Top all-time · #7206
Dan Lorenc
Personal blog · dlorenc.medium.comsecurityprogramming
Dan Lorenc's personal blog at dlorenc.medium.com covers security and programming. Since 2020, 11 different Hacker News readers have linked it 24 times, most often “Who's at the Helm?”. It is still writing: the last post was on 2026-01-24, and you can follow it by feed.
Too few sampled comments (3) to say how often HN recommends it.?
Why HN links it
HN readers link Dan Lorenc's Medium posts on Kubernetes, Go and ops topics, including "Who's at the Helm?" on Helm and Kubernetes packaging. One commenter wishes they could follow his posts by RSS.
Summarised by Claude from a sample of 3 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- Who's at the Helm?2 people · 4 mentions · first linked 2021-01-05
- The Dependency Jungle2 people · 2 mentions · first linked 2020-12-22
- How to Sign a Release of OSS2 people · 2 mentions · first linked 2021-03-17
What Hacker News says?
Here is my non complete list: - Who’s at the Helm? [0] - Microservices, hard as 1, 2, 3 - You can move it but complexity is still here [1] - Microservices — architecture nihilism in minimalism's clothes [2] - Do I Really Need Kubernetes? [3] - Your team might not need Kubernetes [4] I doubt that any of those articles could convince higher management. I don't know what a "respected source" actually means. I general I…
Comment linking /whos-at-the-helm-1101c37bf0f1
on “Maximizing Developer Effectiveness”Submitted Who's at the Helm? as a story · 111 points
HN discussionNice insights and I will definitely take a deep look at ko. Slightly off topic but since you linked to his Twitter account, everyone should check out Dan Lorencs articles. There is some interesting articles about Golang, kubernetes and other Ops-like things. https://dlorenc.medium.com I only wish I could get his stuff into my RRS feed so that I didn't miss it.
Comment linking /
on “How .NET container images are maintained”Submitted Improving the Trust-On-First-Use authentication scheme with transparency as a story · 13 points
HN discussionI don't think that's true in practice. Try it. I did here: https://dlorenc.medium.com/whos-at-the-helm-1101c37bf0f1 It's basically impossible with today's tooling and practices to come up with a list of dependencies for a moderately complex application.
Comment linking /whos-at-the-helm-1101c37bf0f1
on “The world needs a software bill of materials”Submitted SSH Is the New GPG. Not Really. But Kind Of? – By Dan Lorenc as a story · 11 points
HN discussionAFAIK it is basic and a common way to install packages in k8s. Usually the developers of a project with k8s focus like Prometheus provide a helm chart for easy installation. However it is a package manager and easy confused with a distribution. I recommend to read "Who's at the helm?" [0] discussed a few days ago here [1]. 0: https://dlorenc.medium.com/whos-at-the-helm-1101c37bf0f1 1: https://news.ycombinator.com/it…
Comment linking /whos-at-the-helm-1101c37bf0f1
on “Show HN: Composability of software components is the biggest benefit of K8s”Submitted Notary v2 and Cosign as a story · 6 points
HN discussionSubmitted Zero Trust Supply Chain Security as a story · 6 points
HN discussionSubmitted In Defense of Package Managers as a story · 5 points
HN discussionSubmitted How to Sign a Release of OSS as a story · 5 points
HN discussionSubmitted OCI Artifacts Explained (2021) as a story · 3 points
HN discussionSubmitted Signature Formats as a story · 3 points
HN discussionSubmitted Cosign – Signed Container Images as a story · 3 points
HN discussionSubmitted The Dependency Jungle as a story · 3 points
HN discussionSubmitted The Update Framework and You as a story · 2 points
HN discussionSubmitted The Dependency Tree Is More of a Jungle. and It’s Haunted as a story · 2 points
HN discussionSubmitted OCI Artifacts Explained (2021) as a story · 1 points
HN discussionSubmitted The Sigstore Trust Model as a story · 1 points
HN discussionSubmitted Policy and Attestations. Best Practices for Supply Chain Security as a story · 1 points
HN discussionSubmitted How to Sign a Release of OSS as a story · 1 points
HN discussionSubmitted Zombie Dependencies as a story · 1 points
HN discussionSubmitted Procrastination Driven Development as a story · 1 points
HN discussionSubmitted On Updating Dependencies as a story · 1 points
HN discussion