nathants

39 ms·

541.
by nathants 4y ago
lack of sha256
542.
by nathants 4y ago
then who is sota and for what metrics? /giphy shutup and take my money
543.
by nathants 4y ago
i mean, we shouldn’t kid. a lot of kids, with excellent salaries, have access. i’m sure they are a varied bunch. their disposition and competencies are unknowable.
544.
by nathants 4y ago
it might be worth making dynamodb optional, so all s3 compatible remotes can be used. i made it non-optional to simplify implementation and documentation. there are no knobs, no conditional semantics.
545.
by nathants 4y ago
untrusted hosts open up a bunch of interesting system designs. i’m mostly thinking about these recently. trusted hosts have good use cases, but shouldn’t be used otherwise. trust hard. lost my yubikey is somewhat covered by the popularity o
546.
by nathants 4y ago
both novels sound like a good read.
547.
by nathants 4y ago
s3 is sota, but there are others. just run git on a server! not one executable, but you can pretend.
548.
by nathants 4y ago
that it. in libsodium we trust. the key goes in a cryptobox to each recipient, followed by a secretstream of the data.
549.
by nathants 4y ago
yes, the concern is aws employees reading my private poetry collection. my rights!
550.
by nathants 4y ago
dynamo holds a pointer to an object in s3 which records an ordered list of bundles. compare-and-swap ensures that if two simultaneous pushes happen, only one will succeed. the other will have to pull first before retrying push. there are ac
551.
by nathants 4y ago
thanks! git-remote-gcrypt has rclone support, which provides all possible backends. the addition here is a second object store with compare-and-swap semantics making it possible for multiple writers to collaborate safely. many infra provide
552.
by nathants 4y ago
git-remote-gcrypt supports rclone, and all of it's backends. i would use that for your use case. this takes an explicit dependency on aws, though all that is needed is: - (large) object storage with read-after-write consistency (s3) -
553.
by nathants 4y ago
git with ssh on a server is fantastic, though sometimes managing and paying for the server can be annoying. afaik it's not possible to have an untrusted git server, at a minimum ram contents will be plaintext. before i undertook this,
554.
by nathants 4y ago
i think the best way to think of this is that it's cheaper than private github/gitlab and easier that aws codecommit. also other stuff.
555.
by nathants 4y ago
branch deletion also does not work. the data model is very simple, a single chain of git bundles. s3 policy could enforce a variety of data models, such as inability to delete objects. there is no business use case for this, unless your thr
556.
by nathants 4y ago
even when you can trust your provider, and often you can, not trusting them can be psychologically beneficial.
557.
by nathants 4y ago
you pretty much nailed it. this treats aws as an untrusted provider. i version almost everything with git, and there are three buckets something might go in: - if it's public, it's on github. - if it's a private company proje
558.
Show HN: Encrypted Git hosting should be easy(github.com)
99 points by nathants 4y ago|67 comments
559.
by nathants 4y ago
not at all. it’s called “fit”. if you hadn’t taken this first job, you wouldn’t know you’re a bad fit for large organizations, slow pace, and maintenance heavy work. now you know. apply to interesting posts from hn who’s hiring every month.
560.
by nathants 4y ago
have your computer lock you out for 10 minutes every 35 minutes. forced breaks are good for getting exercise throughout the day. when you sit back down you can CHOOSE to go back to time wasting, or not.
561.
by nathants 4y ago
don’t switch, use both. raw ec2 has strengths and weaknesses. so does lambda. they are perfect complements.
562.
by nathants 4y ago
monitor network egress. use littlesnitch and prompt on everything.
563.
by nathants 4y ago
rapid iteration and experimentation. bonus points if it’s fun.
564.
by nathants 4y ago
massive solar farm going in on the big island east of waikoloa. not sure about the other islands.
565.
by nathants 4y ago
i agree, performance and stdlib are very nice benefits. i enjoy refactoring with type safety and using gopls and ide completion instead of external docs. i used to constantly read boto3 docs in a browser, now i use gopls in my ide. frontend
566.
by nathants 4y ago
this is exactly correct. i sincerely apologize to any who have been harmed, even slightly, by my oddity.
567.
by nathants 4y ago
all clouds provide buggy over priced services. some clouds provide stable primitives. judge clouds on the stability of their primitives, nothing else.
568.
by nathants 4y ago
very true! to be a WriteCloser[1], you have to be able to Write[2] and to Close[3]. quacking confirmed. 1. https://pkg.go.dev/io#WriteCloser 2. https://pkg.go.dev/io#Writer 3. https://pkg.go.dev&
569.
by nathants 4y ago
i can only speak for myself. i reserve raising my voice for where it's APPROPRIATE. as with the python/go debate, aesthetics are subjective.
570.
by nathants 4y ago
i dragged my feet on go for a long time. i also thought that skipping go and moving to rust was the play. a few years later, i still write python often, but i don’t build systems with it. python i now use like bash, to glue things together

More ›