News for hackers. Stuff that matters.

djm_

Re:Anthropic acquires Stainless on Monday May 18, 2026 @01:39PM (#48182770)
OpenAI is not Anthropic, the original comment is valid.

Anthropic have bought out a tool their competitor used too, they even have an OpenAI case study still on the Stainless website.

Re:Yes, I will judge you for using AI on Thursday June 26, 2025 @02:47AM (#44384827)
You could do with using an LLM to make your site work on mobile.
Re:Tell HN: Heroku crashes for new deploys on Tuesday May 30, 2023 @04:16PM (#36130102)
Same over here, we're down due to a deploy. Heroku Status green as grass.

Edit: Good Twitter thread with some support replies [1]

https://twitter.com/nunotomas/status/1663642609527431168

This is so important if you want to avoid incredibly gnarly race conditions. In particular for us: jobs being run even before the transaction has been fully committed to the database.

We utilise a decorator for our job addition to external queues, such that the function that does the addition gets attached to Django's "on transaction commit" signal and thus don't actually get run until the outer database transaction for that request has been committed.

Re:Building GitHub with Ruby on Rails on Friday April 07, 2023 @07:47PM (#35488672)
Dependabot is based on releases from the various package repositories; running of main is pre-release - hence they’re probably using GitHub Actions to pin their Gemfile-defined Rails version to a commit hash.
Re:What Is the Most Minimal UK Address Possible? on Thursday March 02, 2023 @09:12AM (#34995846)
Correct. Which means if you’re taking deliveries it’s probably better to have a house number as you get validated more frequently.
Re:What Is the Most Minimal UK Address Possible? on Thursday March 02, 2023 @08:53AM (#34995605)
I remember working with SagePay as a payment provider back in 2008 (before we knew of Stripe!) and finding it interesting that card address validation was only done on the numbers in a full address.

For example, from "20 Windsor Road, London, SE1 6JH" it would extract 2016 and validate that against the banks details.

I thought that was quite a smart way as UK addresses can come in all forms, shapes and sizes (as the post shows) – but the minimal bits required to be correct are indeed the numbers as all postcodes have them and an incorrect number would mean a incorrect postcode.

Edit: the funny bit was that they made you work this out and send it along with the request rather than just handling it internally :)

Fantastic write-up.

This seems to me like a combination of multiple foot-guns, first being the Docker one - followed by the fact Mongo was not configured to authenticate the connection.

Heroku by default run PostgreSQL open to the world (which is problematic for other reasons) but they get away with it by relying on PG's decent authentication.

My default is to prefer to build systems with multiple layers of security, such that there is no reliance on a single issue like this.

Yes! And it’s actually not either/or for us, we still use Docker Compose to run our services (Redis, PostgreSQL, etc) that don’t require file syncing with the host. It’s good at that.
As a Mac-using Python shop, we had serious file-sync performance issues when mounting our codebase inside a container via docker-compose. Nix completely freed us from them and allowed us to develop with Python natively speedily and without all the serious faff & headaches that usually comes with getting reproducible builds on everyone machines.

If you'd like to know more, I spoke at DjangoCon Europe late last year [1] on our setup; it's still paying serious dividends for us!

Happy to answer more.

[1] https://www.youtube.com/watch?v=Mx3yiE_CJOY

This looks great!

If you're building CLI tooling in Elixir, you may also be interested in TableRex, my ASCII-table drawing library. [1]

[1] https://github.com/djm/table_rex

Re:My students cheated... a lot on Sunday May 29, 2022 @07:11AM (#31548192)
Did you miss the whole pandemic bit or are you too “disconnected from reality”?
Re:CORS is not meant to secure an API endpoint on Sunday February 13, 2022 @06:29AM (#30320993)
From experience, I can tell you that many people simply refer to this entire domain as CORS despite that S standing for Sharing. The Same Origin Policy is treated verbally more like the default state of CORS in some circles.

It is very confusing and I’m not entirely sure how it ended up like that.

Re:Offline First on Wednesday September 29, 2021 @03:49AM (#28691263)
There is a lot of movement in the offline-first/multiplayer space at the moment, after apps like Linear [1] & Figma [2] have pushed the paradigms.

