configuration there is ifconfig which can just handle everything (e.g. on linux you have to use special tools for wlan). You have great manual pages. The manual pages are real manual pages with introductions to the systems, various high level topics down to device nodes etc. They are completely up-to-date and the best source for all informations.

sarnowskion Why is Linux more popular than BSD?

I started with Linux many years ago and used various distributions. I rarley had any driver issues. Sine some years now, I am using OpenBSD for all my personal stuff. My desktop and my server. I will never go back to any Linux Distribution as OpenBSD is so much cleaner, consistent, easier to use and better documented than any other distribution out there. There are two problems with OpenBSD. At first the hardware support. I choose my machines carefully so that OpenBSD is supported which is not that easy sometimes. The second problem is the JVM. At my work place, everything runs on Linux servers with Oracle JVMs so I have to use that. OpenJDK 7 is already pretty stable on OpenBSD but the behaviour can vary too much so that this is not an option.

sarnowskion Bootstrap Toggle Buttons

Even on iOS I sometimes wondered if the "Off" word means that it is offline or will be offline after the toggle.

sarnowskion Test Driven Development Actually Works

A general note on TDD: I love it.

TDD encourages better APIs and more testable code. I don't use TDD to prevent more bugs. I don't even know if this is really true.

Everytime I think of a new feature I fastly have an API in mind. Starting with a test almost always shows me a better way to provide the functionality (easier, more failsafe). Thats one of my two key features of TDD.

The second key feature is that the tests you write are much more expressive than tests you write afterwards. I observe that everyday in my team and company. Writing tests after the implementation is done leads to a lot of mocks and just a static verification that the implementation works how it works. In the end, it is difficult to change the implementation and easy to break the specification. Writing your test ahead of the implementation means you test the specification and not how you implemented it. Tests become much easier to read as they express the specification instead of a 1000 lines test where every variable assignment of the implementation is checked.

As a last hint: I read here that people complain that TDD does not work with "prototyping". I agree with that - the problem with that statement is that a lot of people use their prototype as productive code later on instead of rebuilding it after the experimental phase. In my opinion that is a misuse of the word "prototype". A prototype is an experimental work to verify or learn some ideas and afterwards designing a better system. Other people may state that testing everything is not possible - that there are situations where it is not possible to write a test. I would bet that in 90% of that cases, this is just wrong and means a lack of testing experience of the writer. I can really recommend the following book: http://www.amazon.com/Driven-Development-Embedded-Pragmatic-... I rarly do embedded system programming. My main focus are languages like Java and Go but this book is worth its money independent of your choice of programming language.

sarnowskion A growing respect for the Samwer brothers

I am working for Zalando, the biggest fashion eCommerce platform in Europe, founded by Rocket. I am astonished that this does not happen more often. In Germany, there are just some local companies who try to compete. UK is a tough market but those companies also don't expand beyond UK. Europe is a big market where eCommerce just recently started to evolve and competitors are rare.

(This is my personal opinion and view of the situation)

sarnowskion Bashttpd - An http server in bash

Correct, in my case its OpenBSD which stores all "third-party" packages in /usr/local

sarnowskion Bashttpd - An http server in bash

Why not using /bin/sh? Didn't saw a bash specific tool (except the function syntax which is easy to convert). And if you really want to use bash, please use #!/usr/bin/env bash so that it is more compatible.

sarnowskion AdBlock, NoScript & Ghostery – The Trifecta Of Evil [Opinion]

Using Ghostery and Adblock feels like your Internet connection doubles in speed.

sarnowskion Show HN: git-tweet Push over Twitter

You may want to have a look at the git mailing list. Instead of using something like githubs pull requests, all changes are exchanged through the mailinglist. As a result, you have really expressive commit messages. I am a big fan of that development model as you can read the whole discussion about a single line change within the commit message.

http://news.gmane.org/gmane.comp.version-control.git

edit: with "git send-email master..origin" all your commits will be send as seperated emails to someone you choose. Afterwards, the receiver can easily get the commits from his mbox via "git am".

sarnowskion Comparison of open-source licenses

Indeed, this reminds me of all the OpenBSD discussions where Stallman tried to mark OpenBSD as a non-free operation system - fun fact: OpenBSD uses and suggests the ISC license, the most liberal of them all.

http://marc.info/?l=openbsd-misc&m=119750352332512&w...

sarnowskion How Three Germans Are Cloning the Web

I dont agree to 1 and 2 but your third point may be the killer. As soon as payment plays a role, checking law conformance may be a pain in the ass.

In general the non-technical part is more complicated like localized user Services.

sarnowskion On CPU backdoors - Trusting hardware

If it's related or not - I upvote this because this was an eye-opener when I started to learn programming. Definitly worth reading.

sarnowskion Ask HN: How to move away from Gmail

Just because you are paying for the service does not mean that they respect your privacy. You can also pay for Google Apps, but what you get is not worth the money. Depends more on the company than on the pricing model.

(This is just a general hint - not against Microsoft. I don't know how they do their job.)

sarnowskion [Ask]What's the progress on ACTA?

There will be a lot of demonstrations tomorrow in Germany against ACTA. For now, the german government refused to sign it like some other european countries. The opposition is strictly against ACTA but german government reacts with a lot of politicking in situations where they don't understand the basics. Depends on the lobbying.

http://www.zeit.de/digital/internet/2012-02/acta-deutschland...

sarnowskion Go 1 Beta App Engine SDK now available

I recently implemented a library for http://martinfowler.com/eaaDev/EventSourcing.html . I also just wanted to get more practice. Go channels match perfectly for this topic. The new "go" command is a great step forward for rapid development. TDD in seconds.

sarnowskion I don't think you browse like I do

Instead of installing 10 plugins, it may also be valid to use a browser who just has privacy as a main concern like http://openports.se/www/xxxterm

sarnowskion Why Facebook Connect Shouldn't Be Your Only Sign-in Option

I am managing a portal which offers the possibility to use FB Connect (in addition to own Login) and since you get no SLA from Facebook for their APIs I only can warn everyone to use the FB-only login. FB API can be randomly buggy for some hours without the possibility to get your users online.

sarnowskion The /bin/true Command and Copyright

  # (c) 2012 me
  #
  # The following comment is tried to be copyrighted
  # by me. Do not misue!
  #
  
  awesome

sarnowskion FTP Must Die

Maybe you should go with ssh if you need a secure ftp replacement: http://news.ycombinator.com/item?id=3526713