HackerTrans
TopNewTrendsCommentsPastAskShowJobs

k_roy

no profile record

Submissions

GitHub expands AI bug detection, but recent outages hit Actions, API, and Git

bleepingcomputer.com
1 points·by k_roy·4 tháng trước·1 comments

comments

k_roy
·17 ngày trước·discuss
The whole reasoning behind this is flawed.

“We don’t know how to scale Traefik so we went with haproxy”

Well doh. Haproxy is designed for this. You can make haproxy serve copious amount of traffic on a single arm core and a little bit of ram. Imagine what you can do with a few replicas on your large clusters.

This has nothing to do with the choice of CI/CD or docker versus kubernetes.
k_roy
·tháng trước·discuss
> An engineer vibe-coding a project generates an end product, yes, but what is there to be interested in or to discuss? Chances are said engineer isn't even capable of discussing the project in any depth.

And this is reductive to the point of absurdity.

Everybody screaming about AI forgets the fact... you STILL need the domain knowledge. That's where the value in engineering is now.

Imagine a wanna-be game designer thinking they can fire up codex or claude and even with a few weeks and a few hundred dollars in credit, coming out the other side with a game anybody would want to play.

That's not how it works.

I tried with godot. I can tell you everything you want to know about programming/networking/DevOps, and daily use that knowledge. But was very very quickly overwhelmed with the things I DON'T know about game design and development when I tried to develop retro-DQ clone in space.

And yeah, it didn't work.

https://i.imgur.com/hyXQEyA.png
k_roy
·tháng trước·discuss
Frankly at this point, it's just as insulting to claim it's shallow and worthless just because Claude did it.

If there is a cool project that comes out the other side, who cares? I am forced to use Claude for day job, and while it's annoying, I am running at a pace that can keep up with my brain, not just what I can shit out and get tested and inevitably miss things. Because you know what's great?

When you have actual controls in place like Jira ticket integration, CI/CD steps that can be considered, but the overall change is small, how many more of those small changes do you think I can get done in a day versus before it? But hey, localhoster says it's shallow and empty of content, so it must be true.

A passion project of mine has been to develop a full decompilation and a randomizer for Neutopia. I've been working on this multiple years. I had it at a point where I had chests randomized, item grants, etc, but that kind of turned into a lame game because of how the existing Neupotia game works.

It's been stuck at 40% for just as long. I pointed codex at it, and now I'm at the at least 85-90% and will have it done within a few weeks.

Given Neutopia is a much smaller target audience, but when this project is released, it will at least as capable as http://alttpr.com/en, and more capable in some ways as random dungeon and overworld layouts are already possible, not just reusing layouts and changing chests.

Codex generated a big chunk of it, so it's clearly a horrible idea and piece of crap not worthy of localhoster here.
k_roy
·tháng trước·discuss
Wow, I'm sorry you just don't see it.

All you've demonstrated is that the left holds people accountable. But I'm sorry that you can't see how:

* calling someone a "divisive figure" and "who is constantly sort of pushing this sort of hate speech aimed at certain groups. And I always go back to, hateful thoughts lead to hateful words which lead to hateful actions."'

Is not even close to the evil words you are trying to attribute it to. That is not celebrating Kirk's death or even trying to excuse it. But again, he was fired and held accountable.

Unlike the PRESIDENT who calls for genocide, people he doesn't like to be executed as traitors. ALMOST DAILY.

Do you not see the blatant irony of trying to claim that Jimmy Kimmell was wrong for trying to blame the murder on someone on the right? Like, for real????

Why does Charlie Kirk need honors on the national level? He was a mouthpiece for opinions and frankly before his murder, I knew nothing about him except he started a feud with Swifties.

Are you just as upset that Minnesota House Speaker Melissa Hortman and her husband, Mark were murdered by a verified right-wing nutjob? And instead of honors for a woman and her husband that were targeted because of her service to her State and this Country, the White House and everyone else on the right is still saying she somehow deserved it because of "reasons"

Even just look at January 6: https://www.whitehouse.gov/j6

It's either:

* Biden's FBI in the crowd inciting violence (Biden didn't have an FBI) * Antifa, which I still don't know who to report to for my badge * Peaceful patriots who were unfair targets and somehow deserve a piece of 1.776 billion.

It can't really be all three?

I'm done.

This was not about blame, but unsurprisingly that just where you took it.

When someone is so far buried within the proproganda that demonstrates brainwashing to any reasonable person, no amount of words will change them.
k_roy
·tháng trước·discuss
"As far as you can tell?"

Again, it's completely disingenous to compare random internet trolls on Reddit/Facebook/Youtube/etc to the office of the President.

I invite you to actually find a case of a politician, a news source, or someone else who isn't one of these folks on the left, that celebrated the assassination attempts, or the murders of Kirk of the UHC CEO. Mark Hammil? Okay? The dude from Tenacious D? Okay. Other than that, new sources, politicians, the decent left? All universally condemned it.

Compare that to the attack of on Paul Pelosi, the murders of the Minnosota representive, her husband, and their dog, murders of Alex Pretti and Renee Good.

EVERYBODY on the right.

From the previous people mentioned whose opinions should be ignored, to almost every Conservative news outlet, to many politicians including the office of the President. None of them condemned it, instead focused on why they "deserved it".

Multiple academic sources, using real and verified datasets, which I'm sure you just see and "owned by the liberals", like START (Study of Terrorism and Responses to Terrorism) at the University of Maryland, ADL, have demonstrated the right is overwhelming far more comfortable with violence and violent rhetoric.

Look at what you are doing and what EVERY response of yours is.

Saying "getting fascists in the door" is not rhetoric, when there are so many things happening in our government and country that in any other decade would be objectively fascist.

You again, turned this entirely into a US vs THEM. Ignoring the fact that what this link was about is wrong, and somehow continuing defending the rhetoric because in your mind "the other side is doing it too"
k_roy
·tháng trước·discuss
> If you wonder how people could ever vote for someone like Trump, I think it’s got something to do with that kind of rhetoric.

So the rhetoric is the problem here, and not the reasons the rhetoric exists?

The rhetoric is in response to the objectively bad actions of this administration. If nothing else, the rank and foul disregard for so much of the Constitution and flagrant disregard for basic human rights and dignity.

Remember the tan suit? The sleepy Joe Biden?

Frankly, it's completely disingenious to ignore the fact that the leader of this movement, gets on his social media and says the most foul things possible every day.. and then you try to indict both sides.

A rando on the internet saying garbage is not the same as the leader of the whole movement, because that just empowers the people who follow him.

Nobody that you should take seriously said anything bad about the murder of Charlie Kirk.

But when the President gets on social media and says he's glad people are dead, or that it's okay to wipe out a civilization, and his base cheers for him, that's not rhetoric and we should just ignore it?

Sorry. That's just completely intellectually dishonest
k_roy
·2 tháng trước·discuss
And you just expressed the thoughts of every engineer that writes code for a living who is either left behind, or embracing the technology to hit KPIs and QVRs.
k_roy
·2 tháng trước·discuss
Is it actually audited?

This is 2026, not 2014 when heartbleed came out.

And it runs as PID1 on many distros and these are folks like RHEL, who have a huge interest in keeping it secure.

Pypi has an almost daily exploit announced in common and popular libraries, simply because the dependency graph is so huge. And this is in things that are almost certainly deliberately and by design exposed to insecure user input.

Again, it’s fun to hate on systemd, but in reality you are much more likely to be exploited by something else.
k_roy
·2 tháng trước·discuss
> Can you even imagine pypi or npm compromising ssh this way?

Is ssh somehow sacrosanct in a way that any other RCE or credential stealing attack is different?

I don’t even know the last time I exposed ssh to the open internet.

But the fact with npm or pypi you can be exploited just by running the software you’ve already installed because the dependencies are everywhere on your system?
k_roy
·2 tháng trước·discuss
> systemd is a monstrous codebase and there lies shitload of exploits in it. Either intentional or accidental.

And yet...

1. practically all hyperscalers use it

2. desktops

3. container images, that power everything from docker to kubernetes use it

It helps that it's actively maintained, battle-tested as hell, and widely audited.

Point being, it's fun to hate on systemd, and maybe even hipster-like, and systemd is hardly perfect... but you are probably more likely to be exploited by a pypi or npm supply-chain attack.
k_roy
·2 tháng trước·discuss
> but Israel's autism rate is 50% lower than the US

Did you just pull out of this out of the air?

Increased diagnosis and awareness, which is something Israel has caught up on recently, has brought the rate to effectively equal. Not 50% lower.

Pretending that it doesn't exist doesn't make it actually not exist.
k_roy
·2 tháng trước·discuss
It's weekly for me. And that's just with PRs, not even builders. I can't imagine if I relied on their runners.
k_roy
·2 tháng trước·discuss
Okay, well you’ve still not highlighted was is the preferred method here, since even with a 42u rack and a cluster in GCP, you still wouldn’t run kubernetes
k_roy
·2 tháng trước·discuss
I'd love to hear about your HA solution for things like this.
k_roy
·2 tháng trước·discuss
I’ve never understood the gatekeeping people wrap around kubernetes.

Even with small 3 node cluster of of raspberry pis, you can run anything you can run in simple docker, and have it survive outages/reboots/etc.

At home, I have a few raspberry pis, orangepi RV (riscv nodes), and my main nodes are large high core and RAM VMs running on Proxmox.

Each one has different capabilities. Some have lots of fast storage attached for longhorn, some have 10Gb/25Gb networking, etc.

And the great part is if I wanted to collapse down to just the SBCs? I would just need to scale down some replicas of high men or high cpu stuff I’m testing.

Of course at job, I just pick the node shape and capabilities I need and don’t think about it.

Yeah, I’m probably the exception for running kubernetes at home, but I would argue if you are running more than a handful of docker containers, you should probably be using kubernetes anyway.

Especially if you care about things being up, or want to be able to seamlessly shuffle stuff around for maintenance. Not to mention my entire infrastructure is repeatable with just a small git repo of fluxcd stuff
k_roy
·3 tháng trước·discuss
Which still means a single person with Claude can clear a queue in a day versus a month with a traditional team.
k_roy
·3 tháng trước·discuss
Same experience here.

At least for SBCs, I’ve bought a few orange pi rv2s and r2s to use as builder nodes, and in some cases they are slower than the same thing running in qemu w/buildx or just qemu
k_roy
·4 tháng trước·discuss
If anything, this would be more of a way to act as a command and control server
k_roy
·4 tháng trước·discuss
There’s more to Docker Desktop than just “oh it’s just docker underneath”

1. Unified experience across Windows, Mac, Linux

2. The security posture is much stronger by default. Many people, who would probably be considered the “target audience” for Docker Desktop, don’t bother to make docker-ce rootless, or don’t use podman, so running it in a VM is better, though admittedly often annoying.

3. Not everybody is a CLI warrior. Docker Desktop gives a decent GUI, ways to monitor and control containers visually, and even deploy kubernetes with a single click.
k_roy
·4 tháng trước·discuss
> I have a small Alpine VM that I often forget about

“vmm” is a toy compared to kvm/libvirt.

> I also have Debian 12 on a Mac Mini and while it's systemd, it could be OpenRC for all that I care about it.

I assume Intel? I haven’t paid attention to Linux on Macs in a long time. But I love Devuan for this reason.