Hacker Newsnew | past | comments | ask | show | jobs | submit | jpleger's commentslogin

Ah yes the incredibly common practice of... checks notes backporting security packages in node packages.

I wonder if there is any correlation between them moving towards Azure.

https://thenewstack.io/github-will-prioritize-migrating-to-a...


They are dealing with vastly more activity as a result of AI usage. It's that simple.

They’re pushing out AI slop as production services

That seems kinda dumb. I would never purchase a car without physical controls for key things. It is such a distraction to pull your eyes off the road for common tasks.

This is cool, seems like a next gen cadquery, which was really cool to see.


K, but if these are experts that literally do not exist in the US, why are the salaries not higher than median? It wasn't meant to fill junior level positions.

This program was meant to allow talent that is not available in the US, so that gaps could be filled with experts from overseas.


Things feel like the 2008/2009 time period for hiring, but stock valuations and earnings are still extremely high, which is kinda odd. It feels so strange right now for employment prospects.

I don’t know if anyone else feels it, but the constant under resourcing and do more with less mindset since 2021/2022 have probably made things worse too.


This year, I started actively day trading S&P 500 because of all the volatility. Maybe its biased because I have been staring at charts more diligently than in the past, but IMHO you can almost feel the tension in the charts right now.

2023/2024 would have small swings of like $2-$4, with $5-10 movements on a maybe 1 out of 20 days. Since Trump took office, it has been almost daily $6-$10 moves, with the rare day of only $3-$5.

Its great for day trading, but I don't know how I feel about it in general. I almost feel like this is the oscillation before the car starts to shake itself apart.


Hahaha, CVE was created because industry refused to track and report on things in a consistent and transparent manner. When given the option, business will almost always choose the easy path, and things like vulnerability management programs will be set back years if not decades when the external accountability goes away.

In general, lawyers and CTOs would probably love to see CVE go away or be taken over by industry.

Source: been working in security for 20+ years.


Because CVE means accountability. It’s very easy to shift accountability onto someone for an unpatched CVE. If given the chance to escape that accountability I’m sure every megacorp would jump at it.


Yup. I'd say around 15% of very severe incidents are ever announced publicly. In most cases, the default is cover-up and hope no one finds out.

To anyone who thinks a libertarian/anarcho-capitalist/Network States "utopia" of Retire All Gubberment Employees (RAGE) is a "good thing", thing about air, water, and soil pollution from sewage to arsenic to particulates to lead to radioactivity. Greedy sociopaths DGAF who they hurt, which is perhaps why James Madison observed: "If all men were angels, no government would be necessary." Obviously, this is not human nature and so some laws, enforcement, and regulators is required indefinitely. Anyone who tells you differently isn't a serious person.


Makes me remember some of the days I had in my career. There were a couple really interesting datacenter things I learned by having to deploy tens of thousands of servers in the 2003-2010 timeframe.

Cable management and standardization was extremely important (like you couldn't get by with shitty practices). At one place where we were deploying hundreds of servers per week, we had a menu of what ops people could choose if the server was different than one of the major clusters. We essentially had 2 chassis options, big disk servers which were 2u or 1u pizza boxes. You then could select 9/36/146gb SCSI drives. Everything was dual processor with the same processors and we basically had the bottom of the rack with about 10x 2u boxes and then the rest was filled with 20 or more 1u boxes.

If I remember correctly we had gotten such an awesome deal on the price for power, because we used facility racks in the cage or something, since I think they threw in the first 2x 30 amp (240v) circuits for free when you used their racks. IIRC we had a 10 year deal on that and there was no metering on them, so we just packed each rack as much as we could. We would put 2x 30s on one side and 2x 20s on another side. I have to think that the DC was barely breaking even because of how much heat we put out and power consumption. Maybe they were making up for it in connection / peering fees.

I can't remember the details, will have to check with one of my friends that worked there around that time.


Are there any alternatives these days? Or just that you weren't expecting to have systems boot off the network?


The later. I was expecting local boot because pxe introduces a rather big dependency for potentially many machines. Issues with network or issues with pxe server and nothing boots


Consider applying for YC's Summer 2026 batch! Applications are open till May 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: