HN user

rsyring

2,000 karma

keybase proof: [ my public key: https://keybase.io/randysyring; my proof: https://keybase.io/randysyring/sigs/o62LIbXLLJnsPvGLSV5A9hcVhOB9pnjZPnnDN3KuCIE ]

Posts22
Comments475
View on HN
github.com 16d ago

Pi (Rust): High-performance AI coding agent CLI written in Rust

rsyring
1pts0
aube.en.dev 3mo ago

aube: A New Dawn for Node Installs (from mise author)

rsyring
6pts1
news.ycombinator.com 3mo ago

Agent sandboxing tools that mount projects R/W have gaping exploits

rsyring
3pts0
htmx.org 4mo ago

Given AI, should I still consider becoming a computer programmer? Yes, and...

rsyring
5pts0
margaretstorey.com 5mo ago

Generative and Agentic AI Shift Concern from Technical Debt to Cognitive Debt

rsyring
1pts1
thenewstack.io 5mo ago

How AI reflects the hidden truths of your software pipeline

rsyring
1pts0
margaretstorey.com 5mo ago

How Generative & Agentic AI Shift Concern from Technical Debt to Cognitive Debt

rsyring
2pts0
news.ycombinator.com 9mo ago

Ask HN: How do you run LLM Agents safely?

rsyring
6pts1
www.thefp.com 9mo ago

I've Been at NPR for 25 Years. Here’s How We Lost America’s Trust. (2024)

rsyring
5pts7
nedbatchelder.com 10mo ago

Testing is better than data structures and algorithms

rsyring
188pts176
dynomight.net 10mo ago

Taxonomy of Procrastination

rsyring
1pts1
addyo.substack.com 11mo ago

Coding for the Future Agentic World

rsyring
3pts1
unpoly.com 1y ago

Unpoly: A Batteries Included Htmx

rsyring
3pts4
nationalcybersecuritynews.today 4y ago

Linux criticized for permitting numerous kernel patches from China's Huawei

rsyring
14pts6
docs.celeryproject.org 5y ago

Celery (Distributed Task Queue for Python) 5.0 Released

rsyring
2pts0
www.androidpolice.com 5y ago

Android 11 will only permit use of the built-in camera app

rsyring
2pts0
nedbatchelder.com 6y ago

Humane Email Validation (2009)

rsyring
1pts0
github.com 6y ago

Show HN: Easy Distributed Locking Using PostgreSQL Advisory Locks (Python)

rsyring
3pts0
www.cbo.gov 7y ago

Congressional Budget Office releases study on minimum wage increase to $15 [pdf]

rsyring
2pts1
www.level12.io 7y ago

Advice to Aspiring Developers

rsyring
1pts0
www.level12.io 8y ago

Advice to Aspiring Developers

rsyring
1pts0
news.ycombinator.com 8y ago

Fortinet hinders access to updated Linux client despite security vulnerability

rsyring
2pts1

FWIW, we started with a system that was essentially this. We eventually moved to pgbackrest and it wasn't any harder to setup. But the ROI on that investment is a lot higher because pgbackrest does a lot more for us than the home rolled solution.

Having done both, I'd recommend just starting with pgbackrest.

FWIW: I find passkeys to be a very simple and easy to use concept.

Simple: it's like a password that I don't have to type in

Easy to use: because I use 1Password and just have it installed on everything. On Android, it can be set as the default passkey provider so, even on mobile, I am using passkeys shared across devices.

Is this "less secure" because I'm sharing the keys through 1Password. I suppose, at some level. But before that, I was simply sharing passwords through 1Password in the exact same way. So, I don't think my security posture has changed any.

What has changed is the UX and IMO for the better. Now I don't have to generate/fill/copy-paste text strings for user names or passwords. 1Password knows what site I'm on and usually responds automatically when I'm in a passkey context. If I have more than one passkey available, because I have multiple accounts (for something like Google Workspace), it shows me options and I pick the one I want.

Honestly, it's mostly a "just works" system and I like it a lot better than passwords.

YMMV, of course.

My experience with Hetzner VM pricing has turned me off of considering them for anything else. Maybe the experience in other world regions is not the same but this is what happened to us:

I started to use Hetzner's VM options in the Virginia, US datacenter. They had a great performance to cost ratio when I compared them to Linode/Akamai and Digital Ocean about a year ago. At that time, 4vcpu / 8GB server cost $24.99 per month.

Now, to get a VM like it, it's quoted $73.49 a month. Almost a 3x change.

I understand data center economics are changing due to LLM usage. But the Hetzner jump has not been mirrored by their competitors. I'm disappointed I made the switch from Linode. We still have some older VMs there and we'll likely continue to use them instead of Hetzner moving forward.

There are all kinds of nuances and complexities to the human condition, especially when it comes to something like depression.

I think the parent comment, with it's implied blame/shame of the deceased, is missing a lot.

As someone with depression, to others who might read this, know that there are those out there who care about what you are going through, have compassion, and don't need or want to blame you for what you are experiencing.

There is a place for responsibility and ownership of consequences. But the parent comment isn't the way to do it.

I have a Starlink v2 dish and I pay $10 per month for a residential "standby" plan.

I only get 10G per month of bandwidth but I rarely use it since I have a fiber connection that is mostly reliable.

It might be a grandfathered plan because they don't list it anywhere I can see:

  - https://starlink.com/service-plans
  - https://starlink.com/roam
Edit: turns out this is a feature/mode and not a plan:

https://starlink.com/na/support/article/37bb3b47-9525-7224-5...

And, apparently, I now have to reactivate the service to one of the published plans if I want to use more than low-speed data. Previously, I still had high-speed bandwidth for $10 a month just not a lot of it.

They must have changed things recently. And, now that I'm thinking about it, I probably skimmed an email that said something about this a month or two ago but, since the charge was staying at $10 a month, didn't pay much attention to the details.

For a lot of programming tasks, HAVING to think about memory is a disservice.

That's part of the reason why Python, go, Ruby, etc. are so popular.

There is no one right answer, it's very dependent on what's being built and where the ROI for the programming effort comes from.

Because it's security related, the trust needed to consider using it is just higher.

Trust at two levels: who are you? What HFT firm do you run? How do we know you are actually this HFT leader? What are you doing in the HFT firm that lends credibility to build a project like this? I.e. if you lead the sales team, and have no software dev background, it doesn't increase trust in this project. If you built all the software for the HFT firm, that matters.

Since it's security related, we want there to be signals in the project that we can trust it to not start sending all our data to some bad actor state or org.

Then there is trust at the code level... Does it work? Will it continue to work?

You built it in two weeks because, for the last four years, you were busy with other things. If you get busy again, will the project lag for the next four years?

You don't owe us any of these answers. It's OSS, engage at whatever level you want. But, understand that when you publish your efforts to a place like HN, we are going to find and mention the things that make us uncomfortable.

That said, it's a good sign that people are pushing back. It is a cool project and fits a real need. So if you can increase the trust signals in the project, I think you will get more users... If you really want them. More users means more critique. :)

I hope you do make an effort to increase the trust signals and keep working on the project because I'd like to use it.

Interesting project but can't find anything useful about the author's background on GitHub.

Commit history shows the project is a couple weeks old and the commit velocity only seems possible with heavy LLM involvement. Not unexpected but worth noting.

The repo's CLAUDE.md is huge which conflicts with published best practices around agent instructions and makes me wonder how much experience the author has using LLMs.

All that said, I'd like to use something like this for my personal devices since my personal and work Tailscale networks still can't run at the same time. But there aren't enough trust signals for me for this project yet.

Podman v6.0.0 19 days ago

There's a perfectly legit reason for wanting a stable, non-rolling, OS while keeping some software updated beyond versions the OS provides.

Lots of other software providers seem to care about being compatible with LTS releases of popular distros, like...Docker! They seem to manage supporting the older kernel and systemd versions just fine.

And, my entire argument here, is that this difference between Podman and Docker is glaring and one of the reasons Podman isn't more popular.

Podman v6.0.0 19 days ago

I think you are taking an overly simplistic and dismissive view.

There's no confusion. I understand Podman's position. I'm simply saying that position keeps them from gaining enough users to really compete with Docker.

I run LTS Ubuntu versions for core stability. That usually doesn't keep me from getting the latest version of software that it makes sense to keep updated. Case in point...Docker!

So, on my "old" version of Ubuntu, which I agree is completely "on me" for choosing it, I'm able to easily run the latest version of Docker. They care about my use case, make my life as a sysadmin easier, so I use their software.

Podman doesn't and I therefore have avoided using their software for years even though they have some compelling features.

Podman v6.0.0 20 days ago

I don't claim to understand the business or politics between RedHat and Ubuntu.

I do know many projects with way less resources seem to be able to support Ubuntu and other popular distros just fine. Often through PPAs or their own apt repos (like Docker, PostgreSQL, or Incus).

If RedHat doesn't choose to, so be it. But IMO, they can't really compete with Docker when getting a recent release on the most popular distros is such a major cluster F.

Podman v6.0.0 20 days ago

My point is that it's not good enough to compete in this space.

Look at the distros that Docker supports. That kind of support is what users expect. When Podman just leaves it up to the distros to support, it's understandable. But, yes, it's not enough.

Podman v6.0.0 20 days ago

Agreed. But, IMO, it looks like amateur hour when you compare their stance to the distro support Docker provides.

Podman v6.0.0 20 days ago

As long as they refuse to support installing on Ubuntu (and other popular distros), without relying on the distro repos which are always out of date, they will continue to lose to Docker.

Any serious project in this space supports as many distros as possible.

It's OSS, so I'm not complaining per se, I have no right to. They owe me nothing.

But this one issue has kept me from seriously considering Podman for years. They don't care about my use case and I therefore don't care to use their project.

When getting the latest version looks like this[1], who is really going to consider this for serious production uses?

1: https://github.com/podman-container-tools/podman/discussions...

If you are interested in Gossamer, you may also be interested in Lis, which is Rust flavored and compiles to go: https://github.com/ivov/lisette

From their readme:

  Safe and expressive:

    - Hindley-Milner type system
    - Algebraic data types, pattern matching
    - Expression-oriented, immutable by default
    - Rust-like syntax plus |> operator and try blocks
    - Go-style interfaces, channels, goroutines

  Quietly practical:

    - Interop with Go ecosystem (WIP)
    - Linter, formatter, 250+ diagnostics
    - Fast incremental compiler, readable Go
    - LSP for VSCode, Neovim, Zed, Helix, GoLand

I'm somewhat hesitant to post this publicly but I'm empathetic with where you are at and maybe it will be helpful to you or others so here goes:

I’ve been chasing a similar symptom cluster: low-grade depression, anhedonia, "burnout", fatigue, poor sleep, stress intolerance, low motivation / executive function, loss of positive emotions including the ability to be "attracted" to things or feel affectionate, and low libido.

For years, I thought this was a mental/emotional health issue. But nothing I did seemed to impact it, including less stress and a sabbatical, and I finally started to wonder if it was more physiological than psychological. My symptoms were psychological (ish) but I started to wonder if there were underlying biological causes that amounted to more than "not handling life well, not trying hard enough, etc."

I eventually ran into a functional medicine practitioner who, for the first time ever, described a process that can happen in our bodies that fit my symptoms to a T. I don't have a good summary of it to post but, essentially, inflammation can cause the brain to become chronically fatigued (in the sense of not having the energy it needs), which can lead to hormone problems, which then recursively cause additional brain health issues. I'm doing a poor job describing it but, when it's described to me, it fit what I experienced almost exactly.

FWIW, it was incredibly liberating when I finally had a reason to think maybe this whole thing was something happening to me instead of being caused by me. A hormone specialist described it as: complex hormonal dysfunction secondary to chronic stress and inflammation.

A functional medicine workup found a mix of hormone-utilization issues, thyroid conversion issues, low-ish usable testosterone despite decent total testosterone, low iron availability despite elevated ferritin, and some inflammation markers. I also have a couple genetic variants that may matter in this context: MTHFR and APOE 3/4.

Mold/mycotoxin exposure is another possible contributor in my case. I’m not convinced it’s “the answer,” but testing suggested past exposure and possible ochratoxin involvement, so it’s now part of the differential rather than something I’d dismiss.

Some non-standard labs that they have started looking at in my case: free+total T, SHBG, estradiol, pregnenolone/DHEA-S, free T3/free T4/reverse T3, iron/TIBC/ferritin/transferrin saturation, B12/folate/homocysteine, inflammatory markers, and mold/home-environment testing if the history fits.

At a recent visit with my provider, she mentioned that just the low free T, thyroid, and iron would be enough to knock someone down and feel terrible. And I have other things going on besides that.

I work with Ashley Giles from Origin Medical in Georgetown, Indiana (USA). I believe she can work with people who aren't local. What I appreciate most about Ashley is that she's willing to look at the whole pattern — endocrine, nutrition, inflammation, sleep, stress physiology, and environment together. And she really knows her stuff.

I'm about 10 months into treatment and expect this to be a 2-3 year process to get back to normal. I'm better than I was...I'm at least mostly functional now on a day to day basis. But a lot of my symptoms are still present in one degree or another. So, no magic bullets here.

If anyone wants to discuss: randy@syrings.us

I guess they could run the titles through a (flash) LLM to catch ones were keyword detection won't cut it.

Have to love the irony. :)