freeqaz

31 ms·

421.
by freeqaz 4y ago
Saw this earlier on Reddit and this will save people a ton of time with generating art. Has anybody else seen any tools that they've found useful?
422.
by freeqaz 4y ago
There are some real benefits to using SQLite as a "serialization format" over something like JSON or Protobuf. To elaborate on a specific case, think about a 'package-lock.json' file in a Node project. These files are fr
423.
by freeqaz 4y ago
AWS CDK is pretty magical. The whole "constructs" that they have are very powerful. I was able to setup a scale-to-zero RDS Serverless database with an auto scaling backend using ECS + Fargate in a few hours. (With zero prior expe
424.
by freeqaz 4y ago
I was running this on my laptop for a while but it doesn't support hibernation which sucks :(
425.
by freeqaz 4y ago
It depends on the version of React Scripts. Newer ones are better, but ~3.4.4 is around 2m edges with the JS library we're using to parse it out. Regardless, I was very surprised that it could be 7 figures!
426.
by freeqaz 4y ago
Installing react-scripts is ~1400 dependencies and around 2 million "edges" (where one package requires another). This blew my mind recently when "yarn audit" was failing with an OOM error!
427.
by freeqaz 4y ago
There are a few companies in this space that are trying to do the "Security Seal of Approval" thing to various degrees. Tidelift is one company that has a bunch of "catalogs"[0] of packages. I'm not sure how their p
428.
by freeqaz 4y ago
Note: I run a vuln scanning company in this space (our GitHub[0]), so I can add some context to this. GitHub has this for Dependabot via CodeQL which is a part of their "Advanced Security" package. ($$$, ie "contact us",
429.
cdk8s: CNCF-Backed Infrastructure-as-Code (IaC) for Kubernetes(cdk8s.io)
2 points by freeqaz 4y ago|3 comments
430.
by freeqaz 4y ago
I saw this last night while trying to setup Flux on EKS. I wanted to share this and see what other tools people are using too. Is it possible for Kubernetes to be startup-friendly? (We're using ECS right now via the normal CDK[0]). 0:
431.
by freeqaz 4y ago
The only argument I can think of here is with NPM post install hooks. But for Golang, unless you import the code, I'm pretty certain that there is no way to exploit or backdoor an app. Or is there something I'm missing?
432.
by freeqaz 4y ago
This is really cool to see because this is the #1 problem with current tools (as you said). I call it "alert fatigue" in my head because it's meaningless when you have 100+ vulns to fix but they're 99% unexploitable. I h
433.
by freeqaz 4y ago
A quarter is like a decade at an early stage startup though. I'm not sure how many employees OPs company has though, so maybe they're at a bigger stage. We're at 4 people currently and it would be extremely difficult to set g
434.
by freeqaz 4y ago
This is probably the best comment I've ever read on HN. Thank you. This is why I love this community!
435.
by freeqaz 4y ago
Is this service still maintained? I used to use it more but it feels like it's dying.
436.
by freeqaz 4y ago
I found this tool pretty interesting (it helped me frame my mindset while creating prompts). https://promptomania.com/stable-diffusion-prompt-builder/
437.
by freeqaz 4y ago
What settings are you using it the people with 1080s above you are taking 3 minutes?
438.
by freeqaz 4y ago
I've been playing with this for a few hours. It's slow going -- you really need a fast GPU with a lot of RAM to make this very usable. I ended up paying the $10 for Google Colab Pro and that's how I've been using this. M
439.
by freeqaz 4y ago
Link: https://gitlab.freedesktop.org/pipewire/helvum It's a visual patch bay for Pipewire. I had no idea and I had to look it up.
440.
by freeqaz 4y ago
With those recent weights leaking for the Standard Diffusion model, maybe there is a chance that we see some really cool startups spinning up!
441.
by freeqaz 4y ago
I came here to say this. The newer generation are not craftsmen in the same ways as before. I'm a Software Engineer and it's the same mentality as somebody that is a Carpenter (my friend's dad is a carpenter that I have asked
442.
by freeqaz 4y ago
I really dislike how overloaded the term "supply chain" is. I recently saw a "supply chain attack" on a Web3 company[0] and it turned out it was a contractor pushing malicious code. I've worked on "code provena
443.
by freeqaz 4y ago
100% agreed with this. Having fewer customers using the free tier in 2022 would make it cheaper to run. It's the stagnation and the realization that they can't compete that's pushing them to sell based on their brand instead
444.
by freeqaz 4y ago
This comment actually got a laugh out of me. I truly have no idea what would be feasible in a collision like this. Probably packing peanuts? Airbags on the outside of the car that deploy when a pedestrian is detected?
445.
by freeqaz 4y ago
I think about this a lot, actually, because I am the type of person that doesn't enjoy living alone. I just get bored and depressed without people around me. (But I'm still a strong Work from Home advocate.) Having roommates is go
446.
Why are cans shaped the way they are? (ie, not cubes) [2014](datagenetics.com)
6 points by freeqaz 4y ago|2 comments
447.
by freeqaz 4y ago
Previous Discussion on HN from 2014: https://news.ycombinator.com/item?id=8097125 This post comes to my mind every time I'm at the grocery store. Global economics are weird and this post makes it all make sense to me.
448.
by freeqaz 4y ago
Are there any more details available about this satellite? Software defined" is cool, but what does that actually mean?
449.
by freeqaz 4y ago
So I've actually spent about a year of my life working to solve this exact problem. Specifically: How do you prevent a single point of failure from leaking everything sensitive in a database. It turns out that it's a pain in the r
450.
by freeqaz 4y ago
As a security guy, I'm always worried about secrets living in Env variables because it's an easy place for them to leak. (Many loggers will automatically log env vars, for example.) That's why many services, like Kubernetes,

More ›