Hacker Read top | best | new | newcomments | leaders | about | bookmarklet login
user: nunez (* users last updated on 10/04/2024)
submissions comments favorites similar users
created: 2016-03-29 12:16:10
karma: 5603
count: 3922
Avg. karma: 1.43
Comment count: 3902
Submission count: 20
Submission Points: 82
about: More about me: blog.carlosnunez.me

My old HN accounts: { carlosnunez, mrcrassic }

[ my public key: https://keybase.io/carlosonunez; my proof: https://keybase.io/carlosonunez/sigs/9e8XmZNZjImgaVuHYDtW_CkFlp2vTk51OrcpLE9aG2w ]



user: paulddraper (* users last updated on 10/04/2024)
submissions comments favorites similar users
created: 2013-11-12 22:39:23
karma: 16686
count: 9729
Avg. karma: 1.72
Comment count: 9656
Submission count: 73
Submission Points: 556
about: Father of three.

CTO at Redo.

Co-founder of Rivet Health.

Ex-Lucid Software

https://www.linkedin.com/in/paul-draper/




Why is a car required to have a spacious house?

The necessity of cars is dependent exactly on population density.

If you want private land (house, yard), you will always need a private car.


Greyball officially makes Uber the Zenefits of the ridesharing industry now.

Worked for Uber.

Damn; good to know, thanks!

Good to know; thanks!

I wouldn't touch OpenSSL with a ten foot pole.

Wait until you hear about OpenSSL.

They are invaluable for last-minute itinerary changes, at least that's what I've found.

I have to appreciate the half dozen suggestions for airline ticket management.

HN is nothing if not helpful and well-adjusted.


Use Containerize for that.

You can create rules around which URIs open in what containers, even with regex.


All URLs are URIs.

Sure! I like people. People make work fun. People that disagree with you (or that you disagree with) make life fun. Most of us spend the majority of our working hours working, and that work makes it easy to spark conversations with others that would otherwise not be had. Not having that for 8+ hours would make me feel incredibly lonely after a while.

(I love working at the cafe and shared work spaces, but that isn’t the same.)


Yep. And that's not weird.

I work where I do now largely because my friends do. I mean, if you're going to spend 60 hours a week in close-ish quarters with people, it'd be nice if you enjoyed it as much as possible.

Granted, there is an extreme, and there are discrimination laws, but I do want to spend time with people I get along with.


Sort of

Every build system is like Make, but more friendly for their language (IIRC Make was originally for compiling C and C++). Make just so happened to become generic enough to build damn nearly anything and also get bundled into most Linux distros.

I think the author is arguing that having to install a shit ton of dependencies to use some other Make-like build system is garbage. That’s true in some cases. But I wouldn’t want to use a Makefile for packaging Node; npm is great for that and understands how Node works.


OT but make (GNU make specifically) is an amazing piece of software.

It seems every build tool since then has intentionally disregarded the file-based dependency graph that is the elegance of make. Crazy.

(There are modern Blaze-clones which continue the spirit, but with a steeper learning-curve.)


Correct. You can use `yq` to do this easily.

    yq -o json .

You could consider

    < foo.json jq | pbcopy

My first thought is "which rich family member can they coast off of when shit gets really bad" or "where's the rest of the money you haven't touched yet?"

So many of these "I've been funemployed for 5 years" articles NEVER talk about the hidden asterisk that, well, actually, they have plenty of money and are just fine; they're just conventionally broke.


Is that...surprising?

By definition those who retire have enough wealth to not work.

The headline and the article make it seem unusual that working class people aren't wealthy.


> DevOps was banned because "The law does not allow us to do this"

I want that on a shirt lol


> There really should be a way to ban people doing this shit.

???

There is. It's called "doing nothing."

It takes work to add a dependency to your project; they don't spring out of nothing.


Can't these things be learned by reading?

Virtually everything can be learned by reading.

Routers supplied by AT&T here in the US for their fiber gigabit service do RADIUS authentication with the carrier gateway using certs built into the device. There used to be an older version of this router that had known vulnerabilities which made extracting those certs possible but they've since been patched and those certs have been invalidated.

