frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

Show HN: Amsflow Global Stock Screener – 550 metrics and AI-driven queries

https://amsflow.com/stock-finder
1•xdkershu•45s ago•0 comments

Why Computational Reproducibility Matters

https://blog.khinsen.net/posts/2025/06/20/computational-reproducibility.html
2•todsacerdoti•1m ago•0 comments

Apple study challenges whether AI models "reason" through problems

https://arstechnica.com/ai/2025/06/new-apple-study-challenges-whether-ai-models-truly-reason-through-problems/
1•Bluestein•5m ago•0 comments

NHS plans to DNA test all babies to assess disease risk

https://www.bbc.co.uk/news/articles/c1ljg7v0vmpo
1•tonyedgecombe•7m ago•0 comments

Death of Computer Languages, the Birth of Intentional Programming (1995) [pdf]

http://viega.org/cs6373/papers/ip.pdf
1•kristianp•10m ago•0 comments

European Commission: Software, Including Games and Apps, in Scope of GPSR

https://www.cooley.com/news/insight/2024/2024-11-27-european-commission-stand-alone-software-including-games-and-apps-in-scope-of-gpsr-as-of-december-13-2024
1•amichail•15m ago•0 comments

Knock Knock App

https://knockknockapp.ai/
1•Omarhyatt•17m ago•1 comments

Canva Is Down at the Moment

https://www.canvastatus.com
1•taubek•18m ago•1 comments

The silver bullet for solving problems in business

1•daniilkhanin•19m ago•1 comments

Work on Branson's island. My day: 9-to-5 or partying with guests until 4 a.m

https://www.businessinsider.com/work-and-live-richard-bransons-necker-island-2025-6
1•Bluestein•23m ago•0 comments

Dependent types at work in Agda [pdf]

https://www.cse.chalmers.se/~peterd/papers/DependentTypesAtWork.pdf
1•fanf2•23m ago•0 comments

Pipo360 v2: AI Back End Builder – From Idea to Working API in 60 Seconds

https://pipo360.xyz
1•the_plug•24m ago•1 comments

CoinMarketCap Client-Side Attack: A Comprehensive Analysis by C/Side

https://medium.com/@csideai/coinmarketcap-client-side-attack-a-comprehensive-analysis-by-c-side-ce0b58e77dec
2•unknownhad•28m ago•2 comments

What's behind the AI talent gold rush?

https://www.ft.com/content/9e9fde8e-37bd-477d-8ebc-6d0a8b70f246
1•bookofjoe•28m ago•1 comments

Anthropic Warns: Top AI Models Show Willingness to Blackmail

https://gazeon.site/anthropic-warns-top-ai-models-show-willingness-to-blackmail/
2•eligrid•29m ago•0 comments

Zuckerberg's political shift didn't shock Meta staff

https://www.independent.co.uk/news/world/americas/us-politics/mark-zuckerberg-meta-nickname-trump-b2774168.html
2•doener•33m ago•0 comments

New theory proposes time has three dimensions, with space as a secondary effect

https://phys.org/news/2025-06-theory-dimensions-space-secondary-effect.html
3•daoboy•34m ago•0 comments

New EU rules for energy-efficient and repairable smartphones and tablets

https://single-market-economy.ec.europa.eu/news/new-eu-rules-durable-energy-efficient-and-repairable-smartphones-and-tablets-start-applying-2025-06-20_en
2•Flundstrom2•36m ago•1 comments

US Involvement in the Middle East: Israel Support vs. Other Drivers of Hostility

https://analysis.infocentral.net/USIsraelSupportImpact.html
1•felineflock•38m ago•0 comments

I got tired of dashboards not telling me shit – so I built this

https://cloudgrip.ai/
1•maksspace•39m ago•1 comments

Show HN: ClearCoreAI – Orchestrator for Modular AI Agents (Open Source)

https://clearcore.ai/
2•olivierhays•41m ago•0 comments

Europol: Teen encrypted chat recruiting for 'violence as a service' murder ring

https://www.theregister.com/2025/06/21/teen_arrested_murder_for_hire/
2•rntn•43m ago•0 comments

Show HN: I Built a Public Dashboard to Track My Son's Future Investments

https://mattiasassets.com/
3•ang3l1n•46m ago•0 comments

Apple Created a Custom iPhone Camera for 'F1'

https://www.wired.com/story/apple-created-a-custom-iphone-camera-for-f1/
1•tosh•47m ago•0 comments

Controversial Plant Propagation Hack That Has Gardeners Divided

https://www.bhg.com/what-is-proplifting-11753036
1•Bluestein•51m ago•0 comments

Architextures: Seamless Texture Generator

https://architextures.org/create
1•goodburb•52m ago•0 comments

Tiny Mazda Fit in a Suitcase, and Looked Like Something from Mario Kart

https://www.slashgear.com/1889297/mazda-suitcase-car/
2•Bluestein•57m ago•0 comments

Stochastic Drum Machine

https://10kdrummachines.com/machines/quantumdrums/stochastic
1•almost-exactly•58m ago•0 comments

The Tandy Corporation, Part 1 – By Bradford Morgan White

https://www.abortretry.fail/p/the-tandy-corporation-part-1
2•rbanffy•59m ago•0 comments

AI-JSON-Fixer

https://github.com/aotakeda/ai-json-fixer
1•handfuloflight•1h ago•0 comments
Open in hackernews

Show HN: We moved from AWS to Hetzner, saved 90%, kept ISO 27001 with Ansible

https://medium.com/@accounts_73078/goodbye-aws-how-we-kept-iso-27001-slashed-costs-by-90-914ccb4b89fc
93•sksjvsla•3h ago
Earlier this year I led our migration off AWS to European cloud (Hetzner + OVHcloud), driven by cost (we cut 90%) and data sovereignty (GDPR + CLOUD Act concerns).

We rebuilt key AWS features ourselves using Terraform for VPS provisioning, and Ansible for everything from hardening (auditd, ufw, SSH policies) to rolling deployments (with Cloudflare integration). Our Prometheus + Alertmanager + Blackbox setup monitors infra, apps, and SSL expiry, with ISO 27001-aligned alerts. Loki + Grafana Agent handle logs to S3-compatible object storage.

The stack includes: • Ansible roles for PostgreSQL (with automated s3cmd backups + Prometheus metrics) • Hardening tasks (auditd rules, ufw, SSH lockdown, chrony for clock sync) • Rolling web app deploys with rollback + Cloudflare draining • Full monitoring with Prometheus, Alertmanager, Grafana Agent, Loki, and exporters • TLS automation via Certbot in Docker + Ansible

I wrote up the architecture, challenges, and lessons learned: https://medium.com/@accounts_73078/goodbye-aws-how-we-kept-i...

I’m happy to share insights, diagrams, or snippets if people are interested — or answer questions on pitfalls, compliance, or cost modeling.

Comments

Keyframe•2h ago
I think the most often mentioned problems mentioned are pollution of Hetzner addresses by shady people (might be addressed with "exits" from AWS / Cloudflare) and you are running on hardware which does tend to fail / needs upgrades. Were there some concerns on those from you?

Also, Loki! How do you handle memory hunger on loki reader for those pesky long range queries, and are there alternatives?

sksjvsla•2h ago
Pollution: We front everything user-facing through Cloudflare, so external users (and bots) don’t interact directly with our Hetzner/OVH IPs. We lock down our IPs at the firewall (ufw + Cloudflare IP allowlisting) so only trusted sources can even connect at L4.

Failures/upgrades: We provision with Terraform, so spinning up replacements or adding capacity is fast and deterministic.

We monitor hardware metrics via Prometheus and node exporter to get early warnings. So far (9 months in) no hardware failure, but it’s a risk we offset through this automation + design.

Apps are mostly data-less and we have (frequently tested) disaster recovery for the database.

Loki: We’re handling the memory hunger by

• Distinguishing retention limits and index retention

• Tuning query concurrency and max memory usage via Loki'’'s config + systemd resource limits.

• Use Promtail-style labels + structured logging so queries can filter early rather than regex the whole log content.

• Where we need true deep history search, we offload to object store access tools or simple grep of backups — we treat Loki as operational logs + nearline, not as an archive search engine.

Keyframe•2h ago
Thanks for thorough answer! Seems like you've platformized(!) yourself to an extent, have you considered going full on with k8s on top of metal (their machines) to offset some of the concerns about hardware?
sksjvsla•1h ago
Thanks for the compliment.

We used AWS EKS in the old days and we never liked the extreme complexity of it.

With two Spring Boot apps, a database and Redis running across Ubuntu servers, we found simpler tools to distribute and scale workloads.

Since compute is dirt cheap, we over-provision and sleep well.

We have live alerts and quarterly reviews (just looking at a dashboard!) to assess if we balance things well.

K8s on EKS was not pleasant, I wanna make sure I never learn how much worse it can get across European VPS providers.

sksjvsla•2h ago
A good alternatives for Loki is Victoria. Popular, way more performant and reputable but we went with Loki because of the relative size and diversity of maintainers between the two projects. Your points are super valid and we worked around it as mentioned above.
TZubiri•2h ago
https://en.wikipedia.org/wiki/Sybil_attack

One of the advantages of more expensive providers seems to be that they have good reputation due to a de facto PoW mechanism.

sksjvsla•1h ago
Depends on the use case, right? I don’t accept traffic from random Hetzner IPs — only Cloudflare’s IPs are allowed.

The only potential indirect risks is if your Hetzner VPS IP range gets blacklisted (because some Hetzner clients abuse it for Sybil attacks or spam).

Or if Hetzner infrastructure was heavily abused, their upstream or internal networking could (in theory) experience congestion or IP reputation problems — but this is very unlikely to affect your individual VPS performance.

This depends on what you are doing on Hetzner and how you restrict access but for an ISO-27001 certified enterprise app, I believe this is extremely unlikely.

jordanbeiber•2h ago
Same here, but Azure. About 90% saved, with a very similar stack.

It is a great big cloud play to make enterprises reliant on the competency in their weird service abstractions, which is slowly draining the quite simple ops story an enterprise usually needs.

ed_mercer•1h ago
Can you please elaborate how Azure is cheaper?
miyuru•1h ago
I think the parent meant that they moved from Azure to Hetzner.
jordanbeiber•1h ago
”Same here” meaning moving to Hetzner, but from Azure - could’ve made it less ambiguous!

Might throw together a post on it eventually:

https://news.ycombinator.com/context?id=43216847

sokoloff•2h ago
Might be interesting, but doesn’t seem to be a valid “Show HN”

* - https://news.ycombinator.com/showhn.html

nopakos•1h ago
I think a European CloudFlare would be nice to exist.
sksjvsla•1h ago
Yes, it would be nice. Given Cloudflare's dev-friendly branding for some reason, I did not mind keeping it.
abc123abc123•1h ago
No problem! https://bunny.net/about/ Enjoy!
miyuru•1h ago
bunny still don't support IPv6 to origin, or else I would have switched.
ToJans•20m ago
We're in the process of migrating away from azure. Currently lots of cloudflare, but also some stuff runs on Hetzner.

If I manage to get https://uncloud.run/ or something similar up & running, the platform will no longer matter, whether it's OVH, Hetzner, Azure, AWS, GCP, ... It should all be possible & easy to switch... #FamousLastWords

saltysalt•1h ago
I love Hetzner, I run my Internet search engine from there: bare metal FTW.
louwrentius•1h ago
I'm involved with a cloud migration myself so I like the topic, but the Medium article contains less information than this "Shown HN" post.

The Medium post is mostly fluff and a lead generator.

sksjvsla•1h ago
The Medium post is more of a high-level case study for a mixed audience (including non-technical decision makers). I intentionally kept the details lighter there, partly to avoid overwhelming readers and partly because the real “meat” (like our Ansible/Terraform patterns, Prometheus config, etc.) is harder to convey in that format without turning it into a giant technical appendix.

I’m happy to share specific configs, diagrams, or lessons learned here on HN if people want — and actually I’m finding this thread a much better forum for that kind of deep dive.

I'll dive into other aspects elsewhere: You can't doubt that given what I am sharing here.

Any particular area you’d like me to expand on? (e.g. how we structured Terraform modules, Ansible hardening, Prometheus alerting, Loki tuning?)

ArtTimeInvestor•1h ago
How did you decide on Hetzner and OVH and why do you need both?

Have you looked into others as well, like IONOS and Scaleway?

sksjvsla•1h ago
Great question. Technically speaking I might not need both, but I have a gut feeling that one of these cloud providers might not be as hardened as the hyperscalers, and that Russia is just waiting to put one of these two services down. So for maximal resiliency I chose to design from a multi-cloud setup from the beginning.

Scaleway came up but is more expensive. IONOS did not come up in our research.

Part of what we tried to do was to make ourselves independent from traditional cloud services and be really good at doing stuff on a VPS. Once you start doing that, you can actually allow yourself to look more at uptimes and at costs. Also, since we wanted everything to be fully automated, Terraform support was important for us, and OVHcloud and Hetzner had that.

I'm sure there's many great cloud providers out in Europe, but it's hard to vet them to understand if they can meet demand and if they are financially stable. We would want not to keep switching cloud providers. So picking two of the major ones seemed like a safe choice.

handfuloflight•39m ago
What would Russia's interests be in putting these ISPs down, specifically?
sksjvsla•34m ago
Without making it too political and speculating on things I don't know, I, like many other Europeans, have seen plenty of cases of Russia ruining infrastructure projects in Europe, everything from internet cables on the ocean bed, telcos, water supplies, railways and more. Authorities are asking civilians in Scandinavia to be prepare their hiused with. Good and water and are actively hardening security around critical infrastructure, including their software. I won't comment more on this because it's gonna derail this discussion.
anticodon•19m ago
Is there a single proof? Like some Russian citizen was caught ruinining infrastructure project and it was proved that a) he is a citizen of Russia or was paid by Russian authorities, b) that the person in question had indeed done some damage to the infrastructure project.

I don't remember a single such case. I remember reading a lot of speculations like "it's highly likely that it was done by Russians" every single time without a trace of evidence.

hbnjgf•6m ago
Does it matter for the average business, if an infrastructure was brought down buy the Russian state or someone blaming it on the Russians?

It's undeniable that core European infrastructure is targeted currently

jillesvangurp•32m ago
> We rebuilt key AWS features ourselves

At what cost? People usually exclude the cost of DIY style hosting. Which usually is the most expensive part. Providing 24x7 support for the stuff that you've home grown alone is probably going to make large dent into any savings you got by not outsourcing that to amazon.

> $24,000 annual bill felt disproportionate

That's around 1-2 months of time for a decent devops freelancer. If you underpay your devs, about 1/3rd of an FTE per year. And you are not going to get 24x7 support with such a budget.

This still could make sense. But you aren't telling the full story here. And I bet it's a lot less glamorous when you factor in development time for this.

Don't get me wrong; I'm actually considering making a similar move but more for business reasons (some of our German customers really don't like US hosting companies) than for cost savings. But this will raise cost and hassle for us and I probably will need some re-enforcements on my team. As the CTO, my time is a very scarce commodity. So, the absolute worst use of my time would be doing this myself. My focus should be making our company and product better. Your techstack is fine. Been there done that. IMHO Terraform is overkill for small setups like this; fits solidly in the YAGNI category. But I like Ansible.

hiAndrewQuinn•25m ago
This is what I'm wondering too. 90% is a lovely number to throw around but what is the opportunity cost?
sksjvsla•22m ago
> Cost of DIY and support: You’re absolutely right that 24x7 ops could eat up any savings if you built everything from scratch without automation or if you needed dedicated staff watching dashboards all night. In our case:

• We heavily invested upfront in infrastructure-as-code (Terraform + Ansible) so that infra is deterministic, repeatable, and self-healing where possible (e.g. auto-provisioning, automated backup/restore, rolling updates).

• Monitoring + alerting (Prometheus + Alertmanager) means we don’t need to watch screens — we get woken up only if there’s truly a critical issue.

• We don’t try to match AWS’s service level (e.g. RTO of minutes for every scenario) — we sized our setup to our risk profile and customers’ SLAs.

> True cost comparison:

• The migration was done as part of my CTO role, so no external consulting costs. The time investment paid back within months because the ongoing cost to operate the infra is low (we’re not constantly firefighting).

• I agree that if you had to hire more people just to manage this, it could negate the savings. That’s why for some teams, AWS is still a better fit.

> Business vs. cost drivers: Honestly, our primary driver was sovereignty and compliance — cost savings just made the business case easier to sell internally. Like you, our European customers were increasingly skeptical of US cloud providers, so this aligned with both compliance and go-to-market.

> Terraform / YAGNI: Fair point! Terraform probably is more than we need for the current scale. I went with it partly because it fits our team’s skillset and lets us keep options open as we grow (multi-provider, DR regions, etc).

And, finally, because this, I am posting about it. I am sharing as much as I can, and just spread the work about it. I just sharing my experience and knowledge. If you have any questions or want to discuss further, feel free to reach out at jk@datapult.dk!

sksjvsla•21m ago
https://news.ycombinator.com/item?id=44335920#44336757
randomtoast•18m ago
> Don't get me wrong; I'm actually considering making a similar move but more for business reasons (some of our German customers really don't like US hosting companies) than for cost savings

There will be a new AWS European Sovereign Cloud[1] with the goal of being completely US independent and 100% compliant with EU law and regulations.

[1]: https://www.aboutamazon.eu/news/aws/aws-plans-to-invest-7-8-...

jjani•11m ago
> There will be a new AWS European Sovereign Cloud[1] with the goal of being completely US independent

The idea that anything branded AWS can possibly be US independent when push comes to shove is of course pure fantasy.

randomtoast•7m ago
I don't know, with that argument you can argue that everything is dependent on everything, for instance, the EU automobile industry is hugely dependent on materials and chips from all over the world including US and thus real independence is a pipe dream.
awongh•12m ago
90% sounds good but the real dollar amount feels low.

Two reasons for this stick out:

- Are the multi-million dollar SV seed rounds distorting what real business costs are? Counting dev salaries etc. (if there is at least one employee) it doesn't seem worth the effort to save $20k - i.e., 1/5 of a dev salary? But for a bootstrapped business $20k could definitely be existential.

- The important number would be the savings as percent of net revenue. Is the business suddenly 50% more profitable? Then it's definitely worth it. But in terms of thinking about positively growing ARR doing cost/benefit on dropping AWS vs. building a new (profitable) feature I could see why it might not make sense.

Edit to add: it's easy to offhand say "oh yeah easy, just get to $2M ARR instead of saving $20k- not a big deal" but of course in the real world it's not so simple and $20k is $20k. The prevalent SV mindset of just spending without thinking too much about profitability is totally delusional except for like 1 out of 10000 startups.

randomtoast•11m ago
> $24,000 annual bill felt disproportionate

>> That's around 1-2 months of time for a decent devops freelancer. If you underpay your devs, about 1/3rd of an FTE per year. And you are not going to get 24x7 support with such a budget.

In terms of absolute savings, we’re talking about 90% of 24k, that’s about 21.6k saved per year. A good amount, but you cannot hire an SRE/DevOps Engineer for that price; even in Europe, such engineers are paid north of 70k per year.

I personally think the TCO (total cost of ownership) will be higher in the long run, because now every little bit of the software stack has to be managed by their infra team/person, and things are getting more and more complex over time, with updates and breaking changes to come. But I wish them well.

hk1337•24m ago
Does anybody care, besides you, that you’re ISO 27001 compliant? I thought SSAE 16 and other SSAE standards were the main things people were concerned with having?
Freak_NL•18m ago
Pff… You wish. Depending on the sector you are in, ISO 27001 can either be a hard requirement (either directly or through national standards built upon it, like the Dutch healthcare NEN 7510) or completely irrelevant. If this company needs it, you can bet their customers need it — usually because they in turn are required to do so because of regulations.
hbnjgf•8m ago
Seems to depend on industry and/or region.

Most of our customers have a hard requirement on ISO 9001. Many on ISO 27001, too. The rest strongly prefers a partner having a plan to get ISO 27001

anticodon•22m ago
I'm not surprised about 90% of savings. I remember that initially AWS was promoted everywhere as being "cheaper" than your own hardware, colocation or VPS/VDS hosting.

Once I was working in a quite small company (around 100 employees) that hosted everything on AWS. Due to high bills (it's a small company that resided in Asia) and other problems, I migrated everything to DigitalOcean (we still used AWS for things like SES), and the monthly bill for hosting became like 10 times lower. With no other consequences (in other words, it haven't become less reliable).

I still wonder who calculated that AWS is cheaper than everything else. It's definitely one of the most expensive providers.

jjani•6m ago
Interesting, comparing commodity services (VMs, storage etc) like-for-like, DO has always seemed more expensive than AWS. Do you remember what was the main source of savings?
sam_lowry_•9m ago
I did a successful AWS to Hetzner migration myself once, and I'd like to make a business of "back-to-earth migrations" but clients are hard to find.

Everyone talks about it but none wants to be the first mover.