Hacker News: jdsleppy

New comment by jdsleppy in "Show HN: I made a tool that helps you find verifiably 'white space' products"

jdsleppy — Sat, 04 Apr 2026 14:04:33 +0000

It's a nice idea, but after I get to the graph page things just stop. Clicking on nodes doesn't do anything. Bug?

New comment by jdsleppy in "We pwned X, Vercel, Cursor, and Discord through a supply-chain attack"

jdsleppy — Thu, 18 Dec 2025 23:03:51 +0000

Doesn't stealing the cookies/token require a non-HTTP-only session cookie or a token in localstorage? Do you know that Discord puts their secrets in one of those insecure places, or was it just a guess?

I believe if you always keep session cookies in secure, HTTP-only cookies, then you are more resilient to this attack.

I interviewed frontend devs last year and was shocked how few knew about this stuff.

New comment by jdsleppy in "Why we migrated from Python to Node.js"

jdsleppy — Tue, 04 Nov 2025 12:25:57 +0000

Multiple processes, multiple threads per process, and/or greenlets (monkey patch network calls, like async but no keywords involved). Scale out horizontally when there's a problem. It could get expensive.

New comment by jdsleppy in "Ask HN: How does one build large front end apps without a framework like React?"

jdsleppy — Fri, 17 Oct 2025 23:02:46 +0000

I can second the other commenter: you are having a different discussion than the rest of the comments and OP.

New comment by jdsleppy in "Ask HN: What are you working on? (September 2025)"

jdsleppy — Tue, 30 Sep 2025 02:45:58 +0000

Er... is it software? Hardware?

New comment by jdsleppy in "Ask HN: Has any of the Pivotal Tracker replacement attempts succeeded?"

jdsleppy — Fri, 08 Aug 2025 07:27:54 +0000

If you continue to not find what you need and are willing to be a subject matter expert on what Pivotal actually is (because I never saw it), I would be interested in building this. A lot of people share your sentiment so it could be successful, but it's hard to clone something unless you know the thing.

New comment by jdsleppy in "Electric cars produce less brake dust pollution than combustion-engine cars"

jdsleppy — Thu, 24 Jul 2025 20:40:41 +0000

Also disadvantaged groups might consume less healthcare and might be less aware of air quality, etc. and so may be more likely to have bad health outcomes for given environmental inputs.

New comment by jdsleppy in "Show HN: Unregistry – “docker push” directly to servers without a registry"

jdsleppy — Thu, 19 Jun 2025 21:03:35 +0000

The source code does not get to the filesystem on the prod server. It is sent to the Docker daemon when it builds the image. After the build ends, there's only the image on the prod server.

I am now convinced that this is a hidden docker feature that too many people aren't aware of and do not understand.

New comment by jdsleppy in "Show HN: Unregistry – “docker push” directly to servers without a registry"

jdsleppy — Thu, 19 Jun 2025 16:31:03 +0000

No, in my example the docker-compose.yml would exist alongside your application's source code and you can use the `build` directive https://docs.docker.com/reference/compose-file/services/#bui... to instruct the remote host (Hetzner VPS, or whatever else) to build the image. That image does not go to an external registry, but is used internal to that remote host.

For 3rd party images like `postgres`, etc., then yes it will pull those from DockerHub or the registry you configure.

But in this method you push the source code, not a finished docker image, to the server.

New comment by jdsleppy in "Show HN: Unregistry – “docker push” directly to servers without a registry"

jdsleppy — Thu, 19 Jun 2025 11:22:00 +0000

I've been very happy doing this:

DOCKER_HOST=“ssh://user@remotehost” docker-compose up -d

It works with plain docker, too. Another user is getting at the same idea when they mention docker contexts, which is just a different way to set the variable.

Did you know about this approach? In the snippet above, the image will be built on the remote machine and then run. The context (files) are sent over the wire as needed. Subsequent runs will use the remote machine's docker cache. It's slightly different than your approach of building locally, but much simpler.

New comment by jdsleppy in "Show HN: Canine – A Heroku alternative built on Kubernetes"

jdsleppy — Tue, 17 Jun 2025 11:32:55 +0000

This is for running code on your own servers, he doesn't deal with running others' code.

New comment by jdsleppy in "The first year of free-threaded Python"

jdsleppy — Fri, 16 May 2025 18:50:08 +0000

Did you compile the Python yourself? If so, you may need to add optimization flags https://devguide.python.org/getting-started/setup-building/i...

New comment by jdsleppy in "The world could run on older hardware if software optimization was a priority"

jdsleppy — Wed, 14 May 2025 11:19:51 +0000

I assume they are saying that in practice, if wealth gives one influence (if one lives in capitalism), one will use that influence to make one's market less free to one's benefit.

New comment by jdsleppy in "Replacing Kubernetes with systemd (2024)"

jdsleppy — Tue, 06 May 2025 12:04:15 +0000

You also skip the docker compose pull if you configure it to always pull in the compose file or in the up command.

New comment by jdsleppy in "Replacing Kubernetes with systemd (2024)"

jdsleppy — Tue, 06 May 2025 11:55:13 +0000

Do what the sibling comment says or set DOCKER_HOST environment variable. Watch out, your local environment will be used in compose file interpolation!

New comment by jdsleppy in "Replacing Kubernetes with systemd (2024)"

jdsleppy — Tue, 06 May 2025 11:23:50 +0000

I really like `DOCKER_HOST=ssh://... docker compose up -d`, what do you miss about Deployments?

New comment by jdsleppy in "We fell out of love with Next.js and back in love with Ruby on Rails"

jdsleppy — Sat, 03 May 2025 23:20:31 +0000

HTMX has a very nice drag and drop extension I just found, though. And old-school forms can include image files. The little image preview can be a tiny "island of JS" if you have to have it.

New comment by jdsleppy in "JavaScript Views, the Hard Way – A Pattern for Writing UI"

jdsleppy — Sat, 19 Apr 2025 12:13:17 +0000

Where do you suggest we sanitize values? Only in the client, when rendering them?

New comment by jdsleppy in "JavaScript Views, the Hard Way – A Pattern for Writing UI"

jdsleppy — Sat, 19 Apr 2025 12:08:34 +0000

They could always fall back to storing a value in a hidden element in the worst case. All/some/none selected is often done with an indeterminate state checkbox https://developer.mozilla.org/en-US/docs/Web/HTML/Reference/... that can represent all three states.

Maybe I don't understand the problem you are talking about.

New comment by jdsleppy in "Ask HN: Do you still use search engines?"

jdsleppy — Wed, 09 Apr 2025 11:39:07 +0000

I have not started to use LLMs, so yes I still use search engines.