Hacker News: hitpointdrew

New comment by hitpointdrew in "Musk Team Seeks Access to IRS System with Taxpayers' Records"

hitpointdrew — Mon, 17 Feb 2025 13:56:00 +0000

Know who else has access to tax payer records, every IRS employee. Stop trying to make this like “oh my gosh I can’t believe anyone should have such access “. I trust Elon more than any IRS employee.

New comment by hitpointdrew in "Smart SSH, HTTPS and MySQL bastion requiring no additional client-side software"

hitpointdrew — Fri, 24 Jan 2025 16:20:07 +0000

Seems like an Apache Licensed early clone of Teleport. Nice job.

New comment by hitpointdrew in "Ask HN: What are the biggest PITAs about managing VMs and containers?"

hitpointdrew — Thu, 09 Jan 2025 00:46:54 +0000

Consistency. Small discrepancies between environments.

Abstraction. Not assuming too much that you code yourself in a corner, but also not abstracting away so much that the code is difficult to work with.

Industry standard tools that have strongly opinionated built in paradigms (I would include terraform, ansible, etc.). I feel like the tools of future ought to be general purpose programming language frameworks just to avoid this, too many times I either can’t do something, or have to hack together something utterly convoluted, that could have easily been done if the tool was a framework and I could have just thrown in some Go or Python.

New comment by hitpointdrew in "Costco Board Pushes Back Against Anti-DEI Activists"

hitpointdrew — Mon, 30 Dec 2024 17:52:46 +0000

This will age like milk.

New comment by hitpointdrew in "What we know about the mysterious drones flying over New Jersey"

hitpointdrew — Sat, 14 Dec 2024 02:35:23 +0000

I think you are underestimating how compartmentalized the government is.

New comment by hitpointdrew in "PostgreSQL High Availability Solutions – Part 1: Jepsen Test and Patroni"

hitpointdrew — Sun, 08 Dec 2024 03:14:05 +0000

The best way I have found is to setup keepalived -> pgbouncer -> Postgres. Use repmgr to manage replication and barman for backups. Setup a VIP with keepalived with a small script that checks if the server is primary. You loose about 7-9 pings during a failover, have keepalived check about every 2 seconds and flip after 3 consecutive failures.

New comment by hitpointdrew in "Godot Isn't Making It"

hitpointdrew — Tue, 03 Dec 2024 23:16:39 +0000

I don’t understand the title, it’s seems to be completely unrelated to the article. Godot is a game engine, the article is about AI companies.

New comment by hitpointdrew in "America Stopped Cooking with Tallow for a Reason"

hitpointdrew — Tue, 03 Dec 2024 20:43:31 +0000

Garbage hit piece.

>But in recent years, a fringe theory has gained prominence for arguing that seed oils are toxic

Sources please. I would say this certainly not "fringe" theory.

New comment by hitpointdrew in "Supreme Court wants US input on whether ISPs should be liable for users' piracy"

hitpointdrew — Mon, 25 Nov 2024 22:05:56 +0000

No, ISP’s are common carriers. You don’t go after the telephone company because someone coordinated a murder over the phone line. Why the hell would an ISP have any responsibility of what their users do?

New comment by hitpointdrew in "Cows and pigs will face a carbon tax in Denmark"

hitpointdrew — Tue, 19 Nov 2024 00:33:10 +0000

Why does Denmark hate farmers?

New comment by hitpointdrew in "Ask HN: Best Tools for High Availability PostgreSQL?"

hitpointdrew — Tue, 05 Nov 2024 00:32:18 +0000

The best stack I found for this is:

Keepalived -> pgbouncer -> postgresql

Then repmgr for managing replication and barman for backups.

The stack is nice because keepalived gives you a virtual ip that you point your apps to, then you can promote a standby to primary (or have one auto promote on a failure) and the VIP will flip to the new primary. All in all you get like 5-10 seconds of “down” time when it flips (depending on how aggressive or conservative you want to be with the rise and fall settings).

Edit: caveat you won’t get keepalived to work if you are using AWS and spread your Postgres servers across AZ’s, they would have to be in the same AZ.

Edit 2: You can simplify the setup if you don’t need connection pooling, in that case skip pgbouncer.

New comment by hitpointdrew in "Michael Bolton: Testing Is Not Quality; Quality Is Not Testing"

hitpointdrew — Mon, 04 Nov 2024 02:23:21 +0000

Are you related to that singer guy?

New comment by hitpointdrew in "Top redot developers left redot and announced a new fork of Godot"

hitpointdrew — Mon, 14 Oct 2024 00:01:38 +0000

Isn’t rodot a fork of Godot that’s like a week old? How does it even have “top” developers at this point.

New comment by hitpointdrew in "AI can think like an engineer–and it just designed a spaceship engine"

hitpointdrew — Sat, 12 Oct 2024 14:01:30 +0000

We need to stop applying terms like “think” to AI and computers. Computers don’t “think”, they process, that is all. Comparing, or calling, a CPU to the “brain” is also extremely problematic, CPUs in reality are nothing like a biological brain.

That said, it’s impressive that a computer can process enough data to output an any sort of engine.

New comment by hitpointdrew in "Max Headroom and the World of Pseudo-CGI (2013)"

hitpointdrew — Wed, 11 Sep 2024 16:52:25 +0000

Great video on why Max Headroom is wildly missunderstood.

https://www.youtube.com/watch?v=GsDrXc94NGU

New comment by hitpointdrew in "Breaking up Google would offer a chance to remodel the web"

hitpointdrew — Tue, 06 Aug 2024 19:22:08 +0000

Breaking up Google how, precisely?

1. Search

2. Browser

3. YouTube

4. Cloud

5. Gsuite

etc.

New comment by hitpointdrew in "A skeptic's first contact with Kubernetes"

hitpointdrew — Thu, 01 Aug 2024 21:07:00 +0000

> My problem with K8s: the network abstraction layer just feels _wrong_.

> I would very much prefer if K8s used public routable IPv6 for traffic delivery

shudder... nothing could feel more wrong to me than public routable IPv6, yuck.

New comment by hitpointdrew in "Ask HN: HN comments changed from majority libertarian to majority socialist?"

hitpointdrew — Tue, 30 Jul 2024 15:22:53 +0000

I have noticed this too. I suspect as HN grew, it caught the attention of bad actors that want to drive a particular narrative and they actively run campaigns that utilize both paid shills and bots.

New comment by hitpointdrew in "How to Become a Registrar (2012)"

hitpointdrew — Tue, 23 Jul 2024 14:55:58 +0000

This redirects to “https:/:one.one.one.one”, which is a domain name.

New comment by hitpointdrew in "How to Become a Registrar (2012)"

hitpointdrew — Mon, 22 Jul 2024 11:51:10 +0000

> So given this pattern, I don't feel like the domain name is something relevant for most end users.

Oh but it is, even if the user doesn’t realize it. How are you going to do SSL without a domain name? I don’t know of any provider that is trusted by a major browser, that will issue ssl certs for an ip instead of a domain name. You could use your own CA but no browser will accept it, and your visitors will be greeted with a browser warning.