News for hackers. Stuff that matters.

azophy_2

Re:Ask HN: Who wants to be hired? (June 2026) on Monday June 01, 2026 @05:37PM (#48363006)
Location: Indonesia Remote: Yes Willing to relocate: No

Technologies: Python, TypeScript/JavaScript, Go, PHP, FastAPI, Next.js, React, Node.js, PostgreSQL, MySQL, Redis, Docker, Kubernetes, AWS, GCP, Supabase, LangChain, LLMs, RAG, GraphQL, REST APIs

Résumé: https://s.id/resume-abdurrahman-fullstack Email: abdurrahman dot shofy at gmail dot com

AI-oriented Fullstack Engineer with 9+ years of experience building production web applications, data-intensive systems, and AI-powered products.

Recently, I've been building end-to-end AI workflows for a startup, covering recording UX, transcription, content generation, video rendering, analytics, evaluation workflows, and LLM integrations. I enjoy taking AI features from prototype to production and building the engineering systems needed to make them reliable.

Previously worked as a Software Architect for the West Java provincial government, helping improve engineering practices across 60+ engineers, leading performance optimization efforts for high-traffic systems, and building internal automation tools that saved thousands of hours of manual work.

Selected experience:

- Built and shipped production AI workflows using LLMs, transcription, content generation, and video rendering - Developed RAG systems, natural-language-to-SQL pipelines, and AI evaluation/regression testing workflows - Led database optimization initiatives on large legacy systems handling millions of records - Experience across backend engineering, frontend product development, cloud infrastructure, CI/CD, and software architecture - AWS Certified Solutions Architect – Associate

Looking for senior fullstack, backend, AI engineer, or technical lead opportunities. Remote preferred.

Re:You don't want long-lived keys on Monday April 27, 2026 @03:53AM (#47918851)
shameless plug: if your are looking for software that does basically this, you can try my open source project: https://github.com/azophy/sshifu

Its still early, but my aim for this project is to be the simplest/easiest "SSH login via SSO" available on the market. open for feedback & suggestion

it does have standalone binary, you can check out the readme for other installation methods. npx is just a wrapper to make it easier to use as I assume its widely available among software engineers

Show HN: Sshifu – Give SSH access in 1 command. Teleport/Smallstep alternative

https://github.com/azophy/sshifu

Hey HN! Over the past few years, I’ve spent way too much time copy-pasting SSH public keys just to give people access to servers. It always felt like a chore, and the security risks (offboarding, revocation, etc.) aren’t great either.I looked into solutions like Teleport and Smallstep, but they felt a bit too heavy and complex for what I needed.So over the past few weeks I vibe-coded a small...

( Read More... | 3 comments | on HN )
Re:SSH certificates: the better SSH experience on Saturday April 04, 2026 @12:57AM (#47635914)
shameless plug: I've been tinkering with a tool to make SSH certificate-based login a bit easier. it's called Sshifu.

basically, you set up a sshifu-server that acts as a certificate authority + SSO server. then on your SSH servers, you configure them to trust this CA (there are helper npx commands / bash scripts to make this easy).

after that, for each user who wants access, they just run:

npx sshifu <sshifu-server-url> <ssh-server-url>

this starts the SSO login flow, sets up the CA public key if needed, and immediately opens an SSH session.

npx is just the easiest way to get started, there are other install options too.

I built this as a smaller alternative to Smallstep / Teleport. it's still very early and mostly vibe-coded, but it's already scratching my own itch.

would love to hear what you guys think

repo: github.com/azophy/sshifu

Show HN: Sshifu – SSH Login with SSO. Alternative to Teleport and Smallstep

https://github.com/azophy/sshifu

Almost every engineer knows SSH. And almost every team I’ve worked with manages access by copying public keys into servers, forgetting to remove them later, and sometimes sharing access in ways that are… not ideal.It works fine until you have dozens of servers, multiple engineers, short-term access needs, or any real security requirement. At that point, things start to get messy and a bit hard...

