worksonmine

> What are the tradeoffs? (other than faster patching on Debian of course)

Older packages, but that's one of the reasons I use it. On the stable branch you will only get security fixes and very rarely updates for critical bugs.

If you need to use newer packages the testing branch is surprisingly stable (it is the base for Ubuntu) but there are a lot of updates.

They run ads in MOTD IIRC. Haven't used it in 15 years but I've stumbled on a lot of drama over the years.

> You must not be in a place with many huge natural disasters.

Or I have proper backups synced across the world on different providers. The likelihood of everything failing is not a vector I worry about. If that happens I have bigger problems to worry about.

Apparently because some devs didn't check for NULL which resulted in crashes. Weird choice to fix other peoples' bad programming by deviating from the spec.

A scenario where all the backups are gone and the server is somehow the only thing that survived is not a very plausible one.

> In contrast, Sam Altman is the only person who thinks we should dedicate our RAM to data centers.

Then you don't understand the point of OP. You're arguing with a straw man.

> you've already violated the HN guidelines and insulted my intelligence

No, your attention span, Make an effort to understand what I'm saying instead of starting a flame-war, also against the guidelines.

> Some generic SaaS company or tiny startup, yes, engineers should have root access to stuff.

Why? Setting up proper CI/CD is a 5 minute task. If you're worried about sharing keys with 3rd parties the pipeline can be self-hosted. There's no need for credentials to live on engineers' machines.

A lot of detail on what Engineer A, B and C did. But this would've been prevented if Engineer A didn't have "a container deployment permission token on his computer".

What the fuck? On a target as big as Binance? Every developer should be treated as a liability and never be able to deploy by themselves.

You clearly didn't read my comment carefully enough. I tried to anticipate and avoid this by ending my comment with:

> Just to be super clear so you understand my comment: I do NOT agree that Altman should have any control over compute and storage. And neither should it be the only way to use compute and storage.

Yet you reply with:

> We don't obviously need to give our RAM to AI vendors.

I don't see the point in continuing this discussion. At least you've proved that you're a human, the LLMs today are better at following a conversation.

With your logic we should stop using highways because Hitler built some of them. Try to take step back and see past the trees. In a perfect world encrypted and secure compute and storage would be freely available on-demand.

Will that world ever exist? Probably not due to human nature. Still an interesting thought, even if Altman wants to control said compute or not.

Just to be super clear so you understand my comment: I do NOT agree that Altman should have any control over compute and storage. And neither should it be the only way to use compute and storage.

If you ask I'm sure they'll let you install Debian on it.

Ubuntu is based of Debian testing. You can verify this by comparing the versions of neovim available on the repos.

Debian[1]:

> trixie (stable) (editors): heavily refactored vim fork

> 0.10.4-8: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x

> forky (testing) (editors): heavily refactored vim fork

> 0.12.4-1: amd64 arm64 armhf i386 loong64 ppc64el riscv64 s390x

Ubuntu[2]:

> stonking (26.10) (editors): heavily refactored vim fork [universe]

> 0.12.4-1: amd64 arm64 armhf ppc64el riscv64 s390x

I use Debian stable myself and build neovim from source for this specific reason.

[1]: https://packages.debian.org/search?keywords=neovim

[2]: https://packages.ubuntu.com/search?keywords=neovim&searchon=...

> and I considered it the solid, no-drama LTS distro. Fuck that now.

There's been lots of drama on Ubuntu which OP either completely missed or ignored. Ubuntu has been getting worse for over a decade now.

The few people willing to change their user-agent aren't worth the extra complexity.

It's the takeaway from the story in OP and the poem with the same title, so I'd say it's very much on-topic. Your only contribution is "acktually, humans are nature too and once the universe collapses everything is doomed" and shut down any other discussion as "silly".

Of course there's reason to discuss if endless parking lots and industrial complexes are necessary. Claiming they're part of nature is like claiming HIV is a natural part of the human body. It exists yes but maybe we're better off without it?

I see humanity as it exists today as a cancer on the planet and it's not out of smugness. The pursuit of infinite growth is ruining everything that's beautiful around us.

We can discuss the semantics of the word nature all you want but it is just shifting the focus from the actual problem, which is how we destroy everything we touch. Which is also what I'm assuming GP means.

> - .env is the simplest and oldest / most boring solution. Secrets are passed to teammates by DM?

I don't see a reason to ever pass them. Sensitive production values should never be accessible to everyone, and for development the team should be able to create them themselves.

I usually keep very stupid values in .env.example, with the instructions to `cp .env.example .env`. In development it doesn't matter if the password is "password". In production the privileged admin sets up actual values.

> - non-sensitive environment variables also need a home. I don't like the idea of cluttering the project with a .env.local or worse like .env.development.local

`cp .env.example .env` and the application uses .env just like in production, only with dummy values.

I don't really understand what point you're trying to make. Yes the planet is doomed sooner or later. But I'm talking about nature as in trees, animals, etc. The natural eco-system. And it existed and evolved and adapted naturally long before humans and will continue long after we're gone.

In philosophy there is a debate regarding the meaning of the word nature and if humans should be considered a part of it, and I see the points, but that's a different discussion.

The world has been much more inhospitable than it is today and I'm sure it will recover. The problem I see with us is how we destroy everything in our path on an industrial scale. As long as the wheels keep spinning we extract everything we can, see water use for data centers as the latest example.

Other species co-exist in the eco-system, we destroy it.

"Humanity" is far from "all the life on Earth". Nature will be better off once it happens.

There will be ways to circumvent and even use verified devices as botnets.

What do you use instead and what makes it more secure?

Great for apps, terrible for people. It's much simpler to sync setups across machines with plain files than databases.

I'm not OP but probably the licensing drama. Gitea is now open core if I remember correctly. Some details are available here[1]. I also used to run Gitea, but I don't any more. The open-source churn is getting tedious and difficult to keep up with.

[1]: https://blog.codeberg.org/codeberg-launches-forgejo.html

How portable do you need it to be? I use pass[1] and it is good. Just a shell script wrapper to gpg and the passwords are encrypted files you can backup and sync anyway you want.

[1]: https://www.passwordstore.org/

There are more secure alternatives. Are you sure those you listed actually use it on the servers? I would guess that at least Spotify and Netflix uses some other container runtime than Docker on their production servers.

For a long time Docker was helpful and opened exposed ports on the firewall. So you wanted to access your redis ports locally and exposed it on the container? Now everything in there is accessible on the open internet.

I believe they've fixed it but I haven't used Docker in years so I wouldn't know.

I think plugins is the better solution, then you can't pay the browser to get your ads through.

Cool project, but they should really upgrade at least the downloads to https...

This would break so many websites. There are valid uses for the history API, I often do modals/popups as shareable URLs, and using the back button closes it.

There's a (very) big difference between reading weekly and reading a book in the past 12 months. I used to read a book or two in the past 12 months, back then it was on vacation to have something to do while lounging on the beach. Today I read a book every month and it's something I do instead of watching TV. I would not call my younger self a reader.