Hacker Newsnew | past | comments | ask | show | jobs | submit | sbuas's commentslogin

Where is the source ? This looks fishy, no way I'll run this bin..


It ain't open source. You're free not to run closed-source software (tho OS/apps might be an issue ;)), but "closed source"/proprietary is 0 evidence of bad intent.

And (sad but true) "open source" is 0% evidence of goodness - as the whole industry of "supply chain attack protection" can enthusiastically attest.

Just so you know, in building this I ran hundreds of rust crates dozens of times on my personal laptop. In building BrowserBox I've run millions of times npm packages.

ghost is actually a thing that helps with this risk - precisely because it provides isolated hybride (CI/automated + human in the loop/AI) dev flows, easily on your existing GH Actions minutes. Free minutes! (Thanks GH <3). How does it help? Because it's an isolated machine. Not even your ssh key is on it (SSH agent forwarding), but you can clone your repos and run CI/builds/dev/agents, and even gate secrets using GH's existing surface for this.

It's a goto way to do dev securely - and protect against the very thing you (and many) falsely suspect ghost of. A paradox! But also a great opportunity to discuss where ghost helps - with the precise thing ppl mistook as doing. :)

If you're super concerned - do a "ghost bootstrap" - create a workflow that creates a machine with a shape you want and add's tmate. Use tmate to ssh in. Download ghost, create an ssh key, add it as a deploy key to a repo you want to work on (if wf is not already in that repo), and then ssh into the ghost machine from your other runner machine (which could also be a VPS from "trad cloud", just sayin).

Think about it: why would I spend 10+ years developing software in the open (see my GH: https://github.com/crisdosaygo) and building a business on (primarily) security/browsing products only to throw it all away to do whatever it is people are imagining here? Think about it. Why would I steal anything from anyone? So sell a secret? To access a private repo? From some rando? How profitable could that be? It sounds ridiculous. And most important for me: I never have, am not, and would never do because I'm not a bad person. None of the fear makes sense: it's all totally unjust to level that at me in any way.


The money paid was to access the internet not run it, that's a world of difference.


In the 1990s, there were plenty of closets running websites, BBSs and other internet available resources. As a percentage of total internet users, it was higher than those doing so today. So, money was paid to run portions of the internet at home by ISP subscribers.


As someone who uses noise cancelling headphones (Bose QC35) every day in the office for ~1.5y, I can tell you that yes it re ally help for me.

It won't hide the voices of people's talking but it will mask them somewhat (like if they where more far). It's the only way I'm able to be functional and talk with clients and continue working in an open space..

However Bose mic is catching everything, but that's another problem..


That isn’t noise cancelation. That’s normal attenuation that any closed headphone will do. Real-time noise cancelation is impossible for voices.


I will have to disagree with the article on this, really it is 2-way. When searching for a new apartment you will have way more choice in the weeks around July 1st than at any other time of the year.


In the weeks leading to July 1st you are pretty last-minute and won't have great choice. Lease renewals/non-renewals are due for the end of March (IIRC), so starting to look around April is a good idea.

In case someone is thinking about moving to Quebec next year ;)


That's true, unless you're moving to Montreal at some other time of the year; then it will be very difficult to find somewhere to live.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: