News for hackers. Stuff that matters.

makkes

Re:Why Janet? (2023) on Tuesday June 02, 2026 @09:37AM (#48370128)
Web of trust has been a miserable failure because of the GPG's horrible UX and high entry barrier. It's dead, Jim.
Re:Benchmarking Postgres 17 vs. 18 on Friday October 24, 2025 @09:15AM (#45694290)
Either do a proper upgrade with backup/restore or use `PGDATA`[1] and `pg_upgrade`[2].

[1] https://hub.docker.com/_/postgres#pgdata

[2] https://www.postgresql.org/docs/current/upgrading.html#UPGRA...

Re:Benchmarking Postgres 17 vs. 18 on Friday October 24, 2025 @09:10AM (#45694250)
Comparing monthly cloud cost with one-time hardware purchasing cost completely dismisses the latter's long-time cost like people, replacement parts, power, housing, accessories. While I do believe you can run your own hardware much cheaper, there's a lot to consider before making the decision.
Re:Entire Linux Network stack diagram (2024) on Monday October 20, 2025 @03:47AM (#45640961)
Click on "Download" below the embedded PDF viewer and you'll get the PDF.
Re:A modern approach to preventing CSRF in Go on Wednesday October 15, 2025 @03:57AM (#45589354)
The code he provides doesn't compile and needs to be changed like so:

  --- main_before.go      2025-10-15 09:56:16.467115934 +0200
  +++ main.go     2025-10-15 09:52:14.798134654 +0200
  @@ -13,8 +13,10 @@
  
          slog.Info("starting server on :4000")
  
  +       csrfProt := http.NewCrossOriginProtection()
  +
          // Wrap the mux with the http.NewCrossOriginProtection middleware.
  -       err := http.ListenAndServe(":4000", http.NewCrossOriginProtection(mux))
  +       err := http.ListenAndServe(":4000", csrfProt.Handler(mux))
          if err != nil {
                  slog.Error(err.Error())
                  os.Exit(1)
"the model has a 2048 tokens limit. This includes the reference text/phones as well as the reference and generation audio tokens."

https://github.com/neuphonic/neutts-air/issues/15#issuecomme...

So "no rate limits", while true, is kind of setting different expectations.

Re:Themis (European Reusable Rocket) is assembled on launch pad on Tuesday September 23, 2025 @05:49AM (#45344847)
"If everybody would just use Windows, companies and developers wouldn't sink money and effort into the development of operating systems."
Re:Buypass Discontinues Issuance of TLS/SSL Certificates on Monday August 25, 2025 @05:44AM (#45012055)
From what I can see on the CA/Browser Forum's website (https://cabforum.org/about/membership/members/), there is enough diversity in the forum to represent the Web community as a whole. Trade embargoes issued by a single country would likely not be represented by enough CA/B members to be pushed through the Forum.

I personally sleep much better knowing that e.g. all major browser vendors cooperate on the CA/B (and elsewhere, e.g. the IETF, W3C, ECMA) instead of the biggest one dictating the rules (which, to be fair, happens to a certain degree, e.g. with Chrome leading the way for certain technologies).

That's why ENTSO-E has just completed a software vendor interoperability workshop. :-) And import/export/validation worked just fine for all participants.
Semantic Web technology (RDF, RDFS, OWL, SHACL) is widely used in the European electricity industry to exchange grid models: https://www.entsoe.eu/data/cim/cim-for-grid-models-exchange/
Re:Russ Cox is stepping down as the Go tech lead on Friday August 02, 2024 @08:42AM (#41138375)
s/syntax/API/

It's not that hard to understand what OP means.

Re:Weaveworks Is Shutting Down on Tuesday February 06, 2024 @01:54AM (#39271540)
The acquisition talked about in the original post wasn't much more than a life-saver for the company so in that regard you could call it life-changing in that many of the fine folks I worked with wouldn't have lost their job.

It would have been very very far from what you usually call an exit, though. Nobody would have cashed out, except maybe some of the VCs and I'm not sure if they'd have called it a successful exit in terms of financial win.

I don't think they would be running the Mozilla VPN client on those servers, though.
I agree on the tradeoffs you have to make. The main cost driver here was storage and traffic, though.
Re:Using flux to automate simple tasks on Thursday October 13, 2022 @11:46PM (#33199421)
Flux 2 has been there for around 2 years now. The blog post makes use of it, too. Flux 1 will be archived in 2 weeks: https://fluxcd.io/flux/migration/timetable/
Re:Show HN: Gitlab CLI – a command line interface for Gitlab on Tuesday February 05, 2019 @05:35AM (#19084148)
Author here: I would be very grateful if some of you MacOS users would help me provide MacOS binaries: https://github.com/makkes/gitlab-cli/issues/1
Re:Htop explained on Friday December 02, 2016 @10:09AM (#13089119)
> The second number is how much of that time the machine has spent idle, in seconds

Actually, the second number is the sum of the number of seconds that all cores on the machine have spent idle, so that number may be higher than the first one. Source: https://access.redhat.com/documentation/en-US/Red_Hat_Enterp...

Re:OAuth Has Ruined Everything on Friday October 23, 2015 @03:55AM (#10437374)
* Do access token expire and need to be refreshed at all? => https://tools.ietf.org/html/rfc6749#section-4.2.2

* Are scopes used? => https://tools.ietf.org/html/rfc6749#section-3.3

* Appropriate header values? => https://tools.ietf.org/html/rfc6749#section-7 as well as https://tools.ietf.org/html/rfc6750

* Can redirect URI be overrided in auth request (my personal favorite)? Sth. like https://tools.ietf.org/html/rfc6749#section-10.6 ?

Don't forget selfoss, still in its infancy but looks very promising: http://selfoss.aditu.de/
Closed-source security software isn't worth very much in my eyes since you can never be sure that it does what the vendor says it does.
Re:Google Dublin Employees at Street View on Friday August 31, 2012 @09:11AM (#4459506)
Hamburg, Germany: http://goo.gl/maps/tEXkp