Normal_gaussian

Joined 10 years ago

Karma
4,693
Submissions
1,415
Member since
Feb 15
View on Hacker News

Recent submissions

Comment · 4 days ago
Its probably better to embed clearer strings in the binary that conform to some spec. Then searching over binaries would find them.

Trying to respond to a signal is a nightmare of routing and lifecycle bugs. Never mind the fact that most dependencies won't be registered. Currently file/process signature matching is ok for major runtimes, and tends to fail on specific version detection. This would effectively formalise that.

I could see it being a successful standardisation for major runtimes and many libraries that wouldn't currently be detected - but take up would never be universal. A kind of CVE search stamp.

Comment · 12 days ago
As it stands, customers aren't leaving because of the degraded performance. Free is generating paying customers.

Raising prices risks churn, reducing free tier risks lowering customer acquisition rate.

Comment · 12 days ago
As someone who hasn't looked at the repositories in question;

> why don't you submit some PRs to help them improve?

Is often a non-starter. If you believe a codebase is poor quality, any changes to improve it have a strong risk of making it worse and/or wasting your own time. In the case that you aren't a key player in said codebase already, it is even more likely your attempts to make changes will fail. Its not impossible to improve these repositories however doing so is quite a different skill-set to identifying their failings.

Comment · 19 days ago
> Conversely, I would have no issues if GHA become a premium product.

This is a real problem for acquiring customers. CI/CD / Actions in general has a low initial perceived value and a high perceived value after use while being primarily a commodity product (serverless compute). To acquire customers they need to offer a free tier, to make money they need to charge their heavy users more, but because it is a commodity their heavy users will self-host runners or jump ship.

Action minutes is a really good proxy for value gain from cloud git services, where repo count, user count, file count/size, etc isn't.

Its a fun pricing puzzle.

Comment · 1 month ago
Comment · 1 month ago
Balloon devices go a long way for ram sharing, though not all the way. CPU scheduling is great.

There's definitely a tradeoff, but IME it's not as drastic as you first think.

Comment · 1 month ago
Without commenting on v8 isolates specifically, this doesn't necessarily hold in any isolation situation; many customers are running code on behalf of their customers, which are often submitting jobs on behalf of theirs, and so on. Isolation breaches within a platform customer can result in significant cross-user data breaches.
Comment · 1 month ago
I've been using SlicerVM extensively - which is Firecracker MicroVMs for the regular person (and for the irregular with their platform offering) - to run local 'edge' style workloads locally and securly. Agents, local dev CI, etc. It slotted in and replaced my proxmox vm orchestrator, and now I have secure and and fast vms on my laptop wherever I go. It also supports dockerfile style builds if you're wanting a security upgrade from containers (which, you should if you're using agents).

Honestly, while I see firecracker replacing docker on the horizon I don't see firecracker replacing v8 isolates for most edge function execution. Firstly, this article's scenario is a bit unusual in that they were using someone else's isolates - so adding on a few hops; secondly isolates running JS/TS can be statically analyzed quite well, and at scale looking historically for issues and exploits, in many edge compute scenarios this is quite desirable. MicroVMs can have an awful lot more flexibility so to get the same benefit you have to really lock down what is available - the trade-offs for mid-size companies seems to benefit isolates. Obviously netlify is more than big enough and relies heavily on this that it leans in their favour.

Comment · 1 month ago
> It depends who you invite.

True. If I invite nobody it about matches the night in.

Comment · 1 month ago
> But what people (probably the ones that never bother) tend to forget is how unbelievably gratifying it is to get a bunch of people together, to feed them and to make them talk, laugh, dance, etc.

Nope. Its a bunch of work and stress and thoroughly beaten by a dull night in. If I want to bring people together, I'll pay for it to be done - e.g. a restaurant.

Comment · 1 month ago
> If you're with 1-3 other people, taking Waymo all the way is a no-brainer.

This is often the case for any mass transit vs personal transit option.

As for home -> taxi -> mass transit -> taxi -> destination; you have to have a pretty short journey on the mass transit for it to reliably work out cheaper to do home -> taxi -> destination, which pretty clearly restricts the pool of people that applies to.

Comment · 1 month ago
The answer to both of your points is that mass transit is used for most of the travel and the last mile is taxi equivalent. Being unable to do the last mile is a common reason not to take mass transit, so more usable taxi equivalents tends to increase mass transit use. And most directly, taxi equivalents are often significantly more expensive or significantly than mass transit at crossing cities.
Comment · 1 month ago
> long-life

> and durable keyboards

It wasn't that long ago they had terrible keyboard lifespans which could be a death knell for the laptop, and overheating CPUs which limited performance way behind spec. They've come far in recent years, and I certainly wouldn't be sad if it was my main machine yet I don't expect them to be an outlier forever.

In some dimension Apple (and any serious manufacturer) is always going to be ahead - and they certainly are in non-gaming portable CPU/GPU combos right now. Alas, they aren't ahead in many other dimensions; my Fedora X1 Carbon is my strong preference over my M4 macbook pro and a large part of that is the basic usability of the system and window manager (sway), which is something Apple will never match until we meaningfully switch interaction paradigms.

Comment · 1 month ago
and on desktop for me
Comment · 1 month ago
Additionally, verifying that your generator doesn't add such a mark is practically impossible for the majority.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton