chaospatterns

@ chaospatterns @lemmy.world

Posts

28
Comments

150
Joined

3 yr. ago

1d ago

Why do so many programming languages have their own package manager?
Jump
chaospatterns @lemmy.world 1d ago

Now you have two package managers. The problem is that Nix needs to create a folder structure that matches what your language package manager wants to see.
Even if the language package manager goes away, languages have slight differences that can't be totally abstracted away. C/C++ have .h and .c files. JS has its own thing, C# has a .dll. Each language has difference opinions on how symbols get resolved.

6d ago

Fixing bugs in Event Sourcing is hard, for real?

One of the most complicated systems I worked on was based around event sourcing with a bunch if AWS DynamoDB tables and Kinesis streams. The original designers thought the inherent auditing capabilities and ability to generate view tables of anything would be a great for data durability and performance. In reality, nobody really understood how to effectively use it and ended up with events that were giant entity blobs so you couldn't understand changes, expensive AWS bills, numerous view tables that were impossible to know if they were in sync and correct, and difficult to evolve systems.

Event sourcing is a cool system, but friends don't let friends build systems they don't understand. There's a lot to event sourcing and I agree with the gist of this article of not modifying events. Though you can end up with a lot of events in a complex data model.

7d ago

U.S. FCC approves giant space mirror to deliver 'sunlight on demand,' but what are the legal implications?

Jump

chaospatterns @lemmy.world 7d ago

50k satellites? Who is going to pay for that much light? At least with Starlink/Satellite Internet there's wide spread demand from many different consumers, but for sunlight on demand? That just sounds like marketing to investors instead of a legitimate plan.

1w ago

Codeberg had a major outage today! About 7 hours of complete down (July 31, 2026)

Jump

chaospatterns @lemmy.world 1w ago

The problem is still concurrency. If the application, in this case the git CLI, is not thread-safe, then you could run into unsafe data mutations causing data corruption.

Imagine two pushes that come in around the same time. S3 doesn't have the locking mechanics you need to ensure that only one of those writes win and the other fails. You need to upload the individual commits (which can be isolated except in the case of multiple writes with a partial write), but then the branch and HEAD pointers have to be serialized. I've done a lot of work with distributed systems in AWS and my experience has always been to layer something like DynamoDB on-top of S3 to provide this.

My knowledge of at least one distributed Git system was that they had a fleet of Git data servers and a router on front. The router would fan it out to 3 or more data servers where each data server would store copies. But ultimately there's some application logic that is aware of the underlying filesystem and manages locking.

GitHub shares some of their architecture here: https://github.blog/engineering/infrastructure/stretching-spokes/

1w ago

Codeberg had a major outage today! About 7 hours of complete down (July 31, 2026)

Jump

chaospatterns @lemmy.world 1w ago

Codeberg runs on Forgejo which is a fork of Gitea.

I'm running Forgejo myself and am running into difficulties with High Availability. Many data files can be stored in S3 compatible interfaces, but the Git repos are stored as Git files on disk. That's hard to distribute across multiple hosts. Something like NFS seems to be prone corruption and Forgejo has to be able to lock.

An open issue on clustering : https://codeberg.org/forgejo/discussions/issues/259

2w ago

What's your favourite thing to self host and why?

Jump

chaospatterns @lemmy.world 2w ago

I looked quickly, but didn't see an answer. Does Sure.am let you download your transactions into something like Actual or Firefly-iii or is it all within the hosted platform? I saw an option to self host, but didn't see the integrations.

I'm trying to find something to pull into my firefly-iii instance and am currently abusing the Monarch API but it has some issues. I also wrote my own scrapers but they are fragile and I'd rather just integrate directly with plaid.

1mo ago

Unpopular truth: Telemetry collection actually happens because people are garbage at being helpful to support

Jump

chaospatterns @lemmy.world 1mo ago

Agreed. As a software dev, a huge portion of my job has been fixing exception handling and adding centralized error handling to figure out what bugs my users are experiencing. Many devs I worked with seemed to only care about the happy path.

1mo ago

Steam Survey - June 2026 shows Linux dip to 3.69%

Jump

chaospatterns @lemmy.world 1mo ago

I think steam randomly selects users each moth to contribute. You'll get a pop up asking you to share.

Its been awhile since I took stats, but we should expect some fluctuations. Whether it's statistically significant or not depends on the confidence intervals.

1mo ago

Roska Bridge: How a pro-Russian IMS exploits vulnerabilities of decentralised platforms to spread propaganda

Jump

chaospatterns @lemmy.world 1mo ago

We're going to have to start treating it like email with anti spam filtering and reputation. Things like rspamd are very advanced with a lot of signals that it uses.

Right now, the best part of the Fediverse is its weakest point: federation. I can easy spin up my own instance, connect it to lemmy.world and start posting. I can create accounts to make it look legitimate and it takes admins on one or more instance to first start banning individual accounts, then realize the entire instance should be banned. I can then create more domains if I want to. Lemmy.world uses CloudFlare's anti-bot (which has its privacy ramifications) but that can be trivially be bypassed with federation.

I've been thinking Lemmy needs automated anti spam (content filtering) that then feeds into user and instance reputation to automatically flag domains, IPs, etc.

Look at the recent posts about Reddit's anti-spam practices, it has the advantage of a single system able to collect a lot of metrics. Unfortunately you kind of need it to fight advanced spammers.

1mo ago

Permanently Deleted

Jump

chaospatterns @lemmy.world 1mo ago

this is not an “AI” data center

I was a bit more high-level in the supply chain planning side (more on the long-term supply planning than rack planning), but AWS definitely has different rack types including AI rack types with dense GPU hardware setups. Are they slicing the buildings by rack type or is it heterogeneous with some AI racks + compute racks?

1mo ago

TIL most big techs are radically on the monorepo side

Jump

chaospatterns @lemmy.world 1mo ago

And Amazon doesn't use monorepos. Windows is only one product that Microsoft offers.

1mo ago

Do you host your own AI?

Jump

chaospatterns @lemmy.world 1mo ago

Partially. I started with hosting my own llama3.2 + granite4 models using Ollama for my Home Assistant smart home and for general chat with OpenWebUI. I also run whisper for speech-to-text locally on my 1080 Ti GPU. I like the privacy and ownership of my self-hosted models, but I started to run into limitations with the small weights. So I built some tools that allow me to selectively route traffic to larger models hosted on DeepInfra depending on my need. For example, to GLM/Kimi models for code reviews or for my custom harnesses or harder problems.

2mo ago

Volkswagen now blocks grapheneOS

Jump

chaospatterns @lemmy.world 2mo ago

It's a question of security risk profiles.

Security ultimately often times comes with a tradeoff for user experience or privacy.

How does device integrity checks materially affect the security posture for theft when considering this system? Presumably the security checks for remotely unlocking a car is based around credentials and authN/authZ for the unlock service call?

Enforcing client side security has entered the picture recently, but a lot of it comes from security checklists from people saying did you add this check? Sure adding a device integrity check may stop at least one malicious actor, but is it worth the cost? To most companies, they're going to say they don't understand or care about the impact.

They could just go back to key fobs since those can't run arbitrary code.

2mo ago

Better Forgejo Action Runners config

Jump

chaospatterns @lemmy.world 2mo ago

Nice share. I'll look into it more and try it out. Thanks.