HNHacker News
TopNewBestAskShowJobs

CSDude

4,390 karma · joined November 6, 2013

I work at JumpCloud
submissionscomments
CSDude··on Canonical shows ads in the Ubuntu CLI
To be honest, I'd not be too bothered by that specific ad. Hoever, I gave up using Ubuntu long ago with the push for snap applications and all the mayhem it caused.

* Oh, you want to install a package, here are two very distant versions in snap and apt. Select one!

* Oh you selected snap, sorry now all program starts are slow now because we need to mount compressed disk for sandboxing.

* Oh, this snap does not support sandboxing, here install with --classic flag.

I use macOS daily, but when I need Linux, I use Arch btw (meme) but seriously it's much more clear.

CSDude··on RCE via GitHub import
I love and prefer Java & Static languages too, however saying it cannot happen in a static language is a bit of stretch. The recent Log4j vulnerability and countless Jackson vulnerabilities are examples of how a simple deserialiation can gone wrong.

Jackson can accept "@class": "com.package.something.Class" which might be class that executes commands on constructor, there is a huge denylist to keep you safe when you use that feature. Almost similar to what Gitlab have here.

CSDude··on Ask HN: What's Your Biggest Regret?
When Docker was first released, I made a programming assignment grading system when I was a Teaching Assistant. https://www.youtube.com/watch?v=fFy8LHQ6EtI

Idea and execution had potential but I lacked networking or courage. Also professors was really dismissive about it. I could have it used in 2 different courses only.

I wished I pushed it harder to even different universities and courses.

CSDude··on Turkey’s inflation hits 83% as Erdogan vows to keep cutting interest rates
They are not definitely illegal to import. There are just fees you have to pay.
CSDude··on Partitioning in Postgres, 2022 Edition
Why would I build a part of it manually when pgpartman is already available? It’s just an extension as its just code.

Regardless of what they say on a public page, that is a vague license. Can I use Timescale to provide a SaaS service that collects application traces, and I provide a DSL to query the database that is not exposing the DB directly? No, its a gray area.

CSDude··on Partitioning in Postgres, 2022 Edition
Timescale is not just an extension. It offers many features and a restrictive license. Partman is just a utility. But I agree something like partman should be part of core Postgres
CSDude··on Ignore 98% of dependency alerts: introducing Semgrep Supply Chain
Jokes on you I already ignore %100 of them /s

I like the promise however how can I trust it completely that the ignored part is not actually reachable? All the languages (except a few) do some magic that might not be detected? At previous work, we were bombarded with dependency upgrades, I can still feel the pain in my bones.

CSDude··on Turkey’s inflation hits 83% as Erdogan vows to keep cutting interest rates
Cheapest iPhone 14 (not pro) is 30999 TL. Minimum wage is 5500 TL in Turkey. %48 of workforce in Turkey earns Minimum wage. A junior software engineer mostly earns between 10-30k TL. A teacher earns around 8-9K. But there is too much variation, inequality so numbers may be way off.
CSDude··on Postgres WASM
This is really cool. It'd also make a great teaching environment.
CSDude··on Turkey’s inflation hits 83% as Erdogan vows to keep cutting interest rates
We are a Turkish based startup. Only good thing is that we can be competitive in terms of pricing our product https://www.resmo.com/

Reality is that, everything become so expensive that I lost sense of prices for any goods, whether its food, electronics or utility.

CSDude··on Matrix-webcam displays your webcam video feed in the console
Here is a simpler one I made 10 years ago with few lines of Python using OpenCV which runs very slow though. https://github.com/mustafaakin/terminal-webcam Not very matrix like though.
CSDude··on Testing React Apps in 2022 with Cypress: An In-Depth Guide for Beginners
Playwright is nice and lightweight but bit barebones compared to Cypress, leaving you to decide for many things.
CSDude··on Select * from cloud
Steampipe has their own cloud at https://steampipe.io/docs/cloud/overview

Alternative is Cloudquery but they don't offer cloud anymore. https://www.cloudquery.io/

Plug, not based on Steampipe, but we also offer similar managed SQL on your cloud assets. https://www.resmo.com/

CSDude··on Ask HN: What's Happening at Cloudflare?
They like to announce multiple things at once every 2-3 months. However, my frustration is that although many announcements interest me, most of them are released in waitlist mode (kept like that for many months) and they don't respond you in months because you are not interesting/big enough. Others are either GA announcements, or contact your account manager to try and learn more. Like many games and other products, users beta test/QA for free.
CSDude··on Uify: One Workspace
I think, it looks a bit much like Retool. Otherwise collab and notifications is useful in a tool like this. And I liked the organization of multiple apps in the sidebar.
CSDude··on iPhone 14: Cheapest Country to Buy in 37 Countries
Exchange rate jumps very quickly. Apple does not like to update it often. So they project the expected value for next few months. Most likely they take the rate somewhere between 20-21TL. Last year today 1$=8.47TL now 1$=18.24TL. We try to buy things when the rate goes up but price is not updated yet. You can “save” 20-30% if lucky.

Import taxes is also much higher.

CSDude··on Kubernetes adds object storage management using Kubernetes APIs: Intro to COSI
Great another sidecar. Why does this need to be even part of Kubernetes? What real problems is this even solving?
CSDude··on Native Minecraft servers with GraalVM Native Image
You clearly did not deploy enough classes on Lambda to have more than 10 seconds warmup on a trivial Java based Lambda function.
CSDude··on The Twitter whistleblower story is worse than you think
> But putting that aside, employees installing “whatever software they want” is already a significant eyebrow-raiser.

How do you ensure you are not a gatekeeper but also keeping company secure? Vetting software installations would be killer for any productivity at that scale I guess. Does it include npm install too which can run scripts or just desktop apps, chrome extensions?

CSDude··on Show HN: Sidekick - Live application debugger is now open source
At least AGPL-3.0 is more honest and direct than SSPL or other vague licenses to prevent Amazon'd. Lawyers and internal legal departmens did not catch up to those licenses yet. Pretending to be open source until a point and forking under a new license leaves a bad taste.
CSDude··on SurrealDB – Document-graph database, for the realtime web
Product looks great. I totally feel the need for new open-source-but-not-for-AWS-to-steal-my-product licenses; however I'm not sure about that vague license for database would work for you.

                      A “Database Service” is a commercial offering that
                      allows third parties (other than your employees and
                      contractors) to access the functionality of the
                      Licensed Work by creating tables whose schemas are
                      controlled by such third parties.
So, if as a service provider, I control the schemas can the customers query the data using your SQL? Can I just collect data, put them to database and proxy their SQL to DB? i.e I'm the co-founder of Resmo (https://www.resmo.com) where we let customers run SQL on their cloud/saas assets configuration, can I use yours? The current wording seems to let me because we don't let any customer to define their schema, resources schemas are defined by us, for now.
CSDude··on Tell HN: Google Cloud suspended our production projects at 1am on Saturday
I forgot to pay 200$ Azure bill on a test account for 3 months because I missed the mails. They just waived that one after 3 months without me even requesting and I've been paying since. Google is just hostile to everyone by default.
CSDude··on Ask HN: I automated part of someone else's job in my free time – how to proceed?
Try to get an idea on why nobody else before it was not done, why you could do it, try to open up a conversation as if you did not implement anything. Every business is different.
CSDude··on Ask HN: Why are bookmarks second class citizens in browsers?
Because Google believes they have the ultimate search engine that can find anything you want (and can show ads in the meantime). Also this is why navigating Google docs is hard, there is no quickly navigatable traditional file/folder tree, at least not easy to use like a regular file browser in Google Drive.
CSDude··on Scaling Kubernetes to Thousands of CRDs
We had a in house DAG of Pods that created thousands of CRDs. EKS team scaled our Api and master nodes to c5.18xlarge. It was in 2018.
CSDude··on Focus Time Saved Me from Burnout
I'm not saying you cannot do any work in meetings. But if the only empty space in your calendar is lunch time and 2 or 4 hours for a whole week, as a Software Engineer, there won't be much time to do get, I repeat, actual work, which is mostly programming & debugging done, at least for most junior level positions. When an enterprise gets large enough, even just regularly checking in with projects, program managers, executives, designers, product managers was %50 of my busy time for a week. And it was exhausting. Not everywhere would be like that, but that caused a serious burnout with me and I've quit.
CSDude··on Focus Time Saved Me from Burnout
I hate it rearranges a meeting that I know it'd happen in a few hours, I plan my day accordingly, boom it's changed. That's frustrating. I worked at a big corp and people loved fully packed calendars with meetings. Wondered when they'd get any actual work done alone, without a meeting. My calendar was mostly empty except meetings that were crucial. Even though I was in a Principal role, new grads had more packed calendars than me. As a result, Clockwise moved most of my meetings.
CSDude··on Redis explained
There used to be disque by antirez, which died. https://github.com/antirez/disque
CSDude··on Ask HN: Why do you make class members private?
I don’t want them to show up in auto complete and accidentally use them because its not my business, I should not use things that I shouldnt.
CSDude··on Kubernetes is a red flag signalling premature optimisation
My rule to use Kubernetes is only if my containers exceed the extra containers I need to make Kubernetes work, including but not limited to:

  - kube-state-metrics
  - Coredns
  - Prometheus
  - Alert manager
  - Node Exporter
  - Spot instance termination handler
  - Karpenter/cluster-autoscaler
  - Event Exporter
  - Kubernetes Dashboard 
  - Ingress
  - Cert-Manager
  - Custom CNI?
  - Istio (not always)
  - ArgoCD (not always)
Even if they are configured with fractional CPU (which mostly causes stupid throttling issues) they still are headachaes to maintain. I used to run 4000 pods in a single cluster, using Kubernetes was great. Otherwise, nowadays I'd just go with Fargate/Cloudrun/Fly.io etc.
← PreviousPage 5 of 21Next →