HN user

tlynchpin

61 karma

computer stuff

Posts1
Comments76
View on HN

warning, completely pedantic pet peeve.

Note all dates and time in this blog post are in Pacific Standard Time (PST).

But the incident was during PDT. Just use UTC or colloquial "Pacific time" or equiv and never be wrong!

My heart goes out to these people. I can imagine how much sustained terror they were feeling, stare hard and harder at your terminals and still nothing makes sense.

Apple is well regarded for their strategy. I don't find it very credible that Apple is reacting here, it seems apparent that they would anticipate substantial negative reception.

So this delay is preordained in the strat, right?

But Apple is only human and has had its share of monumental wtf, so this is just a huge gaffe? The spyware team didn't know about iphone 13 launch? This seems incredible.

There is some n-dimensional chess at play here. I feel like a popcorn munching audience member who is actually a pawn in another dimension.

Reclaim Windows10 5 years ago

I have had good results with the decrapifier script by CSAND on spiceworks [0]. It's been getting maintained for a while now and it's on spiceworks so while I'm not a windows nerd enough to judge it, I'm pretty sure it's good if not great. I used this tutorial [1] when installing a new machine, you run it in "audit" mode before the out of box experience. I used -appaccess and -xbox. In my case I'm giving this PC to a friend so she'll get the new PC experience without the start menu garbage.

[0] https://community.spiceworks.com/scripts/show/4378-windows-1... [1]: https://community.spiceworks.com/how_to/148624-how-to-clean-...

RIP grafana

^^ this is not a good contribution to HN, not much substance. (edit)

Many people who use Grafana will see this news and will stop planning on using Grafana and start planning on doing something else. That has nothing to do with Grafana, that is a common reaction to AGPL.

In theory, AGPL is fine under circumstances blahblahblah. In common practice in commercial settings (in my experience), GPL is poison and AGPL is radioactive poison.

CGNAT block is popular in private k8s as overlay network address space because often the enterprise network already claims rfc1918 blocks. I'm not sure how close to the line that kind of usage is but I suspect it is SHOULD NOT. Speaking of, I probably should not even post this comment as it will now be indexed and served in search results, further contributing to the corruption. Alas, it works.

Software Updates 7 years ago

This has happened to me with Firefox. Thankfully there is Waterfox.

Recently this came up in discussion with a software developer who was overly concerned with openssl certificate minutiae. I advised the only durable solution for his concerns is a method to change the entire implementation, not only the certs.

This is what I'm talking about wrt bitching and moaning, in summary you tried to use ES but you didn't rtfm or didn't know about jvm tuning or didn't scale test and found out the weekend is a bad time to come up to speed on those, you had a bad time several times, plus you slashdotted yourself with monitoring; then you did a custom implementation for your vertical use case which didn't have the rtfm problem because you wrote it, but also only satisfied your case as opposed to the wide applicability of ES. Ultimately cool story bro because ES is freely available for anyone to use (many people do this) and modify (some people do this too) and your alternative is unknown.

What are the fundamental flaws of ES and what alternatives avoid those flaws, or how do you propose ES could address those flaws?

For example:

- "Algolia is so much better because it is a managed service." (hey whatsup ycombi)

- "Solr is also lucene but necessarily requires significant customization to the workload which avoids the common ES problem of it appearing to work so well out of the box that people neglect the details until it becomes an incident."

- "ES fundamental flaw is that zen disco mcast nonsense, people please stop being clever using mcast it never works in practice because igmp snoop". (hey whatsup we out here using ES since a while now)

If someone would say that on HackerNews then they would expect to hear "citation needed".

Anecdotally what I hear is a bunch of bitching and moaning about ES yet it clearly does work and has generally all of the difficulties of any CAP problem. This indicates to me that ES is addressing a Hard Problem and to the extent that it is long lived and quite popular, it's likely not substantially worse than any reasonable alternative.

Please tell us what you view as ElasticSearch fundamental flaws and give some proposed alternatives either as revisions to ES or entire other solution components.

PuTTY 0.73 7 years ago

"Install a decent terminal emulator" - this is the big problem for any command line experience on windows. What do you suggest?

Dead Malls 7 years ago

AboveNet built out a datacenter in a mostly derelict mall in the middle of downtown San Jose. At the time the irony of ecommerce servers in an abandoned mall was fresh and surreal.

There was a street seller who was so distressed by the economic conditions and especially the petty corruption that he publicly set himself on fire.

Almost a decade later, possibly the cops on the beat shakedown situation has improved but general man on the street economic conditions are not improved in Tunisia. It is not apparently (yet) a success story.

ha I was gonna comment this sounds like a book I read recently (since I didn't read TFA because who even does that).

I'm unsatisfied with the cassava and acorn stuff. I get that metabolism is externalized and I get that once it is a cultural practice then that's just how it is. I struggle with envisioning the part in between where the processing is newish and becoming a practice, especially in regards to something like the cassava toxin that doesn't happen until decades later. How does a processing strategy sustain in those early iterations? Versus the animal husbandry practices, they have more immediate results that seem less vulnerable to biases making false causation. I think I struggle with the making sense part of it, what I got from the book is that considering cause is a luxury won by doing it "because I said so".

What are the obvious reasons? I'll presume you are referring to disclosure of the card number.

I had this discussion recently about 'security' with regard to X-Header versus ?query=param. Either it's http all plaintext on the network or it's http with tls all cyphertext on the network. Every bit in the http request and response is equivalent - verb, path, headers, body, etc - agree?

You could represent the card number as cyphertext in the request body, that's a good practice regardless of tls, but of course don't roll your own crypto. You could put that cyphertext in the path as well but if the cyphertext isn't stable that makes for a huge mess of paths.

You could make a case for trad 'combined' access logs situation with the path disclosed in log files. I can appreciate keeping uris 'clean' makes it safe to integrate a world of http monitoring tools, I would make this argument. In the case of the card represented in a stable cyphertext it's kinda cool to expose it safely to those tools.

Anything else?

Commonly on windows, build pipeline tools don't work when they don't have a desktop environment even though there's no requirement for human interface (indeed, requirement for no human). The advent of Server Nano motivates a first class headless windows reality but even so, we been out here running xvnc because whatever tool required an X server.

ObPedant: notice in google's status page "...as of Tuesday, 2019-07-02 09:11 US/Pacific." This notation is useful because it's stable year round. I don't recommend 'PDT', instead colloquially 'out here on the left coast' or specifically US/Pacific.

came here for this in the comments of TFA:

In retrospect, it should have been obvious that hypertext transport over line printers just wasn’t a good idea.

Several commenters are attaching to this sock bit. Story time, my mother gave my minor daughter a DNA test kit as a present. I was horrified and my mother was bewildered by my very visceral and unfiltered "aw hell naw". Socks would have been a better gift. In fact my daughter also got some socks and they are super cute, she enjoys them frequently. Socks!

I had just started actually reading TFA because this topic interests me, I was skimming past some infographic of "phone addicts spend x% not looking at the road" when - pop! - a little distraction popped up in the bottom right corner offering "hey <domainname> wanna chat". A distraction, a creepy "personalized" one no less, on an article about distractions. Too meta for me, I ctrl-w'd outta there.

Glad to hear I'm not the only one. I appreciate the helm design and I don't dispute people have a fine time using it. I just need something simple to render yaml from a template without regard to cluster state, so we use good old fashioned sed.

What's annoying about helm is many cases would be fine as plain yaml template macro without any cluster state but many public projects are packaged as helm charts so to use them off the shelf you need to go full helm. Thankfully it's not too difficult to use helm template.

Interesting choice of Steam and itch. I'd be very interested to hear more about their selection process on platform once they decided to Get The Money. Specifically I wonder if they explored the new Epic platform, guess I'll have to tune into the AMA tomorrow.

2K Games | Software Engineer, Technical Product Manager | Novato, CA | ONSITE

2K Games is the premier purveyor of fine video game entertainment. My team is growing and has some open positions for software development and technical product management. We build services for game developers, we make components that go into the games and services that support the games. On the game side it’s mostly C++ and on the service side it’s Java and Python.

Lead Software Engineer https://chp.tbe.taleo.net/chp04/ats/careers/v2/viewRequisiti...

Principal Software Engineer https://chp.tbe.taleo.net/chp04/ats/careers/v2/viewRequisiti...

Software Engineer https://chp.tbe.taleo.net/chp04/ats/careers/v2/viewRequisiti...

Associate Technical Product Manager https://chp.tbe.taleo.net/chp04/ats/careers/v2/viewRequisiti...

My name is Tim Lynch and I'm the devops wretch, please contact me directly if you are interested in learning more about us, email me first name dot last name at our domain.

Erlang is a terrific platform, but it isn't very accessible to the wider population.

Timely, here's antirez on this topic when Redis was announced on HN ten years ago [0]:

There are a lot of projects similar to Redis in Erlang actually: http://www.metabrew.com/article/anti-rdbms-a-list-of-distrib...

Apart from speed what I like of C for this kind of projects is the self-contain-ness and the fact that most developers that may help in the development are probably able to read/write C but not Erlang.

[0] https://news.ycombinator.com/item?id=494903