HNHacker News
TopNewBestAskShowJobs

sondr3

902 karma · joined May 14, 2013

Just a guy with a passion for tech.
submissionscomments
sondr3··on Radicle: Disclosure of Vulnerability in the Network Protocol
The fact that this was reported three months ago and the "workaround" is to stop using private repos and assume they are all pwnd is quite something. How do you not notice that cross-node traffic is not encrypted when building something like this?
sondr3··on The lost joy of music piracy
I still have my invitation email to What.CD and cherish the stuff I found and downloaded on it. After it went away I didn't do the reasonable thing and migrate to RED/OPS immediately, though I've joined OPS in recent years. It does not feel the same, but that's probably more me being older and less optimistic than during the What.CD days. I have fond memories of reading the forum threads about jazz when I was getting into it, or looking at all the weird collections people made (I vividly remember laughing at the "albums with feet on the cover"-collection) or finding really obscure, local artists you couldn't find anywhere else or going to the public library to rent CD's to rip and upload for credits. Fun times.
sondr3··on AWS to bare metal two years later: Answering your questions about leaving AWS
> Cloud makes sense when elasticity matters; bare metal wins when baseload dominates.

This really is the crux of the matter in my opinion, at least for applications (databases and so on is in my opinion more nuanced). I've only worked at one place where using cloud functions made sense (keeping it somewhat vague here): data ingestion from stations that could be EXTREMELY bursty. Usually we got data from the stations at roughly midnight every day, nothing a regular server couldn't handle, but occasionally a station would come back online after weeks or new stations got connected etc which produced incredible load for a very short amount of time when we fetched, parsed and handled each packet. Instead of queuing things for ages we could instead just horizontally scale it out to handle the pressure.

sondr3··on Tsdown – The Elegant Bundler for Libraries
We've switched over our libraries at $WORK to use `tsdown` and it's mostly been a very boring journey, we switched from `tsup` and the DX gains have been massive. Running our `dev` process in the frontend monorepo compiles and bundles all the libraries in less than a second on a cold start compared to `tsup` which was far slower. The biggest gain however was in our CI/CD pipeline where the build servers are much weaker than our developer machines, the `build` step in the quality gate for example went down by over a minute. We've also switched to the new native `tsgo` [0] for type checking, saving us another minute on CI/CD and have migrated a few things from ESLint to Oxlint, which was another easy minute saved. And we switched from Prettier to Biome, and checking the formatting on CI went from ~15s to ~1s. Massive gains are being had in the JS-world from gradual oxidation. Can't wait for Vite with rolldown, we tried that but have a few libraries that depend on SWC which made it a show stopper.

[0]: https://github.com/microsoft/typescript-go

sondr3··on Using Emacs Org-Mode With Databases: A getting-started guide
I used Org Mode for all mandatory assignments [0] when I was a student, it worked super well and I could create well formatted LaTeX documents/PDFs from it as well. The supervisors were very impressed that I did my assignment in LaTeX, and I could never be bothered to correct them :-)

[0]: https://gist.github.com/sondr3/ae4eda2816cfeda7b8597ce1c48d0..., best viewed as the raw file for all the details

sondr3··on Ripple – A TypeScript UI framework that takes the best of React, Solid, Svelte
So much negativity... I for one really like the look of this, I've been yearning for something that's not the current crop of frontend frameworks to see where we go. The author definitely has the past experience to build something like this based on being a core member of both Svelte and React. It'll be cool to see where this goes, though I wish we had more Elm-like frameworks (that don't lock down the compiler).
sondr3··on Optimizing a Math Expression Parser in Rust
If you've never been exposed to a Hindley-Milner type system[1] it can seem a bit magical, but it essentially works by trying to figure out the types from the inside and out by inferring usage all the way to the top. The type of `n` however is `&str`, but I take it you mean the matching. `n.parse()` can be anything that implements `FromStr`, but `Token::Operand` can only take a `u32`, so it can immediately infer that the result of `n.parse().unwrap()` must be `u32` (`n.parse()` is a `Result<u32, Err>`).

[1]: https://en.wikipedia.org/wiki/Hindley%E2%80%93Milner_type_sy...

sondr3··on Why Norway is edging towards a fresh EU membership bid
Norway has incredibly high tolls and tariffs on importing food (a bit ironic nowadays), primarily to protect the local farmers etc. We're a big country, but the amount of arable land is small and the climate does us no favors. We're at about 39% self sufficient for food, and import a majority of our vegetables, grains and fruits (Norway is one of the biggest importers of food in the world). Fact of the matter is that the only thing that props up local farmers is the subsidies and high import fees, if we join the EU that will have to go and local farms will not be able to compete on the open market. There's obviously much more nuance and details here, but that's the gist of why a lot of people don't want to join the EU. The last vote was essentially decided by the agricultural industry in Norway.
sondr3··on Why Norway is edging towards a fresh EU membership bid
I think an EU membership will only happen in Norway when the old generations die out, the yes/no divide is a big generational thing. Even though the latest poll only shows a six percent difference between yes/no, it's only as high as it is now because of the current political situation with trade wars and actual wars. Any vote now for a membership will only happen when a party knows the yes side will win, doing otherwise will postpone the vote another thirty years again. Personally I think we should join the EU, we're already heavily tangled with EU laws and regulations, but I understand the concerns for our agriculture and fishing industries.
sondr3··on Vanishing Culture: Punch Card Knitting
I recently bought an old Brother knitting machine (KH940) which is electronic but with a community of hackers adding third-party firmware and hardware on it [0]. There are also lots of models that read punch cards [1] and knit that purely mechanically (and later models electronically). They are a marvel of engineering that has essentially died out, only Silver Reed and Taitexma produce new models as far as I'm aware and they are often not as featureful as the old machines (SR has no garter carriages that Brother machines had 40 years ago for example).

[0]: http://www.ayab-knitting.com/ [1]: https://alessandrina.com/2015/09/03/brother-kms-punchcards-a...

sondr3··on Show HN: Printercow – Turn any thermal printer into an API endpoint
Which then again could have AI integrations of its own! Imagine the endless possibilities of AI shredding.
sondr3··on The Overengineered Resume with Zola, JSON Resume, Weasyprint, and Nix (2023)
I also over-engineered how I generate my CV[1], but went the opposite direction by using Dhall to create JSON and LaTeX files that I use to create a PDF and GraphQL API in Rust for it, automatically deployed via CI/CD to a VPS and a tagged GitHub release. It was a lot of fun to make, but is so over-engineered I hardly want to touch it anymore :)

[1]: https://github.com/sondr3/cv-aas

sondr3··on iTerm2 feature request: disable all AI-related features
I too would be immensely frustrated if this was released in my terminal emulator, and would jump ship immediately. My current job would (and probably will) ban this and similar integrations unless compliance gives the thumbs up... and they do not care about how optional it is. GitHub Copilot is still not allowed unless you are in a small pilot project with their own agreement and contract for sharing and storage with Microsoft with tons of red tape. ChatGPT is still banned. Please keep AI out of the core features of applications that absolutely don't need it.
sondr3··on Not all graphs are trees
This also made me scratch my beard, but I think he maybe means allowing multiple mutable references to a variable when the compiler can prove that nothing bad happens. It's something a bunch of people have been trying to solve with different models, the most recent I know of is Tree Borrows [1].

[1]: https://www.ralfj.de/blog/2023/06/02/tree-borrows.html

sondr3··on Rolldown: Rollup compatible bundler written in Rust
Yep, forgot to mention that in my post, thanks.
sondr3··on Rolldown: Rollup compatible bundler written in Rust
I can't speak for the authors of Rolldown, but esbuild is essentially a one-man show and everything is bespoke and written for esbuild. Not saying this as a bad thing, Evan single-handedly improved bundling performance for Node and started us down this path of tools in Rust. The libraries and ecosystem for writing tooling for other languages is really taking off with projects like oxc, SWC, LightningCSS, Biome, rslint, Deno, rspack, napi-rs/Neon for JS/TS/Node etc plus ruff, uv, rattler, pixi for Python and so on, so you get a proliferation of libraries and authors that can share and help each other.

Plus, on a personal level, using a language with pattern matching and algebraic data types makes writing tooling for parsers and such much more ergonomic than in languages without.

sondr3··on Gemma: New Open Models
Huh? The official numbers are 877k or 16% [0]. Are you just pulling numbers out of thin air?

[0]: https://www.ssb.no/en/innvandring-og-innvandrere/faktaside/i...

sondr3··on Rust and Htmx: Making a Slack/campfire clone
While Rust and HTMX are a cool combo, this feels like random blog spam. The video is just a generic techfluencer talking about buzzword tech without any substance. At the very least tag the post with "Show HN".
sondr3··on UUID Benchmark War
You can generate the UUID in your application and insert it, UUIDv7 can be used in any UUID column in Postgres. UUIDv7 natively in Postgres are coming in v17: https://commitfest.postgresql.org/43/4388/.
sondr3··on Uiua: A minimal stack-based, array-based language
You’ll love Piet (https://esolangs.org/wiki/Piet) then :)
sondr3··on Seriously Consider Skipping the Drinks (2022)
After getting a Garmin watch I’ve noticed that any drinking wreaks havoc on my body, and heavy drinking lingers for a long time. I’m getting the same readings when I’ve had a bit to drink from heart rate variability, sleep quality and such as when I’m really sick. It’s started to push me to drinking less, but I’ll never quit entirely. Life is too short and my mental health enjoys a glass every now and then.
sondr3··on Rejected GitHub profile achievements
2FU is actually hilarious, I want some of these.
sondr3··on Deno 1.35: A fast and convenient way to build web servers
I like Deno for many of the same reasons I like Rust and Go, the tooling comes bundled with the runtime. No fussing about with ESLint/prettier/tsconfig/bundling and all that jazz, Deno includes it all. The dependency story was a little rough for a while but with import maps now it’s really quite nice. With the npm ecosystem integrations it’s starting to be a very nice developer experience.
sondr3··on What Is Type-Level Programming?
There's a small difference between type-level programming and type-driven programming, Idris does the latter while Rust the former (at least in my opinion). The library uses types to make illegal states impossible and therefore should qualify as type-level programming.
sondr3··on Your.Online: Gandi continues its development
I've moved a few of my domains from Gandi to Cloudflare, though their selection of available TLDs is somewhat limited and until recently you couldn't register domains directly. I was considering moving back to Gandi from Cloudflare, but looks like I'll have to look around... again.
sondr3··on Laying Out a Print Book with CSS
Wouldn't surprise me if it was easier for the author to hack this together in CSS since he already knows it quite well compared to learning LaTeX. I love LaTeX, but the learning curve is more like a cliff.
sondr3··on Advanced Compilers: Self-Guided Online Course
It's just the nomenclature that I'm used to, compiled languages are so called because there is no VM, it's just machine code that is run while C# and Java still requires the JVM to do JIT compilation at runtime. But it's mostly splitting hairs, there is no agreed upon definition of what makes a languages compiled/interpreted.
sondr3··on Advanced Compilers: Self-Guided Online Course
Most of the time when people talk about compiled languages/compilers, they mean languages that compile to native machine code, not languages that compile to a bytecode/run on a virtual machine.
sondr3··on Reddit is experiencing a partial outage
Can't wait for this to be one of the reasons the hard deprecated old reddit :(
sondr3··on Ask HN: LastPass Alternatives
Throughout the years I've tried most of the more popular ones on the market, some times forced via work and other times because I was curious.

- KeePassXC: tried this when I was looking for a self-hosted, open-source alternative to LastPass years ago. Was surprised at how well it worked, but syncing was too much of a hassle so I gave up fairly quickly.

- 1Password: my favorite of the bunch so far, great UI and UX, works seamlessly across all my devices with all the stuff I want and need: credit card info, logins, 2FA, automatic hidden email generation via Fastmail, easy sharing and family accounts work really well, CLI for use in scripts and now builtin SSH-key management. Not a huge fan of the subscription model, but probably the service I am most happy to pay for.

- LastPass: was forced to use this at my previous job, absolutely hated it. The UI and UX feels ten years behind 1Pass and Bitwarden, it's slow and not nearly as featureful as the alternatives. I switched from them when they were bought out by LogMeIn, but it doesn't look like the product has meaningfully changed since then.

- BitWarden: played around with this for a while, but didn't switch from 1Pass mostly because I am not willing to host something like this myself and it costs the same as 1Pass with less features and polish.

Personally, I would recommend 1Pass for a "it just works" and Bitwarden hosted yourself if you want the same but on your own premises via https://github.com/dani-garcia/vaultwarden.

Page 1 of 6Next →