( Read More... | no comments | 2 points | on HN )
fly.io released sprites.dev which basically this. discussed in HN several days ago: https://news.ycombinator.com/item?id=46557825
Re:Stacked Diffs with git rebase —onto on Friday December 05, 2025 @06:12PM (#46168639)
I feel that stacked PR in git should be common knowledge, however many of the documentations are scattered. I found stacked.dev but feels that its not exploring pure-git workflow that well. thats why I tried to collect all of those docs into a single website that's dedicated into that singular workflow. would love to get any feedback:

https://stacked-pr.github.io

(disclaimer: partly supported by AI, but most of the writing structure were made by hand)

Just curious as someone with limited experience on this. Whats wrong with it? decimal is consistent & predictable (compared than float), so it shouldn't be that big of a deal right? CMIIW
Re:Why are banks still getting authentication so wrong? on Thursday May 15, 2025 @01:44AM (#43992184)
could you explain more? im always under impression that chinese scam/fraud are rare. what keywords should i search for?
Is there any comprehensive guide in building observability stack using otel, clickhouse, and grafana? I think this is a solid stack for logging & tracing, but I've been looking into it but haven't found any authoritative reference for this particular stack (unlike ELK & LGTM stack)
Re:Didn't realize it was this bad on Sunday February 23, 2025 @10:32PM (#43155586)
wow this is great! is it still under development? because I felt that it still lacking more feature (search/filter/subscribe/etc)

Ask HN: How to protect yourself from coding challenge scam?

These past months, I've seen several social media posts about people getting scammed during coding challenges or take-home tests. The cases usually involve cloning a GitHub repository that claims to contain the coding challenge and being asked to run the code, which actually contains malware or steals your data.Do you have any advice on how to protect ourselves from this? Are there any...

( Read More... | 4 comments | 7 points | on HN )

Show HN: Authduck – Playground Server for OpenID Connect Clients

https://github.com/azophy/authduck

Hey HNI'm currently living my dream, being paid to do what I love: programming, something I've been doing since middle school for over 15 years.In those years doing programming, I’ve always thought that OpenID Connect/OAuth for Authentication is an amazing idea that more programmers should be familiar with. Using (properly configured) SSO may be one of the best security investment made by...

( Read More... | no comments | 4 points | on HN )
Re:Ask HN: Who wants to be hired? (December 2024) on Monday December 02, 2024 @05:12PM (#42300961)

  Location: Indonesia
  Remote: Yes
  Willing to relocate: No
  Technologies: Go, Python, Typescript/Javascript, PHP, PostgreSQL, MySQL, Redis, Docker, Kubernetes, Linux, GraphQL, RestAPI, GCP, AWS, React, Vue
  Résumé: https://s.id/resume-abdurrahman
  Email: abdurrahman dot adianto dot id
Backend engineer with 8+ years of experience. Worked with Go, Python, Typescript, and PHP. Have experience with DevOps & Software Architecture roles. Currently looking for remote work outside of Indonesia
Re:Bitwarden is no longer free software on Sunday October 20, 2024 @11:00AM (#41895766)
havent used it yet, but Github's readme contain "feature" section that lists "YubiKey and Duo support"
Re:gRPC: 5 Years Later, Is It Still Worth It? on Tuesday September 03, 2024 @02:08PM (#41437479)
this is a very detailed review. thanks for sharing this
Re:Show HN: Visualize database schemas with a single query on Wednesday August 28, 2024 @12:54AM (#41376077)
actually both projects looks incredibly similar. perhaps both using the same UI framework or something?
Re:lldap: Light LDAP Implementation on Sunday July 14, 2024 @02:36AM (#40959269)
I'm curious about other's experience with LDAP's supposed succesor: SCIM (http://scim.cloud). based on REST, it does sound simpler to implement & integrate compared to LDAP. but is it actually better compared to LDAP?
Re:Learn OAuth by building a client with Node.js on Wednesday April 17, 2024 @03:17AM (#40061503)
the change from docker classic swarm into current docker swarm happened years ago. from what I can tell, usage-wise there are not much difference between the two.

however the sad thing is currently swarm is held by other company (mirantis) after being sold by docker inc. and the new company doesn't seem that invested in improving swarm. you could say its in life support now save for a few community contribution

more explanation by dockerswarm.rocks website: https://dockerswarm.rocks/swarm-or-kubernetes/

have anyone using this encounter any legal issues, as this project use AGPL?
Re:Ask HN: Who wants to be hired? (April 2024) on Monday April 01, 2024 @07:27PM (#39900602)

  Location: Indonesia
  Remote: Yes
  Willing to relocate: No
  Technologies: Go, Python, Typescript/Javascript, PHP, PostgreSQL, MySQL, Redis, Docker, Kubernetes, Linux, GraphQL, RestAPI, GCP, AWS, React, Vue
  Résumé: https://s.id/resume-abdurrahman
  Email: abdurrahman dot shofy at gmail dot com
Backend engineer with 7+ years of experience. Worked with Go, Python, Typescript, and PHP. Have experience with DevOps & Software Architecture roles. Currently looking for remote work outside of Indonesia
Re:Show HN: Turn your work into a multiplayer adventure on Monday April 01, 2024 @02:43AM (#39891453)
reminded me of Habitica.com
Re:Show HN: Tech Jobs on the Command Line on Thursday March 07, 2024 @01:38AM (#39625737)
would be interesting to turn this into something like `npx commandjobs` or `ssh commandjobs.com` so you wouldn't even need to install new software
Re:Ask HN: Who wants to be hired? (March 2024) on Friday March 01, 2024 @04:27PM (#39567005)

  Location: Indonesia
  Remote: Yes
  Willing to relocate: No
  Technologies: Python, Django, FastAPI, Typescript, NestJs, PHP, Laravel, PostgreSQL, MySQL, Redis, Docker, Kubernetes, Linux, GraphQL, RestAPI, GCP, AWS, React, Vue
  Résumé: https://s.id/resume-abdurrahman
  Email: abdurrahman dot shofy at gmail dot com
Backend engineer with 7+ years of experience. Mostly worked with Python, Typescript, and PHP. Have experience with DevOps & Software Architecture roles. Currently looking for remote work outside of Indonesia
Re:Ask HN: Who wants to be hired? (February 2024) on Friday February 02, 2024 @02:59PM (#39233424)

  Location: Indonesia
  Remote: Yes
  Willing to relocate: No
  Technologies: Python, Django, FastAPI, Typescript, NestJs, PHP, Laravel, PostgreSQL, MySQL, Redis, Docker, Kubernetes, Linux, GraphQL, RestAPI, GCP, AWS, React, Vue
  Résumé: https://tinyurl.com/resume-azophy
  Email: abdurrahman dot shofy at gmail dot com
Backend engineer with 7+ years of experience. Mostly worked with Python, Typescript, and PHP. Have experience with DevOps & Software Architecture roles. Currently looking for remote work outside of Indonesia
This is a hacky workaround for medium with limited capabilities, but I like it.

The proper way is of course to actually use format/tools/apps with builtin feature for such needs, as addressed in the beginning of the landing page. There is initial cost for adopting it, but if you actually doing it regularly (novelist/journalist/programmer) it would make more sense in the long run.

In the end its about tradeoff. If your medium is limited and you only need it for once in a while, this format is simple & clear. But for more frequent uses I think this format is costly to maintain compared to using specialized tools/apps.

Re:'Merchants of Complexity': Why 37Signals Abandoned the Cloud on Wednesday December 27, 2023 @06:30AM (#38781015)
as one of those "newer engineer", the thought of dealing with server racks and bundle of cables inside huge & gloomy server room actually scares me. I really appreciate those guys who actually knew how to setup those HWs, despite maybe clueless about latest shinier things. having the will to actually wrestle with messy to stuff to make the life of other engineer better is actually commandable. kudos to all those guys

Older »