News for hackers. Stuff that matters.

limonkufu

Re:Git 3.0's upcoming SHA-256 default will be a costly mistake on Thursday October 01, 2026 @07:41PM (#49928286)
It seems people are missing the point: it's not even the submodule incompatibility that's going to become an issue majorly (like python2 --> python3 but worse), the main issue is the loss of traceability for repos that changes in place (which I assume many will do). Imagine what will happen to these:

- SLSA and Provenance or SBOM data in the supply chain security that uses commit hash. All the previous images are now pointing to a non-existing commit

- All the documentation and tooling as the article calls out

- All your traceability links from your project tool to your git repo, they will lose all the past data as it will be dead links

So I hope there IS NOT a migration path for in-place replacement!

Ask HN: How do you keep on top of all of the AI tools and new changes?

I am feeling a lot of FOMO recently as I've found myself spending almost all my free time to read, learn and try on all these AI changes and watch 3-4 youtube videos to get quick updates.It's not just the AI models anymore as well as. On top of that, there's a lot of AI agentic/agentless tools (VSCode extensions, VSCode forks, new IDEs), CLI tools, web pages (looking at you notebookLM) that all...

( Read More... | 13 comments | 4 points | on HN )

Ask HN: How does your terminal welcome screen look like?

I am setting up a new machine and I wanted to change my welcome screen so I wondered how do other peoples look like and how they achieved it.To start I was outputting a Darth Vader ASCII Art saying "What is thy bidding, my master?"I have found these to be nice as well:- https://wiki.archlinux.org/title/Fortune that outputs random quotes such as"Time is an illusion. Lunchtime doubly so." --...

( Read More... | 1 comment | on HN )
Re:Software Engineering at Google on Monday August 14, 2023 @05:23PM (#37126987)
This seems very simiilar to Gitlab's MR. Does anyone know all of them to highlight their strengths and drawbacks?
Re: on Thursday July 27, 2023 @05:18AM (#36890951)
As usual with status pages, the status page is not corrected yet: https://status.slack.com/ but it is down according to downdetector
Re:Why I Prefer Makefiles over Package.json Scripts on Monday March 14, 2022 @01:29PM (#30675289)
We are using make targets to automate ci/cd, local dev and a lot of other things by adding a set of easy to extend, customise template makefiles as submodules.

The main advantage for us is it's same everywhere and it's agnostic to underlying technologies. (we are only supporting unix based environments and have guidelines to setup gnumake in macos). By using this way, we ensure that the general SDLC is same across different repositories and underlying tooling can change anytime without inducing a lot of refactoring

We are also using make targets to document themselves. How to use, what are other targets, variables you need to define etc. This makes it a powerful CLI app for us that can run and support many things.

For anyone interested: https://gitlab.com/ska-telescope/sdi/ska-cicd-makefile and the similar parsing method for self documenting makefiles: https://gitlab.com/ska-telescope/sdi/ska-cicd-makefile/-/blo.... We didn't know about magicmake that's linked here that does the similar thing

Re:Ask HN: What do you do with your Raspberry Pi? on Monday June 24, 2019 @03:21PM (#20267399)
Most of the 3d printer firmwares can detect heat spikes and stop heating the extruder to prevent fire and you can control your printer's power with rpi with a simple relay circuit. You can also setup a bot with camera to alert you via mail/message/telegram if there is a fire risk. These are the common precautions I have seen people take.
Re:GitHub: October 21 Incident Report on Monday October 22, 2018 @03:30PM (#18277584)
I am currently leading the on premise hosting of a Gitlab instance and I can say this with ease: I have been spending 1 day of each week for ops work. Let it be helping people, database adjustments, admin stuff, hardware checks, etc.
Re:Tiddlywiki – A non-linear personal web notebook on Monday October 01, 2018 @02:20AM (#18110396)
Also you can just use github and some macros to auto commit changes on save. This way you can edit from mobile and desktop and you will have index and history capabilities
There is an extension that does exactly that: https://www.gettoby.com/
Re:Apple fans returning new MacBook Pros with Core i9 on Saturday July 21, 2018 @01:42PM (#17582866)
Surely, Apple saw these issues in their internal tests. I don't understand how Apple (or any other company that does something similar to this) decides to release the product knowing all of the issues beforehand.
Re:Riot Games Approach to Anti-Cheat on Saturday July 21, 2018 @01:28PM (#17582788)
I wish to see how they dealt with the overhead because of all the encryption, checks etc. performance-wise? I know LOL is quite an old game so they mastered these points. I am especially curious because lately I play PUBG and when PUBG does something about cheat it effectively kills performance.

Ask HN: What is your default privacy settings after GDPR?

What steps do you take to secure your privacy while you are browsing internet? What do you allow for websites to use after gdpr since they're mostly asking permissions now?Are you going full mode with tor browser, with extensions etc. to give little as possible or are you trusting some sites and share your info/cookie with only them?I thought of this question because I was always allowing...

( Read More... | no comments | 2 points | on HN )
As you've said in today's world it is difficult to operate a 'free' web-service without ads and ad-tracking, and I always thought since I am using their service I could give my data for ads since their business depends on it. But after thorough research about tracking I agree with you that these decisions must be informed and if this is not acceptable, either I should be denied service or the business model should be changed (after enough users like you and now I chose not to be tracked, I believe it will change)
I occasionally click the ads when I am shopping online, by 'could' I meant just seeing (not clicking) another options/alternatives of the same type of product helps.
I really don't understand why this is a bad practice. I know it is horrifying to give your web history to total stranger for god knows what purposes they will use. But going extra mile to implement privacy so that no site/some sites could talk behind your back (looking at you firefox multi account containers) seems like an equally horrific act that cripples websites not ad providers.

When I used these kind of precautions I saw that analytics got no access and I believe most of the site-owners need these information to operate/develop their sites and it seems like a lot of work to implement those in-site tracking features yourself. Or I started to see random ads all over the place like early 2000s, I do enjoy targeted ads because when I am looking for something those ads could help a lot, only if there is a way to stop them after I made a purchase though.

So, if anyone could simply explain why this is SO bad or send me to correct discussion (I do believe these matters discussed previously a lot).