HN user

therealrootuser

316 karma
Posts9
Comments40
View on HN

nearly every bug can be be exploited in a malicious way This is a bit contextually dependent. "This widget is the wrong color" is probably not a security issue in most cases, unless the widget happens to be a traffic signal, in which case it is a major safety concern.

Even the line between "this is a bug" and "this is just a missing, incomplete, or poorly thought out feature" can get a bit blurry. At a certain point, many engineers get frustrated trying to pick apart the difference between all these ways of classifying the code they are writing and just want to get on with making the system work better.

Literally a couple decades like 20 years? I just don't think that could be true, at least not where I live.

Looking at the listings in a broad radius around me, there is still a lot of housing built in the 1960s and 1970s being bought and sold quite regularly, and some stuff even older. A house built in 2004 ("a couple decades") would absolutely not be worth the cost to rebuild.

Oh this is the oldest trick in the book. If you need to greenwash, then just burn the coal somewhere else. Easy.

Los Angeles has been doing this for decades - for years the largest single energy source for LAPW has been an 1800MW coal burning plant that they operated in Utah, which has very loose environmental regulations.

In principle, if you got everyone to agree to it (and this would be a big if), this would probably be an interesting enough ticket that it might just win. Maybe.

In practice, Romney is 77 years old and is ready to retire - and think how often age has come up as a factor in the presidential race recently. Romney isn't running for reelection, but if he had wanted his senate seat for another 6 years, I am quite certain it would have been his. So ultimately, I don't think Romney would go for it, simply because he wants to spend more time with his (large) family.

Your example is a poor one, and does not represent the actual risk of money market funds.

Customer assets at brokerage are required to be held by a 3rd party custodian. Customer assets are not held at the brokerage itself and cannot be touched. An executive cannot merely "dip into customer funds" to cover a bad investment. Brokerage firms are regularly audited for this exact scenario. If your assets were to go missing, the SIPC would liquidate assets of the firm itself as necessary and cover the rest up to $500,000.

The actual risk is of a MMF "breaking the buck" and being unable to return your money. In 1994, a fund went under and was only able to return 94 cents on $1. In 2008 a fund went under because of its toxic Lehman Brothers holdings. This is why you should understand what is inside of that fund before investing in it.

For example, VUSXX is "is required to invest at least 99.5% of its total assets in cash, U.S. government securities, and/or repurchase agreements that are collateralized solely by U.S. government securities or cash." These are not unregulated funds either; the SEC has been significantly increasing the scrutiny and regulation of MMFs both recently and historically.

The question you really should be asking is whether you think US treasury bills are sufficiently safe, not whether Vanguard is doing something both obvious and illegal.

Utilities

My landlord charges me $60/month for water/sewer. I pay about $120 for electric and gas combined most months. This is in an area of the country where it gets above 100F in the summer and can easily dip below 15F in the winter.

moving costs

Stop moving so much? I know very few middle class people that would pay a moving company. Renting a truck and loading it yourself, or using one of the several pod type services is the norm for most middle classers. I certainly wouldn't qualify this as rent. A moving company is a luxury purchase. Ideally if you have to move for work, your company would pay for this if needed.

tax

Eh? There is no tax on rent. Your landlord doubtless has to pay property tax, but they would have to make that up via the rent.

extra months of rent you have to pay because of stupid 12 month lease systems

Once again, stop moving so much. A lease is a protection against your landlord raising the rent on you. If you don't like it, then go month-to-month and pay more.

pest control, mold control

Depends on the state, but landlords are generally legally responsible for mold. It sounds like you had a specific issue with mold, because you keep talking about mold problems. There is almost always an underlying cause of mold that should be dealt with directly.

cleaning costs

I do not expect my landlord to clean my toilet. If you are hiring a maid, you are by definition not middle class anymore. Middle class people scrub their own toilets. No, really, they do. Well, some of them don't, but that's a different problem.

pests and bedbug-ridden furniture

I'm not okay with pests, and my total furniture cost did not come close to doubling my rent. I also don't buy new furniture every year, and I'm okay with using a bookshelf that is 5 years old.

Most middle class people are not frequently purchasing new furniture, and if they are, they are going into debt really fast.

mold

Again with the mold. We're not all breathing in mold, okay? Paying $50/month for "mold" makes no sense. How much bleach are you buying with that? It sounds like you have a water leak.

shitty internet access

Sure, get good internet, but that's still not going to double your costs.

no moving companies

Yeah, that is how middle class people move. We rent a truck or a pod thing and ask nicely for our family and friends to help load the coaches. If you're moving for work, the company gives you a signing bonus to pay for moving costs. Once again, stop moving so much.

Adding everything up in your post, I suspect you live in a very high cost of living area with a limited amount of old generally poor quality housing stock in a humid area (mold mold mold), probably the Bay Area. If you choose to live in the Bay, then your experience has very little correlation with what the rest of the country is like.

At any rate, if you earn $500k/year, then you are by definition not middle class. That's probably why most middle-class people don't live in the Bay.

Seems like these job scheduling systems are a dime a dozen these days. Since we're an AWS shop, eventually my team ended up just building a system based on EventBridge and Fargate, killing off a previous system built on top of Quartz. Scheduling is all handled via Terraform. It's been solid for several years now, and costs next to nothing to operate. We can parallelize as much or as little as we want.

At the end of the day, I don't want more to run more dedicated boxes for yet another jobs systems. I just want to hand off a container to the ether and say "please run this container until it stops, and do this once an hour or once a day." I don't want to get alerts in the middle of the night telling me that the Quartz scheduler has had some esoteric failure, and I don't want Jobs A, B, and C to get killed because Job D started doing something dumb.

Having a nice UI is cool, but I would rather not have more servers and relational databases and Java-cron libraries that can do dumbness in the middle of the night.

you can't buy [RAV4 Prime] unless you pay $10k markup

Quite frankly, many people can't buy a RAV4 Prime at any price regardless of markups due to availability. My local dealer just quoted me a wait time of up to 18 months for a non-pluggable RAV4 Hybrid because there are simply no chips to go around.

As someone that is currently in the market for a new car, I would love to get an EV, but I also don't have a good way to charge. Seems like most EV owners just charge at their house, but what about people that don't have access to a good power tap? (apartment dwellers, renters, etc.)

Sometimes it feels like there is a group of EV elites out there that are predicting the complete demise of ICEs while conveniently downplaying the problem of charging access. I live on the outskirts of a major metro area. I've looked at the charging maps, and there just aren't good chargers available right now. I really hope that chargers will become ubiquitous in my area in the future, but until that happens, I don't have a great choice.

And so, my next car is going to just be a standard ICE hybrid. I hope that will be the last ICE I have to buy, but for right now, an EV seems like it is just not quite practical for me.

Back to India 4 years ago

America is in decline

I'm not agreeing or disagreeing, but can you be more specific about which metrics America is objectively declining at?

Back to India 4 years ago

Just trying to understand, what do you mean by a "Mexican US Citizen"?

When I read this originally, I was a bit confused why the child would not have been a US citizen as well by merit of being born to a US Citizen...but I think you're saying that the parent received US citizenship after the child was born?

Many states (by now) have already passed legislation to the effect that if/when the federal government allows it, they will simply stay on DST year-around.

There are a number of bills on a federal level that would allow states to do this, but each of these bills have seemingly been lost in the torpid world of inaction.

Well, there are some nuances you're skating over here.

Remember that GMAC Bank (the direct banking company) and GMAC ResCap (the mortgage/real-estate company) were two different entities owned by the industrial loan company GMAC. GMAC Bank was spun off as Ally Bank. Ally Bank (until 2014) was not even in the mortgage business.

I can tell you that as an actual customer of (the now former) GMAC Bank, I didn't feel like I got short changed in any way. They had good interest rates, and I'm glad they survived through hook, crook, and some TARP money (which was ultimately paid back with interest).

Just my perspective, it doesn't affect me in any way who you bank with.

most bank do that

No, actually that is pretty rare. Getting unlimited domestic and international ATM fees reimbursed is not the norm.

specially after you are over an amount in account

But that's just the point you're missing. Schwab does it at $0, not $1,000,000.

Usually also have the worse investing options

Eh? Are we talking about the same company here? Schwab has an enormous array of investing options, given that their main business is that of a brokerage.

HSBC

Also eh? When did HSBC become remotely competitive in the brokerage space? (And isn't HSBC winding down their US operations?)

May I present you with "US Bank"? Whose web interface looks like it was designed by an angry intern in 1997.

Then again, we're all sitting here reading on the minimal UI of Hacker News, so...

I find the Chase credit card interface to be pretty reasonable, but then again, I'm not logging into it every day.

I want to be okay with Capital One, but the day I tried signing up for an account (a few years back), their entire application for applying (their application application) had a meltdown and their app crashed, etc, etc.

And then I thought, hmm, glad this happened before I had opened an account.

Yeah, I remember that.

I never do a separate home partition though, so I ended up with the entire disk in Btrfs. I wasn't paying as much attention as I should have when setting up partitions during installation, and didn't totally understand the implications of using Btrfs back then.

Eventually though, it filled up my entire drive with snapshots, causing me much confusion and many disk full errors until I could figure out what had happened.

That experience turned me off from openSUSE for several years, until I finally started using it (with a more conservative choice of Ext4) again for a few machines a couple years ago.

Agreed, Btrfs has been out for quite a while. I think it is only now beginning to become more widely accepted or noticed by the broader community, which is both a blessing and curse.

That said, I'm going to continue to opt for Ext4 or XFS for the time being, even on distros where Btrfs is the default. Probably in a few years I'll get around to upgrading to Btrfs.

Over the last 15 years, I've run a lot of distros on a lot of different hardware.

On desktop, Fedora has been by far the most reliable. Ubuntu LTS, as far as I can tell from using it for work, just means that annoying bugs that have been fixed in the upstream never get backported.

Case in point: Bluetooth on Ubuntu LTS has always been much less reliable for me than on Fedora.

Disclaimer: This is only my anecdotal experience, use whatever works best for you.

Linux 5.10 6 years ago

Are you using an Intel wireless chipset or the terrible Broadcom one that Dell used to use? Not sure what Dell was using in 2018, but I replaced the garbage Broadcom chip in my 2015-era XPS 13 with a much more reliable Intel model, and most of by bluetooth problems were immediately fixed.

That said, the replacement process is pretty fiddly...Dell likes using lots of very small screws made of very soft metal.

I've also found that Gnome's bluetooth handling varies from barely acceptable to confusingly horrible. KDE's bluetooth handling has been way more reliable for me across multiple machines and distros. So the problem may very well be in userspace.

Linux 5.10 6 years ago

The bluetooth support certainly could be improved in many respects, although I have to say that it does seem like things have been getting considerably better as compared to ~4 years ago when I first started using bluetooth on Linux.

I've also wondered if a lot of the bluetooth problems on Linux are actually caused by the desktop manager.

Most of the problems I've personally experienced have seemingly been tied to using old versions of Gnome on Ubuntu. In fact, Gnome in general has always been rough for me on bluetooth; the bluetooth connection app still needs some love, but I've noticed it being more reliable with recent versions. I particularly noticed this when I was running a newer version of Gnome on Fedora 31, but then running an older version of Gnome on Ubuntu 18.04 (for work). The older version of Gnome's bluetooth was considerably worse.

For about the past year, however, I've been using Fedora / KDE on desktop and OpenSUSE / KDE on my laptop. This has been by far the best bluetooth experience I've had on Linux. Thank you to whoever wrote the KDE bluetooth code, because it is consistent and reliable.

So I don't think it is totally a kernel problem. YMMV depending on what cards/adapters you're using (I'm using a mix of Intel and some USB sticks from a fly-by-night vendor).

I use GitHub (and GitLab) because it is a convenient way of backing up random coding projects I have sitting around, not because I have any expectation it will be useful to someone. It is just versioned file storage at the end of the day.

I've only dabbled in their CI platforms, and as far as I recall, no one has ever made comments on any of my projects. I would be surprised if most people actually think that if they put something on GitHub that a task force of hundreds of dedicated open source volunteers will suddenly descend on the project and start contributing.

Many have rightly brought up the issue of energy storage for solar. Could hydrogen fuel cells provide an answer here? I believe there is some fairly recent research describing efforts to use solar energy directly to produce hydrogen (as opposed to electrolysis).

One could imagine a system in which solar cells produce hydrogen and the hydrogen is stored until needed or sold to industrial or retail customers.

Interesting field to watch, I hope we'll see some neat progress in the coming years that combine developments from multiple areas of research.

I think the real lesson here is to choose the language that works best for your team.

On my team we use Python and Scala. For network critical I/O stuff in Python, asyncio has worked out just fine for our needs. For massive CPU parallelism needs (at least in sporadic bursts), we've actually found that AWS/Lambda does pretty well.

Golang seems to be really polarizing. Most engineers on my team have tried Golang in the past, but haven't liked it, which is why we would never consider building anything on top of it. Everyone likes Python well-enough that it has kind of become the lingua franca for us.

Deployment is all based around containers or serverless/lambda, and we have a pretty standardized way of deploying these things by now. Just because a bunch of k8s tooling is written in Golang doesn't mean I need to rush out and write my stuff in Golang too.