HNHacker News
TopNewBestAskShowJobs

codegeek

15,868 karma · joined July 23, 2012

SAAS founder. I love to teach what I know even if I am no expert. It is simple. Teaching makes you better. I love to ask the "why" and not just the "what" or "how". I also am a geek and builder by nature.
submissionscomments
codegeek··on Ask HN: Are Tech Meetups Dead?
In my experience, any meetup > 10 people becomes useless because you cannot really make meaningful connections and large meetups usually have a fixed agenda where everyone is out there selling their own stuff.

I now will not attend a meetup unless it is extremely small group (<10 people). Those are hard to sustain though.

codegeek··on Ask HN: Is $300/HR too low these days for custom full stack?
Exactly. I hired someone who was a good developer but he was charging hourly and extremely slow for what we needed. I am a software engineer (and a founder) myself so I get what it takes to write good code but I am no longer waiting for a dev to turn something around in 20 hours when I can use LLM to write it in 1 or less.

Going forward, I am no longer hiring hourly rate devs. Either fixed rate project or full time as needed. No hourly.

codegeek··on Incident Report: Railway Blocked by Google Cloud (Resolved)
This is bad. Even their own website is down at railway.com. Looks like total dependency on google cloud. Surprising for a company of their scale with all this VC money.
codegeek··on Ask HN: How to be SOC2 Type 2 compliant as a solo-entreprenuer?
I know a solo founder who got SOC2 certified. He is literally the only person running the product/company and is SOC2 certified. I found that hilarious to be honest. But he is trying to play the "win enterprise deals" game but not sure how that helps when you are literally 1 person.
codegeek··on Ask HN: How to be SOC2 Type 2 compliant as a solo-entreprenuer?
It depends on your target market. If you only sell to enterprise/large companies, you may need SOC2 sooner than later. If you sell to SMBs or startups, this advice works (I sell in this space mostly).
codegeek··on Ask HN: How to be SOC2 Type 2 compliant as a solo-entreprenuer?
I will add a few more things to this:

- Document your data and security and share that with customers instead. You can say "We don't have SOC2 at the moment but here is all our security and data policy". It works 99% of the time for me.

- Very few companies truly have policy to reject a vendor if they don't have SOC2. Those are usually large enterprise or companies in sensitive areas such as Finance/Healthcare etc. Even then, SOC2 can be waived if you can demonstrate everything else.

Disclaimer: I run a bootstrapped SAAS with low 7 figures in ARR and even though we have ISO27001, we don't have SOC2 yet. However, we take our security/data etc very seriously and have tons of documentation and best practices that we always shafre with a customer who asks. Honestly, we will get SOC2 at some point just for the checklist as I don't really care too much about them otherwise.

codegeek··on Just Use Go
I love Go. But I prefer .NET for web development that also compiles to a binary and has a great ecosystem of libraries and packages. Go is great if standard library works (and it can for many cases) but when you need to start looking into non standard libraries, Go can hit limitations.

For example, to build a full production web application with database in Go, there is no great out of the box migration tool. There are some good 3rd party libraries of course but compared to something like EFCore in .NET, they don't come as close.

For me, it is now .NET and then Go. Of course, I use Go when just doing a lot of non web stuff as well.

codegeek··on Ask HN: What do you still do manually in 2026 that should be automated?
I hear you. I also don't buy clothes unless really really needed. But I am hoping that if I do buy a Robot like that, it will do other things as well and not just folding laundry :)
codegeek··on Ask HN: What do you still do manually in 2026 that should be automated?
Some companies are building Robots for this already. for example https://figure.ai
codegeek··on Should I run plain Docker Compose in production in 2026?
I probably used the wrong word. I meant more about managing volume property so we dont have data loss, backups, replication etc etc. I assume going managed is easier if you can pay for it (e.g. RDS)
codegeek··on Should I Run Plain Docker Compose in Production in 2026?
Do you prefer self hosting DB with container OR using a managed service liek RDS ? I guess both can work depending on your level of comfort and even though I am a big self host guy, db hosting is something that makes me nervous and I end up just leaving it to RDS etc.
codegeek··on Securing a DoD contractor: Finding a multi-tenant authorization vulnerability
Yes thats why I also added SOC 2. I have gone through an ISO audit for our company so I know the process. The point is that these certifications are mostly a joke but you have to play the game to win "enterprise" deals.
codegeek··on Should I run plain Docker Compose in production in 2026?
Really liked reading your blog. Bookmarked for future. One question: for databases, do you recommend using containers as well because in development, I love the ease of using databases in docker compose as well but I always worry about production in terms of resilience. Thoughts ?
codegeek··on Securing a DoD contractor: Finding a multi-tenant authorization vulnerability
"There was no meaningful organization scoping, no tenant isolation, and no permission check preventing a low-privilege user from accessing other organizations' records."

Let me guess though. They are SOC2 and ISO compliant right ?

codegeek··on SlothDB a 5X Faster Alternative to DuckDB, ClickHouse DB
sloth, cockroach, duck. Is there some sort of naming pact b/w these database products ?
codegeek··on Ask HN: Why are companies so distrustful of remote employees?
Yea also there are places like r/overemployed where they actively encourage how to cheat your employer by working multiple remote full time jobs.

The trust is broken and even though there are plenty of great wfh people, employers wre not having it anymore.

codegeek··on Ask HN: Getting depressed day by day, how to cope?
"It is more like 90% less quality."

Depends on who is doing the work. If you are a junior who doesn't have any fundamentals and/or started career after 2022+, I wouldn't trust the AI code. However, if you were already a senior/experienced architect, AI is superpower.

codegeek··on Ask HN: Building a solo business is impossible?
Yes, first you have to accept that it doesn't take 7 months but rather years. It is really really really hard to build a business with real revenue (did I stress on the word really?). It is even harder to build it solo.

Most of the solo success story you hear either had expertise in their fields OR built something to truly solve their own problem first and then expanded to others and it usually takes 18-24 months or higher to hit some sort of escape velocity. Most people think that magic will happen in 2-3 months and then give up after that and you have to go longer than that. The risk is high but that is what it takes.

Now with AI and vibe coding, more products will be built but the hard part remains: how to find customers, sustainably support them and keep growing. There is no shortcut to it.

My suggestion:

1. Pick a very niche problem that you have some familiarity or can relate to. You don't need to be an expert in it but you have to feel that you truly want to work on it to make a sustainably living.

2. Build an MVP in 30 days max. With AI, this shouldn't be an issue. If going beyond 30 days, you are doing too much coding.

3. You have to find where your potential customers are and you have to do it MANUALLY. no automation bs. no ads (you don't have money and unsure if you know your target audience yet). So right now, you are trying to figure out who your Ideal Customer Profile (ICP) may be. You don't know yet. This can take months or even a couple of years (the scary part). But you have to do this manually. Go on Linkedin or use services like builtwith etc to figure out who may be using a similar product or a potential competitor. Then you have to email/call them directly.

4. You must have a social media profile. Look at the successful solo ones. they talk about EVERYGTHING online, I mean EVERYTHING. That helps build a personal brand which helps as a solo business owner.

5. Content Marketing. Sorry you are the marketer for your company. You cannot hire someone else to do that for you. YOU have to write the blog posts, YOU have to post the social media posts, YOU have to make those videos. And you gotta do it all if you want any chance of succeeding in 2026.

6. You have to go hard and specific for at least 12-18 months. This is the hardest part. Most people want quick results and if they don't see anything in 3-4 months, they give up. The goal is to see if you got at least 1 customer in say first 3 months. If you did, keep going and get the 2nd then 3rd. Note that your first few customers MAY NOT be your ICP but they will teach you what you need to know to build a successful product.

7. One tip: Being completely solo is overrated. I am not talking about co-founders. I am not talking about being solo founder but with a small team. That gives you a lot more mileage than just being by yourself. Yes it is hard to build a small team especially early on with no money but don't overthink the solo stuff and find 2-3 google people to work with if you can. Not necessarily as founders but freelancers/employees who can work in a small setup.

Source: Even though I am not solo by myself, I am a solo bootstrapped founder with a very small team that built a reasonably successful B2B SAAS business doing single digit million ARR. Not impressive by an VC standard but has given me everything for 10+ years and I love it.

codegeek··on Claude Design
On the other hand, Canva made a genius move to partner with Claude for this. One of my favorite products as a non designer.
codegeek··on Claude Design
"Twitter Bootstrap". Havent heard that term for years. The OG of CSS frameworks.
codegeek··on Cal.com is going closed source
I am beyond convinced at this point that you either run an Open Source Project with a small revenue company (single digit millions) or run a software company that does more than 10M ARR at the least and be closed source. I know there are exceptions but most open source Software companies are providing code with heavy restrictions or teaser features and gate keep everything in their "ee/enterprise" version etc.
codegeek··on Ask HN: Why Databases Instead of Filesystem?
Just like any other abstraction that helps you do things more efficiently. Database is an abstraction over the more crude file system. It is similar to asking the question "why not write direct assembly code instead of a programming language". The answer is the same.
codegeek··on I built an AI receptionist for a mechanic shop
Exactly. For example, we replaced a couple of toilets and wasn't that urgent. So we called him and he gave us an appointment after a week.
codegeek··on I built an AI receptionist for a mechanic shop
This is such an important point. My plumber that we always call is extremely busy and usually doesn't have availability for at least a week. He is a one man shop and prefers it that way. You call his phone, leave a voicemail and he calls you back whenever he is able to. I asked him if he wants to get more business by automating his incoming calls and he said "not really, I am already very busy and have enough business. I don't need these tools".

So we cannot always assume that the business owner (especially the solo mom and pops) wants more business. Good ones are already very busy.

codegeek··on Delve – Fake Compliance as a Service
$6000 for both SOC 2 and ISO 27001 with Pen tests ? lol. I paid over $8k just for ISO 27001 for our small company and have been quoted a lot more for SOC 2.
codegeek··on What's your biggest challenge as a founder?
Finding people who take their career/job seriously and actually care. And no, it is not just a money problem.
codegeek··on Ask HN: What will you be doing for the next 10 years?
Want to exit my Tech business and get into Family Entertainment business (I really want to try that business). Not 10 but may be in 5 years.
codegeek··on How do I get startups to use my open-code project?
Always shoot your shot. If you never ask, the answer is always No. Good luck!!
codegeek··on Claude Code wiped our production database with a Terraform command
"AI did it" is the new "Dog ate my homework". You are blaming someone/something else for your own failures.
codegeek··on Ask HN: My competitor wants to buy us out, recommend a lawyer?
If selling, you can get away with bad buyers as long as the deal is mostly cash upfront. However, I would highly advise against buying from a seller you cannot trust. Imagine they already showed you during the deal process when they have an incentive to be nicer. Once you wire the money, you are in for a lot more surprises. I would never buy from a seller who gave me bad vibes. Regardless of how good the deal sounds.

Source: I have bought 3 smaller projects (one for 500k so i guess not indie but still small) and in all 3 cases, the sellers were incredible genuine and truly cared about their company/product. Just because of how trustworthy and helpful they were, I closed the deals quickly after fair negotiations.

I declined 1 deal where the product was a great fit to my exiting business and it would have been a great transition but the seller was too arrogant and I just couldn't trust him. I backed out after exchanging a couple of messages with him.

← PreviousPage 3 of 34Next →