I recommend a firewall in that case.

NAT itself would only be security-through-obscurity.


I didn't know that Vimeo was spun out of IAC. (IAC owns Match and Tinder.)

Vimeo has $1b market cap and was looking at $100m in revenue this year. [1]

Sure it's not YouTube (yet), but it's nothing to sneeze at either.

> many video producers are extremely unhappy using youtube

YouTube basically created an entire new market around video production. If it weren't for YouTube (or a similarly popular service), I'd hazard a guess that many of those video production jobs simply wouldn't exist.

It's hard to complain about a market with a too-big-player when the player basically created the entire market.

[1] https://www.reuters.com/article/us-iac-interactive-vimeo/iac...


That's awesome.

That's awesome.

this is fantastic for anyone wanting to run Chrome inside of Lambda (one of the biggest challenges is getting Chrome to fit)

AFAIK, that's the only what to run Chrome unless you disable Chrome's sandboxing.

Definitely not "completely"

Still far from "every"

highly depends on the person but i hate dancing with strangers and would never do this

in contrast, i absolutely enjoy drinking tasty beer and cocktails with people i don't know


I hate dancing. I'm not good at it, and there are much more efficient ways to exercise or socialize.

I think it's a soul-crushing timesuck, and you obviously should think so too.

</s>

Tone it down. Anecdotes about pastime preferences aren't news.


> I don't think that was an accurate prediction of the past 10 years. Hollywood lost the copyright wars: even the most locked down TV dongle will happily play pirated movies with the right apps

Did they?

Remember how "music lockers" like Google Play Music and the original incantation of Amazon Music, used to be a thing? Yeah, Big Music killed that. The closest thing we have now is music matching services that will happily nuke your music when the publisher delists those compositions for whatever reason.

Plex and the like make organizing and consuming pirated movies easy, but finding the source of those movies is still not trivial, and people _still_ get scary emails from their ISPs if they detect that enough of your traffic is being used for this purpose.

The Netflix app does not allow AirPlay (used to) or Bluetooth streaming (also used to).

It's still very much a cat and mouse game, and the cat is getting smarter every day.


> which could potentially shut them down in the long run

Yes, if we ever possessed the technology to pirate movies, everyone would watch them and the industry couldn't survive.


Does business insurance cover this?

Is that common? Most small business insurance I've seen is for liability, not for damage to the company by its own employees.

I am admittedly not well versed in this.


F for respects for everyone who got wrecked by BOM (byte-order mark) and CRLF vs LF.

I thought it was byte order mark.

According to those I asked on the matter, it was to mitigate selling 'bad' work. Which didn't really go away.

I'm guessing either the author had a very strong personal reason (i.e. really wanted out), or the business was not particularly sustainable/growth-favorable for one reason or another.

From what I saw when I was there, a large part of the top brass were there since before IPO...

I suspect this was pre-IPO.

Can't these things be learned by reading?

You can learn an incredible amount about those through reading, though it's slower than just doing it so most people don't.

Sure!

Much warmer weather. Very very VERY little snow. Amazing roads (I love to drive). More value for my rent money. "No state income tax." (This benefit will go away once I start paying property taxes if we ever buy a home here.) Lots of opportunity for learning how to start a business. (Lots of businesses here; many are non-tech, which I am fine with since tech companies are kind of overrated and there are plenty of big markets to tackle outside of tech.) Wife is from nearby and some of her family is here.


I like the warm weather, beaches, neighborhood friendliness, greenery, and relaxed cost of living.

Most people have heard of blockchain (through crypto), but non-techies are _actually using_ ChatGPT for daily tasks. Departments of ed and universities moved fast in integrating anti-ChatGPT into their programs.

The hype is real.


I've had plenty of non tech people talk about chat gpt.

Especially college students


These arguments are weak, IMO.

Yes, monorepos can be slow to browse through if the VCS isn’t configured to handle the size (sparse pulls aren’t the default with Git; that alone can make a massive difference when your repo is massive). Polyrepos can be just as slow? however; what’s worse is that there are more of them.

I remember working with a repo that was >20GB large, mostly from videos (we didn’t know that initially). Pulling that repo took _forever_. Nobody on that team cared because they almost never did a fresh pull and accounted the time it took for their CI/CD to do so in their reports. If it were a monorepo, MANY teams would’ve felt that pain more immediately.

Yes, monorepos require some tooling to prevent a gazillion artifacts from being deployed at once (and to specify what’s related to what if code lives across different folders). So do polyrepos! I’ve configured a few Jenkins jobs for my clients to dynamically pull different co-dependent Git repositories at build time. It’s a pain! Especially when multiple credentials are involved! Then there’s the whole “We have a gazillion repos and 20% of them are junk” problem, which requires automated reaping; also a more difficult problem than it seems.

Same with refactors. Refactors across polyrepos are just as much of a pain because you’re now subject to n build and review processes/pull requests, and seeing the entire diff is hard/impossible. This introduces mistakes. If anything, refactors in polyrepos are more of an event than they are for monorepos.

While monorepos have their problems, I will continue to advocate for them because the ability to see what’s going on in one place and for any developer to propose changes to any part of the code (theoretically) is massively beneficial, ESPECIALLY for complex business domains like healthcare or financial services. Plus, you will have a RelEng/BuildEng team when your codebase and engineering org gets large enough; why add more complexity by creating a gazillion repos that are possibly related to each other?

(The large engineering organization without a team focussed on tools and builds doesn’t exist. If it doesn’t, that means that some/many developers are spending way more time spinning their wheels on build systems than they should be.)

The real reason why monorepos don’t happen in the aforementioned domains is because there’s no easy way to allow them and pass regulatory audits.

Many regulating bodies require hard boundaries enforced by role-based access control, especially for code that deals with personally-identifiable information or code between two or more domains that have a Chinese Wall between them. “All of my developers can check out the entire codebase” is an easy way to get fined hard, and polyrepos are much easier to restrict access into than folders in a monorepo are (one advantage not mentioned in the article). While you _can_ restrict access into directories within a single repo, doing so is not straightforward, and most organizations would rather not waste the engineering effort.

I would like to think that Google and Facebook have gotten away with it because they implemented a monorepo from the very beginning and the engineering involved in splitting it up is much more involved than engineering around it.

That said, I continue to advocate for them because discoverability is good and it builds a better engineering culture in the end. I would rather hit those walls and make just-in-time exceptions for them than assume that the walls are there and create a worse development experience without exploring better alternatives.


> is there any real difference between checking out a portion of the tree via a VFS or checking out multiple repositories? There is no difference.

How big is your monorepo? Assume each line of code is a full 80 characters, stored via ASCII/UTF-8. That 67 million lines of code in 5GB. I can fit five of those on a Blu-ray.

> The end result is that the realities of build/deploy management at scale are largely identical whether using a monorepo or polyrepo.

True.

> It might be deployed over a period of hours, days, or months. Thus, modern developers must think about backwards compatibility in the wild.

Depends entire on the application. Lots of changes are deployed within short periods of time with low compatibility requirements.

> Downside 1: Tight coupling

Monorepos do often have tightly coupled software. Polyrepos also often have tightly coupled software. Polyrepos look more decoupled, but pragmatically I can't say I've noticed a much of difference.

> Downside 2: VCS scalability

I've also heard Twitter engineers complain about the VCS. But what is the scope of the author's discussion? 1,000 engineer orgs? Or 20 engineer orgs? Those are vastly different levels of engineering collaboration. I assume the article was not written to cover both of those. Or was it?

---

Ultimately, I think the author implicitly assumed a universe of discourse of gigantic repos with hundreds and hundreds of daily contributors.

When people talk about the spectrum of monorepo vs polyrepo architectures, that is very extreme. For example, last I knew, Uber has more repos than it did engineers. And I don't assume that "polyrepos" always means multiple repos per engineer.


I think this viewpoint is really interesting, especially when one considers how massively incentivized this addiction is (by way of high-paying jobs with generally-great benefits and working environments).

Or...they need money to fuel their addiction which is simultaneously preventing them from finding gainful employment.

Legal | privacy