Hacker News: allanbreyes

New comment by allanbreyes in "Infrastructure decisions I endorse or regret after 4 years at a startup (2024)"

allanbreyes — Fri, 20 Feb 2026 23:16:43 +0000

Martin Fowler called this (anti-)pattern an "integration database" and discouraged it since at least 2004[1]

[1]: https://martinfowler.com/bliki/IntegrationDatabase.html

New comment by allanbreyes in "Big data is dead (2023)"

allanbreyes — Mon, 27 May 2024 12:38:46 +0000

There are machines that can fit that and more: https://yourdatafitsinram.net/

I'm not advocating that this is generally a good or bad idea, or even economical, but it's possible.

The Stabilizer Problem

allanbreyes — Fri, 03 May 2024 02:11:11 +0000

Article URL: https://ryan.norbauer.com/journal/the-stabilizer-problem/

Comments URL: https://news.ycombinator.com/item?id=40243319

Points: 3

# Comments: 0

New comment by allanbreyes in "Show HN: Open-source alternative to HashiCorp/IBM Vault"

allanbreyes — Thu, 25 Apr 2024 12:03:24 +0000

For your home network, you might like Mozilla SOPS for secrets storage. You can keep your secrets in an encrypted file and have a container that loads those secrets and puts it into each service's environment variables. At least that way you aren't committing plaintext secrets to source or having them laying around in the clear, plus it's a breeze to manage and edit them.

PiVPN v4.6.0: The End

allanbreyes — Sat, 06 Apr 2024 15:47:02 +0000

Article URL: https://github.com/pivpn/pivpn/releases/tag/v4.6.0

Comments URL: https://news.ycombinator.com/item?id=39953207

Points: 192

# Comments: 81

New comment by allanbreyes in "Xzbot: Notes, honeypot, and exploit demo for the xz backdoor"

allanbreyes — Mon, 01 Apr 2024 20:24:39 +0000

Ugh, that this psyops sockpuppetry may have started or contributed to the maintainer's mental health issues seems like the most depressing part of all this. Maintaining OSS is hard enough.

Map-Territory Relation

allanbreyes — Sat, 06 Jan 2024 11:55:37 +0000

Article URL: https://en.wikipedia.org/wiki/Map%E2%80%93territory_relation

Comments URL: https://news.ycombinator.com/item?id=38890694

Points: 4

# Comments: 0

Nuclei v3

allanbreyes — Sat, 21 Oct 2023 12:28:51 +0000

Article URL: https://blog.projectdiscovery.io/nuclei-v3-featurefusion/

Comments URL: https://news.ycombinator.com/item?id=37966258

Points: 1

# Comments: 0

The Reusability Paradox (2002)

allanbreyes — Tue, 29 Aug 2023 13:28:30 +0000

Article URL: https://opencontent.org/docs/paradox.html

Comments URL: https://news.ycombinator.com/item?id=37307589

Points: 2

# Comments: 0

Liftosaur: Weightlifting Tracker App for Coders

allanbreyes — Sun, 20 Aug 2023 11:44:02 +0000

Article URL: https://github.com/astashov/liftosaur

Comments URL: https://news.ycombinator.com/item?id=37198208

Points: 3

# Comments: 0

New comment by allanbreyes in "Short session expiration does not help security"

allanbreyes — Fri, 18 Aug 2023 14:03:42 +0000

NIST dropped the password change recommendation a while back [1] but it still lingers on. The staying power and long tail of this deprecated advice is unfortunate, to say the least.

I don't personally agree that short sessions is bad advice, but Phil Venables has an article that you might enjoy, "Ceremonial Security and Cargo Cults" [2]

[1] https://pages.nist.gov/800-63-FAQ/#q-b05

[2] https://www.philvenables.com/post/ceremonial-security-and-ca...

New comment by allanbreyes in "Ask HN: Could you share your personal blog here?"

allanbreyes — Fri, 07 Jul 2023 13:21:54 +0000

https://allan.reyes.sh/

I usually have more plans to write things than actual time, but I do keep some articles/lists "evergreen" and they come up in conversations quite a bit:

- https://allan.reyes.sh/reading/ - Books I'm reading, plan to read, or have read (and lightly reviewed) - https://allan.reyes.sh/courses/ - 50+ online courses I took (and also lightly reviewed) - https://allan.reyes.sh/insights/ - Same theme, but for papers and articles

Learning How to Learn: Powerful mental tools to help you master tough subjects

allanbreyes — Thu, 09 Feb 2023 11:56:39 +0000

Article URL: https://www.coursera.org/learn/learning-how-to-learn

Comments URL: https://news.ycombinator.com/item?id=34722652

Points: 99

# Comments: 17

New comment by allanbreyes in "Ask HN: How do you test SQL?"

allanbreyes — Tue, 31 Jan 2023 22:57:49 +0000

This is a great way to test for backwards-incompatible changes if your fleet is running canaries or instances on different versions backed by a singleton database. You apply the migrations, checkout the app from the old version, and then re-run your test suite. Any failures are a reasonably high signal that some backwards-incompatible migration was introduced.

New comment by allanbreyes in "Ask HN: Any pain points worth building an MVP for?"

allanbreyes — Sat, 19 Nov 2022 14:11:59 +0000

Have you tried Nix[1]? The learning curve was a bit steep for me, but I think I finally started "getting" it and it absolutely solves this problem for me. Now I'm at the point where if I install Nix on any computer, VM, whatever, I can just pull in my configs via home manager[2] and everything Just Works. It's seriously one of the best package managers I've ever used, and I can't imagine going back to anything else. Windows support is only via WSL, so this might be a non-starter for you.

[1]: https://nixos.org/

[2]: https://github.com/nix-community/home-manager

Katana: A next-generation crawling and spidering framework

allanbreyes — Mon, 07 Nov 2022 15:51:26 +0000

Article URL: https://github.com/projectdiscovery/katana

Comments URL: https://news.ycombinator.com/item?id=33507381

Points: 2

# Comments: 0

New comment by allanbreyes in "New user guide: How to organize your qubes"

allanbreyes — Sun, 30 Oct 2022 18:19:40 +0000

The secure copy and paste feature always seemed to address the wrong threat model or use case for me. Sure, it's great that it keeps things isolated and compartmentalized across VMs, but it doesn't help much if you accidentally paste it into a phishing site. I wish there was just better browser integration for it, so you could have a password manager that could only access secrets on-demand + also automatically verify the domain or site you're trying to enter credentials into.

Anyway, still very cool stuff. I used Qubes for a few years before I made the mistake of purchasing a laptop that wasn't fully supported, but I often think about picking it back up or trying to install it again.

New comment by allanbreyes in "Master’s Degree in Computer Science"

allanbreyes — Fri, 06 May 2022 03:00:46 +0000

Check out https://lucylabs.gatech.edu! David Joyner started it to help foster this opportunity for students and alumni, alike.

UNC3524: Eye Spy on Your Email

allanbreyes — Wed, 04 May 2022 14:23:38 +0000

Article URL: https://www.mandiant.com/resources/unc3524-eye-spy-email

Comments URL: https://news.ycombinator.com/item?id=31260857

Points: 2

# Comments: 0

New comment by allanbreyes in "Steam to Chrome OS"

allanbreyes — Mon, 21 Mar 2022 01:32:43 +0000

You can do remote play on a Chromebook right now with Moonlight! Works great (for me). Some other alternatives include Parsec and Rainway, and probably a few others I'm missing.