Hacker Newsnew | past | comments | ask | show | jobs | submit | ldoughty's commentslogin

I had a similar push years ago, but I did take this approach once step further. For a similar reason Jeff mentions -- lower maintenance over time.

I was frustrated that (because my posts are less frequent) changes in Hugo and my local machine could lead to changes in what is generated.

So I attached a web hook from my websites GitHub repo to trigger an AWS Lambda which, on merge to main, automatically pulled in the repo + version locked Hugo + themes. It then did the static site build in-lambda and uploaded the result to the S3 bucket that backs my website.

This created a setup that now I can publish to my website from any machine with the ability to edit my git repo. I found it a wonderful mix of WordPress-like ability to edit my site anywhere along with assurance that there's nothing that can technically fail* (well, the failure would likely, ultimately block the deploy, but I made copies of my dependencies where I could, so very unlikely).

But really the main thing I love is not maintaining really anything here... I go months without any concern that the website functions... Unlike every WordPress or similar site I help my friends run.


Exactly; and I'm currently tinkering with different deployment options. One thing I may do to speed up the deploy is run the Hugo compilation on the server itself, so the only push that needs to happen for a new post is a few KB via git. A post-receive hook would then run Hugo and deploy into my public www dir.


Molten salt solar power doesn't care. It remains hot.

Advancements in solar also are improving with clouds.

Also, you know, batteries. When someone makes it cost effective to install a device to sell your car battery power on the grid we'll also have a better time managing the grid during spikes... Would be nice if that also did home battery backup in blackouts... 70 kWh would get me through most of the ones I've experienced.


Molten salt solar power plants are completely obsolete. See for ex. Ivanpah being shut down early because the power its generating is too expensive compared to Solar PV: https://www.renewableenergyworld.com/solar/once-an-engineeri...


Molten salt absolutely does care, keeping it molten controls how much power can be withdrawn. It’s a form of thermal battery (and an inefficient one).

If the sun is shining vs not (and if further withdrawal will freeze the salt) absolutely controls power output.


What you describe sounds more like keeping your assets a secret... and if you feel defeated because the government can know, how do you feel about hiring an accountant? Or executing stock trades? You can't keep those activities a secret from those agents working for you. You would probably expect them to keep their privileged information about you _private_ though, right?

And I think that's what the parent post is talking about. Today's companies make you agree to 3 50-page documents which they can update at any time and your continued use after such silent updates constitutes consent.. and at some point they will sell your financial status/well-being to people for profit. So the more you feed them the more of your data that is being easily sold.

We ultimately probably can't stop that, but we can make it more difficult. Many apps like this would take your information and sell it.. having an option that lets you track your own finances without becoming a product is nice.


Right on. In this case, I used "private" to mean "the makers of this particular product don't have a ton of my financial information." I don't expect a product like this to prevent my government, or my brokerage, or my bank, or even a middleman account aggregator, from knowing about my money. But something like this can be one less thing, at least.


Also it’s more about having the optionality. There are tons of cloud-based and connected SaaS trackers out there, but very few local ones. Having options to:

– Install a piece of software and run it locally, no subscription, no cloud – Have to right to use a nicer app instead of a spreadsheet – not hand over your banking creds. Some banks will void your account insurance if you do – Reduce your exposure by not putting all your financial data on some startup’s servers


They started with the left hand as requested, but made right hand version as well.

I wish these were also commercially available... I'd love to pay for one of these... I know it's open sources, but I don't know the language nor do I have the skills to construct one myself.


I try to avoid crons at the top of the hour, partly because of this... but also because (in shared / serverless infrastructure) I assume a lot more people are setting their crons for 'on the hour' so there's more resource contention... I also aim for 'after 4am' where I can as well, or 'before midnight', to avoid this whole range.


To incrementally improve that tactic, systemd has RandomizedDelaySec, which is a convenient way to reduce the possibility of scheduling conflicts.


I prefer to combine this with FixedRandomDelay=true. FixedRandomDelay ensures that the randomized delay is an arbitrary number up to RandomizedDelaySec, but it is deterministic per server and timer. I find this useful because this means the timer will always run at XX:12:45 on server01, always run on XX:06:23 on server02 and so on.

This combines very simple configuration, while being predictable and spreading out timers well.


One trick for cron is to prepend the actual command in the crontab with something like

    sleep $(( $(od -N1 -tuC -An /dev/urandom) % 60 ))m ;
which will delay it by 0 to 59 minutes at random.


I think it's completely different ballparks to compare the skill sets...

It is cheaper/easier for me to hire cloud infrastructure _capable_ people easier and cheaper than a server _expert_. And a capable serverless cloud person is MUCH cheaper and easier to find.

You don't need to have 15 years of a Linux experience to read a JSON/YAML blob about setting up a secure static website.. of you need to figure out how to set up an S3 bucket and upload files... And another bucket for logging... And you have to go out of your way now to not be multi-az and to expose it to public read... I find most people can do this with minimal supervision and experience as long as they understand the syntax and can read the docs.

The equivalent to set up a safe and secure server is a MUCH higher bar. What operating system will they pick? Will it be sized correctly? How are application logs offloaded? What are the firewall rules? What is the authentication / ssh setup? Why did we not do LDAP integration? What malware defense was installed? In the event of compromise, do we have backups? Did you setup an instance to gather offloaded system logs? What is the company policy going to be if this machine goes down at 3am? Do we have a backup? Did we configure fail over?

I'm not trying to bash bare metal. I came from that space. I lead a team in the middle of nowhere (by comparison to most folks here) that doesn't have a huge pool of people with the skills for bare metal.. but LOTS of people that can do competent severless with just one highly technical supervisor.

This lets us higher competent coders which are easier to find, and they can be reasonably expected to have or learn secure coding practices... When they need to interact with new serverless stuff, our technical person gets involved to do the templating necessary, and most minor changes are easy for coders to do (e.g. a line of JSON/YAML to toggle a feature)


This comment pretty much sums up this argument. Well said.

As with everything, choose the right tool for the job.

If it feels expensive or risky, make a u-turn, you probably went off the rails somewhere unless you’re working on bleeding edge stuff, and lbh most of us are not.


Apple collects no money from Steam sales, so they don't see a reason to support it.

You don't buy Apple to use your computer they way you want to use it. You buy it to use it the way they tell you to. E.g. "you're holding it wrong" fiasco.

In some ways this is good for general consumers (and even developers, with limited config comes less unpredictablilty)... However this generally is bad for power users or "niche" users like Mac gamers.


> Apple collects no money from Steam sales, so they don't see a reason to support it.

That is true, but now they are in a position where their hardware is actually more affordable and powerful than their Windows/x86 counterpart - and Win 11 is a shitload of adware and an annoyance in itself, layered ontop of a OS. They could massively expand their hardware sales to the gaming sector.

I'm eyeing at a framework Desktop with an AMD AI 395 APU for gaming (I am happy with just 1080p@60) and am looking at 2000€ to spend, because I wan't a small form factor. Don't quote me on the benchmarks, but a Mac Mini on M4 Pro is probably cheaper and more powerful for gaming - IF it had proper software support.


Apple collects no money from Photoshop, Microsoft, or anything else that runs on the Mac besides the tiny minority of apps sold on the Mac App Store.

Not to mention many subscription services on iOS that don’t allow you to subscribe through the App Store.


The point is that they don't want it to recover. This is evidence that the US Government can't be trusted to provide the service themselves, and those functions should be privatized / contracted out instead... like how our Defense budget is so small thanks to us paying government contractors for everything we need, like $5,000 screwdrivers and $7,500 toilet seats installed by $300/hour Mechanic Specialist II's.


These people mostly already and effectively stopped working... The people I know that took this offer were told to stop showing up for work back in March-ish time frame. I see nothing in the article to suggest a sudden wave of new people taking up this offer -- as far as I can tell, the only thing that's about to change from what this article says is that our unemployment numbers will start to reflect it if those federal workers did not find new employment.


> These people mostly already and effectively stopped working... The people I know that took this offer were told to stop showing up for work back in March-ish time frame.

Well, yes. That's what the DRP was, they were put on administrative leave through 30 September. It's kind of hard to work when you're on admin leave. Are you surprised by the fact that this group of DRP folks are resigning on 30 Sept when that was the agreement they signed under the DRP? Did you expect something else?


Businesses are not expected to protect your freedom of speech. If you want to say stuff that no one wants to print, you can't sue a business for not printing it.

The government can't stop you from requesting a permit and saying it on public lands, though... And back when telecoms were common carriers, you could have done such from your home Internet, now you can only do it from your voice line.


Right but ISPs and services like CF should be neutral parties just like the Cisco routers and Corning fiber. They should not be arbiters of what’s currently acceptable. Thats not to say they are not subject to jurisdictional law but rather they should not be their own law imposing their views.

Now of course if they want to provide you the user with tools to filter or hide things you disagree with out, by all means.


Yep- your phone or electrical provider don’t monitor your speech for objectionable content and neither should someone like Cloudflare once they achieve ’utility’ like status.


>your phone or electrical provider don’t monitor your speech

not yet.


I guess you missed the case of Google and SFPD going after a dad for taking a photo of his son's genitals to share with mom and doctor.


Sorry, but sometimes they are. Laws are reactive so can only be updated when harm is done. But if businesses and people act to hold up the spirit of those laws then the harm doesn't happen in the first place. It's proactive vs reactive.

Plus, bring proactive saves everyone a whole lot of time and money. So many things would be better if people (and every entity) was just trying to do their best and no one was trying to fuck each other over. You may call it a dream and that's fine, but also remember that the vast majority of people already operate that way. A small number of people do the most harm


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: