<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: binwiederhier</title><link>https://news.ycombinator.com/user?id=binwiederhier</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Fri, 11 Sep 2026 22:58:53 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=binwiederhier" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by binwiederhier in "Ntfy – open-source Push to Mobile"]]></title><description><![CDATA[
<p>Go to ntfy.sh/settings and enable background notifications. Or do it like I do it an pin the tab and just leave it open.<p>Unless you have a pro account, notifications are only cached on the server for 12h so that's why you may miss old notifications.</p>
]]></description><pubDate>Sat, 15 Aug 2026 15:07:26 +0000</pubDate><link>https://news.ycombinator.com/item?id=49311221</link><dc:creator>binwiederhier</dc:creator><comments>https://news.ycombinator.com/item?id=49311221</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49311221</guid></item><item><title><![CDATA[New comment by binwiederhier in "Ntfy – open-source Push to Mobile"]]></title><description><![CDATA[
<p>If you use ntfy.sh and don't use instant delivery, ntfy uses Google's FCM for delivery, which is what everyone else does. It doesn't require a foreground service and has no battery impact.<p>ntfy offers you additional options with instant delivery or the selfhostable server. That requires a server connection and does impact battery a little. On my phone it doesn't show up in the list it's so low, but others have reported more consumption</p>
]]></description><pubDate>Sat, 15 Aug 2026 11:42:57 +0000</pubDate><link>https://news.ycombinator.com/item?id=49309763</link><dc:creator>binwiederhier</dc:creator><comments>https://news.ycombinator.com/item?id=49309763</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49309763</guid></item><item><title><![CDATA[New comment by binwiederhier in "Ntfy – open-source Push to Mobile"]]></title><description><![CDATA[
<p>I'm the maintainer of ntfy. Happy to answer questions. Sorry that I'm late to the party :-)</p>
]]></description><pubDate>Fri, 14 Aug 2026 20:21:30 +0000</pubDate><link>https://news.ycombinator.com/item?id=49304076</link><dc:creator>binwiederhier</dc:creator><comments>https://news.ycombinator.com/item?id=49304076</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49304076</guid></item><item><title><![CDATA[New comment by binwiederhier in "Ask HN: What are you working on? (June 2026)"]]></title><description><![CDATA[
<p>4 years later and I'm still working on ntfy. Trying to make push notifications easy as pie. I would have never thought that it would blow up like this. It's still a lot of fun, and I've learned a lot. Thanks everyone for your support and for your amazing ideas and contributions. Open source is awesome. HN ist awesome. <a href="https://github.com/binwiederhier/ntfy" rel="nofollow">https://github.com/binwiederhier/ntfy</a></p>
]]></description><pubDate>Sun, 14 Jun 2026 21:54:26 +0000</pubDate><link>https://news.ycombinator.com/item?id=48533216</link><dc:creator>binwiederhier</dc:creator><comments>https://news.ycombinator.com/item?id=48533216</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48533216</guid></item><item><title><![CDATA[New comment by binwiederhier in "Show HN: A context-aware permission guard for Claude Code"]]></title><description><![CDATA[
<p>Thanks.</p>
]]></description><pubDate>Thu, 12 Mar 2026 15:23:24 +0000</pubDate><link>https://news.ycombinator.com/item?id=47352070</link><dc:creator>binwiederhier</dc:creator><comments>https://news.ycombinator.com/item?id=47352070</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47352070</guid></item><item><title><![CDATA[New comment by binwiederhier in "Show HN: A context-aware permission guard for Claude Code"]]></title><description><![CDATA[
<p>I love that you love it. That's why I do it. :-)</p>
]]></description><pubDate>Thu, 12 Mar 2026 15:17:09 +0000</pubDate><link>https://news.ycombinator.com/item?id=47351924</link><dc:creator>binwiederhier</dc:creator><comments>https://news.ycombinator.com/item?id=47351924</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47351924</guid></item><item><title><![CDATA[New comment by binwiederhier in "Show HN: A context-aware permission guard for Claude Code"]]></title><description><![CDATA[
<p>My co-worker figured out a way to run the GitHub CLI with read-only keys restricted to specific repos. I need to do that still.</p>
]]></description><pubDate>Thu, 12 Mar 2026 15:16:28 +0000</pubDate><link>https://news.ycombinator.com/item?id=47351912</link><dc:creator>binwiederhier</dc:creator><comments>https://news.ycombinator.com/item?id=47351912</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47351912</guid></item><item><title><![CDATA[New comment by binwiederhier in "Show HN: A context-aware permission guard for Claude Code"]]></title><description><![CDATA[
<p>I don't want to isolate the container from the Internet :-) I understand that this is not the safest possible way (exfiltrating is still possible, but I mostly work on open source anyway, so that's not an issue), but I think the convenience wins here.<p>That said, if you have suggestions that are not super inconvenient, please let me know.<p>My main goal with this was to make sure it cannot go wild on my own system.</p>
]]></description><pubDate>Thu, 12 Mar 2026 15:15:03 +0000</pubDate><link>https://news.ycombinator.com/item?id=47351884</link><dc:creator>binwiederhier</dc:creator><comments>https://news.ycombinator.com/item?id=47351884</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47351884</guid></item><item><title><![CDATA[New comment by binwiederhier in "Show HN: A context-aware permission guard for Claude Code"]]></title><description><![CDATA[
<p>I love how everyone is trying to solve the same problems, and how different the solutions are.<p>I made this little Dockerfile and script that lets me run Claude in a Docker container. It only has access to the workspace that I'm in, as well as the GitHub and JIRA CLI tool. It can do whatever it wants in the workspace (it's in git and backed up), so I can run it with --dangerously-skip-permissions. It works well for me. I bet there are better ways, and I bet it's not as safe as it could be. I'd love to learn about other ways that people do this.<p><a href="https://github.com/binwiederhier/sandclaude" rel="nofollow">https://github.com/binwiederhier/sandclaude</a></p>
]]></description><pubDate>Thu, 12 Mar 2026 01:32:29 +0000</pubDate><link>https://news.ycombinator.com/item?id=47345119</link><dc:creator>binwiederhier</dc:creator><comments>https://news.ycombinator.com/item?id=47345119</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47345119</guid></item><item><title><![CDATA[New comment by binwiederhier in "Mind the encryptionroot: How to save your data when ZFS loses its mind"]]></title><description><![CDATA[
<p>Oh my bad. I misread your comment. You are doing ZFS on top of dmcrypt, not dmcrypt images/volumes on top of ZFS.</p>
]]></description><pubDate>Tue, 30 Sep 2025 23:23:36 +0000</pubDate><link>https://news.ycombinator.com/item?id=45432514</link><dc:creator>binwiederhier</dc:creator><comments>https://news.ycombinator.com/item?id=45432514</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45432514</guid></item><item><title><![CDATA[New comment by binwiederhier in "Mind the encryptionroot: How to save your data when ZFS loses its mind"]]></title><description><![CDATA[
<p>ZFS encryption is much more space efficient than dmcrypt+unencrypted ZFS when combined with zstd compression. This is because it can do compress-then-encrypt instead of encrypt-then-(not-really-)compress. It is also much much faster.<p>Source: I work for a backup company that uses ZFS a lot.</p>
]]></description><pubDate>Tue, 30 Sep 2025 22:27:47 +0000</pubDate><link>https://news.ycombinator.com/item?id=45431995</link><dc:creator>binwiederhier</dc:creator><comments>https://news.ycombinator.com/item?id=45431995</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45431995</guid></item><item><title><![CDATA[Windows 11 Update KB5063878 Causing SSD Failures]]></title><description><![CDATA[
<p>Article URL: <a href="https://old.reddit.com/r/msp/comments/1n1sgxx/windows_11_update_kb5063878_causing_ssd_failures/">https://old.reddit.com/r/msp/comments/1n1sgxx/windows_11_update_kb5063878_causing_ssd_failures/</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=45050192">https://news.ycombinator.com/item?id=45050192</a></p>
<p>Points: 203</p>
<p># Comments: 119</p>
]]></description><pubDate>Thu, 28 Aug 2025 09:31:13 +0000</pubDate><link>https://old.reddit.com/r/msp/comments/1n1sgxx/windows_11_update_kb5063878_causing_ssd_failures/</link><dc:creator>binwiederhier</dc:creator><comments>https://news.ycombinator.com/item?id=45050192</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45050192</guid></item><item><title><![CDATA[New comment by binwiederhier in "Adding my home electricity uptime to status.href.cat"]]></title><description><![CDATA[
<p>I love hearing that. Anything worth sharing? I love hearing how people use it. My favorite one is the guy protecting his apple tree from thieves by adding a camera and motion sensor and then sending himself a notification with the picture to catch the apple thief.</p>
]]></description><pubDate>Thu, 21 Aug 2025 23:10:43 +0000</pubDate><link>https://news.ycombinator.com/item?id=44979270</link><dc:creator>binwiederhier</dc:creator><comments>https://news.ycombinator.com/item?id=44979270</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=44979270</guid></item><item><title><![CDATA[New comment by binwiederhier in "Adding my home electricity uptime to status.href.cat"]]></title><description><![CDATA[
<p>Disclaimer: I am the ntfy maintainer. Pleasantly surprised to be mentioned, hehe.<p>Pushover is an amazing tool and works well. In my obviously biased opinion though, I think that ntfy has a ton more features than Pushover and is fully open source. You can self host all aspects of it or you can use the hosted version on ntfy.sh for free, without signups, or pay for higher limits.<p>I suggest you try out ntfy;-)</p>
]]></description><pubDate>Thu, 21 Aug 2025 21:34:05 +0000</pubDate><link>https://news.ycombinator.com/item?id=44978355</link><dc:creator>binwiederhier</dc:creator><comments>https://news.ycombinator.com/item?id=44978355</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=44978355</guid></item><item><title><![CDATA[New comment by binwiederhier in "Debian 13 “Trixie”"]]></title><description><![CDATA[
<p>Thank you to all the Debian volunteers that make Debian and all its derivatives possible. It's remarkable how many people and businesses have been enabled by your work. Thank you!<p>On a personal note, Trixie is very exciting for me because my side project, ntfy [1], was packaged [2] and is now included in Trixie. I only learned about the fact that it was included very late in cycle when the package maintainer asked for license clarifications. As a result the Debian-ized version of ntfy doesn't contain a web app (which is a reaaal bummer), and has a few things "patched out" (which is fine). I approached the maintainer and just recently added build tags [3] to make it easier to remove Stripe, Firebase and WebPush, so that the next Debian-ized version will not have to contain (so many) awkward patches.<p>As an "upstream maintainer", I must say it isn't obvious at all why the web app wasn't included. It was clearly removed on purpose [4], but I don't really know what to do to get it into the next Debian release. Doing an "apt install ntfy" is going to be quite disappointing for most if the web app doesn't work. Any help or guidance is very welcome!<p>[1] <a href="https://github.com/binwiederhier/ntfy" rel="nofollow">https://github.com/binwiederhier/ntfy</a><p>[2] <a href="https://tracker.debian.org/pkg/ntfy" rel="nofollow">https://tracker.debian.org/pkg/ntfy</a><p>[3] <a href="https://github.com/binwiederhier/ntfy/pull/1420" rel="nofollow">https://github.com/binwiederhier/ntfy/pull/1420</a><p>[4] <a href="https://salsa.debian.org/ahmadkhalifa/ntfy/-/blob/debian/latest/debian/rules?ref_type=heads" rel="nofollow">https://salsa.debian.org/ahmadkhalifa/ntfy/-/blob/debian/lat...</a></p>
]]></description><pubDate>Sat, 09 Aug 2025 19:51:18 +0000</pubDate><link>https://news.ycombinator.com/item?id=44849542</link><dc:creator>binwiederhier</dc:creator><comments>https://news.ycombinator.com/item?id=44849542</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=44849542</guid></item><item><title><![CDATA[New comment by binwiederhier in "Make Your Own Backup System – Part 1: Strategy Before Scripts"]]></title><description><![CDATA[
<p>ZFS really shines here with its built-in "zpool scrub" command and checksumming.<p>Even though I am preaching "application consistent backups" in my original comment (because that's what's important for businesses), my home backup setup is quite simple and isn't even crash consistent :-) I do: Pull via rsync to backup box & ZFS snapshot, then rsync to Hetzner storage box (ZFS snapshotted there, weekly)<p>My ZFS pool consists of multiple mirrored vdevs, and I scrub the entire pool once a month. I've uncovered drive failures, and storage controller failures this way. At work, we also use ZFS and we've uncovered even failures of entire product lines of hard drives.</p>
]]></description><pubDate>Mon, 21 Jul 2025 12:30:54 +0000</pubDate><link>https://news.ycombinator.com/item?id=44634365</link><dc:creator>binwiederhier</dc:creator><comments>https://news.ycombinator.com/item?id=44634365</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=44634365</guid></item><item><title><![CDATA[New comment by binwiederhier in "Make Your Own Backup System – Part 1: Strategy Before Scripts"]]></title><description><![CDATA[
<p>Ha! I did not expect a reference to `innodb_flush_log_at_trx_commit` here. I wrote a blog post a few years ago about MySQL lossless semi-sync replication [1] and I've had quite enough of innodb_flush_log_at_trx_commit for a lifetime :-)<p>Depending on the database you're using, and on your configuration, they may NOT recover, or require manual intervention to recover. There is a reason that MSSQL has a VSS writer in Windows, and that PostgreSQL and MySQL have their own "dump programs" that do clean backups. Pulling the plug (= file system snapshotting) without involving the database/app is risky business.<p>Databases these days are really resilient, so I'm not saying that $yourfavoriteapp will never recover. But unless you involve the application or a VSS writer (which does that for you), you cannot be sure that it'll come back up.<p>[1] <a href="https://blog.heckel.io/2021/10/19/lossless-mysql-semi-sync-replication-and-automated-failover/" rel="nofollow">https://blog.heckel.io/2021/10/19/lossless-mysql-semi-sync-r...</a></p>
]]></description><pubDate>Mon, 21 Jul 2025 12:15:16 +0000</pubDate><link>https://news.ycombinator.com/item?id=44634259</link><dc:creator>binwiederhier</dc:creator><comments>https://news.ycombinator.com/item?id=44634259</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=44634259</guid></item><item><title><![CDATA[New comment by binwiederhier in "Make Your Own Backup System – Part 1: Strategy Before Scripts"]]></title><description><![CDATA[
<p>Databases these days are pretty resilient to restoring from crash consistent backups like that, so yes, you'll likely be fine. It's a good enough approach for many cases. But you can't be sure that it really recovers.<p>However, ZFS snapshots alone are not a good enough backup if you don't off-site them somewhere else. A server/backplane/storage controller could die or corrupt your entire zpool, or the place could burn down. Lots of ways to fail. You gotta at least zfs send the snapshots somewhere.</p>
]]></description><pubDate>Sun, 20 Jul 2025 10:27:36 +0000</pubDate><link>https://news.ycombinator.com/item?id=44623694</link><dc:creator>binwiederhier</dc:creator><comments>https://news.ycombinator.com/item?id=44623694</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=44623694</guid></item><item><title><![CDATA[New comment by binwiederhier in "Make Your Own Backup System – Part 1: Strategy Before Scripts"]]></title><description><![CDATA[
<p>This strongly depends on your environment and on your RTO/RPO.<p>Sure, there are environments that have automatically deployed, largely stateless servers. Why back them up if you can recreate them in an hour or two ;-)<p>Even then, though, if we're talking about important production systems with an RTO of  only a few minutes, then having a BCDR solution with instant virtualization is worth your weight in gold. I may be biased though, given that I professionally write BCDR software, hehe.<p>However, many environments are not like that: There are lots of stateful servers out there with bespoke configurations, lots of "the customer needed this to be that way and it doesn't fit our automation". Having all servers backed up the same way gives you peace of mind if you manage servers for a living. Being able to just spin up a virtual machine of a server and run things from a backup while you restore or repair the original system is truly magical.</p>
]]></description><pubDate>Sun, 20 Jul 2025 10:20:13 +0000</pubDate><link>https://news.ycombinator.com/item?id=44623645</link><dc:creator>binwiederhier</dc:creator><comments>https://news.ycombinator.com/item?id=44623645</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=44623645</guid></item><item><title><![CDATA[New comment by binwiederhier in "Make Your Own Backup System – Part 1: Strategy Before Scripts"]]></title><description><![CDATA[
<p>Thank you for sharing. A curious read. I am looking forward to the next post.<p>I've been working on backup and disaster recovery software for 10 years. There's a common phrase in our realm that I feel obligated to share, given the nature of this article.<p>> "Friends don't let friends build their own Backup and Disaster Recovery (BCDR) solution"<p>Building BCDR is notoriously difficult and has many gotchas. The author hinted at some of them, but maybe let me try to drive some of them home.<p>- Backup is not disaster recovery: In case of a disaster, you want to be up and running near-instantly. If you cannot get back up and running in a few minutes/hours, your customers will lose your trust and your business will hurt. Being able to restore a system (file server, database, domain controller) with minimal data loss (<1 hr) is vital for the survival of many businesses. See Recovery Time Objective (RTO) and Recovery Point Objective (RPO).<p>- Point-in-time backups (crash consistent vs application consistent): A proper backup system should support point-in-time backups. An "rsync copy" of a file system is not a point-in-time backup (unless the system is offline), because the system changes constantly. A point-in-time backup is a backup in which each block/file/.. maps to the same exact timestamp. We typically differentiate between "crash consistent backups" which are similar to pulling the plug on a running computer, and "application consistent backups", which involves asking all important applications to persist their state to disk and freeze operations while the backup is happening. Application consistent backups (which is provided by Microsoft's VSS, as mentioned by the author) significantly reduce the chances of corruption. You should never trust an "rsync copy" or even crash consistent backups.<p>- Murphy's law is really true for storage media: My parents put their backups on external hard drives, and all of r/DataHoarder seems to buy only 12T HDDs and put them in a RAID0. In my experience, hard drives of all kinds fail all the time (though NVMe SSD > other SSD > HDD), so having backups in multiple places (3-2-1 backup!) is important.<p>(I have more stuff I wanted to write down, but it's late and the kids will be up early.)</p>
]]></description><pubDate>Sat, 19 Jul 2025 22:31:20 +0000</pubDate><link>https://news.ycombinator.com/item?id=44620042</link><dc:creator>binwiederhier</dc:creator><comments>https://news.ycombinator.com/item?id=44620042</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=44620042</guid></item></channel></rss>