Hacker Newsnew | past | comments | ask | show | jobs | submit | foreign-inc's commentslogin

Everyone who thinks that because Matrix is Apache v2 license, it will remain permissive open source is ignoring the reality of an active project. If Matrix changes license tomorrow, the old code will still be Apache v2. But are you going to fork the project to keep it Apache v2?

For some data point, look at recent relicense of MinIO, Grafana, Loki, Vector.dev etc.


Top comment right now points out that Matrix doesn't require copyright assignment, which means they have to get permission from every contributor or rewrite the code in order to relicense.


They don't. They can fork the "apache v2" version and start adding non apache v2 code given they are the primary contributor. If they own the trademark, they can call the new forked version "matrix".

What non having copy right assignment means is that they can't change the license of existing stuff. But they can change the license of future stuff using existing apache v2 licensed code which is permitted.


Have anyone used both https://redwoodjs.com and Nextjs and share their experience?


ive tried out both. next.js focuses very much on the SSR/SSG job, whereas Redwood both stretches further in front of the stack (with Cells and a Form library) and further back in the stack (with Prisma/GraphQL). next is a lot more mature (5yrs?) whereas redwood is new. that help?


Redwood doesn't hide their tutorial behind an account like Nextjs does, they're more user friendly. And it was impressive how smooth it went considering the underlying complexity of the tech stack.


The Next tutorial is now available without log-in, so the statement above isn't true anymore. Thanks Vercel!


Interested in this, too.


How many companies from those late applications get accepted every batch?


Now that ycombinator takes over a hundred startups it does seem more promising to get in, eventually.


Why not just use Istio and Knative? Also Project contour can do the same as an api Gateway. What's the difference?


Contour is not an API Gateway.

Disclaimer: I work for Solo.io

An API Gateway can do sophisticated edge security challenges (OIDC, Authz based on OPA, web app firewalling/WAF, etc) as well as things like message transformation, swagger/grpc detection, exposing APIs for self-service signup through a portal, etc. Gloo does all these things.

I've written in depth about this as well, specifically in terms of things like contour, Istio ingress gateway, consul's service mesh gateway, etc, etc

https://blog.christianposta.com/microservices/do-i-need-an-a...

Gloo resources: https://docs.solo.io/gloo/latest/guides/dev_portal/ https://docs.solo.io/gloo/latest/guides/security/waf/ https://docs.solo.io/gloo/latest/guides/security/auth/oauth/... https://docs.solo.io/gloo/latest/guides/security/opa/ https://docs.solo.io/gloo/latest/installation/advanced_confi... https://docs.solo.io/gloo/latest/guides/traffic_management/r...


Thanks for the detailed response. In that regard, it is like Kong. What is the difference between Kong vs Gloo? Kong is based on nginx which is rock solid.


Kong is mostly built on OpenResty/Lua

I'd say the main reason to use Gloo is it's much simpler, it's based on Envoy which is where most of the innovation around L7 proxies is happening these days (ie, see WebAssembly), and was built from the ground up with a cloud-native and kube-native architecture.

More can be found here:

https://docs.solo.io/gloo/latest/introduction/others/

And I can go into much more detail on slack. I'm `ceposta` on the solo/istio/cncf/envoy/kubernetes slack


Istio is fairly resource intensive in my limited use. Contour is a bit simpler to configure and use with overlap.

Gloo has lots of other features, like WAF and Webassembly hooks for request flow.


Can Contour actually do the same? For me, the main benefit of an API gateway is being able to specify an internal service to handle authn/authz. With Envoy that's done via a filter, iirc. Can you set that Envoy specific config with Contour?



Finally a non-sponsored article on the newstack.


As a naive user, I could never understood what sandstorm really is. Does it run apps locally? How does it work in general?


There are a few rules:

- Don't be a solo founder, no body is going to fund you. Your idea may be crappy, you can pivot. But solo founder is a big no no, unless you are successful founder with a new venture.

- Either you or your co-founder is "the" person in your product area or you are able to hire someone who is. Developer tools companies always try to do this to become #1 (at least in twitter).

- You probably should make a new database or a security tool if you are in the B2B space. Otherwise you will have a very hard time making money.


Could you explain why do you think db or security tools are profitable only?


The security market is predicted to grow substantially.

This gives space to new entrants.


How can you trust a company like GitLab whose default decision is always bad and then they change direction after public outcry.

Either they don't think before they make decisions or they are just trying to figure out what they can get away with.

This really shows their lack of morality. They kind of remind me of Facebook.


How can you trust a company that does the same things behind closed doors?

With GitLab we know about everything that's happening and can react before bad things happen. This is awesome.


Lol, I think you're forgetting about another provider. Besides you can always try Gitea.


Is the on premise one different? The hosted one leaks data to google and cloudflare.


How is this a billion $ business? I've been rejected by YC a number of times, even though we have lots of docker downloads. So, I am just curious, what worked in this case.


Our pitch to Y Combinator: The number of network engineers and sysadmins is around the number of software developers. Sysadmins use SSH all day long while maintaining infrastructure for SMB and enterprise. Termius makes those admins more productive, reduce the amount of errors, and enables collaboration(leads to easier onboarding for new team members). The additional point is that no significant innovation has been done in this space(command line&SSH) for the last twenty years.


I liken it to drinking water.

No “significant” innovation has been done to H2O in a while. That hasn’t stopped plenty of companies getting built on selling what most people with disposable income can also get in high quality for free.

And much like already paying for iCloud, Google Drive, One Drive, or Dropbox, most companies that “subscribe” extra for water delivery to the water cooler in the break room, already pay a water bill.


Some history from Linus himself https://www.youtube.com/watch?v=4XpnKHJAok8


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: