Hacker News: zufallsheld

New comment by zufallsheld in "Moving from GitHub to Codeberg, for lazy people"

zufallsheld — Thu, 26 Mar 2026 21:35:56 +0000

In corporate most people connect their gitlab to ldap or active directory and thus accounts get created automatically.

New comment by zufallsheld in "Trivy under attack again: Widespread GitHub Actions tag compromise secrets"

zufallsheld — Tue, 24 Mar 2026 06:12:23 +0000

> You can't. They can execute arbitrary code. They can download another bash file via Curl and execute that.

Presumably you'd check the code of the action before you include it (and then don't use an action with non-pinned versions). This way you know the action won't execute arbitrary code for this version and won't get any other code because of version pinning.

The docker action you linked is ironic in this regard since every other version in the code seems to be pinned except the one you linked to.

New comment by zufallsheld in "Show HN: An addendum to the Agile Manifesto for the AI era"

zufallsheld — Fri, 13 Mar 2026 21:29:34 +0000

I'm curious: where exactly does it abolish VP roles? I don't see it.

New comment by zufallsheld in "Don't post generated/AI-edited comments. HN is for conversation between humans."

zufallsheld — Wed, 11 Mar 2026 20:07:49 +0000

You could use translation tools instead of llms.

New comment by zufallsheld in "Show HN: Zenòdot – Find if a book has been translated into your language"

zufallsheld — Mon, 09 Mar 2026 20:17:06 +0000

Do you know https://annas-archive.gl/isbn-visualization/? And https://search.worldcat.org/? They could probably help you with your dataset.

New comment by zufallsheld in "Ask HN: What Are You Working On? (March 2026)"

zufallsheld — Mon, 09 Mar 2026 08:54:18 +0000

> I'm cleaning up the code right now and will upload it later today or maybe tomorrow here

MinIO Is Dead, Long Live MinIO

zufallsheld — Sat, 28 Feb 2026 21:16:53 +0000

Article URL: https://blog.vonng.com/en/db/minio-resurrect/

Comments URL: https://news.ycombinator.com/item?id=47200342

Points: 224

# Comments: 92

New comment by zufallsheld in "DNS-Persist-01: A New Model for DNS-Based Challenge Validation"

zufallsheld — Thu, 19 Feb 2026 07:05:33 +0000

Hetzner does not charge any money for their dns service and they have an api.

New comment by zufallsheld in "Show HN: Renovate – The Kubernetes-Native Way"

zufallsheld — Wed, 11 Feb 2026 21:14:26 +0000

Presumably a CR can be validated by k8s against a schema and will fail at an early step. I admit I like the operator-pattern.

New comment by zufallsheld in "Allowlisting some Bash commands is often the same as allowlisting all"

zufallsheld — Wed, 28 Jan 2026 20:43:57 +0000

Same thing for allowing specific sudo-commands. Many tools (like vim or the tools mentioned in the article) would have the same problem when allowing them to be run with root privileges.

New comment by zufallsheld in "BirdyChat becomes first European chat app that is interoperable with WhatsApp"

zufallsheld — Sun, 25 Jan 2026 08:50:56 +0000

With this project (https://github.com/spantaleev/matrix-docker-ansible-deploy/), setting up the bridges gets a lot easier. After the initial setup, upgrading the bridges is painless.

New comment by zufallsheld in "I Like GitLab"

zufallsheld — Sat, 24 Jan 2026 18:41:35 +0000

Um, no? It does a tail.

New comment by zufallsheld in "I Cannot SSH into My Server Anymore (and That's Fine)"

zufallsheld — Sun, 18 Jan 2026 15:09:10 +0000

Yeah, and then it probably isn't the developers job to fix that but rather the DevOps engineer's one.

Also saying "the developer has to fix this" is something we tried to abolish when talking about DevOps. What about shared responsibility? Bridging the knowledge gap.

New comment by zufallsheld in "I replaced Windows with Linux and everything's going great"

zufallsheld — Sat, 10 Jan 2026 21:30:48 +0000

That's the good thing with open source. You can theoretically fork it and remove what prevents you from using Kate as root.

New comment by zufallsheld in "GitHub Actions has a package manager, and it might be the worst"

zufallsheld — Tue, 09 Dec 2025 20:49:33 +0000

AFAIK because "act", the tool to run github actions locally, was there and there was no need to create something else. Also makes it easier for people to switch from github.

Also see https://docs.gitea.com/usage/actions/design

Comparing the homepage-claims of popular Git hosting providers

zufallsheld — Tue, 02 Dec 2025 14:33:13 +0000

Article URL: https://www.zufallsheld.de/2025/12/02/comparing-homepage-claims-of-git-providers/

Comments URL: https://news.ycombinator.com/item?id=46121564

Points: 3

# Comments: 0

Python Certifi and Custom CAs

zufallsheld — Sat, 22 Nov 2025 16:24:06 +0000

Article URL: https://www.zufallsheld.de/2025/11/22/python-certifi-custom-cas/

Comments URL: https://news.ycombinator.com/item?id=46015874

Points: 2

# Comments: 0

New comment by zufallsheld in "Dynamically include files in GitLab-CI"

zufallsheld — Wed, 12 Nov 2025 20:08:19 +0000

Well, yes. In this project where I needed to do this, we thought about removing the pipeline completely and replace it with something custom made. But as always: gitlab worked and there was no immediate need to replace it.

Simple Webhook-Tester in OpenShift

zufallsheld — Mon, 10 Nov 2025 13:30:41 +0000

Article URL: https://www.zufallsheld.de/2025/11/10/webhook-tester-in-openshift/

Comments URL: https://news.ycombinator.com/item?id=45875821

Points: 1

# Comments: 0

New comment by zufallsheld in "Tiny electric motor can produce more than 1,000 horsepower"

zufallsheld — Mon, 03 Nov 2025 11:19:53 +0000

I guess you're in the minority here. In Germany, everything Remotely large will be measured in football fields or "Saarlands".