[1]: https://linear.app [2]: https://figma.com

Some other projects which will help you implement the pattern that are worth checking out:

Replicache [3] - real-time sync for any backend. Works via simple push and pull end points and is built by a small team of 3 devs with decent browser xp (Greasemonkey, Chrome, etc)

Logux [4] - a client/server framework for collaborative apps. From Evil Martians, well known for: postcss, autoprefixer, browserlist etc.

[3]: https://replicache.dev [4]: https://logux.io

RoomService also used to be in the space but recently left it to pivot to something else.

The largest problem you’ll end up solving is conflict resolution so having a good understanding of the tradeoffs involved with your (or the underlying) implementation is key.

Re:Gleam 0.15 on Thursday May 06, 2021 @07:16AM (#27061552)
A solid set of changes and incredibly well presented for digesting what changed and why - congrats on the release!
Re:Building DigitalOcean's API Gateway on Saturday January 16, 2021 @06:33AM (#25801616)
The post is about how they built their own internal API Gateway; it's not a product Digital Ocean offer (yet?).
Re:On Repl-Driven Programming on Sunday January 03, 2021 @05:30AM (#25620935)
Yes, running pytest with the --pdb flag will drop you into the debugger on an unhandled exception which gets a comparable workflow but it's not quite the same as, a) writing tests to file first is not repl-driven development, and b) you generally have to think about doing it first.

In an ideal repl-driven world you could write the test in the repl entirely and commit it to disk once you're ready.

Re:CRDTs are the future on Monday September 28, 2020 @05:20PM (#24621344)
Followed you in case you ever do! I'm a big fan of Jackbox and I'd love to read about where CRDTs fit in your stack.
Re:An update on our security incident on Saturday July 18, 2020 @05:11AM (#23880127)
Generally if a service was to keep them it would be to keep a history of passwords you may not use ever again. They wouldn't be available for use in authentication.

Obviously this is very implementation specific though, and can't be considered a rule.

Re:Cut and paste your surroundings using AR on Monday May 04, 2020 @05:05AM (#23065880)
Augmented Reality. Adding copy/paste as a feature to reality definitely falls under that banner.
Re:Phoenix LiveDashboard on Friday April 17, 2020 @03:23AM (#22896931)
>latest hottest tech rarely make sense

I would agree! But I'd also say that I believe Elixir has moved past this part of the curve and is seeing serious adoption amongst companies.

I first got interested in 2014 and back then it was definitely still early days. 6 years later and I'm still yet to regret the decision to invest time Elixir and BEAM ecosystem.

Re-read the first sentence.
Re:Serverless: slower and more expensive on Monday September 23, 2019 @06:01AM (#21047410)
That screenshot likely shows a warm startup; while they've improved recently, from personal experience .NET has the worst cold startup times of all the officially supported languages on Lambda by quite a large margin.

A source which supports that. [1]

[1]: https://medium.com/thundra/the-fundamental-problem-solving-n...

I'd imagine it'll be handled the same way as Actions handles it now: via Secrets [1].

[1] https://developer.github.com/actions/managing-workflows/stor...

Re:How Dark Deploys Code in 50ms on Tuesday July 09, 2019 @04:18PM (#20396149)
Other languages have large ecosystems of packages that allow users to do common tasks quickly. I can imagine not having something similar would be a sticking point to adoption; how does Dark picture the Dark ecosystem working and competing with other already well-entrenched ecosystems? Thanks!
> A much smaller (5-10MB) quota with no time limit

Eeesh. Be careful taking advice from someone who has no intention of paying now. You're doing a great job Takuya, keep on trucking.

Re:Would you still pick Elixir in 2019? on Sunday January 06, 2019 @10:01AM (#18838623)
>Anyone know whats going on there?

Yup, many things.

It's worth reading this very long thread about exactly this, from 2016. Look for Sasa Juric and Chris McCord's comments in particular. [1]

tl;dr benchmarks are hard, not all benchmarks are implemented well, Elixir folks haven't heard back from Tech Empower re: details of errors rates etc. It's an unfair analysis, and not just for Elixir.

[1] https://elixirforum.com/t/techempower-benchmarks/171/44

Re:Writing copy for landing pages on Wednesday December 19, 2018 @05:12AM (#18714601)
It's an Atlas Guide written by Joanna Wiebe who is not a Stripe employee.

Even if she was, companies are companies - not individuals.

Older »