HNHacker News
TopNewBestAskShowJobs

zufallsheld

741 karma · joined March 21, 2013

[ my public key: https://keybase.io/zufallsheld; my proof: https://keybase.io/zufallsheld/sigs/xT_tIyu1_ARyqndC1wPYwz-HTuzJjD3XJMX1RhwF6nc ]
submissionscomments
zufallsheld··on The GitHub wiki is an anti-pattern (2022)
It it's text data, yes absolutely inside the docs folder, (maybe an assets subfolder). I didn't have the need yet to put binary data in the docs, but depending on the size it could be in the repo itself or a separate artifact store.
zufallsheld··on Ask HN: Diablo 4 on Ubuntu?
Can't give you any specific help since you didn't specify your problems. However it worked for me in the steamdeck with Proton out of the box.
zufallsheld··on K2 Horizon: A connected fleet of six open models
Without open-source, there'd be no macOS.. So good thing, it exists.
zufallsheld··on 1Password wades into a right-wing mess after funding a Linux project
> that is so vague it need to be described as a appearing to imply a call for deportation

This is just bad journalism. Here's what DHH wrote:

> When gypsies take over public spaces, you deport them. This isn't hard, it isn't cruel. It's the basic logic of self-preservation.

https://world.hey.com/dhh/wolves-sheep-and-gypsies-ba44af6a

zufallsheld··on We Are Forking dotenvy into dotenv-ng
Probably next generation.
zufallsheld··on Ask HN: Alternatives to GitHub
There's a difference between relying on Ai and having any llm generated content in your repos.
zufallsheld··on The Output Style, It Does Nothing – Learning to Live with Claude
This only works if all you care about is the code, like the author mentioned. But if you want to understand what and why the llm did something, or you want it to explain it to you, you're again stuck with the output.
zufallsheld··on TLS certificates for internal services done right
Well, if your cert-manager distributes its own CA, you'd still need the clients to trust the CA, even in k8s.
zufallsheld··on I think I have LLM burnout
Because they'll just paste your remarks in their llm, let it correct the text and send it back to you.
zufallsheld··on Minimus container images are now free
> Do you have particular scenarios you’d like the Dockerfiles for or is it just for transparency/ trust (which is a totally valid reason of course)?

The latter. You or an attacker could tamper with the images - however even with the Dockerfiles I can't be sure that the provided images are built from the Dockerfiles, so in the end I'd have to trust you anyway. Also I'd be curious how you build the images.

Thanks for your answer!

zufallsheld··on Minimus container images are now free
Where are these built? Can I see the Dockerfiles? How are they licensed? I get that they are free as in beer, but not libre/FLOSS?
zufallsheld··on Snap Smart Glasses
There's a huge difference. With a smartphone I can almost always see that people are filming.
zufallsheld··on DNS is for people, not for IT infrastructure
You'd presumely managed that customization with Ansible...
zufallsheld··on On The <dl> (2021)
That's the problem.
zufallsheld··on Valve removes free game from Steam after players discover it contains malware
It's not a new name. Proton is Valve's fork of wine. They also contribute patches to wine.
zufallsheld··on Moving from GitHub to Codeberg, for lazy people
In corporate most people connect their gitlab to ldap or active directory and thus accounts get created automatically.
zufallsheld··on Trivy under attack again: Widespread GitHub Actions tag compromise secrets
> You can't. They can execute arbitrary code. They can download another bash file via Curl and execute that.

Presumably you'd check the code of the action before you include it (and then don't use an action with non-pinned versions). This way you know the action won't execute arbitrary code for this version and won't get any other code because of version pinning.

The docker action you linked is ironic in this regard since every other version in the code seems to be pinned except the one you linked to.

zufallsheld··on Show HN: An addendum to the Agile Manifesto for the AI era
I'm curious: where exactly does it abolish VP roles? I don't see it.
zufallsheld··on Don't post generated/AI-edited comments. HN is for conversation between humans.
You could use translation tools instead of llms.
zufallsheld··on Show HN: Zenòdot – Find if a book has been translated into your language
Do you know https://annas-archive.gl/isbn-visualization/? And https://search.worldcat.org/? They could probably help you with your dataset.
zufallsheld··on Ask HN: What Are You Working On? (March 2026)
> I'm cleaning up the code right now and will upload it later today or maybe tomorrow here
zufallsheld··on DNS-Persist-01: A New Model for DNS-Based Challenge Validation
Hetzner does not charge any money for their dns service and they have an api.
zufallsheld··on Show HN: Renovate – The Kubernetes-Native Way
Presumably a CR can be validated by k8s against a schema and will fail at an early step. I admit I like the operator-pattern.
zufallsheld··on Allowlisting some Bash commands is often the same as allowlisting all
Same thing for allowing specific sudo-commands. Many tools (like vim or the tools mentioned in the article) would have the same problem when allowing them to be run with root privileges.
zufallsheld··on BirdyChat becomes first European chat app that is interoperable with WhatsApp
With this project (https://github.com/spantaleev/matrix-docker-ansible-deploy/), setting up the bridges gets a lot easier. After the initial setup, upgrading the bridges is painless.
zufallsheld··on I Like GitLab
Um, no? It does a tail.
zufallsheld··on I Cannot SSH into My Server Anymore (and That's Fine)
Yeah, and then it probably isn't the developers job to fix that but rather the DevOps engineer's one.

Also saying "the developer has to fix this" is something we tried to abolish when talking about DevOps. What about shared responsibility? Bridging the knowledge gap.

zufallsheld··on I replaced Windows with Linux and everything's going great
That's the good thing with open source. You can theoretically fork it and remove what prevents you from using Kate as root.
zufallsheld··on GitHub Actions has a package manager, and it might be the worst
AFAIK because "act", the tool to run github actions locally, was there and there was no need to create something else. Also makes it easier for people to switch from github.

Also see https://docs.gitea.com/usage/actions/design

zufallsheld··on Dynamically include files in GitLab-CI
Well, yes. In this project where I needed to do this, we thought about removing the pipeline completely and replace it with something custom made. But as always: gitlab worked and there was no immediate need to replace it.
Page 1 of 10Next →