<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: nonameiguess</title><link>https://news.ycombinator.com/user?id=nonameiguess</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Sat, 23 May 2026 22:52:56 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=nonameiguess" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by nonameiguess in "CISA tries to contain data leak"]]></title><description><![CDATA[
<p>Not all "government" systems are the same. They're rated in terms of impact level and data classification. Classified systems can't be logged into outside of SCIFs anyway and have no outgoing connection to the Internet. Unclassified systems at IL5 require certificate auth with a government-issued smart card. IL4 requires endpoint attestation but can otherwise use normal username/password auth. Lower impact levels are not as heavily secured. I would have expected they at least require MFA to access the AWS API, but even that depends. A lot of times accounts will be split between production and non-production with MFA required on the production accounts, but work done purely for experimentation, platform development, or other non-user facing things that don't touch real data might not even be in GovCloud since the commercial accounts are cheaper.</p>
]]></description><pubDate>Sat, 23 May 2026 12:33:32 +0000</pubDate><link>https://news.ycombinator.com/item?id=48247117</link><dc:creator>nonameiguess</dc:creator><comments>https://news.ycombinator.com/item?id=48247117</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48247117</guid></item><item><title><![CDATA[New comment by nonameiguess in "Experience: We found a baby on the subway – now he's our 26-year-old son"]]></title><description><![CDATA[
<p>It's changed over the years and depends quite a bit on the state, but generally family court prefers placing wards of the state with birth parents if they're alive and known and legally able to care for a child, and if not, then either kin or "fictive kin," which is any stable adult that already has a pre-existing relationship with the child. If a child is completely abandoned and has no known family, then whoever found them is probably the best thing going all else being equal.<p>But no, it is not generally that easy anywhere in America. My wife and I tried for six years and it never happened. Texas completely privatized foster care licensing years back, so standards can be pretty arbitrary. Some agencies are thinly-veiled scams requiring you to purchase books or parenting classes from the founder.</p>
]]></description><pubDate>Sat, 23 May 2026 12:22:21 +0000</pubDate><link>https://news.ycombinator.com/item?id=48247047</link><dc:creator>nonameiguess</dc:creator><comments>https://news.ycombinator.com/item?id=48247047</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48247047</guid></item><item><title><![CDATA[New comment by nonameiguess in "Google's AI is being manipulated. The search giant is quietly fighting back"]]></title><description><![CDATA[
<p>This feels like a basic critical thinking/epistemology thing that you (hopefully) pick up at some point in life, usually from experience finding reliable, canonical primary sources for data. You can't do that for everything. Being wrong about trivial factoids isn't the end of the world. You should, however, at least be capable of doing further investigation, realizing that Major League Eating has its own website, and that there is no event in South Dakota sanctioned by them. If you look at actual results, or even just think for a few seconds, you'd also realize that 7.5 hot dogs in 10 minutes is bush-league level nonsense that would not win a local church contest, let alone an international championship. That may not be obvious to all users of the Internet, but it would be if you've ever watched a real contests, looked at the results for a real contest, or try yourself to eat a high volume of hot dogs rapidly. You only need to do it once in your life and a basic smell alarm should go off in your head forever if someone puts out a claim that is very far from something you know to be true.<p>This is what human reasoning is and we're supposed to be good at it. At its best, this is what any reasonable education should do for you if you take it at all seriously, arming you with some capacity for doing prima facie sanity checks of poorly sourced claims.</p>
]]></description><pubDate>Wed, 20 May 2026 15:28:53 +0000</pubDate><link>https://news.ycombinator.com/item?id=48209367</link><dc:creator>nonameiguess</dc:creator><comments>https://news.ycombinator.com/item?id=48209367</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48209367</guid></item><item><title><![CDATA[New comment by nonameiguess in "Mocked by a scandal sheet, Kierkegaard endured months of personal attacks"]]></title><description><![CDATA[
<p>Unless I'm misunderstanding something about the font, these seem to be the shorter en-dashes, not the em-dashes that are otherwise rare to see.<p>Also, there is the question of why? This is a quarterly publication with only a few articles, not a blog spamming 20,000 a day. The author himself is a rabbi and professor at St. John's, who is heavily published but not exactly spamming the world with shit. He's written two full-length books, one novel and one non-fiction, both of them published before LLMs were anywhere near good enough to produce convincing long-form prose. All of his material I could find is published through real publications with editorial boards, not self-published. He doesn't exactly fit the profile of the ambitious hustler trying to make a name for himself to game SEO rankings or boost his karma on web outlets with up-voting mechanisms.</p>
]]></description><pubDate>Mon, 18 May 2026 20:03:38 +0000</pubDate><link>https://news.ycombinator.com/item?id=48184805</link><dc:creator>nonameiguess</dc:creator><comments>https://news.ycombinator.com/item?id=48184805</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48184805</guid></item><item><title><![CDATA[New comment by nonameiguess in "Anduril and Meta's quest to make smart glasses for warfare"]]></title><description><![CDATA[
<p>Sounds awfully pie in the sky. My own experience matches Jonathan Wong's. An individual ground Soldier is carrying a lot of gear already and the helmet as-is is quite heavy. Regular night vision and ballistic glasses are not comfortable. Ruggedized laptops are already bulky and adding in the ability to run a local LLM is only going to make them bulkier. Computing and electronics in general are unreliable in the field, easy to lose, difficult to keep charged, and nobody likes carrying them. It needs to add quite a bit of value to be worth it, and calling in airstrikes or indirect fire is not all that difficult as it stands.<p>Projects like these always feel like people whose experience of combat is video games imagining how cool it would be to have better tech, and I can't help but wonder what the guys at the top buying this shit are thinking. They too were once at the platoon and company level, even if it was decades ago. Cynically, they might just hope to end up like this Quay Barnett guy. Buy shit you don't need and will never field from a vendor today, then get a 7-figure job from the same vendor when you retire.</p>
]]></description><pubDate>Mon, 18 May 2026 19:50:40 +0000</pubDate><link>https://news.ycombinator.com/item?id=48184644</link><dc:creator>nonameiguess</dc:creator><comments>https://news.ycombinator.com/item?id=48184644</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48184644</guid></item><item><title><![CDATA[New comment by nonameiguess in "Apple Silicon costs more than OpenRouter"]]></title><description><![CDATA[
<p>We can estimate this. US median home price right before the crash in 2007 was $240,000. Today, it is about $400,000. Median rent in 2007 was $810. Today, it is $1,698. There's some simplifying assumptions we have no choice but to make. Let's say renter's insurance is negligible enough to ignore. Meanwhile, we'll just let an online mortgage calculator assume a median $50,000 home insurance coverage payment and bake it in. We'll assume 1.1% of assessed value for property insurance, which is currently the US national average (it varies a lot state to state in reality). We'll assume an FHA loan with 4% down.<p>This gives us a $1,995 a month payment when we purchased and a $2,142 a month payment today, due to higher assessed value for the tax.<p>We can see upsides and downsides in both cases. Rent would have been quite a bit cheaper in 2007, but it has very nearly caught up by now. Meanwhile, you're probably talking about renting maybe a 2 bed/1 bath apartment, whereas the median single-family house is more like 4 beds/2 baths, with a yard. Whether or not that extra space and privacy matters to you likely depends a lot on whether you're single or have or ever plan to have a family. You could have invested  into something like the S&P 500, which has historically returned about 10.5% since 1957 annually in nominal returns. Let's just kind of naively split the difference here and assume you can invest $1,000 saved on rent versus mortage a month for the first 10 years and $200 a month for the next 9. That would have gotten you somewhere around $240,000 by now. Meanwhile, you're looking at about $248,000 in home equity by now for the purchase case.<p>Choose different parameters if you please, but I'm not really seeing the case for renting here over the long term, and that's in spite of choosing the single worst time in the last century you could have made the purchase.</p>
]]></description><pubDate>Mon, 18 May 2026 16:25:17 +0000</pubDate><link>https://news.ycombinator.com/item?id=48181898</link><dc:creator>nonameiguess</dc:creator><comments>https://news.ycombinator.com/item?id=48181898</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48181898</guid></item><item><title><![CDATA[New comment by nonameiguess in "The main thing about P2P meth is that there's so much of it (2021)"]]></title><description><![CDATA[
<p>Ephedrine is a far stronger appetite suppressant than caffeine. It only has a six-hour half life, though. The classic bodybuilder ECA stack was typically taken every four hours, but I suppose it's quite a bit harder to get to 4% bodyfat than it is just to not be overweight.</p>
]]></description><pubDate>Sun, 17 May 2026 09:24:11 +0000</pubDate><link>https://news.ycombinator.com/item?id=48167336</link><dc:creator>nonameiguess</dc:creator><comments>https://news.ycombinator.com/item?id=48167336</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48167336</guid></item><item><title><![CDATA[New comment by nonameiguess in "Show HN: GlycemicGPT – Open-source AI-powered diabetes management"]]></title><description><![CDATA[
<p>That's just risk/benefit to the user. As the developer, I'd be concerned that publicly distributing and marketing this, even with a GPL "no warranty" license and even free to the user, is illegal.</p>
]]></description><pubDate>Fri, 15 May 2026 12:22:02 +0000</pubDate><link>https://news.ycombinator.com/item?id=48147723</link><dc:creator>nonameiguess</dc:creator><comments>https://news.ycombinator.com/item?id=48147723</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48147723</guid></item><item><title><![CDATA[New comment by nonameiguess in "Rewrite Bun in Rust has been merged"]]></title><description><![CDATA[
<p>I've never done any JavaScript development of any kind and had never heard of this either. I thought it was a package manager at first, but apparently it's an entire runtime.<p>My question is, if it's this trivial to rewrite Zig to Rust, and trivial in general to write Rust at all, why not just use Rust for your server side code in the first place? What's the value of continuing to use JavaScript and putting so much effort into the runtime?</p>
]]></description><pubDate>Thu, 14 May 2026 20:50:02 +0000</pubDate><link>https://news.ycombinator.com/item?id=48141045</link><dc:creator>nonameiguess</dc:creator><comments>https://news.ycombinator.com/item?id=48141045</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48141045</guid></item><item><title><![CDATA[New comment by nonameiguess in "Mythical Man Month"]]></title><description><![CDATA[
<p>This seems like somewhat of a mischaracterization. He contrasted improvements in software with improvements in hardware, saying we'd never have something like a Moore's law for software where performance doubled or cost halved equally rapidly. Churning out software faster doesn't mean it's any better.<p>We also seem to fall into these ruts of not understanding what is meant by labor productivity. When an economist is presenting the common outputs / inputs measure, they don't mean raw quantity of output. They're talking about the value added by outputs divided by the value of inputs. Churning out software faster that doesn't earn anybody additional revenue is not making us more productive. It's disheartening that even c-suites with business education don't seem to understand this. That's not to say there is <i>no</i> productivity gain. Plenty of AI-adjacent hyperscalers are seeing ridiculous growth right now, but no non-startup is seeing revenue 10x what it was the year before, not even NVIDIA.<p>A lot of this is just basic diminishing marginal utility. There is only so much value to be added. Software is usually either a semi-automated controller or human decision making augmenter to some kind of physical manufacturing process, or entertainment, when we talk about ultimately delivering value. Everything else is an intermediate input. We can only be so entertained. For physical goods, we have food, space, clothing seemingly at a sufficient level to satisfy just about everyone, with the reasons for value not being maximized having to do with distribution. Unless your software manages to solve borders, bigotry, cultural incompatibility, poverty, mental illess, physical illness, violence, I'm not sure what the other big rocks are. Software can absolutely be a key part of infrastructure to facilitate distribution. That's exactly what the Internet is, along with all the backend business and logistics systems out there in existence. But without hitting the true big rocks, where is the 10x value supposed to come from? We're talking incremental gains simply because we're not in the dark ages any more and incremental gains are all that's there. Short of Star Trek style replicators and transporters, I'm not sure what could realistically multiply global value by 10.<p>Without the value, then sure, you may be churning out 10 times as many discrete projects used by at least one person, or 10 times as many lines of code, but that was never the point. Your personalized notes and grocery ordering apps you share with your wife might excite you for a few weeks, but I can assure you they aren't going to revolutionize your life.</p>
]]></description><pubDate>Sat, 09 May 2026 12:12:10 +0000</pubDate><link>https://news.ycombinator.com/item?id=48074337</link><dc:creator>nonameiguess</dc:creator><comments>https://news.ycombinator.com/item?id=48074337</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48074337</guid></item><item><title><![CDATA[New comment by nonameiguess in "Meta Shuts Down End-to-End Encryption for Instagram Messaging"]]></title><description><![CDATA[
<p>This is a very frustrating exchange. You guys are saying the same thing. For key exchange to be secure against an attacker who can MITM the channel you're securing, either the public keys or at least their respective fingerprints need to be exchanged out of band, over some channel the same attacker cannot also MITM. For a sophisticated enough targeted attack, a telephone isn't that.<p>The way military radios handle this is hardware key loaders that have seeds pre-synced in factory, in person. Every day in the field, a unit comms person takes the key loader and loads new keys onto everyone's radios. The key loaders themselves are reseeded and resynced during maintenance periods between campaigns or exercises. They're physically accounted for on every movement and twice a day when not moving, and if they ever can't be found, all messages from any device they loaded keys onto is considered compromised.<p>Anyone trying to overthrow a government or run a criminal empire or whatever is going to have to take measures at least this drastic. Or quit LARPing and accept that nation state attackers can probably slide into your Instagram DMs, which are probably being sent to people you don't know, and if they're hot and actually answering you, 90% chance they're a honeypot anyway.</p>
]]></description><pubDate>Sat, 09 May 2026 10:40:24 +0000</pubDate><link>https://news.ycombinator.com/item?id=48073826</link><dc:creator>nonameiguess</dc:creator><comments>https://news.ycombinator.com/item?id=48073826</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48073826</guid></item><item><title><![CDATA[New comment by nonameiguess in "Cloudflare to cut about 20% of its workforce"]]></title><description><![CDATA[
<p>2008 the global economy came somewhere between hours to days of completely crashing if AIG hadn't been bailed out. Other than Covid, it's only the second time in the past 50 years unemployment hit double-digits, the other time being the early 80s recession in the wake of the 1979 energy crisis, which saw inflation go as high as 13.5% and the prime interest rate hit 21.5%. You're probably only concerned about your own industry, but even now, unemployment is still around the lowest it's been since WWII outside of the past couple of years and the late 50s.<p>It'll be another 40 years hopefully to get a full lifetime of experience and see how I ultimately feel about this, but right now, my sense is software saw a huge boom in the 2010s, a la aerospace in the 60s and finance in the 90s, and it isn't going to die, but that boom was never going to last forever, either. Being a specialist surgeon was always the only true close to guarantee you'll make half a mil annually with supreme job security. Everything else sees booms, busts, regional disparities, and power laws that make it hard to even talk to each other about it because nobody's experience is universal. Even now, in my particular niche of the industry, I don't know anybody who's been laid off. My own company and our competitors are not exactly drowning in cash (I work largely on commission and it's been a terrible quarter), but we're expanding headcount, not reducing.<p>Conversely, in the 2010s as software boomed and I did terrifically, basically my entire family is in trades and it was totally different for them. Drastic cyclical instability, projects started but then canceled all over the place, injuries, bankruptcies, drug addiction, prison terms. But that's also in California. I live in Texas and construction here seemingly mostly stayed in the boom state. All the tradesmen I know from here rather than family did much better. We also had roughneck as a lucrative fallback option for anyone that didn't mind living in the middle of nowhere thanks to the fracking and shale booms. Computer geeks from 2006 to 2021 or so also had that kind of easy skill transfer fallback thing thanks to the boom in computational data analytics due to advances in data storage and machine learning technologies.<p>We might even do well to remember that hyperscalers drowning in ad money for the past 20 years had a practice of intentionally overhiring to hoard talent but not give them anything productive to do, putting them into restrictive NDAs and non-competes largely to prevent them from starting their own companies or working for competitors. If that practice is ending, it floods the labor market, driving down wages, and reduces industry-wide employment metrics, but it's not death of the profession so much as ending a market distortion. Maybe it even supercharges entrepreneurialism, but right now we just seem to see a boom in the "solo indie dev" putting out reams of slop. At some point, people have to actually work together and have a real product vision that solves a problem other than using AI to make dev tools to harness AI for making more dev tools.</p>
]]></description><pubDate>Fri, 08 May 2026 11:33:18 +0000</pubDate><link>https://news.ycombinator.com/item?id=48061654</link><dc:creator>nonameiguess</dc:creator><comments>https://news.ycombinator.com/item?id=48061654</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48061654</guid></item><item><title><![CDATA[New comment by nonameiguess in "The IT Productivity Paradox"]]></title><description><![CDATA[
<p>Did you read the whole thing? In that same section of text:<p>> It is interesting to note that if this were an absolute rule for IT investments (which we believe it is not, as covered in our other sections), then investing in IT would be a waste of resources for the economy as a whole despite benefitting individual firms.<p>This site is surveying arguments that have been made over the years, one of which is the one you quoted. They're not agreeing with all of those arguments. In fact, they explicitly disagree with the one you're questioning.</p>
]]></description><pubDate>Fri, 08 May 2026 10:08:38 +0000</pubDate><link>https://news.ycombinator.com/item?id=48061025</link><dc:creator>nonameiguess</dc:creator><comments>https://news.ycombinator.com/item?id=48061025</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48061025</guid></item><item><title><![CDATA[New comment by nonameiguess in "Dirtyfrag: Universal Linux LPE"]]></title><description><![CDATA[
<p>Alpine Linux is not using GNU. I'm sure there are others. No definition you can ever come up with will have no exceptions in widespread use. Live with it.</p>
]]></description><pubDate>Fri, 08 May 2026 08:31:08 +0000</pubDate><link>https://news.ycombinator.com/item?id=48060306</link><dc:creator>nonameiguess</dc:creator><comments>https://news.ycombinator.com/item?id=48060306</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48060306</guid></item><item><title><![CDATA[New comment by nonameiguess in "Should I run plain Docker Compose in production in 2026?"]]></title><description><![CDATA[
<p>That as well as different definitions of scale. I've done small bits of consulting work for a research company for the past four years, deploying and managing Kubernetes clusters for them as well as helping get some of the main applications up on it. This is all internal tooling, though. Their customer-facing sites are just Drupal instances running on bare EC2.<p>Internally, though, they wanted to self-host a chat server, Apache airflow, Overleaf for collaborative editing of research proposals, three separate Git servers, a container registry, many other things, all with extremely strict multi-tenancy isolation requirements for storage and networking because they're handling customer data and their own customers audit them for it. That was a hell of a lot easier to do with Kubernetes than trying to figure out some giant universe of barely related technologies with vastly different APIs, having to buy specialized appliances for network and storage that probably also need their own control plane software hosted somewhere else.<p>But if you just look at "scale" as number of http requests a particular URL gets per some unit of time, the customer-facing sites have far greater scale. If you're trying to attribute revenue, beats me. They wouldn't sell anything without the customer-facing sites, but they wouldn't have anything <i>to</i> sell without the internal tooling. Solo web devs get into this tunnel vision view of ops because, to them, often the web site <i>is</i> the product. That's not the case for most businesses.<p>And, of course, they'd probably just use someone else's SaaS for tooling. But if you're in a heavily regulated space where that isn't possible and you have to self-host most of your business systems, then what?</p>
]]></description><pubDate>Wed, 06 May 2026 09:19:47 +0000</pubDate><link>https://news.ycombinator.com/item?id=48034104</link><dc:creator>nonameiguess</dc:creator><comments>https://news.ycombinator.com/item?id=48034104</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48034104</guid></item><item><title><![CDATA[New comment by nonameiguess in "When everyone has AI and the company still learns nothing"]]></title><description><![CDATA[
<p>There are so many elements to this. I've worked in nearly every part of software orgs. Development, ops, professional services, pre-sales. There are bottlenecks everywhere. Faster shipping gets you nothing if your customers procurement budgets don't increase and they're not buying anything. You can wow new customers and lure them in with shit you get out the door super quick that appears to work but falls flat after six months of usage, but you damage your reputation in the long run. So how do you guarantee your software will actually work after six months of usage? You have to test it by running it yourself for six months. There is no other way. No automated suite can exercise every single possible customer use case over a long period of time. It's a combinatorial problem.<p>Just yesterday I was in a meeting with a customer asking if we could make our FOSS virtualization platform work such that if you yank the root disk out of a server and put it in another one, everything will work with no hiccups. Well, provided it's exactly the same model and you're going to put it on the same network with all the same IP assignments, you've got a shot. I've actually tried to do this before for the hell of it and I only needed to account for the MAC addresses of the NICs being different, as long as you have no other drives and everything else is exactly the same. I'm sure I could whip up something that scans for the predictable interface name and changes the old MAC stored in the NetworkManager configuration files (and wherever else they might happen to be) and change them to the newly discovered one before making a DHCP request, and <i>maybe</i> that will work, but how certain can I really be? I can test on servers I have and I don't have every possible combination of data center equipment all of our customers have. There is no feasible way to test every possibility. Having an LLM whip up the code for me instead of writing it myself doesn't change that.<p>Ironically enough, that customer is making software for another customer and their own requirement is that it has to run on very hardware on an airplane, which they don't have. So they're working on little NUC clusters in their cubes and at their houses instead, because their company doesn't have extra true server racks for them to use and no budget to acquire them, which probably won't change any time soon given the spike in hardware prices. They're all using AI but what good is it doing? They're spinning their wheels because they're targeting a runtime environment that doesn't exist that they can't test on.<p>It's a weird folly of the Internet age that the largest companies in the software world are all web companies. Mostly, they're media companies in disguise. Their only real product is human attention and they sell it to advertisers. Tech is just the vehicle that allows them to deliver it. We've valorized their "ship as fast as possible" ethic, which maybe matters, maybe doesn't, but it was never the source of their value. Nobody spends ad money on Facebook and Google because of the quality or delivery speed of their software. It's the human users and data they've captured, which to be clear, software plays a huge role in, but it's not a model all software companies can follow. We don't earn revenue from half braindead doomscrollers wasting most of their day with a background drip of vaguely dopamine-boosting noise blasting into their senses while they leak every fact about their lives to media companies. Our customers have to make intentional decisions to spend money out of finite budgets.<p>There's another story on the frontpage right now of Coinbase laying off a bunch of its employees and using AI to write more code. Okay, great, but the best that can do is reduce labor expense. They only earn more revenue if consumers decide they want to buy more Crypto and hold it in Coinbase. If Coinbase is using AI to write their software, so is everyone else, so that doesn't give them any kind of edge on quality or shipping speed. Their success is going to be determined overwhelmingly by whether or not people want to buy crypto, a broad market trend completely out of their control. No one in any business ever wants to admit this, but we're all at the mercy of these broader trends.<p>People are all over this thread citing Ford. Ford didn't decline because they couldn't ship fast enough. They declined because the market stopped wanting what they were making except their full-size pickups, and it's largely just Americans that want that. I don't blame them or think they did anything wrong exactly. People love to do these post-mortems contemplating a world in which someone like Ford accurately predicts every single shift in consumer sentiment that will ever happens and always stays ahead of the curve. It'll never happen. Everything that goes into style eventually goes out of style, and your ability to ship out of style shit faster won't help you.<p>You said you work for a bank and I'm honestly curious. What causes a customer to choose your bank over another? Do you think it has anything to do with software features? I'm lucky I even got a meeting with the customer I was with yesterday. He told me he loves our product and fought hard for it over a chief architect who wanted something else and made them do a long comparison study to prove our product met their needs better. Why did that chief architect prefer the other product? He plays golf with their CTO.</p>
]]></description><pubDate>Tue, 05 May 2026 21:23:10 +0000</pubDate><link>https://news.ycombinator.com/item?id=48028780</link><dc:creator>nonameiguess</dc:creator><comments>https://news.ycombinator.com/item?id=48028780</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48028780</guid></item><item><title><![CDATA[New comment by nonameiguess in "Securing a DoD contractor: Finding a multi-tenant authorization vulnerability"]]></title><description><![CDATA[
<p>You need an ATO for any government software, not just IL6 and higher. What you're experiencing is cloud service providers only get a provisional ATO for their services. Full compliance with IL5 isolation requirements involves controls both on Microsoft's side and on your side. They have some rough documentation here (<a href="https://learn.microsoft.com/en-us/azure/compliance/offerings/offering-dod-il5" rel="nofollow">https://learn.microsoft.com/en-us/azure/compliance/offerings...</a>) and here (<a href="https://learn.microsoft.com/en-us/azure/azure-government/documentation-government-impact-level-5" rel="nofollow">https://learn.microsoft.com/en-us/azure/azure-government/doc...</a>). If you can figure out what you need to do from reading that, well, you're better qualified than I am. It's complicated. I don't think this is on your IT team. The government makes this hard.<p>If you've been out of the game a while, things got significantly more difficult ten years ago around the time of the OPM breach. CMMC2 requirements got a lot stricter. The only bright side here is everyone is subject to the same bullshit, so you're not at any competitive disadvantage. I get how frustrating it is. We've all been there. But go easy on your own team. It's just as frustrating for them.</p>
]]></description><pubDate>Tue, 05 May 2026 20:08:42 +0000</pubDate><link>https://news.ycombinator.com/item?id=48027796</link><dc:creator>nonameiguess</dc:creator><comments>https://news.ycombinator.com/item?id=48027796</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48027796</guid></item><item><title><![CDATA[New comment by nonameiguess in "Computer Use is 45x more expensive than structured APIs"]]></title><description><![CDATA[
<p>Why even bother asking a guy with the statistical acumen to think he can make a reliable estimate of a monthly average from some span of time shorter than two months? He's probably just going to say it doesn't matter and unfortunately he's probably right. If you sound excited enough, you can convince other people and close deals, so who gives a shit if there's really a there there? We'll see how he's doing in another decade. Reminds me of my sister always trying to get into real estate and mortage brokerage speculation, glowing whenever there's a market spike about people pulling in 200 grand a month, yet 25 years later she's still broke, doesn't own her own house, and her daughter is constantly asking me for money instead of her.</p>
]]></description><pubDate>Tue, 05 May 2026 18:16:15 +0000</pubDate><link>https://news.ycombinator.com/item?id=48026381</link><dc:creator>nonameiguess</dc:creator><comments>https://news.ycombinator.com/item?id=48026381</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48026381</guid></item><item><title><![CDATA[New comment by nonameiguess in "K3sup – bootstrap K3s over SSH in < 60s"]]></title><description><![CDATA[
<p>You have to be careful trying to do this kind of thing. The problems you describe having below are problems with peripheral components, not k3s itself. The runtime handles garbage collection and image pinning. Your embedded runtime is using libcontainer, the same thing containerd uses, so the behavior should be identical. Since you support other runtimes, how they handle image pinning, if they support it at all, will vary. Whether or not you embed the CNI plugins and networking controllers, you're seemingly still using CNI since that's how container runtimes attach containers to a network, so whatever problems you had with CNI before would still happen. The DR VM not wanting to join sounds like it was probably due to etcd storing node IPs in the cluster member metadata. If you transfer that to a new host and it doesn't have the same IP, you need to first correct that metadata out of band, which no Kubernetes distro I'm aware of handles automatically but it's a simple etcdctl one-liner. You also need to make sure the client certificate you're using to authenticate with etcd is reissued with the new host IP in its IP SANs, which k3s does do automatically. If you're not using etcd, well, good in a way because it has a lot of cruft and I'm not a fan, but that will be difficult to support because the entire Kubernetes API and many third-party controllers are all designed around how etcd works. k3s doesn't actually require etcd and can use any SQL-based RDBMS thanks to its kine compatibility shim.<p>With all respect, "building it because I want to" and "working toward making (it) production grade" doesn't inspire a ton of confidence. k3s has been part of the CNCF for many years and its developer Darren Shepherd was the founding CTO for both cloud.com and Rancher Labs, which were acquired by Citrix and SUSE. It looks like you're running your own B2B company and hoping to swap out k3s as the underlying engine for multitenancy. That's very risky. Surely Claude can help you understand and use k3s just as readily as help you write a replacement, and I'm sure SUSE sells professional services. I have no clue what they charge but typically you're talking like $300 an hour and you'd probably only need 40 hours.</p>
]]></description><pubDate>Mon, 04 May 2026 11:22:00 +0000</pubDate><link>https://news.ycombinator.com/item?id=48007261</link><dc:creator>nonameiguess</dc:creator><comments>https://news.ycombinator.com/item?id=48007261</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48007261</guid></item><item><title><![CDATA[New comment by nonameiguess in "This Month in Ladybird – April 2026"]]></title><description><![CDATA[
<p>Strava's a route tracker. Assuming you can use it through the website, it probably controls how often it polls location, trading off accuracy for power consumption.</p>
]]></description><pubDate>Sun, 03 May 2026 10:00:02 +0000</pubDate><link>https://news.ycombinator.com/item?id=47995331</link><dc:creator>nonameiguess</dc:creator><comments>https://news.ycombinator.com/item?id=47995331</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47995331</guid></item></channel></rss>