rcconf

This is literally true, it is the worst conceivable vulnerability, total access to your k8s cluster by hitting a URL, how about a 10 instead of 9.8, these comments are wild.

I am a little confused about the comment section about this being overblown, it really isn't. Ignore all the comments in this post and fix this ASAP.

Here's a simple test:

`kubectl exec -it` a pod:

curl -k --fail https://ingress-nginx-controller-admission.ingress-nginx.svc...

If you see 400 Bad Request, that means this pod has access to the admission controller.

How easy would it be to find an avenue to make a request to the admission controller for anything running on your k8s cluster? (maybe your service takes any kind of URL and makes a request on your server...there's infinite possibilities of exploiting this.)

I am rethinking my choice in using ingress-nginx entirely, perhaps it's time to find a simpler solution that has more secure defaults.

Should we as developers put more effort into defending our craft? The movements in the artistic space with AI were very widespread and vocal, but we developers seem not to care. I feel like developers in general are a bit more quiet and timid with things and it leads to companies or entire industries taking advantage of us.

Am I the only one who feels like developers really need to be a bit more vocal in defending themselves, their craft, and even their sanity? Are we quiet because of the large salaries in the space?

I suppose the biggest question is how do you defend the craft but at the same time keep the advantage of automation and AI? (is it unions?)

Redis holds such a special place in my heart. It was the definition of awesome, open-source software. It always felt like Redis was THE definition of open source. The fact that the license has changed is heart-breaking.

Basically Instagram Reels algorithm started to get very good, they found the magic algorithm and it's so much easier to click the Reels button than switch to the TikTok app. Plus, everyone has their friends on Instagram so why switch to another app?

That's my theory anyway. I remember when Instagram Reels was just awful and all the suggestions sucked, now it's actually good.

Surprising outcome, but very similar to what happened with Snapchat. Everyone used Snapchat and suddenly Instagram added Stories and over time people just used Instagram again when Instagram polished Stories enough.

Hmm, I guess Meta is unstoppable in the social media space.

I have YNAB and the most annoying part of the entire thing is that you cannot see your total expenses? I mean, the most basic feature is not in this app.

If I want to see my monthly expenses (total), it doesn't let me. It just shows me how much I need to save this much in each bucket.

Weird.

I have the same issue, it's truly unfortunate. What's odd is I forget about what caffeine does to my sleep and after a few weeks/months of drinking it, I'm wondering why I'm so stressed, tired and can't get ANY sleep.

I stop drinking coffee and BAM, I sleep like a baby. It doesn't MATTER when I drink it, I can drink it at 6AM and I will not have a good deep sleep. I am unsure if this is coincidence, but I also notice I remember way less dreams when I am on caffeine than not. I also find it's a compounding effect which is why it's slightly annoying.

If I drink 1 cup, in 2 weeks, my sleep will be fine so I will think, okay, it's not the caffeine. Then I will continue drinking it for weeks and suddenly I haven't had a good nights rest in weeks and I'm wondering what is going on. Not having deep sleep for weeks really has a big impact on your stress levels, memory, emotional well being and general energy levels.

The annoying part is coffee is so good for productivity so I go through cycles (also you start to think it's the stress not the caffeine that's causing the sleep issue!)

Weeks of stressful work - drink more caffeine to get all the work done - bad sleep, bad mood, bad energy levels, aka all the negative affects from not having enough deep sleep.

Weeks of less stressful work, no caffeine, great sleep, great mood/energy levels, etc.

I've always convinced myself that not drinking caffeine for deep sleep is just placebo, but I've tested it so many times that it just can't be.

Is there a way to test if you're a slower metabolizer? I know my partner can drink 3 cups and she is totally fine, lucky her! I'm 100% convinced I am, but it would be cool to test by some sort of blood/urine test?

Regardless of how well this product does, the presentation and vision from Apple was phenomenal. It was like watching a cinematic AAA movie, so exciting and inspiring. There has been no other company that has been able to present AR and VR in such a way that is so exciting.

The augmented reality shifting to virtual with the dial is so genius. I feel like a kid, and that's rare to feel these days. Love it, dream on Apple!

I just want to be really clear, I have no idea who built this product and I am not associated with it in any way.

Let's say they sells it at $10 / mo. They would need 1,000 customers to make a reasonable wage at $10,000 / month. If they sells it at $30/month, they would need only 300 customers.

Can you imagine how annoying it would be to deal with 1,000 cheap customers that expect the world? Maybe they should sell it at $100/mo and sell it to only 100 people that really care about the problem.

Maybe just sell it to a business for $200/mo for all developers, they would only need 50 businesses to make $10,000/month and they would also remove the annoying, cheap, high expectation developer out of the equation.

Developers and engineers are probably the worst customer to have, insane expectations, complain about everything, criticize everything and use a magnifying glass to point out any issues, black/white thinking etc.

My theory is writing code has all of these expectations in it. You need to be highly critical, black/white (or you would drift into a world of options.) have insane expectations (or your manager gets mad at you.) etc. All great qualities for writing code, but the worst qualities for a customer.

I'm a developer too by the way, so please don't be offended, I've been there and done that, the other side is much nicer. For example, I activated my iCloud to 2TB at $10/mo instead of making a custom backup solution that I can run for $2/mo. Would I have done that years ago? Yes and the result would have been me spending 80 hours building the backup system that can't even get my photos back on my phone properly.

What I'm trying to say is, it's sad to watch developers suffer for a small amount of money per month. I honestly believe it's a failure of the people who manage developers. I may be reaching here, but I think a lot of developers have been treated poorly in general from managers, projects and high expectations. They are rarely rewarded properly which is actual recognition for the work they do. It's not free massages, free lunches and cool workspaces. As a result, I believe developers are the givers and the companies and managers are the takers. The takers siphon the life out of developers and to the point where they're so risk averse they won't even spend $100 to go to a spa to relieve some stress. They're so risk averse they won't even spend $30/month to make their lives easier.

What am I saying? Developers SPEND some money on yourselves. You DESERVE IT for the hard work you do. Stop being so risk averse just because the work you do is so.

Rant over.

Honestly the comments are a good example on how difficult it is to sell to developers and why startup ideas that target developers are dangerous to bootstrap.

Developers have high incomes, but are quite frankly, extremely cheap. And I actually mean cheap and not frugal. They will spend 40 hours/week for months to save $5/mo. There's basically no logic apart from that developers have a poor concept of time and money and are spending averse (again, cheap.)

In this case, this tool is $30/mo, or about $360 / year, what is that, 3 dinners for 2 people in a year? The tool may save the developer, let's say 3-4 hours / week and at 52 * 3 or about 156 hours of savings a year. At even 30 an hour, it's saved the developer $4,680, or at 60/hour, close to $10,000, but I can guarantee that 99% of developers will not spend $30/month to make their lives easier.

My only recommendation is try to sell this product to businesses and maybe offer them a deal based on the amount of developers they have. So sell it do a dev shop with 10 developers at $20/developer / per month. Businesses understand the time/money tradeoff and are not cheap.

Developers, my only word of advice, is seriously.. stop being so cheap and spend some money to make your lives easier.

Every time I google something, I tend to add "reddit" at the end of it so I can see discussion between individuals and I hope I find an expert that can help me either understand or purchase something. I tend to also do this with "hacker news" for things related to technology.

Recently, I was looking for Espresso Machines and found https://www.home-barista.com/forums/ which is actually powered by PhpBB.

The amount of knowledge and information on that forum is changing the way I research products and search for things on the internet. I've learned so much deep knowledge on espresso machines and I've gone down rabbit holes of how water affects espresso machines.

It gave me a deep feeling of how awful Google and reddit are at having good quality information from experts. The users on the barista forums are just experts and have been around the forum for a very long time.

It's almost like Reddit and Google are fast food and Home Barista (and other forums that use PhpBB and similar technologies) are quality, home cooked meal past down from generations of knowledge.

Now I exclusively try to find forums for a specific topic and try to find the experts on those forums to get my information, usually through a forum.

Long live PhpBB and forums and these experts on there, it's a breath of fresh air exploring the internet away from the major social media products (including Google honestly.)

Note:

The fact that home-barista is using PhpBB is purely ironic, I did not know it was, this post just reminded me of a forum that had a wealth of information and that forums are great even in 2023, heh!

Sorry if this is off-topic, but ChatGPT is blowing my mind, I'm using it to write my Christmas cards this year and it's already made some funny ones.

Dear <Manager>

Wishing you a very Merry Christmas and a Happy New Year! May your days be filled with joy, laughter, and lots of eggnog. Speaking of eggnog, have you heard the one about the manager who tried to manage a team of developers? He kept telling them to "commit" to their work, but they just kept "pushing" him aside.

Cheers, <Developer>

It seems like VSCode Remote SSH has a license which grants you access for development usage (https://marketplace.visualstudio.com/items/ms-vscode-remote....)

Seems like a landmine of licenses.

This is true, but there is a huge drawback to using the OSS version instead of the version provided by Microsoft. If you build VSCode from scratch, it appears you cannot access the VSCode Marketplace which allows you to install extensions.

So it appears there are indeed two versions:

- VSCode (OSS) from GitHub (unable to access the Extension Marketplace.)

- VSCode from Microsoft (able to access the Extension Marketplace BUT you must agree to their terms here https://code.visualstudio.com/license.)

I did not know there were two versions. So I think the issue still remains for using Remote Development under the VSCode from Microsoft. You break their license by using it since I think VSCode Server runs when you use Remote - SSH.

Honestly, this seems like a fair compromise from Microsoft. VSCode and VSCode Server is fully open source but you must develop your own Extension Marketplace or install extensions on-behalf of your users... they need a business moat somewhere, others may disagree tho.

I guess for my own usage of Remote SSH, I should build everything from source (which seems a bit silly considering everyone else is using Remote SSH.) but seems silly to also open yourself to legal trouble.

Funny that you post this. I'm having the EXACT same issue and the way I decided to handle it is it restrict myself to weekends. Usually, I would do exactly what you did. Uninstall everything, unsubscribe, etc. I feel like I'm an extreme person so whenever I do something I go all in.

Same issue as you, ladder really made me want to play. I was top 11 in NA and in terms of my rank I was top 0.01%. People in the game would always invite me and constantly want to play with me. It's super rewarding being super good at something.

The issue is, with these competitive games, is that they take everything away from you and make your life unbalanced. I don't have an answer from you, apart from quitting entirely seemed like the wrong approach to me. At the end of the day, you're playing the game for a reason, it brings you joy in some way, and this week of not playing taught me that I love everything else in life and I also want to continue to play competitively, it just needs to be balanced (so weekends only.)

If weekends only lead to me also playing throughout the week, then I'm going to cut it off entirely, but for now, I think a balanced approach is best.

Thinking about why I play really helped me and not playing during the week reminded me of why I love the game and hate the game at the same time. I hate the game because everything in my life is better right now, work, relationship, body, stress levels, etc. You would be surprised how much energy your mind exerts being the best at a game.

The reason I love the game reminds me that life is so boring sometimes, I was just watching random YouTube videos and such as they're nothing compared to being the top 0.01% of a game. The ups, the downs, the competitiveness, the feeling of finally getting to the top of the game is unreal. The fact that the game just takes you out of reality, no thinking about work stresses, relationship stresses, it's just all magically gone. Your mind is just on a 1 way track to winning in the game. Amazing. Life is so short, sometimes it's great to get away.

I don't have an answer for you really, we're in the same spot. I hope we find a balance between playing our games and living our lives. Harmony. It's the only way, or you're sacrificing something :)

I miss Emacs, but I moved to Visual Studio Code. I used Emacs for over 8 years so releases like this use to make me so happy.

On the bright side, I still use Emacs bindings in Visual Studio Code. Maybe I should spin up Emacs again and give it another shot on my new M1 (maybe it can do the auto complete stuff faster now.)

Yes, wow, glad to see this. I have so many spam emails it’s crazy. All fake invoices / hr emails and meetings that are all fake.

I’ve been reporting so many that Google sent me a high spam report alert…

Not sure what to do, I was going to open a ticket with Google. I haven’t experienced any spam with google for over 10 years, something changed for sure.

I've been working on a project for 3 years straight. The hardest part of continuing the project is that 90% of the project gets done in the first year, then the 10% takes so much time it's very discouraging.

For me, it's the feeling of accomplishment and pride that keeps me going. Regardless of the projects success, I'm proud that I've worked on something for so long and seeing it improve everyday is satisfying. There's nothing really else out there that gives me the feeling. If you ignore the success of the project (whether that's monetization or popularity.) and focus on the fun and beauty of improving something every day, it lets you go pretty far and long.

At the end of the day, you always have that project that you worked on and improved on every day. You can look back at it, show it to people, etc, and it almost seems bigger than you.

Thank you all, HN is a fantastic community.

I don't agree. Apple is definitely a cool brand because what is the alternatives in the phone space for being cool? I can guarantee you that no one thinks Android devices are "cool" amongst the younger generation.

Apple is doing a fantastic job right now and I believe they're going to do great in the next 10 years because of one really simple fact:

Apple makes great products that just work and look great. No other company has been able to do that. I was just gifted a Fitbit and it failed about 5 times to pair to my phone. I restarted both the device (5x) and phone and it finally worked. How easy do you think it was for my girlfriend to setup her Apple watch? That's when I was reminded why Apple is #1.

I think Apple should continue what they're doing, create great products that just work and look great. It doesn't matter what the next 10 years looks like if they can continue doing that and I really think they can.

TikTok is great because it values good content above else. Every other social media platform tends to value followers and popularity over content to reach people.

Facebook: Number of friends

Instagram: Number of followers

Twitter: Number of followers

Snapchat: Number of friends

YouTube: Unsure exactly, but hard to go viral

TikTok: Value of your content

Consistently on TikTok you see very popular users with millions of followers only get a few thousand views.

That’s the best part of TikTok. You make good content, and the platform puts you to the top. Your popularity does not matter. Everyone gets a fair chance. It’s absolutely fantastic.

I noticed that too, but it's possible that there was an absurd spike of traffic that halted the entire pipeline and they never got tracked.

GME news travelled absurdly quickly. The two events lined up too well.

GME is up 130% so I assume everyone headed over to Reddit to see what was happening.

I am so delighted to hear this. Open source wins again. Open source is the right for you to do whatever you want with the software, AND YES, that includes monetize it. I've been sitting on the sidelines reading the different perspectives, but I just cannot see how you can be on the side of Elasticsearch. How can they take all the work from the OSS community and add a clause that THEY only can monetize it? I will tell you right now, I have NO desire to ever contribute to the closed version of Elasticsearch and I will gladly jump on board and contribute to the AWS version. We are watching in real time the OSS community being degraded by these ridiculous licenses.

The greed here is on Elasticsearch and not on AWS. If you wanted to have a closed source piece of software that you have the only rights to monetize, then you should have closed it off from the beginning instead of taking all the work from the OSS community and giving the rights for ONLY you to monetize it.

I've had the same experience. I always see side projects at the top of the front page and many of these projects are not making $1k MRR, or even $100 MRR, but they're on the front page because everyone knows how difficult it is to make and launch a side project here. I love this community. Yes we have big expectations, yes we all want to do great-things and you see the extremes of that when you see the comments that $1k MRR is not that good. You also see comments that 1000 Inserts Per Second is not that good. It gives you perspective on the amazing people here; who have big dreams and big expectations and I would not want it any other way.

I'll try to answer these, just for fun, even though I am not doing an interview. I have not Googled anything, so if things are horribly wrong, let me know.

- I have no idea, but I could try answering this through thinking through the problem. Generally a linked list has a pointer to from one item to the other. An array list I assume uses arrays for holding the items using indexes.

What are the available operations generally for a data structure?

Search - Search would be O(1) in array list and O(N) in linked list, can't be this.

Insert - Insert in a linked list is actually quite quick if you have the node since you could just move the pointers. For an array list, you would have to shift everything over. I think this is the answer.

Remove - Same deal as Insert.

Did I get this right?

- Because processes cannot access each others memory, the OS prevents from happening. A pointer is a pointer to an address in memory so you generally cannot do this. In terms of where would this work, umm, maybe in an old OS that didn't have the protection, or perhaps dynamically linking libs?

- Neither, it's pass by copy from what I recall. Or something of the sorts. Maybe call by sharing? I would just explain how it works since that's easier, generally everything in Java is copied, so it's pass by value in the traditional sense. But when you think pass by value, are objects copied? The answer is no, objects copy their pointer instead in Java. So when you modify a passed object, it does modify the underlying data in that object, but you can never re-assign the object.

- Nope, I don't think so. From what I recall, I've always had programs fail to run if I use the same IP + Port + Interface. You can do virtual hosts in Apache/Nginx tho where you can handle multiple different domains on the same port.

- Volatile is generally used when working with threading. I cannot fully recall what it is, but it's required in thread safety. I would generally use thread safety operations and data structures instead here, but I do recall having to use volatile a few times.

- I don't know how a breakpoint works exactly, but it's a marker placed in code and when a debugger runs into it, it stops the process. I assume since the Java code gets converted to byte code for the JVM to process, it would be a byte code added between the lines where the breakpoint lives.

Note: haven't used Java in 4 years.

After using Emacs for 10+ years, I've switched to VSCode for a really simple reason: fuzzy matching a file in a project. I've tried so many different plugins and hacks to get it to work, but it never did quite work. Searching for a filename either matches the wrong file, or new files that were freshly added are no longer there.

I watched a YouTube video and this person explained a really neat concept.

Your life is like a game. In this game, you have different stats and you must increase each stat. For example, in a typical game you may have:

- Health - Attack Level - Money - Magic Level

In games, you try to increase each of these stats to create the best and strongest character. Life is very similar, but the stats are:

- Work - Social Life - Money - Fun - Relationship - Family - Sleep - Exercise - Relaxation

If all you do is spent all your time on Work, all the other stats will be lacking and ultimately you will have a weak character. Your work may be at 99/100, but your Sleep may be 20/100, or your relationship/family may be 40/100. So, the way I switch off work is that at 1:00PM I take 1 hour off of work (no matter what.) and I do not feel bad about it because it is ultimately increasing my Relaxation/Fun stat. At 5:30PM, I stop work entirely to focus on everything else in life such as Fun, Relationships, Family, Exercise, Social Life.

I find it very strange how well this model works for me. I literally separate work entirely at 5:30PM because I know life is more than just about the Work stat, it's about all the stats combined and you must work on each one to beat the game or be a strong character at the game of life.

That was amazing! This is so awesome. I just played for 30 minutes since I haven't played since I was a kid. I use to be very good and apparently still have it since I landed #1 after playing all the rounds :)

Thanks for sharing this, made my morning and took me away from development work for once!