Hacker News: Arbortheus

New comment by Arbortheus in "Nobody knows what a used GPU cluster is worth"

Arbortheus — Wed, 22 Jul 2026 22:16:41 +0000

I feel like this is not as important as people make it out to be.

New comment by Arbortheus in "GTA 6 Developers Unionize"

Arbortheus — Sat, 30 May 2026 06:38:21 +0000

I remember it was very common when the UK was in the EU to have employers get you to opt-out from the European Time Directive.

New comment by Arbortheus in "Incident with Pull Requests, Issues, Git Operations and API Requests"

Arbortheus — Wed, 27 May 2026 12:23:29 +0000

Fed up and bored of this

New comment by Arbortheus in "GitHub Compromised"

Arbortheus — Wed, 20 May 2026 07:10:21 +0000

That is not unheard of at a large software company.

New comment by Arbortheus in "GitHub is investigating unauthorized access to their internal repositories"

Arbortheus — Wed, 20 May 2026 07:07:57 +0000

Repos should not contain customer data.

New comment by Arbortheus in "GitHub Compromised"

Arbortheus — Wed, 20 May 2026 07:07:17 +0000

Sounds like a great way to have outages because you can’t tell what legacy features are still in use or not. Or even worse, not being able to ever refactor or clean up because you have no means to discover your dependencies.

New comment by Arbortheus in "In the UK, EVs are cheaper than petrol cars, thanks to Chinese competition"

Arbortheus — Wed, 22 Apr 2026 06:13:56 +0000

Did lingscars get rid of their crazy website?

New comment by Arbortheus in "GitHub Stacked PRs"

Arbortheus — Mon, 13 Apr 2026 20:51:31 +0000

Microservices without a monorepo is hell

New comment by Arbortheus in "Londoners are sick of viral videos telling lies about their city"

Arbortheus — Mon, 06 Apr 2026 19:41:28 +0000

I’m fed up of Americans telling me London is full of knife crime when the stats say that it is much worse in the USA.

The situation is even improving, UK homicide rates are at the lowest level in 50 years [1].

Not to mention that the USA has an entire category of gun crime which is a non-issue in the UK.

I swear to you, London is not an unsafe city.

[1] https://www.bbc.co.uk/news/articles/cgk86rr0vxyo

New comment by Arbortheus in "Decisions that eroded trust in Azure – by a former Azure Core engineer"

Arbortheus — Fri, 03 Apr 2026 08:35:26 +0000

I use GCP, but it also has the idea of a metadata server. When you use a Google Cloud library in your server code like PubSub or Firestore or GCS or BigQuery, it is automatically authenticated as the service account you assigned to that VM (or K8S deployment).

This is because the metadata server provides an access token for the service account you assigned. Internally, those client libraries automatically retrieve the access token and therefore auth to those services.

New comment by Arbortheus in "Google releases Gemma 4 open models"

Arbortheus — Thu, 02 Apr 2026 19:02:02 +0000

What’s it like to work on the frontier of AI model creation? What do you do in your typical day?

I’ve been really enjoying using frontier LLMs in my work, but really have no idea what goes into making one.

New comment by Arbortheus in "macOS code injection for fun and no profit (2024)"

Arbortheus — Sun, 08 Mar 2026 15:33:40 +0000

Not game dev related, but I program in both Go and Python, and there really is no difference in my feedback loop / iteration because Go builds are so fast and cache unchanged parts.

New comment by Arbortheus in "Another GitHub outage in the same day"

Arbortheus — Tue, 10 Feb 2026 08:50:53 +0000

It seems to be correct now

New comment by Arbortheus in "Why E cores make Apple silicon fast"

Arbortheus — Sun, 08 Feb 2026 15:32:51 +0000

I also have to run Defender on my MacBook at work.

If you have access to the Defender settings, I found it to be much better after setting an exclusion for the folder that you clone your git repositories to. You can also set exclusions for the git binary and your IDE.

New comment by Arbortheus in "GitHub Actions is slowly killing engineering teams"

Arbortheus — Fri, 06 Feb 2026 11:09:14 +0000

There are two solutions GitHub Actions people will tell you about. Both are fundamentally flawed because GitHub Actions Has a Package Manager, and It Might Be the Worst [1].

One thing people will say is to pin the commit SHA, so don't do "uses: randomAuthor/some-normal-action@v1", instead do "uses: randomAuthor/some-normal-action@e20fd1d81c3f403df57f5f06e2aa9653a6a60763". Alternatively, just fork the action into your own GitHub account and import that instead.

However, neither of these "solutions" work, because they do not pin the transitive dependencies.

Suppose I pin the action at a SHA or fork it, but that action still imports "tj-actions/changed-files". In that case, you would have still been pwned in the "tj-actions/changed-files" incident [2].

The only way to be sure is to manually traverse the dependency hierarchy, forking each action as you go down the "tree" and updating every action to only depend on code you control.

In other package managers, this is solved with a lockfile - go.sum, yarn.lock, ...

[1] https://nesbitt.io/2025/12/06/github-actions-package-manager...

[2] https://unit42.paloaltonetworks.com/github-actions-supply-ch...

New comment by Arbortheus in "Treasures found on HS2 route"

Arbortheus — Mon, 02 Feb 2026 19:13:27 +0000

London has loads of exceptional museums that are completely free. If you ever have the chance to visit the city, do try to take advantage!

New comment by Arbortheus in "In praise of –dry-run"

Arbortheus — Sun, 01 Feb 2026 12:46:34 +0000

I prefer “—really-do”, so the default behaviour of the tool is to do nothing. That’s more fault tolerant for the scenario you forget to add “—dry-run”.

New comment by Arbortheus in "The Vietnam government has banned rooted phones from using any banking app"

Arbortheus — Fri, 09 Jan 2026 17:10:41 +0000

Do those same banks have websites that you can access from a computer with root access? Most likely, yes.

New comment by Arbortheus in "Cloudflare CEO on the Italy fines"

Arbortheus — Fri, 09 Jan 2026 17:07:34 +0000

I agree with the CEO, while also feeling a bit nauseous at the MAGA Musk suck-up at the end - I suppose this is the game you have to play with this current administration.

New comment by Arbortheus in "HTTP Strict Transport Security (HSTS)"

Arbortheus — Tue, 30 Dec 2025 22:32:05 +0000

It would be nice. Our security team started complaining that we serve a 301 redirect on port 80 for our website (just like 99.9% of websites do... sigh) and wanted port 80 shut down.

To appease them, I switched the redirect off in dev/staging, and soon enough even devs are having trouble accessing the site because they type 'website.com' and that can't resolve, only 'https://website.com' can.

(And before you say it, yes we use HSTS, but I presume there were some scenarios where that wasn't already cached/hit).