IgorPartola

6 ms·

61.
by IgorPartola 5mo ago
There was ages ago a project called monkeysphere that let you sign the host ssh key with your gpg key and verify it automatically. The downside was that it was very slow.
62.
by IgorPartola 5mo ago
1. Use cloudinit but give it a one time password to download the secrets on first boot. 2. Use certificates and your own CA. 3. Use the virtual serial console for first login. 4. Use cloudinit to add a custom software repo, then use that to
63.
by IgorPartola 5mo ago
I think of it like this: /users/ returns a 404 in an API means that this resource does not exist. As in, this is not a part of the API. /users/123 returns a 404 means this user record does not exist. Yes this means that
64.
by IgorPartola 5mo ago
I think the point is that you can have arbitrary website read the browser’s memory so example.com can read the password for example.org and example.net.
65.
by IgorPartola 5mo ago
There is an LLM API. You send it a system prompt and the conversation history. If the last message is a user message the agent will send back a response. It can also send back a “thinking” message before it sends a response and it can also
66.
by IgorPartola 5mo ago
I would rather people who find this kind of stuff pad their resumes and get coolness points on HN than sell this exploit on the black market. But your priorities may be different and you might prefer they do the latter.
67.
by IgorPartola 6mo ago
The problem is that the difference between a low tech and a high tech diesel tractor is mostly emissions and some loss of efficiency. The difference between a low tech and a high tech electric car is a 25 mile range and a 250 mile range, a
68.
by IgorPartola 6mo ago
What a way to ruin goodwill with the very community they are trying to court. I am on a Pro subscription to use with Claude Code, but it sounds like the days of using it are numbered. I guess I will be trying the latest offering from OpenAI
69.
by IgorPartola 6mo ago
A self driving car should have no steering wheel. If it has a steering wheel it is a vote of no confidence from the manufacturer.
70.
by IgorPartola 6mo ago
The simpler explanation is that an industry insider who can publish a piece saying “helium shortage will mean the end of chip making as we know it” can get a lot more views and clicks than one who published “chip making will get mildly more
71.
by IgorPartola 6mo ago
Yeah I am worried about skill atrophy too. Everyone uses a compiler these days instead of writing assembly. Like who the heck is going to do all the work when people forget how to use the low level tools and a compiler has a bug or somethin
72.
by IgorPartola 6mo ago
It's called Operation Epic Fuckup for a reason.
73.
by IgorPartola 7mo ago
Haha yes. You caught me :) I was wondering when someone was going to point it out. I actually have only been using it since about 2009 after a brief flirtation with SVN and a horrible breakup with CVS.
74.
by IgorPartola 7mo ago
When that happens I essentially pick one of the branches as the trunk for that feature and squash merge into that, test it, then merge a clean history into main.
75.
by IgorPartola 7mo ago
That is literally what I advocate you do for the main branch. A feature branch is allowed to have WIP commits that make sense for the developer working on the branch just like uncommitted code might not be self contained because it is WIP.
76.
by IgorPartola 7mo ago
Ah that’s fair. This is why I would do a `git merge main` instead of a rebase here.
77.
by IgorPartola 7mo ago
I treat each feature branch as my own personal playground. There should be zero reason for anyone to ever look at it. Sometimes they aren’t even pushed upstream. Otherwise, just work on main with linear history and feature flags and avoid a
78.
by IgorPartola 7mo ago
Not me. I typically merge main onto a feature branch where all the conflicts are resolved in a sane way. Then I checkout main and merge the feature branch into it with no conflicts. As a bonus I can then also merge the feature branch into m
79.
by IgorPartola 7mo ago
> What if I'm rebasing a branch onto another? Just checkout the branch you are merging/rebasing into before doing it. > Or if I'm applying a stash? The stash is in that case effectively a remote branch you are merging i
80.
by IgorPartola 7mo ago
I always checkout the branch I am merging something into. I was vaguely aware I could have main checked out but merge foo into bar but have never once done that.
81.
by IgorPartola 7mo ago
I used to use rebase much more than merge but have grown to be more nuanced over the years: Merge commits from main into a feature branch are totally fine and easier to do than rebasing. After your feature branch is complete you can do one
82.
by IgorPartola 7mo ago
Let’s see if I get this wrong after 25 years of git: ours means what is in my local codebase. theirs means what is being merged into my local codebase. I find it best to avoid merge conflicts than to try to resolve them. Strategies that kee
83.
by IgorPartola 7mo ago
Exactly this. But my question here is also: is there not a competitive advantage to a big enterprise that applies standards in a more intelligent way? You have a SaaS, I have a Fortune 500 company that could use your product but I cannot us
84.
by IgorPartola 7mo ago
Or that API prices are inflated. We don’t get to see what their internal financials look like. My guess is that your guess is more correct but it is unclear what is actually happening.
85.
by IgorPartola 7mo ago
What about the other times?
86.
by IgorPartola 7mo ago
In theory because the code being added is introducing a feature so compelling that it is worth it. In practice, that’s rarely the case. My personal approach to open source is more or less that when I need a piece of software to exist that d
87.
by IgorPartola 7mo ago
Most large companies will continue quarterly reporting because institutional investors will not accept anything else. For a company with market cap of $500m spending $1-2m yearly on quarterly audits is non-trivial. For a company that’s $5b
88.
by IgorPartola 7mo ago
If you have two uplinks and running OPNSense (saying this as someone that does exactly this), you have a particular setup that you have clearly taken ownership of. If that breaks your experience with standard tech, that is part of what you
89.
by IgorPartola 7mo ago
There are two separate problems with IPv4 and only one applies to IPv6. Allowing incoming connections through a restrictive firewall is applicable to both. Address mangling via NAT applies only to one. Note also that in the IPv4 world you m
90.
by IgorPartola 7mo ago
There are two ways to interpret your comment: 1. Google is getting so much productivity out of their AI that they need fewer people. 2. Google is spending so much on AI they can’t afford to keep the people they need.

More ›