Hacker News: chucky_z

New comment by chucky_z in "Engineering management after the cost of code collapsed"

chucky_z — Sat, 25 Jul 2026 18:29:30 +0000

I’ve found stating “only call out critical issues, report but ignore everything else” will basically get what you want. Put that in a review skill and you’re good to go.

To be clear I mostly only use Opus and Gemini Flash but this might work for others too.

New comment by chucky_z in "Caddy compatibility for zeroserve: 3x throughput and 70% lower latency"

chucky_z — Sun, 14 Jun 2026 19:31:29 +0000

Nginx was developed to scale a lot of Russian sites, starting with Rambler. As a second point, Envoy was made by Lyft. A lot of web server OSS goes back to big (at the time) corps.

New comment by chucky_z in "Caddy compatibility for zeroserve: 3x throughput and 70% lower latency"

chucky_z — Sun, 14 Jun 2026 19:28:10 +0000

Unfortunately that is likely untrue. Try it yourself, Go with GC disabled isn’t some magic bullet for performance as much as I’d like it to be.

New comment by chucky_z in "New U.S. college grads now have higher unemployment than the average worker"

chucky_z — Sat, 06 Jun 2026 22:58:57 +0000

The absolute wild opposite (for cybersecurity) to this is that higher level individuals are in such insane demand that if you are underpaid even during the current wage suppression, going to over market should be almost completely trivial.

New comment by chucky_z in "The dead economy theory"

chucky_z — Sat, 30 May 2026 00:29:08 +0000

The people you know who love it, love it. How many times have you seen a retired age person working? It’s not always because they require it financially. I worked with a gentleman from Bulgaria when I was young who worked 70 hours a week because he was immensely bored otherwise and work brought him purpose. When you become adjusted to working all the time, the work becomes the purpose, and not working becomes death. I watched this happen with one of my grandparents. He retired and died of a heart attack within a year. All signs pointed to him living longer had he not retired. My point is that freedom to some people is work, because work is their purpose and having a purpose provides freedom to enjoy other things.

New comment by chucky_z in "Migrating from Go to Rust"

chucky_z — Mon, 25 May 2026 19:29:32 +0000

We’ve developed incredibly strict and comprehensive clippy rules and found that to drastically improve the quality of the code as the LLM now should pass all clippy checks. You can add a clippy skill as well to attempt to turn “should” into “must.”

New comment by chucky_z in "Copy Fail"

chucky_z — Wed, 29 Apr 2026 23:21:51 +0000

https://www.freedesktop.org/software/systemd/man/latest/syst...

`/etc/systemd/system/service.d/${...}.conf`

I think this is what you're looking for.

New comment by chucky_z in "GitHub RCE Vulnerability: CVE-2026-3854 Breakdown"

chucky_z — Tue, 28 Apr 2026 18:01:47 +0000

.... git?

replace it with git.

if you want a whole ui you can use something like forgejo which has far fewer features likely leading to less issues.

New comment by chucky_z in "GitHub RCE Vulnerability: CVE-2026-3854 Breakdown"

chucky_z — Tue, 28 Apr 2026 18:00:56 +0000

It's incredibly fragile. It breaks a vast majority of the time and takes multiple rounds of support on-call to upgrade typically.

New comment by chucky_z in "This year’s insane timeline of hacks"

chucky_z — Mon, 13 Apr 2026 19:18:18 +0000

The more I use AI and my workplace buys into it, the more I’m doing person to person work in a security context.

New comment by chucky_z in "Leanstral: Open-source agent for trustworthy coding and formal proof engineering"

chucky_z — Mon, 16 Mar 2026 22:18:23 +0000

I use mistral-medium-3.1 for a lot of random daily tasks, along with the vibe cli. I'd state from my personal opinion that mistral is my preferred 'model vendor' by far at this point. They're extremely consistent between releases while each of them just feels better. I also have a strong personal preference to the output.

I actively use gemini-3.1-pro-preview, claude-4.6-opus-high, and gpt-5.3-codex as well. I prefer them all for different reasons, however I usually _start_ with mistral if it's an option.

New comment by chucky_z in "Linux From Scratch ends SysVinit support"

chucky_z — Mon, 02 Feb 2026 19:52:23 +0000

I understand where you’re coming from but early systemd with both ubuntu and centos was a fucking mess. It’s good now but goddamn it was painful and the hate is 100% justified.

New comment by chucky_z in "Jensen: 'We've done our country a great disservice' by offshoring"

chucky_z — Mon, 05 Jan 2026 19:25:14 +0000

All shoe sizes should only be small, medium, and large. He really did have a lot of very ridiculous ideas. He also had a lot of extremely good ideas and incredible understanding of socioeconomic conditions.

His book “United We Stand” with modern context is quite amazing considering it came out in the early 90s.

New comment by chucky_z in "Meta is using the Linux scheduler designed for Valve's Steam Deck on its servers"

chucky_z — Tue, 23 Dec 2025 17:57:13 +0000

This isn’t explicitly called out in any of the other comments in my opinion so I’ll state this. Valve as a company is incredibly focused internally on its business. Its business is games, game hardware, and game delivery. For anything outside of that purview instead of trying to build a huge internal team they contract out. I’m genuinely curious why other companies don’t do this style more often because it seems incredibly cost effective. They hire top level contractors to do top tier work on hyper specific areas and everyone benefits. I think this kind of work is why Valve gets a free pass to do some real heinous shit (all the gambling stuff) and maintain incredible good will. They’re a true “take the good with the bad” kind of company. I certainly don’t condone all the bad they’ve put out, and I also have to recognize all the good they’ve done at the same time.

Back to the root point. Small company focused on core business competencies, extremely effective at contracting non-core business functions. I wish more businesses functioned this way.

New comment by chucky_z in "Floss Before Brushing"

chucky_z — Wed, 29 Oct 2025 17:35:42 +0000

There are 'best to brush' timelines around eating/drinking. Usually you want to either:

- Brush no less than 15m before eating

- Do not brush until 45m+ after eating

I don't fully understand the science, as I'm not a dentist, but it's something related to the way that things stick to/are absorbed by enamel and dentin.

I believe water is the exception here, you can drink water and then immediately brush. You should not brush and then immediately drink water though. You want the toothpaste to stick around and form a barrier.

New comment by chucky_z in "Corrosion"

chucky_z — Mon, 27 Oct 2025 20:36:05 +0000

From my literal conversation I'm having right now, 'try to run one big cluster to capture everything' is our active state. I've brought up federation a bunch of times and it's fallen on deaf ears. :)

We are probably past the size of the entirety of fly.io for reference, and maintenance is very painful. It works because we are doing really strange things with Consul (batch txn cross-cluster updates of static entries) on really, really big servers (4gbps+ filesystems, 1tb memory, 100s of big and fast cores, etc).

New comment by chucky_z in "Corrosion"

chucky_z — Mon, 27 Oct 2025 18:51:33 +0000

Back of napkin math I’ve done previously, it breaks down around 2 million members with Hashicorps defaults. The defaults are quite aggressive though and if you can tolerate seconds of latency (called out in the article) you could reach billions without a lot of trouble.

New comment by chucky_z in "Ask HN: Abandoned/dead projects you think died before their time and why?"

chucky_z — Sun, 12 Oct 2025 17:11:14 +0000

systemd-fleet, by the original CoreOS folks. https://github.com/coreos/fleet

I used this when it was brand new for a bit and it was so incredibly smooth and worked so well. It solved the problem of controlling systemd units remotely so well. I'm pretty sure the only reason it never actually took off was kubernetes and coreos's acquisition, however it actively solves the 'other half' of the k8s problem which is managing the state of the host itself.

New comment by chucky_z in "RediShell: Critical remote code execution vulnerability in Redis"

chucky_z — Tue, 07 Oct 2025 20:06:50 +0000

I believe the context is that the CVE is that this bypasses the sandbox entirely; so in this specific case this is a real, full-blown RCE. Your comment makes it seem at a glance that you're saying it's a DOS at worse.

New comment by chucky_z in "Show HN: Kekkai – a simple, fast file integrity monitoring tool in Go"

chucky_z — Tue, 23 Sep 2025 23:05:28 +0000

The CEO would've found it very easy to remove the blocker in that case (me). This is the life of small tech businesses. Also, they were modifying configuration files (php-fpm configurations iirc) and not code.

FIM is very useful for catching things like folks mucking about with users/groups because you typically watch things like /etc/shadow and /etc/passwd, or new directories created under /home, or contents of /var/spool/mail to find out if you're suddenly spamming everyone.