HackerTrans
热门最新趋势评论往期问答秀出招聘

caleblloyd

no profile record

提交

Show HN: CargoWall – eBPF Firewall for GitHub Actions

github.com
14 分·作者 caleblloyd·3个月前·2 评论

评论

caleblloyd
·上个月·讨论
I recently switched off Max flat rate to Enterprise API pricing and I went from 200/mo to 10k/mo with the same usage pattern on Opus. They don’t offer flat rate to enterprises.

So Fable would cost me 20k/mo at Enterprise rates. That’s around the average cost of a loaded SWE in the USA. “But I’m >2x more productive” doesn’t justify doubling the opex of the Software/IT department for most companies when revenue isn’t even up 10%.

I switched to DeepSeek v4 Pro with OpenCode and am on track for a few hundred dollars of spend this month.

Rewriting your stack from Ruby to Go in 2 days where it would’ve taken 6 months is impressive and fun. But that isn’t upping revenue.

Iterating on net new business features and ideas that are niche that the LLM isn’t trained for are much harder. Is 20x the token cost worth it there?
caleblloyd
·8个月前·讨论
Sure, but say the implementation lets you try 5 codes in that 10 minutes with a 30 minute lockout. An attacker could trigger Account Recovery, blindly try 5 six-digit codes immediately, and have a 0.0005% chance getting into your account.

They could script this to run over a long period of time targeting 1 account, or they could target many accounts at once, and would probably have success.
caleblloyd
·8个月前·讨论
I used Ory Kratos in a Go application a couple years ago by installing it as a dependency. It worked pretty well but in hindsight I would have hosted it as a separate application because it was a pain to bring along all of its dependencies.

One of my biggest complaints was that one of the Account Recovery flows was just an emailed 6-digit code. So a 1 in 1 million chance that somebody without access to any of your stuff could hack you by just hitting reset and guessing "123456". It's actually surprising how many other Account Recovery flows across the web I have noticed recently that do the same thing. Not sure if Ory has added the option for more entropy in this code as of today's release though it's been a while since I've used it.

Otherwise it was a great project to work with that has tons of knobs to customize. I commend the authors, aeneasr especially. It must be a ton of work to keep up with all of the auth standards and offer this in an Apache2 licensed package all while building a business around it as well!
caleblloyd
·9个月前·讨论
I sometimes dream of what it would have looked like to become a doctor (or PA or similar) instead of choosing Software. Mainly the allure of interacting with and helping more people.

This young person sounds like they are motivated enough to succeed at any study they put their mind to. Of course many companies will deny a young person employment based on age, just like they would deny them employment based on a lack of a formal degree.

But one day you turn 25, you are the right age, and you have the right degree. Then the praises for saving the company 70% on their cloud computing costs stop, and the same managers start asking you to work the weekend to fix other people’s code. And if you oblige, the burnout will become as real as a Doctor’s burnout, I imagine.
caleblloyd
·10个月前·讨论
I still like AWS all these years later. It’s trusted in the enterprise and you can empower people to do what they need to themselves with IAM. And it’s pretty reliable.
caleblloyd
·去年·讨论
Amen! NATS is how we do AI streaming! JetStream subject per thread with an ordered consumer on the client.
caleblloyd
·去年·讨论
Conversely the ultimate test may be that once the free plan is monetized with ads, how many users will continue to use ChatGPT.
caleblloyd
·3年前·讨论
The buildkit tooling such as `docker buildx bake` is great. I haven't seen this level of innovation from the other OCI builders that are aiming to replace Docker.

I found the first scenario that I actually wanted to pay Docker for- a dedicated, hosted Buildx runner. Not some multi-tenant thing that reads and writes a slow cache to S3 before and after every build. A fast one, that keeps the cache hot.

I'd pay 2x whatever the EC2 instance cost would be to have this managed and updated automatically.
caleblloyd
·7年前·讨论
A lot of it is possible for sure. I used to do a lot these things in a Subaru WRX (minus the towing of course). Even drove home from Lowe's with an assembled grill on my roof rack once.

Always hated filling a sedan with trash, yard garbage, or landscaping materials though.
caleblloyd
·7年前·讨论
I found that once I owned a home, the utility for a truck doing "weekend warrior" tasks was great. Runs to the dump, transporting furniture, soil/mulch, firewood. Standard towing package for a boat or a rental trailer. Can also fit bikes, kayaks, skis, and camping equipment, no need for expensive roof rack accessories.

We use my wife's crossover for all of the family trips, so it's usually just me in the truck. Before I owned a home I enjoyed driving a nicer sedan but now I would now I prefer the utility of a mid-size truck.