Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
nebezb
searching Neon…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
6 ms
·
1.
▲
by
nebezb
3d ago
No, he’s asking what you think a reasonable support timeline is. An open source project supporting hardware 6 years old is pretty awesome.
2.
▲
by
nebezb
19d ago
The parent poster is wrongly quoting me to say the original post doesn't mean “env var”. Yes, it does mean env var.
3.
▲
by
nebezb
19d ago
> The unwritten assumption in 12 Factor is: the environment is secure. Fair assumption. Assuming no attackers and you're only running trusted code, I still maintain the environment is a poor place to keep secrets. Devs adding `{ met
4.
▲
by
nebezb
19d ago
> You need some way to pass secrets to the app Absolutely. This is why the env method is so attractive. It's simple and feels "free". > doesn't every other way also suffer the same kind of issue Not entirely. Acces
5.
▲
by
nebezb
19d ago
Confidently wrong. Did you read the source I linked? > The twelve-factor app stores config in environment variables
6.
▲
by
nebezb
19d ago
My issue with the env is it's not a secret store. Dotenv is a delivery mechanism. If you're using it to put APP_BASE_URL or APP_PORT into your env, it's a very convenient one. If you're using dotenv to put SECRET_SIGNING
7.
▲
by
nebezb
19d ago
Still incredibly relevant. Even if you don’t apply it, there is so much to learn by reading this in 15 minutes. The only grievance I have with this is Chapter 3: Config [1] “Store config in the environment”, “Credentials to external service
8.
▲
by
nebezb
6mo ago
> Built-in tsconfig paths support A great QoL change. One less place to duplicate (and potentially mistake) a config.
9.
▲
by
nebezb
6mo ago
What kind of headline is this? After a week of denial and blaming Iran of "poor accuracy". More accurate: US missile capable of < 5 meters of accuracy hits Iranian school 200m away from military base, according to BBC.
10.
▲
by
nebezb
6mo ago
> reimplementing a network protocol My reply is that, strictly speaking, it is not a reimplementation of a network protocol if you need to recreate parts of the game based on best guesses that _impact_ the gameplay if your guess is wrong
11.
▲
by
nebezb
6mo ago
> I've long been irritated by the use of the term "server emulator" in gaming contexts. Technically these projects are just reimplementations of a proprietary networking protocol. Nobody calls Samba a "server emulator
12.
▲
by
nebezb
6mo ago
Wow! This is no small feat... am I reading the contribution graph[0] correctly, you've done all this yourself? This endeavour sounds a whole lot like a server emulator for Infantry Online that was started by an incredibly talented deve
13.
▲
by
nebezb
7mo ago
Useful and useless (or good and “less good”) aren’t easily mapped to big and small. From a purely UX perspective, showing a red badge seems you’re conflating “less good” with size. Who is the target for this? Lots of useful codebases are la
14.
▲
by
nebezb
7mo ago
The idea is well articulated and comes across clear. What’s the issue? Taking a magnifying glass to the whole article to find sentence structure you think is “LLM-slop” is an odd way to dismiss the article entirely. I’ve read my fair share
15.
▲
by
nebezb
7mo ago
Oh I’m curious. Love bash, and learning new things about it. I can understand why [ is not ideal. Can you explain the rest to me? I use || true for custom error handling often (with the right set -euo pipefail of course)
16.
▲
by
nebezb
7mo ago
Any time you interact with the financial services industry in a meaningful way, they are doing almost exactly all of these checks on you. It is mandated by law, and they're overseen by FINTRAC in Canada and FinCEN in US. When you appli
17.
▲
by
nebezb
7mo ago
I read it and, maybe it’s because I’ve spent too much time in fintech, I don’t share most of the concerns. The differences in proclaimed data retention periods is concerning though. The rest is par for the course for KYC/AML.
18.
▲
by
nebezb
7mo ago
It doesn't. Anthropic are, as usual, sounding an alarm to pull the ladder up from behind them.
19.
▲
by
nebezb
7mo ago
While the lift to add to your database is low, I don’t think you’re at a point you can outsource the work. But all the better if they do!
20.
▲
by
nebezb
7mo ago
I have set my own cli credentials ttl to 8 hours and require 2FA to refresh. Once daily works fine for me. It all takes ~30 seconds, really.
21.
▲
by
nebezb
7mo ago
You're mixing up your baselines. I don't know how you got there in your second example. 25% less than "some number" is always (some number * (1 - 0.25)).
22.
▲
by
nebezb
7mo ago
Underpaying someone by 100% is non-sensical. I tried my hardest to read this with good intentions and I finished it. I thought the "20m read" label at the top was exaggerated given the size of my scrollbar. But it did indeed take
23.
▲
by
nebezb
7mo ago
This is functionally the same. What do you mean by “you should never”? According to who? What an arrogant take. This is preference. Don’t mistake it for correctness.
24.
▲
by
nebezb
7mo ago
My gut says you’re right, but I don’t know if this is indeed true. It might be the same thing.
25.
▲
Site Runs on 30GB of RAM
(nebezb.com)
3 points
by
nebezb
7mo ago
|
1 comments
26.
▲
by
nebezb
7mo ago
https://www.europol.europa.eu/stopchildabuse
27.
▲
by
nebezb
7mo ago
I’ve spent just a teeny bit of time helping international ICE investigators (not that one; internet child exploitation) postpone PTSD with technology. It seems like after two years of their job, they’re going to have a mental break. So post
28.
▲
by
nebezb
7mo ago
You’re repeating the parent commenters position but missing their point: we have isolated environments already, we need better paradigms to understand (and hook) agent actions. You’re saying the latter half is sandboxing and I disagree.
29.
▲
by
nebezb
7mo ago
I can appreciate you defending his character. The parent comment was not constructive. I’m no fan of Garry’s, but this doesn’t seem like a hit piece to me.
30.
▲
by
nebezb
7mo ago
All of that is worth the extra safety.
More ›