Hacker News: codegeek

New comment by codegeek in "S&P 500 rejects SpaceX, also blocking entry for OpenAI and Anthropic"

codegeek — Sat, 06 Jun 2026 18:24:01 +0000

Not the same comparison. Alphabet/Google has a solid 25+ year history. It's not 100% AI or not. It's about a Healthy and proven business model.

New comment by codegeek in "S&P 500 rejects SpaceX, also blocking entry for OpenAI and Anthropic"

codegeek — Sat, 06 Jun 2026 14:19:48 +0000

Agreed. S&P 500 needs to be seriously gatekeeped. We need safer boring companies in there thatbhave been peoven over a long period of time. Nothing against these companies but they are not proven and ready for S&P 500.

New comment by codegeek in "We're temporarily restricting Show HNs because of an influx"

codegeek — Thu, 04 Jun 2026 13:08:44 +0000

To be fair, it is done exactly to protect against accounts like yours. HN quality needs to be gate-keeped and new accounts absolutely need to be throttled. You may have meant well and be genuine but the bar is high now especially due to AI bots.

New comment by codegeek in "Roughly a quarter of American professionals hit a wall in their careers"

codegeek — Tue, 02 Jun 2026 13:36:04 +0000

Sure but thats a very cynical way of seeing things. A company cannot exist without making a profit but there are plenty of companies that try and take care of their people. At least the ones that don't have investor or board pressure (smaller private companies).

New comment by codegeek in "Roughly a quarter of American professionals hit a wall in their careers"

codegeek — Mon, 01 Jun 2026 15:29:07 +0000

Because of these shitty corporate companies that don't give a shit about their employees, the well is now poisoned for companies that do care especially smaller ones. Employees don't want to give their best anymore because they are burnt elsewhere and they become unemployable at smaller companies. It is a sad state of affairs.

New comment by codegeek in "YouTube to automatically label AI-generated videos"

codegeek — Wed, 27 May 2026 21:49:31 +0000

I wish all platforms did this specially reddit, twitter etc. I don't use AI to write comments on any platform and always wondering if I am replying to an AI comment.

New comment by codegeek in "Ask HN: Are Tech Meetups Dead?"

codegeek — Sun, 24 May 2026 17:43:30 +0000

In my experience, any meetup > 10 people becomes useless because you cannot really make meaningful connections and large meetups usually have a fixed agenda where everyone is out there selling their own stuff.

I now will not attend a meetup unless it is extremely small group (<10 people). Those are hard to sustain though.

New comment by codegeek in "Ask HN: Is $300/HR too low these days for custom full stack?"

codegeek — Sat, 23 May 2026 16:05:53 +0000

Exactly. I hired someone who was a good developer but he was charging hourly and extremely slow for what we needed. I am a software engineer (and a founder) myself so I get what it takes to write good code but I am no longer waiting for a dev to turn something around in 20 hours when I can use LLM to write it in 1 or less.

Going forward, I am no longer hiring hourly rate devs. Either fixed rate project or full time as needed. No hourly.

New comment by codegeek in "Incident Report: Railway Blocked by Google Cloud (Resolved)"

codegeek — Wed, 20 May 2026 01:33:31 +0000

This is bad. Even their own website is down at railway.com. Looks like total dependency on google cloud. Surprising for a company of their scale with all this VC money.

New comment by codegeek in "Ask HN: How to be SOC2 Type 2 compliant as a solo-entreprenuer?"

codegeek — Mon, 18 May 2026 16:27:59 +0000

I know a solo founder who got SOC2 certified. He is literally the only person running the product/company and is SOC2 certified. I found that hilarious to be honest. But he is trying to play the "win enterprise deals" game but not sure how that helps when you are literally 1 person.

New comment by codegeek in "Ask HN: How to be SOC2 Type 2 compliant as a solo-entreprenuer?"

codegeek — Fri, 15 May 2026 20:59:31 +0000

It depends on your target market. If you only sell to enterprise/large companies, you may need SOC2 sooner than later. If you sell to SMBs or startups, this advice works (I sell in this space mostly).

New comment by codegeek in "Ask HN: How to be SOC2 Type 2 compliant as a solo-entreprenuer?"

codegeek — Fri, 15 May 2026 17:10:18 +0000

I will add a few more things to this:

- Document your data and security and share that with customers instead. You can say "We don't have SOC2 at the moment but here is all our security and data policy". It works 99% of the time for me.

- Very few companies truly have policy to reject a vendor if they don't have SOC2. Those are usually large enterprise or companies in sensitive areas such as Finance/Healthcare etc. Even then, SOC2 can be waived if you can demonstrate everything else.

Disclaimer: I run a bootstrapped SAAS with low 7 figures in ARR and even though we have ISO27001, we don't have SOC2 yet. However, we take our security/data etc very seriously and have tons of documentation and best practices that we always shafre with a customer who asks. Honestly, we will get SOC2 at some point just for the checklist as I don't really care too much about them otherwise.

New comment by codegeek in "Just Use Go"

codegeek — Fri, 08 May 2026 13:56:59 +0000

I love Go. But I prefer .NET for web development that also compiles to a binary and has a great ecosystem of libraries and packages. Go is great if standard library works (and it can for many cases) but when you need to start looking into non standard libraries, Go can hit limitations.

For example, to build a full production web application with database in Go, there is no great out of the box migration tool. There are some good 3rd party libraries of course but compared to something like EFCore in .NET, they don't come as close.

For me, it is now .NET and then Go. Of course, I use Go when just doing a lot of non web stuff as well.

New comment by codegeek in "Ask HN: What do you still do manually in 2026 that should be automated?"

codegeek — Thu, 07 May 2026 16:36:56 +0000

I hear you. I also don't buy clothes unless really really needed. But I am hoping that if I do buy a Robot like that, it will do other things as well and not just folding laundry :)

New comment by codegeek in "Ask HN: What do you still do manually in 2026 that should be automated?"

codegeek — Thu, 07 May 2026 13:45:37 +0000

Some companies are building Robots for this already. for example https://figure.ai

New comment by codegeek in "Should I run plain Docker Compose in production in 2026?"

codegeek — Tue, 05 May 2026 16:31:49 +0000

I probably used the wrong word. I meant more about managing volume property so we dont have data loss, backups, replication etc etc. I assume going managed is easier if you can pay for it (e.g. RDS)

New comment by codegeek in "Should I Run Plain Docker Compose in Production in 2026?"

codegeek — Tue, 05 May 2026 16:31:00 +0000

Do you prefer self hosting DB with container OR using a managed service liek RDS ? I guess both can work depending on your level of comfort and even though I am a big self host guy, db hosting is something that makes me nervous and I end up just leaving it to RDS etc.

New comment by codegeek in "Securing a DoD contractor: Finding a multi-tenant authorization vulnerability"

codegeek — Tue, 05 May 2026 14:44:21 +0000

Yes thats why I also added SOC 2. I have gone through an ISO audit for our company so I know the process. The point is that these certifications are mostly a joke but you have to play the game to win "enterprise" deals.

New comment by codegeek in "Should I run plain Docker Compose in production in 2026?"

codegeek — Tue, 05 May 2026 14:38:21 +0000

Really liked reading your blog. Bookmarked for future. One question: for databases, do you recommend using containers as well because in development, I love the ease of using databases in docker compose as well but I always worry about production in terms of resilience. Thoughts ?

New comment by codegeek in "Securing a DoD contractor: Finding a multi-tenant authorization vulnerability"

codegeek — Mon, 04 May 2026 18:59:56 +0000

"There was no meaningful organization scoping, no tenant isolation, and no permission check preventing a low-privilege user from accessing other organizations' records."

Let me guess though. They are SOC2 and ISO compliant right ?