apt-get

I take it you've hardly ever interacted with queer people under the age of 40, then, because otaku culture is beloved by every demographic :)

Location: Paris, France

Remote: Yes

Willing to relocate: No

Technologies: End-to-end Devops/SRE -- general POSIX sysadmin stuff, modern systemd slash linux, Docker/Podman/Virtualization/etc, CI/CD (mostly Gitlab), managing different kinds of private software forges & repositories, DB clusters (Postgresql & co.), observability (Grafana stack), everything k8s. Software Engineering -- Python, Web Stack (I enjoy both Vue & SvelteKit), Java (Spring and its ecosystem), Ruby + Clojure + Rust as hobby occupations. (+ AI)

Languages: FR / EN

Résumé/CV: Available on request.

Email: see profile.

I'm a swiss knife software engineer, with 5 years of professional experience and 15 years of handling computers and code in general. My dayjob's developing tools to better manage public infrastructure, which has given me the opportunity to grind my gears against a lot of obtuse edge cases between legacy systems, deploying software in weird environments, and doing all that on a shoestring maintenance budget!

I've got the chops to run all the internal tooling a dev team might need -- software forge and repository, private container repos, bare-metal servers for VM provisioning, company VPNs, authentication systems, etc. I've also done a lot of (proper) k8s work, setting up CI pipelines, GitOps continuous deployment (ArgoCD), configuring (and testing) high availability modes for required middlewares, developed my own k8s controllers when the need arose, etc. Most importantly, I know when to use the right tool for the job, and when the extra complexity isn't actually needed.

I've also done a lot of proper software engineering, with a focus on distributed & fault-tolerant systems, RBAC, multitenant support, performance optimization, and integrating software bricks together that were never meant to match! I love thinking about the boundary between systems and making sure no important information is ever lost or slips through the cracks. This includes a rather paranoid cybersecurity mindset as well.

I'm looking to work freelance a few hours a week with someone who needs that kind of help (either on the weekend or on CET evenings), preferably in an ethical context; I'd love to work with nonprofits and the likes. I'm probably cheaper than you think! Don't hesitate to contact me if you're interested.

Worth noting the vote for this law passed 11 to 10, and it's an amendment to the budget which is 100% likely to be thrown out anyway.

World Wide Web, huh?

Those hyperlinks ain't free, you know.

Location: Paris, France

Remote: Yes

Willing to relocate: No

Technologies: End-to-end Devops/SRE -- general POSIX sysadmin stuff, modern systemd slash linux, Docker/Podman/Virtualization/etc, CI/CD (mostly Gitlab), managing different kinds of private software forges & repositories, DB clusters (Postgresql & co.), observability (Grafana stack), everything k8s. Software Engineering -- Python, Web Stack (I enjoy both Vue & SvelteKit), Java (Spring and its ecosystem), Ruby + Clojure + Rust as hobby occupations. (+ AI)

Languages: FR / EN

Résumé/CV: Available on request.

Email: see profile.

I'm a swiss knife software engineer, with 5 years of professional experience and 15 years of handling computers and code in general. My dayjob's developing tools to better manage public infrastructure, which has given me the opportunity to grind my gears against a lot of obtuse edge cases between legacy systems, deploying software in weird environments, and doing all that on a shoestring maintenance budget!

I've got the chops to run all the internal tooling a dev team might need -- software forge and repository, private container repos, bare-metal servers for VM provisioning, company VPNs, authentication systems, etc. I've also done a lot of (proper) k8s work, setting up CI pipelines, GitOps continuous deployment (ArgoCD), configuring (and testing) high availability modes for required middlewares, developed my own k8s controllers when the need arose, etc. Most importantly, I know when to use the right tool for the job, and when the extra complexity isn't actually needed.

I've also done a lot of proper software engineering, with a focus on distributed & fault-tolerant systems, RBAC, multitenant support, performance optimization, and integrating software bricks together that were never meant to match! I love thinking about the boundary between systems and making sure no important information is ever lost or slips through the cracks. This includes a rather paranoid cybersecurity mindset as well.

I'm looking to work freelance a few hours a week with someone who needs that kind of help (either on the weekend or on CET evenings), preferably in an ethical context; I'd love to work with nonprofits and the likes. I'm probably cheaper than you think! Don't hesitate to contact me if you're interested.

I'm referring to telecom cables in nordic and baltic waters, not nordstream.

> One thing that logic would dictate though is that Russia would be extremely low on the list of suspects since they gain nothing and are negatively affected in every manner possible by being in any way behind such actions.

Or one could choose not to take this in isolation from all the acts of brazen and identified sabotage Russia does, slashing deep-sea cables in international waters with their shadow fleets, organizing psyop campaigns throughout the entire continent that can be traced back right to their government units, and so on :-)

Not asserting this is definitely a Russian op (given the amount of simultaneous farmers' protests and all in NL today), but their modus operandi for foreign operations of this kind involves paying random thugs a few hundred to a couple thousand euros to carry out acts of sabotage using whatever items they have on hand. The items don't need to match, the people involved don't need to know each other.

Just days after a similar (criminal) incident causing a train to derail in France: https://www.lemonde.fr/en/france/article/2026/09/12/french-p...

"close to Renault's factory in the town of Cléon", which is now preparing to start manufacturing drones for the French military, in collaboration with Ukrainian military-industrial groups.

Worth noting that the "escape hatch" clauses in the EUPL that allow converting it into other licenses mean it's only ever as strong as the weakest license it names for such an operation, AKA EPL/MPL/LGPL.

Any actor that wants to mess around with providing a closed extension on a network service can exercise that option with an EUPL codebase, so if you care about that, you're better off explicitly naming the AGPL or whatnot.

EUPL is built for government agencies first, and most of the focus is ensuring that nobody has to worry about mix-and-matching it with other copyleft licenses, plus legal language that covers and harmonizes variations in notions of copyright/patents/intellectual property across EU countries, not so much waging war against hyperscalers. (But it's still great to have around!)

Related - filming light at 2 billion fps with a somewhat similar setup in concept (at the single pixel scale): https://www.youtube.com/watch?v=o4TdHrMi6do

See also: https://postbox.garden/

We found it pretty easy to build a little k8s controller for our own purposes to do this -- see https://news.ycombinator.com/item?id=48478994 . You probably don't need to implement this as a plugin or hook, pgdog supports dynamic reload of its configuration without dropping existing connections.

Although I'm the type to shy away from adding extra layers in my architectures when I can help it, pgdog has been an absolute breeze to use :)

basic auth is secure, if used in combination with TLS.

Considering "I Can Has Cheezburger" and that kind of lolspeak is nearly 20 years old now, I'm not surprised to see some people unfamiliar with it nowadays :-)

We successfully did this with pgdog at $JOB using our own "controller" -- the same service that handles deploying new instances of our application (instancing an argoCD Application that fires Crossplane DB creation, making new Deployments of bricks, etc) will also, at the end of that process, scan the cluster for Database CRDs, use those to generate a new pgdog.toml + users.toml, update the Secrets in the cluster, enable maintenance mode on all pgdog pods, do a live config reload on each of them, then disable maintenance mode (this is to make the change atomic between all the pgdog instances). Downtime there is about 2-3 seconds and all it does is make new SQL requests from existing clients wait, it doesn't break the connection or anything.

The sloppa in this article is... offending.

The obvious AI headings, pointless genned image of people (I'm starting to think islam had a point with discouraging depictions of human figures), and especially the blurry, artifacted, distractingly skeuomorphic diagram, with random wire traces going everywhere... this is a technical blog, not an investor sales pitch! Every time I see one of these, I have to double-check for a second if I'm not on some phishing SEO site!

If even Google, previously a gold standard of technical writing, is falling prey to this kind of laziness, then I have nothing to worry about -- knowing how to write without a language model in the driver's seat is gonna be a top tier skill in the future...

A damn shame too, as I've been following the progress of JXL in the standardization pipeline for a few years now and was quite interested in the historical breakdown, but all that's gonna stick with me from this is the disrespect I felt as a reader.

... with a high-resolution scan of the work itself available for download, to boot. I really appreciate whenever museums go out of their way to share those publically! Much better than many paintings only officially available as some 400px thumbnail.

Oh hey, Tixl on HN! It's probably my favorite piece of FOSS creative software, and honestly blows After Effects out of the water for me (as a hobbyist who likes cooking up some vis for my DJ sets).

I'm not kidding when I say it has the potential to become the blender for 2D/3D VFX -- the node engine is super powerful, the primitive building blocks are all well thought-out and integrate with each other very nicely, the performance characteristics are amazing (all optimized for realtime!), and there's a ton of I/O for everything from mouse input to OSC/MIDI, camera control, elaborate audio reaction... and also just plain TCP/UDP/HTTP/Websockets! It's such a powerful glue piece, but also tons of fun to mess around with on its own.

The best part? You can create your own components, define your inputs/outputs, and compose them together. The even bestest part? You can dig into the predefined components/effects and see how they work, as they're very often implemented in the same way! The visual editor all drills down to C# in the end, and you can drop into the code or write some HLSL shaders if you want, all with hot reloading.

Just give it a try, you won't regret it :)

How relevant is this (and the NSA's general spying capability) in 2025?

We hear a lot about local agencies perusing the services of private companies to collect citizens' data in the US, whether that's traffic information, IoT recordings, buying information from FAANG, etc. What's the NSA's position in the current administration? (e.g. we've heard a lot of noise in the past about the FBI and CIA getting the cold shoulder internally. I wonder how this applies to the NSA.)

> Palantir is firmly cemented into military-industrial infrastructure, and business is booming, but Karp is not letting up. He has said he wants Palantir to be as dominant and indispensable as IBM was in the 1960s, when it was the world’s largest computing company and shaped the way government and private companies did business.

I was thinking even before this line that he gives off the impression of really admiring IBM, especially their German stint from 1933 to 1945.

I finally took the plunge and upgraded from Ubuntu 22.04 to 24.04 on my work laptop. With that come all the gnome package updates and such.

I reboot, load up my session, and a little while after need to grab a couple files from a zip archive. I double-click it in Nautilus, nothing happens. I give it a couple more clicks before I suspect something broke, right click it, and see "Extract" as... the default cursor action...?

I go back up and see five fresh copies of the folder that was inside the zip. I delete them all, go back to the file itself, right click, open with > file-roller. I try and drag'n'drop the couple files I need: doesn't work, for some reason. Great, they've broken drag and drop, too.

I look it up, stumble on https://gitlab.gnome.org/GNOME/file-roller/-/issues/4, 7 years old issue -- I can already tell this is gonna be a joy; scroll down some, see https://gitlab.gnome.org/GNOME/file-roller/-/issues/4#note_1..., and audibly groan.

> is drag and drop extraction from Nautilus (or other file managers) really that important?

Why, yes it is! It's even worse if you go and _break_ drag'n'drop support on X11! I'm not even using Wayland!

But, oh well, looks like file-roller is unmaintained and outside of core Gnome scope now. Nautilus' zip capabilities are enough, they say! Why would a user want to inspect the contents of a zip archive before wanting to extract it, or god forbid select specific files, after all? Definitely not worth keeping as a core OS/DE feature.

And the PR on file-roller that fixes this on wayland with... a custom fuse virtual filesystem?! has been untouched for the past 2 years, never to be merged.

I'm moving to KDE, thank you very much.

The OOM issue is fixed in the most recent updates -- it was a memory leak linked to the file scanner, IIRC.

Sakugabooru's blog has much information on the internals of anime production. This article answers some questions about the production committee model: https://blog.sakugabooru.com/2017/05/02/what-is-an-animes-pr...

Otaku/doujin culture, and the creative industry that rose around it in Japan, is as good as it gets when it comes to finding good ideas and propping them up. Basically anyone who can draw can release their own manga/webnovel/illustrations on pixiv, twitter, and others, get a couple volumes out with this or that publishing house, see where it goes and whether the public catches on. Self-publishing plays a huge part in this, whether it's doujinshi (self-made [often derivative] books sold at conventions like Comiket, Comitia, or online, with a substantial proportion of r-18 [but not only] content), doujin music albums, indie games and visual novels, etc.

Funding for anime adaptations is plentiful, and fan support helps bridge the confidence gap where production committees (consortiums of multiple publishing/IP companies pooling the money to distribute the risk) won't go for more indie / experimental works. Profit is recouped on developing the brand and merch, while leaving plenty of room for directors and studios to establish their own auteur identity. Studios are getting leaner and more focused these days, splitting off into smaller entities kicked off with a project or two with more margin for talent to shine.

It's not all perfect, though. Freelance work and lack of mentoring has really put a dent into the supply of new animators, who lack job security and often swing between studios left and right, but there are industry efforts to fix this and preserve knowledge, with the oldest pioneer animators now starting to hit their 60's and 70's.

Question to anyone with experience in this domain: I have CSAM spam problems on a forum I host, with bots putting link shortener URLs embedded in images rather than the post body. Traditional OCR software deals poorly with them due to font modifications and intentional text edge modifications, and I'm obviously not gonna use a SaaS/closed source model to upload a bunch of may-be-may-not-be-CSAM pictures, so looking for a way to do this locally, with cheapish inference if possible (I don't mind spending a minute of compute to get the result out for one image, but need to do it on the CPU).

Is there any small model that would do this effectively, with pure text extraction (without going for any kind of formatting or whatnot)?