HN user

mdaniel

8,137 karma

https://MatthewDaniel.com/

[ my public key: https://keybase.io/mdaniel; my proof: https://keybase.io/mdaniel/sigs/ovUHBxc--eowJt65GiqARinI6Y6Hg3J8CRC2EgGA5kE ]

Posts21
Comments5,456
View on HN
www.youtube.com 1y ago

Istanbul Moved Its Airport in Just 45 Hours [video]

mdaniel
1pts1
www.youtube.com 1y ago

AI Snake Oil [video]

mdaniel
2pts0
www.maslowcnc.com 1y ago

Maslow 4: Large format CNC routing made accessible

mdaniel
238pts94
betterweb.qwant.com 1y ago

Ecosia and Qwant join forces to develop European search index

mdaniel
6pts1
github.com 2y ago

Cloud Console Cartographer – framework for condensing groupings of cloud events

mdaniel
1pts1
binary.ninja 2y ago

Binary Ninja – 4.0: Dorsai

mdaniel
4pts1
techcrunch.com 2y ago

Seal Security wants to make open-source vulnerability remediation easy

mdaniel
2pts2
store.steampowered.com 2y ago

Portal: Revolution

mdaniel
3pts1
www.lakera.ai 3y ago

You shall not pass: the spells behind Gandalf

mdaniel
17pts1
localstack.cloud 3y ago

LocalStack 2.0 General Availability

mdaniel
7pts6
blog.sentry.io 3y ago

OpenTelemetry Support for Sentry

mdaniel
1pts0
blog.jetbrains.com 12y ago

IntelliJ IDEA 14 EAP 138.1029 is out with a built-in Java decompiler

mdaniel
5pts1
impossible-mission.krissz.hu 13y ago

Impossible Mission by Krisztián Tóth is a JavaScript remake of the C64 classic

mdaniel
2pts1
www.hardcoded.net 13y ago

Phasing out fairware

mdaniel
3pts1
www.jwz.org 14y ago

I'd like to introduce you to [...] the Herrenknecht EPB Shield TBM

mdaniel
2pts1
news.ycombinator.com 14y ago

Ask HN: prices of electronics in Europe

mdaniel
5pts8
www.teleread.com 14y ago

PDF format is dead end for e-publishing (TeleRead)

mdaniel
2pts0
spacefem.livejournal.com 14y ago

Who should be an engineer

mdaniel
1pts0
twit.tv 15y ago

Jitsi multi-IM/SIP client featured on FLOSS weekly

mdaniel
1pts1
aperture.sourceforge.net 15y ago

Try out the semantic desktop using Aperture

mdaniel
2pts1
www.data.mint.com 15y ago

Mint(.com) Data: consumer spending trending data

mdaniel
2pts0

the biggest corporate users of both Java

I bet AWS would give them a good run for their money on that metric. I got the impression that Google was predominately a C++ shop, whereas the rumor mills tell me that most of the AWS control plane is in Java (I am pretty sure I've actually gotten a stack trace from an AWS API once or twice, but foolishly I didn't save it)

For fear of having dang show up and scold me, I'll just add the factual statement that I will never ever believe any open source claim in any Launch HN ever. I can now save myself the trouble of checking, because I can be certain it's untrue

I already knew to avoid "please share your thoughts," although I guess I am kind of violating that one by even commenting

easy to tell or predict what terraform will do

predict is the operative word there, because Terraform is so disconnected from the underlying provider's mental model that it is the expression "no plan survives first contact with the enemy" made manifest

Now, I am one million percent open to the pushback that "well, that's a provider's problem" but I also can't easily tell if they are operating within the bounds of TF's mental model, or is it literally that every provider ever is just that lazy?

Spoken like someone who hasn't tried one or perhaps both of those projects

Kiro is collaborative, but SpecKit is a bunch of templates and then wishes you good luck in your journey. It honestly reminds me of those unified process templates, which I guess all of those are great if one needs some structure to organize ones thoughts

As an alternative, SpecKit is also 0.x release so maybe in 9 months it'll be useful - or overcome by whatever 'ooh, shiny!' follows it

I wasn't trying to relate anything to the bigger conversation, I just meant to draw attention to the fact that GitHub is not golang's package manager

That said, I would guess the 'bigger conversation' is that it is much harder to tpyo <<import "github.com/DataaDog/datadog-api-client-go/v2/api/datadogV2">> than $(npm i dataadog) or similar in a "flat" package namespace (same for its $(uv pip install dataadog) friend)

None of those cited ones fix the dependency lineage issue, proving that release 1.1 was authored by the same chain of custody as release 1.0 of any given package. One can opt in to gpg verified dependencies in Maven, but it is opt-in. The .jar artifacts can also be cryptographically signed, but the risk that's trying to drive down is tamperproofing and not lineage, AFAIK

As a point of reference, JetBrains platform is on top of swing, and I'd guess that's a significant contributor to why they're able to deliver consistently across Linux, macOS, and Windows. Unlike Eclipse SWT which ships native code for all the platforms it targets

    $ cat Foo.java
    interface Foo {
        private String jimbo() {
            return "yup";
        }
    }

    $ javap -c -private Foo
    Compiled from "Foo.java"
    interface Foo {
      private java.lang.String jimbo();
        Code:
           0: ldc           #1                  // String yup
           2: areturn
    }
and
    interface Bar {
      default boolean isAwesome() {
        return true;
      }
    }

What's unexpected about that observation is that they have actually completely separated the presentation layer from the business logic because such a thing was required to have "Code with Me" and their "projector" project wherein one could use IJ from a browser https://jetbrains.github.io/projector-client/mkdocs/latest/a...

But, I am fully talking out of school because I don't know what the actual, no kidding, accessibility hurdles one faces when trying to do work in such a setup, nor what concessions VS Code has made to fix those problems

But I do know that YouTrack has a dedicated categorization for accessibility reports and I am sure they would welcome hearing about how they could win back those audiences https://youtrack.jetbrains.com/issues?q=%23%7BUI.%20Accessib...

I'm not them, but there are few things better for operational insight than the JVM. It has a boatload of tuneables, it has a very rich dynamic code load mechanism (Reflection, ClassLoaders, the new Modules system, and it used to have a strong sandboxing system but they killed that), and at the intersection of those two things is JMX, which is dynamically tuneable deployments via API. It's like having JVM-local feature-flags that one can twiddle without needing to bring down the JVM

And sure, it's not everyone's cup of tea, and/or plenty of people will chime in with "yes, but"s to defend golang or every other platform that isn't the JVM. I'm not yucking your yum! I'm just saying for me, the JVM is the bees knees

I don't think "was always" is an accurate statement

However, above and beyond free, it is also a collection of ECMA standards https://learn.microsoft.com/en-us/dotnet/fundamentals/standa...

Now, don't get me wrong: I have grave suspicions there is currently only one actual implementation of them (I don't count hobby, or abandonware, ones) but IMHO "actual standard" combined with "for real reference implementation" is way better than just reference implementation

---

since I'm still within the edit window, the MAUI referenced by the sibling comment is MIT licensed https://github.com/dotnet/maui

https://github.com/dotnet/blazor (Apache 2) is marked an archived, and points to https://github.com/dotnet/aspnetcore (MIT) but command-f blazor on its readme is nothing so :shrug:

It is a CD solution, there's no CI involved at all. However, it extends the 'delivery' portion of that phrase to also include so called "day 2" Kubernetes-centric functionality such as "how does my Secret content get populated?" and "how to I apply only certain values.yaml to certain Helm release versions?" Then, Mission Manager also gets into the game of "how do I ensure my cloud resources are present alongside the software?"

It also gets into the compliance side of things (arguably it's all about compliance) in that new releases, config changes, vulnerability mitigation, downtime windows, and a ton of other stuff are optionally gated by a review process. If you want to change the values.yaml for an existing release, you can choose whether that is a 4-eyes change

That latter bit also speaks to your question about "who is the target audience for this?" because, like many things Palantir, it's a lot of the defense industry and intelligence community, as they care a lot about having gates and controls in place. Apollo specifically also gets into "edge deployments," such as what software is running on a laptop that goes out into the field, comes back to base, and only then gets its updates pushed to it

I detest them with all my heart, but I'll be straight that Apollo does actually model the deployment concerns of software very well. Every place that I've been always hand-assembles their own CD story using off the shelf stuff, and so if one has compliance needs then Apollo allows to pay to have the "hand assembled" problem go away. That said, I have _absolutely no idea_ how much Apollo costs, so I'd also speculate that most organizations would be much happier just paying for a competent DevOps role to do the best they can to use off the shelf tools to hand assemble their own CD story, or use BigBang[1] which is at least open source and a standard (one may not like it, but it is at least consistent)

1: https://github.com/DoD-Platform-One/bigbang#readme

Just Use HTML 10 months ago
  if (request.headers["user-agent"].Matches("Safari")) {
     // wheeeee
  else if (...Matches("Firefox")) {
     // those where good times

As hair splitting, that's actually not true: Go's package manager is just version control of which GitHub is currently the most popular hosting. And it also allows redirecting to your own version control via `go mod edit -replace` which leaves the sourcecode reference to GitHub intact, but will install it from wherever you like

I just realized that's an excellent opportunity for "reverse phishing:" you can mangle the first 4 digits of your card [or make one up wholesale] and if they say "thank you, sir" you know they are fake. The real bank will spot that mistake instantly since that prefix is per financial institution