News for hackers. Stuff that matters.

feliksik

Re:Ask HN: What tone to use in code review suggestions? on Monday June 27, 2022 @11:35AM (#31896039)
I have been looking for the tone too. Tone is important for techies, too. I just think it's not the biggest issue.

I think the real problem is the we lack a framework that makes explicit:

* What is the goal of a review, according to the team? Spotting bugs? Prevent security flaws? Guarding the architecture? Making suggestions to grow better as programmers? These goals partially overlap, but are different. Are you aligned, as a team?

* Encode your priority in each comment. We could use some semantic prefix for a comment that categorizes it as, in increasing order: 1.suggestion to share views and alternative approaches, do as you please / 2. I think another approach would be better, suggest you use it / 3. I think it's very important to change something, let's discuss / 4. I'm not willing to approve or compromise, but feel free to get approval from someone else / 5. If anyone allows this to be merge, I will escalate.

Then still we should use good tone, but it's more explicit what to expect, now. Open communication is key to a psychologically safe environment. But I'm Dutch :-)

One way is achieving low latency, which is technically super hard, as others point out. Keep in mind that another way is selecting less latency sensitive music, "slower" music with longer held tones. But that's a style change.
One of the best engineering talks is about this notion that simple!=easy : https://www.infoq.com/presentations/Simple-Made-Easy

This is surprisingly often not understood, even by people I showed the video. And I am not sure why. But I do think it's necessary in out field to start understanding this much more deeply, especially for senior engineers.

Re:Ask HN: Best alternative to Gmail? on Tuesday September 25, 2018 @01:55AM (#18063930)
For the privacy savvy:

https://www.startmail.com/en/

Their servers are in Europe, and they cannot decrypt mail themselves. It's decrypted in your browser.

  10 GB personal vault
  IMAP support
  10 custom aliases
  Unlimited disposable aliases
  PGP email encryption
I have never tried it though.
Re:Suffering-oriented programming (2012) on Saturday September 08, 2018 @01:41AM (#17939600)
Did those happen to be Go developers? Just curious.

Interesting language, but some peculiar fanboys.

Re:Ask HN: Where to store sensitive keys? on Thursday April 14, 2016 @06:29AM (#11495480)
Hashicorp Vault is simple to run and has a HTTP api and cli.

But you want as little as possible hassle of course. I didn't require high availability, but liked coding to the vault api so i could go there later. I wanted to store and administer secrets in encrypted yaml, which i could then batch load into Hashicorp Vault. I use Ansible Vault to manage the encrypted yaml file with a passphrase.

To this end I created Safe, a tool to run Hashicorp Vault and load secrets from yaml in a single command. See https://gitlab.com/nerdalize/safe. It requires Docker, the bash script (and Ansible Vault or some other file encryption util).