Hacker Newsnew | past | comments | ask | show | jobs | submit | zemo's commentslogin

Reads like it’s not copying the parent, it’s manually constructing the env dictionary to be passed to execve explicitly. I do this in one of my tools at work because developers were exfiltrating secrets and hand jamming them into .env files.

Yeah, so, it's not injecting? To inject something into X, X needs to exist. X does not exist yet when execve is set up.

I'm not being pedantic. I just want to read about injection when I'm promised injection :-) because that'd be technically interesting for me. Plainly calling execve isn't so much, I have the manpage here already :-)


You're not alone. I was hoping for the same.

Something tells me that if I look, I'll see a .env being used in the actual tool

> Password manager > No CLI injection.

reminds me of the 1password cli:

https://developer.1password.com/docs/cli/reference/commands/...


full disclosure I work at Whatnot but that sort of thing is a large part of the appeal of Whatnot to me, that people are showing off the stuff live on stream and you can ask questions about it

This whole concept of selling things in video format seems so alien to me. I didn't believe when someone told me they shop on TikTok now. It already takes me ages to browse through a gallery of items, I couldn't imagine going through items video by video.

Some people watch TV channels which do nothing but present things to buy with a phone number to order. Lots of live shows as well, its not just non-stop pre-recorded infomercials. It doesn't surprise me in the slightest such an idea would move to short form video content as well. People trying on makeup or showing off clothing with their affiliate links down below.

https://en.wikipedia.org/wiki/HSN


that's more or less how I felt about it, but someone I know worked at Whatnot and liked working there so I tried out the app before applying and then applied because the product clicked for me. I wouldn't have joined Whatnot if I didn't like the product.

> I couldn't imagine going through items video by video.

That's fair, it's just not how people use it and it's not the concept. It's primarily a browse experience, not a search experience. You can search but that's not the core experience.

I buy vinyl records and retro games. There are sellers that I like. When I open the app I see which of my preferred sellers are live and I tune into their stream and hang out and watch them. If something I'm interested in pops up, I'll bid on it. Live shopping is not trying to be "ebay but video", it's a different experience.


The digital Yellow Pages were replaced by streaming teleshopping.

I’ve been car shopping recently, and I’ve found myself deliberately seeking out videos, because I’ve found that it’s very hard to get a sense of what the thing is really going to look like from static photos. Unstaged photos make everything look uglier, staged photos require adjusting for the unknown staging.

Oh, I definitely look up products I intend to buy on YouTube. But I don't go there (or any other video platform) to discover them.

This sounds like a really unpleasant shopping experience to me.

I applied there but the gamified, urgent dynamic of the shopping experience rubs me the wrong way, it's stacked against the user

AI is in spitting distance of being able to do that too.

I sometimes wonder if the random people sitting there hawking a pile of Amazon goods that pops up after every Amazon purchase are already AI.

violence at scale is often facilitated by and preceded by propaganda at scale, which is one of Sora’s only applications. Certain things are obvious to normal people, like “propaganda is real, powerful, bad, and historical of enormous significance”.


"was being pushed" ... by whom? I think there's widespread grassroots support for it because it's a good tool.


> but I think his versions are better, they deserve to be presented by themselves, instead of alongside the mental clickbait of the classic aphorisms

keeping the historical chain of thinking alive is good, actually


respectfully, I do not find Mecha Hitler to be particularly free of bias.


Meta could not get more uncool


> Anthropic's marketing somehow punches hard. Not sure why

The fish rots from the head and marketing depends on being relatable.

https://www.youtube.com/watch?v=qMAg8_yf9zA

Take a scroll through the comments.


is there anything memcache gives you that a redis instance configured with an eviction policy of allkeys-lru doesn't give you


memcached is multithreaded, so it scales up better per node.

memcached clients also frequently uses ketama consistent hashing, so it is much easier to do load/clustering, being much simpler than redis clustering (sentinel, etc).

Mcrouter[1] is also great for scaling memcached.

dragonfly, garnet, and pogocache are other alternatives too.

[1]: https://github.com/facebook/mcrouter


Both Redis (finally) and Valkey addressed the multithreading scalability issues, see https://oneuptime.com/blog/post/2026-01-21-redis-vs-memcache... and/or https://news.ycombinator.com/item?id=43860273...


> memcached is multithreaded, so it scales up better per node.

redis i/o is multithreaded, it's just the command loop that's single-threaded. If all you're doing is SET and GET of individual key-value pairs, every time I've seen a redis instance run hot under that sort of load, the bottleneck was the network card, never the CPU.

I ... actually think scaling redis for simple k-v storage is already pretty easy so I dunno that that's much of a concern?

mcrouter ... damn I haven't thought about mcrouter in at least 10 years.


I imagine the answer here is: less complexity.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: