Recent submissions

Comment · 1 year ago
This is literally true, it is the worst conceivable vulnerability, total access to your k8s cluster by hitting a URL, how about a 10 instead of 9.8, these comments are wild.
Comment · 1 year ago
I am a little confused about the comment section about this being overblown, it really isn't. Ignore all the comments in this post and fix this ASAP.

Here's a simple test:

`kubectl exec -it` a pod:

curl -k --fail https://ingress-nginx-controller-admission.ingress-nginx.svc...

If you see 400 Bad Request, that means this pod has access to the admission controller.

How easy would it be to find an avenue to make a request to the admission controller for anything running on your k8s cluster? (maybe your service takes any kind of URL and makes a request on your server...there's infinite possibilities of exploiting this.)

I am rethinking my choice in using ingress-nginx entirely, perhaps it's time to find a simpler solution that has more secure defaults.

Comment · 2 years ago
Should we as developers put more effort into defending our craft? The movements in the artistic space with AI were very widespread and vocal, but we developers seem not to care. I feel like developers in general are a bit more quiet and timid with things and it leads to companies or entire industries taking advantage of us.

Am I the only one who feels like developers really need to be a bit more vocal in defending themselves, their craft, and even their sanity? Are we quiet because of the large salaries in the space?

I suppose the biggest question is how do you defend the craft but at the same time keep the advantage of automation and AI? (is it unions?)

Comment · 2 years ago
Redis holds such a special place in my heart. It was the definition of awesome, open-source software. It always felt like Redis was THE definition of open source. The fact that the license has changed is heart-breaking.
Comment · 2 years ago
Basically Instagram Reels algorithm started to get very good, they found the magic algorithm and it's so much easier to click the Reels button than switch to the TikTok app. Plus, everyone has their friends on Instagram so why switch to another app?

That's my theory anyway. I remember when Instagram Reels was just awful and all the suggestions sucked, now it's actually good.

Surprising outcome, but very similar to what happened with Snapchat. Everyone used Snapchat and suddenly Instagram added Stories and over time people just used Instagram again when Instagram polished Stories enough.

Hmm, I guess Meta is unstoppable in the social media space.

Comment · 2 years ago
I have YNAB and the most annoying part of the entire thing is that you cannot see your total expenses? I mean, the most basic feature is not in this app.

If I want to see my monthly expenses (total), it doesn't let me. It just shows me how much I need to save this much in each bucket.

Weird.

Comment · 3 years ago
I have the same issue, it's truly unfortunate. What's odd is I forget about what caffeine does to my sleep and after a few weeks/months of drinking it, I'm wondering why I'm so stressed, tired and can't get ANY sleep.

I stop drinking coffee and BAM, I sleep like a baby. It doesn't MATTER when I drink it, I can drink it at 6AM and I will not have a good deep sleep. I am unsure if this is coincidence, but I also notice I remember way less dreams when I am on caffeine than not. I also find it's a compounding effect which is why it's slightly annoying.

If I drink 1 cup, in 2 weeks, my sleep will be fine so I will think, okay, it's not the caffeine. Then I will continue drinking it for weeks and suddenly I haven't had a good nights rest in weeks and I'm wondering what is going on. Not having deep sleep for weeks really has a big impact on your stress levels, memory, emotional well being and general energy levels.

The annoying part is coffee is so good for productivity so I go through cycles (also you start to think it's the stress not the caffeine that's causing the sleep issue!)

Weeks of stressful work - drink more caffeine to get all the work done - bad sleep, bad mood, bad energy levels, aka all the negative affects from not having enough deep sleep.

Weeks of less stressful work, no caffeine, great sleep, great mood/energy levels, etc.

I've always convinced myself that not drinking caffeine for deep sleep is just placebo, but I've tested it so many times that it just can't be.

Is there a way to test if you're a slower metabolizer? I know my partner can drink 3 cups and she is totally fine, lucky her! I'm 100% convinced I am, but it would be cool to test by some sort of blood/urine test?

Comment · 3 years ago
Regardless of how well this product does, the presentation and vision from Apple was phenomenal. It was like watching a cinematic AAA movie, so exciting and inspiring. There has been no other company that has been able to present AR and VR in such a way that is so exciting.

The augmented reality shifting to virtual with the dial is so genius. I feel like a kid, and that's rare to feel these days. Love it, dream on Apple!

Comment · 3 years ago
I just want to be really clear, I have no idea who built this product and I am not associated with it in any way.
Comment · 3 years ago
Let's say they sells it at $10 / mo. They would need 1,000 customers to make a reasonable wage at $10,000 / month. If they sells it at $30/month, they would need only 300 customers.

Can you imagine how annoying it would be to deal with 1,000 cheap customers that expect the world? Maybe they should sell it at $100/mo and sell it to only 100 people that really care about the problem.

Maybe just sell it to a business for $200/mo for all developers, they would only need 50 businesses to make $10,000/month and they would also remove the annoying, cheap, high expectation developer out of the equation.

Developers and engineers are probably the worst customer to have, insane expectations, complain about everything, criticize everything and use a magnifying glass to point out any issues, black/white thinking etc.

My theory is writing code has all of these expectations in it. You need to be highly critical, black/white (or you would drift into a world of options.) have insane expectations (or your manager gets mad at you.) etc. All great qualities for writing code, but the worst qualities for a customer.

I'm a developer too by the way, so please don't be offended, I've been there and done that, the other side is much nicer. For example, I activated my iCloud to 2TB at $10/mo instead of making a custom backup solution that I can run for $2/mo. Would I have done that years ago? Yes and the result would have been me spending 80 hours building the backup system that can't even get my photos back on my phone properly.

What I'm trying to say is, it's sad to watch developers suffer for a small amount of money per month. I honestly believe it's a failure of the people who manage developers. I may be reaching here, but I think a lot of developers have been treated poorly in general from managers, projects and high expectations. They are rarely rewarded properly which is actual recognition for the work they do. It's not free massages, free lunches and cool workspaces. As a result, I believe developers are the givers and the companies and managers are the takers. The takers siphon the life out of developers and to the point where they're so risk averse they won't even spend $100 to go to a spa to relieve some stress. They're so risk averse they won't even spend $30/month to make their lives easier.

What am I saying? Developers SPEND some money on yourselves. You DESERVE IT for the hard work you do. Stop being so risk averse just because the work you do is so.

Rant over.

Comment · 3 years ago
Honestly the comments are a good example on how difficult it is to sell to developers and why startup ideas that target developers are dangerous to bootstrap.

Developers have high incomes, but are quite frankly, extremely cheap. And I actually mean cheap and not frugal. They will spend 40 hours/week for months to save $5/mo. There's basically no logic apart from that developers have a poor concept of time and money and are spending averse (again, cheap.)

In this case, this tool is $30/mo, or about $360 / year, what is that, 3 dinners for 2 people in a year? The tool may save the developer, let's say 3-4 hours / week and at 52 * 3 or about 156 hours of savings a year. At even 30 an hour, it's saved the developer $4,680, or at 60/hour, close to $10,000, but I can guarantee that 99% of developers will not spend $30/month to make their lives easier.

My only recommendation is try to sell this product to businesses and maybe offer them a deal based on the amount of developers they have. So sell it do a dev shop with 10 developers at $20/developer / per month. Businesses understand the time/money tradeoff and are not cheap.

Developers, my only word of advice, is seriously.. stop being so cheap and spend some money to make your lives easier.

Comment · 3 years ago
Every time I google something, I tend to add "reddit" at the end of it so I can see discussion between individuals and I hope I find an expert that can help me either understand or purchase something. I tend to also do this with "hacker news" for things related to technology.

Recently, I was looking for Espresso Machines and found https://www.home-barista.com/forums/ which is actually powered by PhpBB.

The amount of knowledge and information on that forum is changing the way I research products and search for things on the internet. I've learned so much deep knowledge on espresso machines and I've gone down rabbit holes of how water affects espresso machines.

It gave me a deep feeling of how awful Google and reddit are at having good quality information from experts. The users on the barista forums are just experts and have been around the forum for a very long time.

It's almost like Reddit and Google are fast food and Home Barista (and other forums that use PhpBB and similar technologies) are quality, home cooked meal past down from generations of knowledge.

Now I exclusively try to find forums for a specific topic and try to find the experts on those forums to get my information, usually through a forum.

Long live PhpBB and forums and these experts on there, it's a breath of fresh air exploring the internet away from the major social media products (including Google honestly.)

Note:

The fact that home-barista is using PhpBB is purely ironic, I did not know it was, this post just reminded me of a forum that had a wealth of information and that forums are great even in 2023, heh!

Comment · 3 years ago
Sorry if this is off-topic, but ChatGPT is blowing my mind, I'm using it to write my Christmas cards this year and it's already made some funny ones.

Dear <Manager>

Wishing you a very Merry Christmas and a Happy New Year! May your days be filled with joy, laughter, and lots of eggnog. Speaking of eggnog, have you heard the one about the manager who tried to manage a team of developers? He kept telling them to "commit" to their work, but they just kept "pushing" him aside.

Cheers, <Developer>

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton