Hacker News: bzmrgonz

New comment by bzmrgonz in "Running web sites makes me not want to"

bzmrgonz — Fri, 13 Nov 2026 00:19:35 +0000

I feel the same way, I've landed on astro and vanilla css as a safe haven for now. No more frameworks, no more bloat. Maybe htmx for some stuff.

New comment by bzmrgonz in "A thousand fewer paths to root"

bzmrgonz — Thu, 05 Nov 2026 01:46:55 +0000

I wonder what Sidero Labs has to say about this article. My hopes are pegged on their efforts. I have my wagon ready to hitch on their horses. They are not a one pony show anymore guys, Talos OS can be standalone server OS, a hypervisor server or cluster, and their flagship of k8s node or cluster. We get all that in an immutable gitops ready OS. I'm practically sold on their offering.

New comment by bzmrgonz in "Understanding Email Encryption (2025)"

bzmrgonz — Mon, 02 Nov 2026 00:27:16 +0000

I recently suggested to a larger group which needed to stay in the loop to use age keys for encryption and discuss instructions in broad strokes in threads. This keeps everyone generally informed while technical people exchange privileged payloads as attachments. This ensures privileged data is protected at rest and in transit, ans keeps discussion in a channel everyone is familiar with.

New comment by bzmrgonz in "OpenShell – A safe, private runtime for fleets of autonomous AI agents"

bzmrgonz — Fri, 23 Oct 2026 01:56:07 +0000

Question, why not force ai agents thru something like warpgate? I like it because it allows you to bring your own tool, so why can't we coexist with agents inside warpgate? Or Teleport if you have the coin.

New comment by bzmrgonz in "Amazon identifies Oct 17 PHP2Shell exploitation prior to public disclosure"

bzmrgonz — Thu, 22 Oct 2026 13:51:37 +0000

What did crowdsec see? Anybody know? Php exploits should be on a fast track of alerting, given the wide installation base.

New comment by bzmrgonz in "The Brain Sandwich"

bzmrgonz — Sun, 18 Oct 2026 15:47:05 +0000

I agree completely, I recently went thru this. Customer API session/journey security is a beast to secure, so many layers, so many moving parts, so many approaches.

New comment by bzmrgonz in "Frontier SRE agent trained by Datadog"

bzmrgonz — Sun, 18 Oct 2026 03:32:45 +0000

They are coming, the best ones will be open source, because we will be able to see the process. Hell the best ones are the ones which shadow us and build their logic around seeing us interact with systems using our clumsy fat fingers. The nice thing about agents is that they don't have to tail logs in a nother console, or copy paste scripts or API calls.

New comment by bzmrgonz in "I electrified my push scooter with a power drill"

bzmrgonz — Sun, 18 Oct 2026 02:22:45 +0000

You know you could have used a 90 degree chuck buddy. Or better yet, an angle grinder to make it a friction drive from above.

New comment by bzmrgonz in "Self-hosted infrastructure with Incus OS"

bzmrgonz — Sun, 18 Oct 2026 00:09:24 +0000

Thank you for this writeup, I think your setup deserves another writeup, but form the sre/gitops perspective. I've been thinking about building something similar, but using the lighthouse patter. One git repository on GitHub or gitea to prop up origin-vps(forgejo+harbor+warpgate+headscale), which will serve as the source of truth for infrastructure at any given site.

New comment by bzmrgonz in "Self-hosted infrastructure with Incus OS"

bzmrgonz — Sun, 18 Oct 2026 00:04:42 +0000

Or is it? Talos is coming up with Talos hypervisor in December.

New comment by bzmrgonz in "Ask HN: Do you want a router that has DD-WRT pre-installed?"

bzmrgonz — Mon, 12 Oct 2026 04:30:08 +0000

Explain commodity hardware, you mean a generic x86 with an asic card? Or a whitebox router?

New comment by bzmrgonz in "Ask HN: Which frontier model can do code security reviews"

bzmrgonz — Fri, 09 Oct 2026 00:44:33 +0000

I've thought about doing pen-testing on code by uploading code on an enclave/air-gapped machine and when finished, saving the pdf report on to a USB and then nuking the machine. The idea is full ironclad containment. I have a bunch of swagger files I'd like to feed some capable models which, online may transfer the data to the mothership (looking At you Chinese models). Chinese models are very good, but when even TV's spy on you(LG), it's hard to trust Chinese open weight models. So my logic is air-gapped analysis and nuke the machine.

New comment by bzmrgonz in "The Terminal Dev Stack I Wanted 10 Years Ago"

bzmrgonz — Fri, 09 Oct 2026 00:40:00 +0000

I didn't see you mention Zed Op, your thoughts kn that platform? For us casual/hobby dev folks, if looks very impressive.

New comment by bzmrgonz in "How to Avoid Disaster in the Next Iran War"

bzmrgonz — Thu, 08 Oct 2026 19:40:33 +0000

The next war will probably be fought with drone swarms, or whatever flying squid formation Iran is employing. aI assisted remote pilot controlled swarms. As soon as we crack quantum, they will find a way to control these swarms with quantum entanglement.

New comment by bzmrgonz in "You can just fix everything with a Nix overlay"

bzmrgonz — Thu, 08 Oct 2026 19:29:24 +0000

How does nix compare with immutable oses? An immutable OS is ci/CD driven, and it follows the phoenix pattern. It seems this approach removes/matches a lot of the nix advantages. With the up and coming Kairos(byo-distro), the sky is the limit.

New comment by bzmrgonz in "Good people refuse to do bad things"

bzmrgonz — Mon, 21 Sep 2026 16:43:31 +0000

In my opinion, we need a sort of survey, let's put it out there, can we get a collective voice from most ai phd's? Remember when climate change was in the scientific tug-of-war? The conclusion for a long time was that 9 in 10 scientists believed in climate change. So, why can't we do that with "ai is gonna kill us"

New comment by bzmrgonz in "Replacing Pull Requests with Delta"

bzmrgonz — Sat, 19 Sep 2026 02:06:45 +0000

I like this, it is high time we evolved/improved git. Given it's novelty, and the solo effort from Zed, I think an off-ramping mechanism would go a long way to attract more adoption from larger players. I hope forgejo comes onboard, but we must have an exir-ramp just Incase threads isn't AI's preference.

New comment by bzmrgonz in "How to Write with an LLM"

bzmrgonz — Fri, 18 Sep 2026 18:10:09 +0000

This is very good advice. I hate when llms turn into yes-men. I am surprise that the author doesn't use ai to construct the skeleton of the written piece. In my opinion, they excel at this, with all the books they've guillotined and digested, our biological brain cannot match their content retention. I would do the old trick of "asking for a friend". In this case, a friend of mine has mental block and he needs to write a paper on (insert topic here). I want to help him by designing the skeleton, and give the conditions/parameters of your piece.

New comment by bzmrgonz in "Keys Not Included: recovering the signing keys for US driver's license barcodes"

bzmrgonz — Thu, 17 Sep 2026 04:08:48 +0000

It baffles that people think it's a bad thing to disclose a public key. That's their purpose actually. Sure we now have the post quantum computer threat, and some state actors are harvesting keys, but quantum computer is going to disrupt so much, that Id verification won't even matter really.

New comment by bzmrgonz in "Our GitHub Actions bill kept climbing, so we moved CI to one box"

bzmrgonz — Wed, 09 Sep 2026 01:27:15 +0000

I had a different plan in mind, keep everything in cheap s3, save a declarative script on a public repository that deploys forgejo and harbor containerized on the local ephemeral Origin/cache and pull heavy sources and code from s3.