Hacker Newsnew | past | comments | ask | show | jobs | submit | gizzlon's commentslogin

I don't think you're describing a Ponzi scheme. More like a merry go around. Seems pretty common, just turned to 11.

Of course it can stop, an a little history reading will show that it has always stopped, but it can take a long time.

If anything, I fear the AI hype + the orange idiot you put in charge, can fuck you up much faster than otherwise. OTOH, Trump is also a symptom, showing that things were not going great.


What's the "the PaaS experience on Hetzner" ? Link?

> feminist queer dance theory studies

I dunno, but how many % of research in terms of money and effort do you think is spent on that? 0,0001 % ?


> academia gets completely outpaced by private companies

Outpaced? What does that even mean? The whole point is they have different roles and goals. And you need them all, if you cut basic research all the downstream stuff will suffer.


yeah, I started using Meld for diffing

huh, overreaction? As an outsider looking in, the US is looking more autocratic and totalitarian every week. I have 0 doubts Trump would like to become a "strong man" a la Putin, if he can.

What makes you think otherwise?


yikes, this is bad

Would think most forks would be affected as well (?)


Why is this bad? Do you run user-authored lua scripts against your redis?

Do you have your redis exposed without any authentication on the public internet?

If you do either of those, sure, this is bad for you.

I've worked with quite a few redis setups and know the details of even more, I do not know a single redis setup which would be vulnerable to this.

I've never heard a single instance of someone deciding that redis's lua sandbox is secure enough that they'll let their users upload arbitrary lua code and run it, and trust the lua sandbox to keep that redis box safe.

Like, because it's a use-after-free in the lua environment which requires a malicious lua script, this is just such a giant nothing-burger to me and every redis setup I've ever used, all of which only run trusted lua scripts.


> Do you have your redis exposed without any authentication on the public internet?

I will somewhat ashamedly admit to having had a test/development Redis server running on EC2 exploited because I did that. In my defence, it was purely a development/learning exercise and had no real data on it. And it was about 10 years ago. It was an important learning opportunity for me.


Could you use it locally and the upload the result to object storage?

I would probably run both litestream and full backups, to get extra safety


Sure. But you'll be transferring the entire file everytime.

The advantage of sqlite3_rsync is that, if on the other end is an SSH server with sqlite3_rsync, you only transfer the changed pages, and still get a “perfect” copy of the file on the other end.

The advantage of Litestream is that on the other end does not need to live a “server,” and still only changes are uploaded. If you do it continuously, you get many points to recover from, and many of those cross reference each other, saving storage space too. On the flip side, you need the tool to restore.


Are you really optimizing (for) the right thing here?

How many years will it take to get back the time you now spend researching boot time? :p

I used to have a computer that would use several minutes. I would just turn it on, then get some coffee and have a little pee. It was fine :)


> Either fight of the theocratic lunatics that benefit of your taxes and work, then you and all your countrymen will be welcomed into the modern world, or at least move to a place where your work no longer benefits theocratic lunatics.

Thanks! I will steal this quote and use it in response to Americans very soon


Right after the ayatollahs become reasonable people!


Consider applying for YC's Winter 2026 batch! Applications are open till Nov 10

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: