frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Where .env Went Wrong

https://secretspec.dev/blog/where-env-went-wrong/
24•domenkozar•1h ago

Comments

jonny_eh•1h ago
Also: https://varlock.dev/
qntty•56m ago
I use Pydantic Settings for this, would be nice to see a comparison to that. I do like the idea of keeping this in a configuration file.
triyambakam•51m ago
Yeah Pydantic Settings is pretty nice
domenkozar•49m ago
Two things:

- Secrets don't belong in config https://secretspec.dev/blog/secrets-dont-belong-in-config/

- You want to have flexibility of choosing between any secrets provider: https://secretspec.dev/blog/but-i-use-sops/

Natfan•48m ago
Claude, find a key underpinning of most development workflows, then make a product to disrupt (and eventually SaaSify/enshitify) it. Finally, write a convincing ad disguised blog post, and purchase a fancy domain. Here's my credit card.
theozero•43m ago
While there are absolutely a million of these env tools popping up which are total vibe-coded slop, secretspec is not one of them. It's from the creator of https://devenv.sh and has been around for a while.
domenkozar•36m ago
<3
domenkozar•35m ago
Don't take the black pill <3
theozero•46m ago
Over at varlock (https://varlock.dev -- also free, open source), we agree that .env as we know it is full of problems. But instead of abandoning it, we evolved it. We replace your .env.example with a .env.schema - using decorator style comments to add schema info, and functions to load and compose values.

A big difference between our tool and many other similar tools is that we combine the schema and value setting into one surface, with a way of merging many definitions together, much like cuelang - but in a way that feels more intuitive. It's extremely flexible, and can even do credential brokering for untrusted workloads.

I've been enjoying the secretspec content lately, and watching it evolve :)

cyanregiment•36m ago
It's too bad they call background services "agents" now instead of daemons like they used to, because your slogan could be Secrets for daemons

Varlock is clever. Sub string types for .envs pretty cool, why not

c-hendricks•43m ago
Also mise: https://mise.jdx.dev/environments/
kstrauser•36m ago
Seconded. I've also had great luck with the same author's fnox secret manager, especially because you can tell it to fetch some secrets from the user's laptop's OS keychain, and some out of 1Password, and some out of AWS KMS, and some out of [probably your own favorite provider (https://fnox.jdx.dev/providers/overview)].
domenkozar•31m ago
fnox is mostly a copy of secretspec (and it's good to have one!), so you'll find the same kind of support in both. I wish instead we'd collaborate with Jeff, but oh well.

The difference is that we're providing an interface for applications to build with, with 8 SDKs available so you can have first-class support for secrets whatever you're bulding. I do hope fnox copies that too!

tosti•42m ago
One could also... Not jump on the bandwagon?

(Am I getting thrown out the window now? :)

ctippett•1m ago
I'm sure there are many better alternatives to .env, but its ubiquity and support across various tools makes it super convenient.

I'm using 1Password's .env integration[1] and although the UX is a bit clunky, I really like it. My API keys are secure, tools that ordinarily support .env just work and there's a team-sharing feature too (although I'm yet to use it). It's pretty neat.

[1] https://www.1password.dev/environments

Elevators

https://john.fun/elevators
295•Jrh0203•2h ago•103 comments

Big Food vs. the People

https://www.lighthousereports.com/investigation/big-food-vs-the-people/
52•jruohonen•1h ago•13 comments

DeepSeek V4 Flash 0731 Intelligence, Performance and Price Analysis

https://artificialanalysis.ai/models/deepseek-v4-flash
399•theanonymousone•9h ago•217 comments

DeepSeek-V4-Flash Update

https://api-docs.deepseek.com/updates/
544•dnhkng•11h ago•261 comments

Algorithms on billion-scale graph using 10GB RAM: I love DataFusion

https://semyonsinchenko.github.io/ssinchenko/post/datafusion-graphs-cc-2/
22•speckx•1h ago•5 comments

Getting 25 Gbps Thunderbolt Ethernet on My Mac Studio

https://www.jeffgeerling.com/blog/2026/getting-25g-ethernet-mac-thunderbolt/
13•speckx•1h ago•2 comments

Miso (YC S16) is hiring for U.S. expansion

https://www.ycombinator.com/companies/miso/jobs/g2uAlMG-founding-business-lead-u-s-expansion
1•victorology•22m ago

A GTK4 SSH-askpass in Zig

https://xn--gckvb8fzb.com/a-gtk4-ssh-askpass-in-zig/
29•surprisetalk•1h ago•6 comments

Arch Linux disables AUR package adoption

https://lwn.net/Articles/1086489/
53•database64128•3h ago•20 comments

The End of an Era

https://hughhowey.com/the-end-of-an-era/
293•harscoat•5h ago•329 comments

The session you cannot take with you

https://earendil.com/posts/session-portability/
677•apitman•13h ago•195 comments

The C ``Clockwise/Spiral Rule''

https://c-faq.com/decl/spiral.anderson.html
24•etrvic•3h ago•8 comments

13 Models and 4 Agents on SWE Tasks: Go, Java, Python, Rust, TS

https://swe-rebench.com
12•ibragim_bad•1h ago•3 comments

The Art of Decision-Making (2019)

https://www.newyorker.com/magazine/2019/01/21/the-art-of-decision-making
13•EndXA•1h ago•0 comments

Google fixed more Chrome bugs in June than over the past two years, thanks to AI

https://blog.google/security/chrome-stronger-with-every-update/
407•Garbage•9h ago•394 comments

Show HN: BitBang – Reach machines behind NAT from a browser, no account

https://github.com/richlegrand/bitbang-cli
14•narragansett•2h ago•2 comments

Anti-fraud tools can't keep pace with scammers exploiting cheap internet calling

https://broadbandbreakfast.com/how-to-fight-back-against-fraudulent-robocalls/
23•dredmorbius•3h ago•13 comments

How JPEG works: Interactively explore JPEG's lossy compression methods

https://cgjennings.ca/articles/jpeg-compression/
7•at1as•4d ago•0 comments

IMAX vs. IMAX 70mm: The difference between these two cinema formats

https://www.engadget.com/2220571/differences-between-imax-70mm/
52•ksec•6d ago•66 comments

Danube's record low levels force shutdown of Hungary's only nuclear plant

https://www.bbc.com/news/articles/cn0nqv05g0do
70•vrganj•9h ago•88 comments

New Defcon Badges Pack a Unique Open-Source Chip That Doubles as a Security Key

https://www.wired.com/story/defcon-34-badge-baochip-andrew-bunnie-huang/
41•hn_acker•1h ago•8 comments

Show HN: What should the GUI for AI agents look like?

https://marbleos.com/demo
81•akbabu•12h ago•48 comments

The Maxwell Conjecture Is False (GPT 5.6 Sol)

https://arxiv.org/abs/2607.27197
111•rahen•5h ago•103 comments

Moonshot’s Kimi uses 20k Nvidia chip cluster from Alibaba

https://www.bloomberg.com/news/articles/2026-07-31/moonshot-s-kimi-built-on-20-000-nvidia-chip-cl...
67•gk1•4h ago•44 comments

Show HN: I built a cross-browser extension that controls fingerprinting surfaces

https://privacything.com/en/
13•tomaszjanusz•2h ago•2 comments

Situational Awareness down 67% in July in AI stock rout

https://www.wsj.com/finance/investing/situational-awareness-down-67-in-july-in-ai-stock-rout-cd19...
112•pondsider•3h ago•107 comments

Winding Down Artichoke Ruby

https://hyperbo.la/w/winding-down-artichoke-ruby/
42•ksec•5d ago•5 comments

The most official water costs $120k a gallon

https://signoregalilei.com/2026/07/26/the-most-official-water-costs-120000-a-gallon/
26•surprisetalk•2h ago•3 comments

Is AI reasoning right for the wrong reasons?

https://www.quantamagazine.org/is-ai-reasoning-right-for-the-wrong-reasons-20260731/
72•retupmoc01•1h ago•77 comments

Show HN: Gander, an Android file viewer that asks for no permissions

https://github.com/mokshablr/gander
175•mokshablr•11h ago•62 comments