HNHacker News
TopNewBestAskShowJobs

CBLT

725 karma · joined May 11, 2018

submissionscomments
CBLT··on Show HN: A local secrets manager with easy backup
I use pass[0] which uses a flat directory structure and git. It works great! At $dayjob we have json lockfiles committed to git and merges get pretty gnarly. Not as big of a fan of just dropping it all in json. The toml lockfiles are a bit better in git.

[0] https://www.passwordstore.org/

CBLT··on Show HN: A local secrets manager with easy backup
Skimmed the readme, seems like it's not AEAD? I don't see any reason to use a tool that's not AEAD.

Also, while I get the appeal of just storing it all in a giant JSON, I don't really feel that's the final word in simple storage formats. I'd personally just use SQLite, or some other format I could rsync.

CBLT··on Calculating the Fibonacci numbers on GPU
Writing C code that performs this fast doubling algorithm for Fibonacci numbers was actually quite fun. Highly recommend it.

In my experience where I didn't modulo the numbers, the compute time was dominated by the last couple of multiplications with Megabyte-sized integers.

CBLT··on Kea 3.0, our first LTS version
The submitted link might be better changed to the actual release notes: https://gitlab.isc.org/isc-projects/kea/-/wikis/Release-Note... which start with this information.
CBLT··on Immediate PB2-E627K amino acid substitution after single infection (...)
I thought so too, but later on in the paper they mention that they performed necropsy on the mice that survived.

> samples from surviving mice on day 12 were also obtained through necropsy to measure viral titers.

CBLT··on Immediate PB2-E627K amino acid substitution after single infection (...)
The paper is interesting, but it doesn't seem to be supporting your title? I'm just past the part where they showed 100% infection rate in mice.
CBLT··on The time bomb in the tax code that's fueling mass tech layoffs
You're right, the law text doesn't specifically call out the Windows operating system or the Linux operating system. The example you gave of Open Source Windows drivers is valid.

The Grandparent's point about that "it double-dings open source developers" is still correct and poignant even with this clarification.

CBLT··on Being fat is a trap
Watch other people shop at the grocery store. They buy the vegetables, beans, raw meats, and dairy. They spend more time there than anywhere else on the store.

Watch what other people eat in their day. How many of their calories came from meals created with only the above ingredients? 25%?

CBLT··on Being fat is a trap
A couple of years ago, I was researching modern food science (for unrelated reasons). What really struck me was how focused we are on product longevity. Everything must have low available water in order to survive warehouses, transit, and shelves. Sugar, sodium, oils, and phosphates are all just tools to accomplish this.

Put another way, the bag of chips at the American grocery is _designed from concept to factory_ to be unable to support living beings. Microorganisms would die from dehydration trying to eat the chips. But due to a bug in human psychology, when we eat them we just feel more hungry. There only regulating feeling we get is guilt.

CBLT··on Snowflake to buy Crunchy Data for $250M
Business continuity. If you don't have access to your backups, there's nothing you can do to work around a vendor issue.
CBLT··on That fractal that's been up on my wall for years
Well written! Would you mind sharing how you came up with the "middle out" numbering system? I can never seem to come up with something this inspired when I'm doing math problems by myself.
CBLT··on Demonstrably Secure Software Supply Chains with Nix
https://guix.gnu.org/en/blog/2023/the-full-source-bootstrap-...

Guix bootstraps (in 2023, no clue about now) from a 357-byte program. You audit the bytecode.

CBLT··on Rust’s dependencies are starting to worry me
Those are done at compile time. Many languages (including Rust, which this story is about) also remove unused symbols at compile time.

The comment you're replying to is talking about not pulling in dependencies at all, before compiling, if they would not be needed.

CBLT··on Management Habits Burning Out Your Best Engineers
I just read the article and feel I learned nothing. It's all the obvious lessons, without any real implementation advice. Am I the wrong audience?
CBLT··on A faster way to copy SQLite databases between computers
`sqlite3_rsync` must be installed on the remote host too, so now you're cross-compiling for all the hosts you manage. It also must be installed into the PATH the ssh uses, which for a number of operating systems doesn't include /usr/local/bin. So I guess you're now placing your sshd config under configuration management to allow that.

These tasks aren't that challenging but they sure are a yak shave.

CBLT··on A faster way to copy SQLite databases between computers
Yeah, but unfortunately the SQLite team doesn't include that tool with their "autotools" tarball, which is what most distros (and brew) use to package SQLite. The only way to use the tool is to compile it yourself.
CBLT··on I use zip bombs to protect my server
Allow -> Tarpit -> Block should be done by ASN
CBLT··on Don't force your kids to do math
Something that might work for getting your kids interested in modular arithmetic: The Chicken McNugget Theorem.
CBLT··on Zig's new LinkedList API (it's time to learn fieldParentPtr)
> only one allocation per node

I believe the implication is there's fewer than one allocation per node with the new API. You allocate contiguous memory once, and use it to store n elements.

CBLT··on Parser Combinators Beat Regexes
I love the verbose flag[0] to regex, so I can write comments inline.

[0] https://docs.python.org/3/library/re.html#re.VERBOSE

CBLT··on Xiaomi Car with Driver Assistance Crashes, Three Reported Dead
It's been proven that people are extraordinarily poor drivers for the first few seconds they take over driving from a computer.
CBLT··on Dagger: A shell for the container age
I solve most of those issues with a Docker Bakefile; I'm confident I could solve the rest with Bakefiles if I had to. Reasonable developer experience.
CBLT··on Malware found on NPM infecting local package with reverse shell
I think Yarn zero install is now the default, and does the same thing you're advocating? I'm not really a JS person, but it looks like it's done reasonably competently (validating checksums etc).
CBLT··on Show HN: A Database Written in Golang
Didn't the Vitess team found planetscale?
CBLT··on One year after switching from Java to Go
Hey, sorry, that might have been me. I did that then left the company.

In my defense, I had to hack around a different Python library also manipulating sys.path, which nobody likes except this one dev team in a different timezone. They somehow got a director to declare that I would fix this issue they self-created before they woke up in 8h, and I wasn't allowed to rip out the library. So, ugly sys.path manipulation in the exact way that library wants. Not proud of it, but it sounds like you were given time to engineer an actually correct solution.

CBLT··on It's OK to hardcode feature flags
I disagree that using feature flags to de-risk deployments is a symptom of bad deployment pipelines.

There's several aspects of deployments that are in contention with each other: safety, deployment latency, and engineering overhead are how I'd break it down. Every deployment process is a tradeoff between these factors.

What I (maybe naively) think you're advocating is writing more end-to-end tests, which moves the needle towards safety at the expense of the other factors. In particular, having end to end tests that are materially better than well-written k8s health checks (which you already have, right?) is pretty hard. They might be flakey, they might depend on a lot of specifics of the application that's subject to change, and they might just not be prioritized. In my experience, the highest value end-to-end tests are based on learned experiences of what someone already saw go wrong once. Writing comprehensive testing before the feature is even out results in many low quality tests, which is an enormous drain on productivity to write them, to maintain them, and to deal with the flakey tests. It is better, I think, to have non-comprehensive end-to-end tests that provides as much value for the lowest overhead on human resources. And the safety tradeoff we make there can be mitigated by having the feature behind a flag.

My whole thesis, really, is that by using feature flags you can make better tradeoffs between these than you otherwise could.

CBLT··on Murderbot, she wrote
Seconded - I enjoyed the audiobooks for Murderbot by Graphic Audio. I originally found them on a torrent tracker when I was searching for something else, and after enjoying the free trial I bought the series through Graphic Audio's website.
CBLT··on Diet-dependent host metabolite shape gut microbiota to protect from autoimmunity
I find it more readable to have shapes, maybe change microbiota to microbiom to save a character?
CBLT··on Speed, scale and reliability: 25 years of Google datacenter networking evolution
I would guess the Nvidia ConnectX is part of a secondary networking plane, not plugged into Jupiter. Current-gen Google NICs are custom hardware with a _lot_ of Google-specific functionality, such as running the borglet on the NIC to free up all CPU cores for guests.
CBLT··on Benchmarks of Google's Axion Arm-Based CPU
Hey can someone else double-check that the formula being used on Page 2 for Perf/Dollar is actually making sense?

They had three measures: A) Flops. Operations per second. B) Cost. Dollars per hour. C) Runtime. Seconds per task.

I expected the formula to be Flops/Cost, resulting in units of operations per dollar.

Instead it was computed as Flops / (Cost * Runtime), to get some units that don't make sense to me — operations * tasks per dollar seconds?

← PreviousPage 4 of 9Next →