HN user

weitzj

1,947 karma

janweitz.de

[ my public key: https://keybase.io/weitzj; my proof: https://keybase.io/weitzj/sigs/cXDlvK_H3oI3GHQqR0MipH_PdrN5LpXiBxR7wEzD9ko ]

Posts145
Comments459
View on HN
github.com 2mo ago

Nucleus: Enforced permissions for AI agents – policy+enforcement in one stack

weitzj
1pts1
www.youtube.com 2mo ago

Roger Penrose – Why Intelligence Is Not a Computational Process (2025)

weitzj
4pts0
docs.linuxserver.io 1y ago

Webtop – Alpine,Ubuntu,Fedora,and Arch containers containing full desktop envs

weitzj
352pts77
www.oc3.dev 2y ago

Open Confidential Computing Conference

weitzj
2pts0
news.ycombinator.com 3y ago

Fast.com down? Or does not resolve via 1.1.1.1?

weitzj
3pts1
github.com 3y ago

Purego – A library for calling C functions from Go without Cgo

weitzj
268pts69
dapr.io 3y ago

Dapr – Build connected distributed applications faster

weitzj
4pts0
ahelwer.ca 3y ago

Checking Firewall Equivalence with Z3

weitzj
2pts0
ciao-lang.org 3y ago

The Ciao Prolog System

weitzj
4pts0
github.com 3y ago

Offensive Nim

weitzj
106pts26
www.youtube.com 3y ago

Death of the “Spotify Model” • Gijs Meijer and Marcin Pakulnicki • Goto 2022

weitzj
2pts0
news.ycombinator.com 3y ago

Ask HN: Something Like Git but for Binaries?

weitzj
4pts1
news.ycombinator.com 4y ago

Ask HN: Why is there protobuf,Avro,JSON Schema,etc. instead of ASN.1?

weitzj
3pts4
asn1.io 4y ago

Protobuf to ASN.1 Schema Converter

weitzj
1pts0
en.wikipedia.org 4y ago

Bullwhip Effect

weitzj
1pts0
www.youtube.com 4y ago

“Game Development in Eight Bits” by Kevin Zurawek

weitzj
2pts0
news.ycombinator.com 4y ago

Ask HN: Anybody already investing time to prepare for Y2038 problem?

weitzj
2pts0
www.youtube.com 4y ago

Boston Dynamics Atlas Parcour Video Clip

weitzj
2pts0
www.catb.org 4y ago

How to Ask Questions the Smart Way

weitzj
2pts0
news.ycombinator.com 5y ago

Ask HN: How to handle automatic upgrades in your sourcecode or Docker images?

weitzj
1pts0
news.ycombinator.com 5y ago

Ask HN: Where do I find whois history? Does archive.org support this?

weitzj
2pts1
news.ycombinator.com 5y ago

Ask HN: Which document management system with OCR do you use?

weitzj
15pts6
medium.com 5y ago

ESP32 Rainmaker-IoT Cloud on AWS for ESP32

weitzj
1pts0
github.com 5y ago

Record and train voice into a TTS voice

weitzj
37pts1
www.youtube.com 5y ago

Digital Clock in Conways Game of Life

weitzj
2pts0
aws.amazon.com 5y ago

Application Load Balancers enables gRPC workloads with end to end HTTP/2 support

weitzj
185pts152
news.ycombinator.com 6y ago

Ask HN: Is anybody using a standing desk with a treadmill? Does it work?

weitzj
7pts8
youtu.be 6y ago

Calling scammers by their real name

weitzj
2pts0
www.straitstimes.com 6y ago

Robot reminds visitors of safe distancing measures in Bishan-Ang Mo Kio Park

weitzj
1pts0
youtu.be 6y ago

The Hustle

weitzj
2pts0

Thank you for your response. So time as you mentioned can be made explicit.

I am probably looking for something like the request context with timers and cancellation signals propagating through the call chain like in gRPC but more fine granular.

So you could implement arbitrary response times of functions. So you could say like:

This whole request must finish in 5 seconds, otherwise abort.

And these 5 seconds can be made very low so that you reach latency of NUMA vs Single CPU.

I don't know how you call this, maybe "latency budget"

Side question as I am following zig only losely and do Go Programming:

Zig has the feature that you can drop in your allocator from the caller. Now with 0.16 you also "bring your own IO" implementation with you.

And for my understanding this looks like the pattern Go uses with its Context package, where you pass in transitive data, cancellation signals and timers to for example stop an SQL query in server B, since a user canceled a web request in their browser before hitting server A, whilst all elements delegate the Context.

Then yesterday was total unrelated article about NUMA architecture, and I remember somewhere that the creator of Erlang mentioned (Joe Armstrong) that you cannot get around physics and it takes time to call a function between servers, therefore so not try to hide the latency between the calls.

And now to my question:

Would that in any way make sense for zig to go even more in this direction, where you pass in your allocator, IO, but now with something similar to Google Go context, but have it even more fine grained?

So that your functions could actually in their interface expose somehow the time in between CPU cores (NUMA) up to the request cancellation as Google go context is used for timeout signals, cancellation signals.

Also probably making time an external dependency as well.

So in essence , every function would be treated as a remote procedure calls, whereas remote would mean: "other cpu", other server/service

Maybe Roger Penrose has some meaningful Input https://youtu.be/iTVN6tFknCg

regarding …“One was the realization that a purely mechanical computer can, in principle simulate the laws …“

As far as I unterstood,there is no theory of quantum gravity and therefore this is not being simulated on a computer. I think he makes other arguments.

So you cannot say for sure that you can simulate a human brain on a computer

I was thinking of people were to use an image…:$my_tag on the host cluster and some roughe pod on the child cluster (but same underlying physical nodes) somehow overwriting the local cached :my_tag, you could do something on the parent cluster.

But I don’t fully understand what you meant with content adressed :)

Maybe one has to ensure in the host cluster that the image pull policy is set to Always or all references to images have to be based on the shasum rather than Tags.

Thank you for your feedback.

I understood from the host cluster perspective you won’t see the child cluster pods. And what is the perspective on nodes?

Can you have like a host cluster spawning on host nodes and the host cluster has control over spawning separate physical nodes which contain the child cluster (api server) + workload pods ?

I don’t understand how they are separating security in the virtual mode as they only mention pods. It seems every workload still shares the underlying node, even when in virtual mode. Take for example the OCI cache on the nodes. What about cache poisoning?

Love it. And from my experience the need for Go Routines is not that urgent.

Sure when I started Go there were Go routines plastered everywhere. And now I think harder: “do I really need a go routine here?”

I tried Nix. Worked. Then I forgot the syntax.

Therefore my middle ground is devbox.

It is like python vietualenv but backed by Nix. So I have a devbox.json file to define packages and devbox will do the Nix part for me.

I am getting a MacOS and Linux setup from this for aarch64 and x86

I was quite happy and entlohntes when I dropped an HTML table Formates with Emojies into my prompt and told to turn it into a terraform module.

But how do you quality check this part? I am proofreading all these transformations and I am not sure if this is really faster than actually recording a VIM macro, which will do the steps I need.

Love it. Also using UTM with Amazon Linux 2023 x64 on an M1 works, so you can create a local HashiCorp Packer Pipeline using the Packer UTM plugin (similar to the QEMU Packer plugin)

source "utm-cloud" "this" { iso_url = "${path.root}/dev_images/al2023-kvm-2023.6.20250303.0-kernel-6.1-x86_64.xfs.gpt.qcow2" iso_checksum = "sha256:0dc2797fe19847f6c75878dd344ab478ac0657077d9a15f2907bb2df41d8c3de" vm_arch = "x86_64" cpus = 2 memory = 4096 display_nopause = true boot_nopause = true export_nopause = true skip_nat_mapping = true communicator = "ssh" ssh_clear_authorized_keys = true ssh_private_key_file = data.sshkey.this.private_key_path ssh_host = "192.168.64.100" ssh_port = 22 ssh_username = "ec2-user" shutdown_command = "echo 'packer' | sudo -S /sbin/halt -h -p" use_cd = true cd_label = "cidata" cd_content = { "meta-data" = <<EOF local-hostname: vm-hostname EOF "user-data" = <<EOF #cloud-config ssh_sftp: enabled: true password: ec2-user ssh_pwauth: True chpasswd: expire: False users: - default - name: ec2-user lock_passwd: false plain_text_passwd: ec2-user ssh_authorized_keys: - ${data.sshkey.this.public_key} EOF "network-config" = <<EOF #cloud-config version: 2 ethernets: enp0s1: # dhcp4: yes addresses: - 192.168.64.100/24 gateway4: 192.168.64.1 nameservers: addresses: - 10.0.2.2 enp0s2: dhcp4: no state: down EOF } }

From the Enterprise Perspektive at least for my use cases(fine grained permissions using extra id) , elasticsearch with kibana always had a solution available.

For grafana cloud and Loki you can close to a good usability with LBAC (label based access control) but you still need have many data sources to map onto each “team view” to make it user friendly.

What is missing for me is like in elastic a single datasource for all logs which every team member across all teams can see and you scope out the visibility level with LBAC

Yes. From the documentation there are some Screenshots and this is possible. Like starting a standalone Firefox browser inside docker desktop and accessing it via a browser vnc session.

But you get to control the keyboard/clipboard and it can add apparently watermarks to the vnc session for DLP functionality and you have a web http to take screenshots of your vnc sessions.

Great idea. Just a tip. You can wrap your lua part into cosmopolitan C. This way you get lua on many architectures and os. Also cosmopolitan can be bootstrapped with tiny cc I guess. And personally wrapping your lua code in https://fennel-lang.org/ would be nice.

This way with libcosmopolitan, you could just checkin a copy of your build tool in a project, to be self sufficient. Think of it like gradlew( the gradle bash/bat wrapper) but completely self contained and air gapped

https://github.com/jart/cosmopolitan

This helped me great in an earlier job. Steve Jobs did not want Flash on the iPad. HTML5 was just getting started. And here I was checking how to provide a lean JavaScript Magazine App for the iPad.

Closure library and the advanced closure compiler to the rescue

From my understanding fax was safe to use since you had a leased line for fax, but now if you do fax over IP it is actually worse to use, but the regulatory had not kept up with it, yet?