HNHacker News
TopNewBestAskShowJobs

saurabhnanda

240 karma · joined June 23, 2011

submissionscomments
saurabhnanda··on Show HN: Custom Haskell handlers for Nginx
Are you using this in production? Any benchmarks?
saurabhnanda··on Our production servers were suspended by Google Cloud
Please move to Hetzner. If you miss payments even they might pull the plug, but at least they have humans who respond to emails and can get you back online quickly once you pay.
saurabhnanda··on Databases in 2022: A Year in Review
What an amazingly written piece. I was learning interesting stuff and chuckling alongside, as well.

Didn't get the closing remarks about Larry Ellison, though. Any explanation?

saurabhnanda··on NixOS on M1
For the uninitiated, what's the issue with getting nix to work on M1?
saurabhnanda··on Terraform 1.0
What is a foot-gun? Ansible/Terraform, or the library approach that I'm describing?
saurabhnanda··on Terraform 1.0
Pulumi sounds interesting. Spent 10 mins with their marketing website and I'm not very clear whether it is a standalone set of libraries, or do they only work in conjunction with their cloud services. Do you know?
saurabhnanda··on Terraform 1.0
I've been sitting on the fence wrt Terraform and other such tools for quite some time now. After being _forced_ to finally write massive k8s YAML files (and ansible YAML files) for a consulting gig, I've been wondering whether these tools should be developed as _libraries_, that you glue together using a full-fledged programming language, instead of shoe-horning a programming language in YAML.

For example, could the following be library functions that you could glue together in the programming language of your choice: (a) get current state of infra, (b) calculate diff between desired state and current state, (c) perform a single step (safely) that represents a granular change in infra, (d) perform a series of steps representing infra changes with safe rollback?

Does something like this already exist?

saurabhnanda··on The Framework Laptop
I feel horrible whenever I end-up damaging an electronics product in such a way that repairs do not make any monetary sense. Mostly this is because the manufacturer doesn't bother in building out a healthy service network for their product because they'd rather force you to buy a new model.

If priced right, I'll buy this as my next laptop. And the next phone as well -- if they ever launch one.

saurabhnanda··on Gitlab Project Hit by Spambot
What is this going to do to their Sendgrid/SES bill this month, I wonder!
saurabhnanda··on PGM Indexes: Learned indexes that match B-tree performance with 83x less space
Any Postgres implementation of this yet?
saurabhnanda··on System76 – Pangolin
Low value comment: WTF is with the marketing copy? Red, AMD, Bull, what?!
saurabhnanda··on DwarFS: A fast high compression read-only file system
Is this useful for long-term log storage? say, from a typical webapp (eg. Nginx logs, Rails logs, Postgres logs, etc)
saurabhnanda··on I am an Uighur who faced China’s concentration camps
Nitpick: At one place the article says that Ӧmir was imprisoned for seven months and at another place it says he was released after 20 days.
saurabhnanda··on Nickel: Better Configuration for Less
How different is this gradual typing from TypeScript?
saurabhnanda··on Ask HN: How do I help an underperforming team get on track
Can you make checklists of common concerns related to deliverables? For example, while writing web forms, most junior developers tend to forget validations , or implement only client-side validations (not server-side). Just putting this in a PR template helped some junior devs improve the quality of their deliverables.

Adding more details to your question about the nature of work and business domain, along with QA issues would allow people to give more actionable insights.

saurabhnanda··on Blockchain, the Solution for Almost Nothing
Honest question. When someone says the blockchain can be used for anything OTHER than financial transactions, for example - supply chain, health records, etc. what is the actual underlying data that will be stored on the blockchain?

When it comes to a quasi-banking or quasi-wallet system, I find it easy to visualize that the blockchain holds accounts with balances, and there are transactions which move money between accounts. Blockchain's decentralization and write-only properties help because no single entity can make your money disappear, and no entity can rollback a transaction.

What is going on with other use-cases of blockchain? What does a supply-chain system actually store on the blockchain? The SKU list? The price of SKUs? The stock level of each SKU in each warehouse? What?

saurabhnanda··on mdBook – A utility to create modern online books from Markdown files
Is there a link to sample books rendered using this tool? Did I miss it in the README?
saurabhnanda··on Let's Encrypt Has Issued a Billion Certificates
Not to take away from this achievement, but no one else bothered about this massive centralisation of critical security infrastructure?
saurabhnanda··on Local-first software: you own your data, in spite of the cloud
Not related to the actual content, but may I please request you to increase the contrast on your website. Grey on grey is very hard to read.
saurabhnanda··on Show HN: Slim – Build and run tiny VMs from Dockerfiles
Can someone dumb this down for me? What _exactly_ is going on here?

> slim will build a micro-vm from a Dockerfile. Slim works by building and extracting a rootfs from a Dockerfile, and then merging that filesystem with a small minimal kernel that runs in RAM.

> This results in a real VM that can boot instantly, while using very limited resources. If done properly, slim can allow you to design and build immutable unikernels for running services, or build tiny and embedded development environments.

saurabhnanda··on Absolute truths I unlearned as junior developer
I must say this is a very well written blog post.
saurabhnanda··on ACIDRain: Concurrency-Related Attacks on Database-Backed Web Applications (2017) [pdf]
Does this impact postgres backed applications?
saurabhnanda··on Docker Hub Hacked – 190k accounts, GitHub tokens revoked, builds disabled
Just wondering, genuinely out of curiosity - how does one get to this 5% number? If the attacker had access to the DB s/he had access to 100% user data right?

Or did the get access to a partition of the user data? How is this even possible?

Some very old backup that had only 5% of earliest users?

Some log file which had plain-text creds of approx 5% users?

Or did they discover the attack as it was happening and kicked-out the attacker in the middle of a data download (only 5% complete)?

saurabhnanda··on Malicious remote code execution backdoor discovered bootstrap-sass Ruby gem
> We assume that the attacker has obtained the credentials to publish the malicious RubyGems package from one of the two maintainers, but this has not been officially confirmed.

Didn't this _also_ require a commit to the relevant Git repo? Or is it possible to upload a tarball directly to Rubygems without it being backed by a git repo?

saurabhnanda··on India’s IT industry laid off more than 56k employees this year
Just curious -- were the two team (Romania vs India) working on the same project? Were you paying them the same money? Did the team members have the same number of years in experience (in absence of a better comparitive metric)?
saurabhnanda··on Reflecting on Haskell in 2017
Shameless self-plug. We've started using Haskell at Vacation Labs and we even spoke about it at Functional Conf 2017, Bangalore [1]. The talk was called "Joys & frustrations of putting 34,000 lines of Haskell into production" -- so it wasn't only fan-boyism!

* Video of the talk - https://www.youtube.com/watch?v=7NB8tMa8sUk)

* Slides (with more text and written commentary) - https://docs.google.com/presentation/d/1ggTVXzqCxcmkV5mKUH_g...

[1] https://confengine.com/functional-conf-2017/proposal/5409/re...

saurabhnanda··on Ask HN: What are your favorite books of all time, and why?
SICP (Structure and Interpretation of Computer Programs). Structured very well. Each exercise builds on a concept of the previous exercise, getting increasingly difficult.

1984 by George Orwell. I am told that we're increasingly moving towards a mix of 1984 and Brave New World (I haven't read the latter).

saurabhnanda··on Bitbucket Pipelines Beta: continuous delivery inside Bitbucket
Sorry if this sounds like a newbie questions, but can I use this to run my test suite every time someone pushes to a feature-branch and/or before anything is merged to master?
saurabhnanda··on Who Cares about GET vs. POST? NoREST
I am increasingly getting irritated with REST for our app. It takes too much thought to figure out the "correct RESTful approach" when building out an API endpoint. And then again, there are no right answers. And all the JSON serialization/de-serialization logic, for every single endpoint. Too. Much. Work.

I'm wondering why Thrift/Proto-buffers aren't popular? Even for browser-based JS clients. What're the pitfalls?

saurabhnanda··on Riot – A React-like, 2.5K user interface library
I couldn't find out more about you from your HN username. Care to ping me on twitter @saurabhnanda ?
Page 1 of 4Next →