Hacker News: kiesel

New comment by kiesel in "Tell HN: Remember to migrate away from .name domain"

kiesel — Sat, 17 Oct 2026 09:06:15 +0000

Worth noting, this doesn't affect domain.name, thus 2nd level domains. I was actually unaware you could directly register a 3rd level domain... Got my .name in the sunrise phase of .name, though it later rendered obsolete by name change on marriage (but still got it).

New comment by kiesel in "What the hell have you built"

kiesel — Thu, 06 Nov 2025 10:28:12 +0000

I love the fact that the author "wrote" this page with massive CSS framework (tailwind) and some sort of Javascript framework, with a bundler and obfuscator - instead of a plain, simple HTML page. Well played! :-)

New comment by kiesel in "How we migrated onto K8s in less than 12 months"

kiesel — Fri, 09 Aug 2024 13:54:17 +0000

Thanks for the link to this awesome page!

New comment by kiesel in "Scaling up the Prime Video audio/video monitoring service and reducing costs"

kiesel — Thu, 04 May 2023 07:36:16 +0000

This is less an example of why serverless was bad but rather an example where using non-suitable services for tasks they were not meant for.

In this case they were using AWS Step functions that are known to be expensive ($0.025 per 1,000 state transitions) and they wrote: > Our service performed multiple state transitions for every second of the stream

Secondly, they were using large amounts of S3 requests to temporarily store and download each video frame which became a cost factor.

They had a hammer - and every problem looked like a nail. In my experience this happens to every developer at a certain stage when he/she gets in touch with a new technology; it doesn't mean that the tech itself is bad - it depends on the scenario, though.

New comment by kiesel in "Split keyboards and how to build them"

kiesel — Wed, 27 Jan 2021 12:24:48 +0000

Having a good keyboard is important (not only for ergonomics, but also for efficiency) in our business. But I find I'm having difficulty when temporarily switching from US to DE keyboard layout, or when using a mac (vs linux) - so what would using a completely custom keyboard do to my general computer user ability?

This is why I never considered buying one of these...

New comment by kiesel in "We cancelled standups and let the team build"

kiesel — Fri, 25 Sep 2020 08:51:08 +0000

> Let's say we have it every day at 9:30 and I get stuck at 11:00. Does anyone really expect me to wait almost a whole day to get help, or should I just go talk to someone about it right away like a normal adult would?

The standup would be the safety net when people don't see that they're stuck, know what to do and are afraid to ask / hands down in smth they just don't see the obvious.

Uncovering this in a standup should prevent them from "wasting time" even longer.

I have rarely seen this in my experience so far; either people aren't as dumb as people believe or they know what to report to not fall into this "let me take over here, you seem to have messed up" category.

German Covid tracking app source code: Corona-Warn-App

kiesel — Fri, 29 May 2020 19:23:20 +0000

Article URL: https://github.com/corona-warn-app/

Comments URL: https://news.ycombinator.com/item?id=23354396

Points: 2

# Comments: 0

New comment by kiesel in "WordPress 5.2: Mitigating Supply-Chain Attacks"

kiesel — Tue, 07 May 2019 18:55:45 +0000

By being able to modify executable files on the webserver, an attacker can add a backdoor through a security hole quite easily. Without, he could just make use of the security hole as of itself.

New comment by kiesel in "WordPress 5.2: Mitigating Supply-Chain Attacks"

kiesel — Tue, 07 May 2019 14:50:41 +0000

> A comprehensively secure automatic update system would have process isolation between the normal web interface and the updater (and the latter would run as a different, more privileged user). However, not everyone can do that. (Shared hosting, etc.)

That's right, and I also think the popularity stems from the simplicity and the fact that it existed when the whole blog thing took off.

There's actually the option to provide your FTP credentials in the admin console and have wordpress update itself over an FTP connection. It is process separation, then, but OTOH potentially exposes your webspace credentials to an attacker. :-)

New comment by kiesel in "WordPress 5.2: Mitigating Supply-Chain Attacks"

kiesel — Tue, 07 May 2019 09:22:54 +0000

The update mechanism itself is still insecure, as the wordpress instance must have the ability to exchange its own source code - something you'd at least call risky. Web applications should run with the least possible privileges, ie. only with permissions to write to dedicated locations on the filesystem (user uploads), and read permissions for the code.

PHP has composer, a dependency management system. There's an option to build a wordpress project using composer.

Even more, there's even a boilerplate project that you can use to bootstrap your new wordpress setup - see https://roots.io/bedrock/

New comment by kiesel in "Chezmoi: manage your dotfiles securely across multiple machines"

kiesel — Mon, 14 Jan 2019 14:35:29 +0000

I am a (happy) user of homeshick (https://github.com/andsens/homeshick), but this project really seems to top it by providing the only feature that I've missed until now:

- use the same source file with different results for different machines (eg. .gitconfig for home and office machines)

- option to store secrets in a credentials database and extract them from there (because you wouldn't want to store them in a git repo - even if it's a private one)

I'll definitively give it a try!

(EDIT: formatting)

New comment by kiesel in "Post-mortem: MRI disables every iOS device in facility"

kiesel — Tue, 30 Oct 2018 11:47:41 +0000

So, what could it be that makes iPhones "react" with helium? Helium is an inert gas and shouldn't really chemically react with anything in there.

Any clues why such an environment doesn't make Android phones behave in such a way?

New comment by kiesel in "Post-Olympic Abandonment"

kiesel — Wed, 22 Feb 2017 12:26:36 +0000

Plus, the press center tower now serves several companies as offices (with a very nice view from the top onto the Olympic park with the stadium).

New comment by kiesel in "Show HN: Go-odbye – Twitter Follow/Unfollow Reporting Tool Written in Go"

kiesel — Mon, 29 Aug 2016 14:14:29 +0000

This is an unsolved problem; some people work around it by managing multiple twitter accounts, one for each "channel". It doesn't scale by topics, though.

OTOH if I have to think about which channel / user I tweet to, I think people would tweet less. A bit of noise is ok, I guess.

New comment by kiesel in "Ask HN: What do you use to manage dotfiles?"

kiesel — Thu, 11 Feb 2016 06:28:23 +0000

There's a fork called homeshick which is a plain-bash rewrite of homesick, so it doesn't have the ruby dependencies (for those who care about that). There might be few differences, though.

New comment by kiesel in "Ask HN: What do you use to manage dotfiles?"

kiesel — Thu, 11 Feb 2016 06:17:17 +0000

I use homeshick (https://github.com/andsens/homeshick), a - as I understand - rewrite of homesick (ruby) in bash.

It needs to be sourced in .{bash,z}shrc and has features like tracking files from multiple repos (so called "castles"), auto-linking, auto-update every X days.

We also use it in our dev team to share some config (and ~/bin) files, works fine.

New comment by kiesel in "Ask HN: Best curated newsletters?"

kiesel — Sun, 07 Feb 2016 05:41:22 +0000

I enjoy reading

* http://softwareleadweekly.com/ - about people, culture, leadership

* http://www.devopsweekly.com/ - DevOps, by Gareth Rushgrove

Just my pick. Indeed, I've found links there that haven't popped up anywhere else (HN, Twitter), so I second the original poster's opinion that mail newsletters are a good thing - wouldn't have thought that.

New comment by kiesel in "The Differences Between the Plane Crash in Tapei and the Miracle on Hudson"

kiesel — Thu, 09 Apr 2015 20:49:53 +0000

I wonder why it wasn't possible to restart the mistakenly shut down engine. The article states that in first seconds after the shutdown, the pilots were unaware of their mistake. They then noticed the plane stopped climbing and actually went down even when pulling up the nose (which is counterproductive in that situation).

How long would it take to restart an engine and gain speed again?

New comment by kiesel in "Show HN: Goto – A Linux shell 'cd' replacement tool"

kiesel — Wed, 04 Feb 2015 06:48:15 +0000

As I work on quite a big directory tree, where most of the repos are in just a few parent directories, I like using the CDPATH variable that is present in at least (oh-my-)zsh and bash(-completion) (IIRC).

That would auto-update when new directories / repos are added later - maybe a useful addition to your tool?

New comment by kiesel in "Why I like XSLT"

kiesel — Tue, 09 Dec 2014 05:31:28 +0000

Probably true; the architecture we had in the team was nonexistant, so it turned into a mess... XSLT then has nothing to improve upon.

If you start out "right", you probably will be able to enjoy XSL.