Hacker Newsnew | past | comments | ask | show | jobs | submit | bags43's commentslogin

Company where I work had huge risk audit.

The second highest risk is using USA based cloud with 66/100.

The first one was using Spring Boot everywhere 77/100. Till the end of 2025 we need to have migration path to something else with 2 PoCs done.


I’m completely out of the loop. What’s going on with Spring Boot?


The VMware apocalypse.


One does not need VMware for SpringBoot so?


Spring’s corporate steward is VMWare, and Broadcom bought VMWare, ergo Spring is subject to Broadcom’s whims.



Not spring boot, but spring, is owned by VMware. Sure spring is under a free license but if upstream enshittifies, community forks would be required.


And as popular and widely used as Spring is, that would 100% happen. To me at least, I wouldn't count this as a particularly huge risk. But in an enterprise setting, with mandatory auditing and stuff, I can understand why there would be a requirement to at least pre-identify alternative(s).


> Not spring boot, but spring, is owned by VMware

How do I reconcile this statement with VMWare holding the copyright which you will find unambiguously littered in the official Spring Boot repository?

Since you contend the contrary, who does in fact hold the copyright?


Probably a bit of overreaction given that Broadcom is now in charge of Spring. At the end of the day it’s a wildly popular open source project — it has a path forward if Broadcom pulls shenanigans.

That said, I have noticed that the free support window for any given version is super short these days. I.e. if you’re not on top of constantly upgrading you’re looking at paid support if you want security patches.


What was the actual risk of using SpringBoot tho?


License changes - BSL or closing the source

If there's no money in it for them - reduction of staff or funding leading to slower releases and bugfixes

Moving some features like Spring Cloud / Spring Integration, or new development behind a paywall (think RHEL)

Big users (like Netflix, Walmart, JPMorgan, LinkedIn/Microsoft, etc) would likely be able to pay for it (until they moved off), but smaller companies and individual developers not so much


I think it would be more of a Redis situation - steward changes the license, someone large enough to maintain a fork creates one, and everyone moves to the fork. In Redis's case, Amazon forked it into Valkey.

Spring is so widely used that there are multiple "large enough" companies who could do this


What's the actual risk though? Just saying it's the riskiest at 77/100 doesn't mean anything.


Among others:

- license change -> restricting features behind a paid tier (https://spring.io/blog/2025/04/21/spring-cloud-data-flow-com...)

- reducing headcount of people -> slow security patching + not following industry standards

- all eggs in one basket :)

- cut from major clouds (Azure Spring apps)


"If people would know how little brain is ruling the world, they would die of fear" - Ivo Andric


And this is additional reason why I would never use their services.


Of all the payment options Klarna always struck me as one of the less trustworthy ones.

IIRC they are one of those services who basically want access to my bank account, from where they could read my account balance. I think this is something even regulated by the EU, but why on earth should someone agree to that?


It is trivial to include .NET with your app since I think .NET 5.


It is not 2015 anymore.

>is not-Windows your dev environment?

Rider & VS Code.

>do you plan to use another db than SQL Server?

PostgreSQL and SQLite are working great.

>do you plan to deploy with containers?

Did you try .net 8.

>do you plan to deploy outside of Azure?

All big cloud providers have their own docs for .NET


yes, I know it is not 2015. .net runs everywhere.

Just that, by default, it is assumed you run windows e.g. https://learn.microsoft.com/en-us/dotnet/core/docker/build-c... windows first, linux alt. no macos

at the bottom, 'container tools for Visual Studio'

Take all the video from https://devblogs.microsoft.com/dotnet/learn-dotnet8-beginner... how many are not using Windows?

You can use .net elsewhere. Just that it is on you to 'fix' the difference when they happen.

it is ok. Others languages might have a windows-second bias.


I can not find a lot music in the app despite my solid french.


- "FIP Radio removed from TuneIn"

- "...We have removed all France Radio stations from TuneIn as per broadcaster request. We're sorry for the inconvenience and thank you for your understanding..."

:

https://old.reddit.com/r/tunein/comments/1buoei7/fip_radio_r...

Streams: https://gist.github.com/harperreed/b5ceabbbbca0a79d478ec0b81...


Thanks.


Where to move from Samsung A52?

There is no alternative below 1000 EUR.


Check out this search tool: https://www.gsmarena.com/search.php3

It's a great resource to find a new phone by feature set.



Samsung A15 has a headphone jack, 128gb storage, OLED screen, and SD card slot in the SIM tray.

It should have 4 years of updates too, which at $270 CAD is $5.63 per month of support.


Alternative in what sense? I think most, if not all, modern Xperias have both headphone jacks and microSD slots. I'm not sure how they are when it comes to android updates though.


Worst. 2 years only with awful track record even for the security updates.

And the price is around 1400 eur.


The 1 VI yes, but there's also a cheaper 10 VI. Seems like it is supposed to get 4 years of security updates [1] too, but I suppose only time will tell how that actually plays out.

[1]: https://www.gsmarena.com/sony_xperia_10_vi-review-2701p4.php


For me, the microSD slot is the important part, and the Galaxy A54 still has one. No headphone jack, though.


Samsung Exynos 1380 is huge downgrade and cam offers no improvement.


Huh, the reviews I read seemed to say that the camera was a huge step up. (But maybe they were mostly comparing to the A53, which seemed uniformly to be regarded as a regression.) If not, then I feel quite stupid for paying the extra to "upgrade" to an A54, instead of an A52, from my A50.

(Also, though it's easy for me to believe this random search result is dodgy, and with the understanding that benchmarks don't mean much, Googling around for a chip comparison turned up https://gadgetversus.com/processor/qualcomm-sm7125-snapdrago... , which seems to suggest that the Exynos 1380 in the A54 wins over the Snapdragon 720G in the A52 in many benchmarks.)


Raw performance is not only factor. There is heating, battery and image post processing optimizations which are miles ahead on SD.


This does not work in Firefox really well.


FE: Angular + Material (Maybe blazor if no experience with JS/TS)

BE: .NET or Spring Boot

Database: SQLite (eventually PostgreSQL in Docker container)

Hosting: Hetzner


What is german word for this tax?


Different names in every German speaking country

https://de.m.wikipedia.org/wiki/Pauschalabgabe


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: