HNHacker News
TopNewBestAskShowJobs

2ion

957 karma · joined November 18, 2013

submissionscomments
2ion··on I would like a job writing Haskell
That's like picking a plumbing job because you get to work with hex instead of torx screws. As a professional solution-provider, you're free to offer only work with a specific set of tools but don't expect jobs to magically appear to accommodate your preference of tools. If you're a plumber, your worth is in the value you create and the tools are a footnote (which you might have to justify anyway). Software engineering is not any different.
2ion··on The End of Uber with Cory Doctorow
I feel justified for being pro car egostically by looking back at the pandemic.

When employers and politicians herded workers through tightly packed public transport with zero effective protection (partially due to lack of discipline, partially due to lack of investment), I felt save & secure in my movable tin box.

Yes, I am paying a lot for that box.

And, do realize, that public transport is and will be for the plebs. Even if it's green. Not spoken in derogative manner, it's just that. Noone of high enough status is going to bike or limit themselves in any way, shape, or form. If they do bike, they'll be taking the car when you aren't looking or helicopter in. That probably still is going to solve the problem of mass transit, but the few who are not mass are going to continue to enjoy unlimited individual and privat transport whereas the rest of us won't. It's a decline in a dimension of freedom and not recognizing and admitting that fact is dishonest.

2ion··on Adobe tricks users into a 12 month contract
Not a good idea if you, in the future, may actually need Adobe's services again.
2ion··on Meta might consider leaving Europe?
Europe is not using Facebook or Instagram, it runs on WhatsApp. In some big Western European countries WhatsApp is the monopoly messenger for a lot of people (SMS/MMS always was overpriced so people looked for an alternative, and it came about with the Android mass market in the early 2010s). If Facebook would WhatsApp a truly good product (remove telemetry, charge for use, extreme control like in Threema) they might even still have a viable product for our market here. They already got the users. Carrier billing in particular might make this a move that's easier than many think.
2ion··on Microsoft Says Windows May Need Up to 8 Hours to Update
I keep WU postponed for a month or two and when I feel daring I let it play. But it always finishes its job in an hour. Windows 10 Edu here. Maybe a key point is to disable the built-in bittorrent distribution ("delivery optimization")? Apart from disagreeing with Microsoft using your PC as a CDN node.
2ion··on GDPR penalty for passing on of IP address to Google by using Google Fonts
You'll just see HTTP451 more.
2ion··on GDPR penalty for passing on of IP address to Google by using Google Fonts
Users are enabled to set policy by disabling JavaScript execution by default. If GDPR sees an issue with current default policy, it should mandate that policy is in alignment with user expectations by default, by disabling policy. For web content, after all, doing everything on the server side is not impossible.
2ion··on GDPR penalty for passing on of IP address to Google by using Google Fonts
Then GDPR should blame the browser vendors for shipping with JS execution enabled by default and demand that JS execution for all browsers be turned off by default. To repaint the stories spun by the grand parents: If I hold up a dagger and announce the fact, why would you run into the dagger anyway without protection? Put on some armor, dude. The client browser had all the information it needed to not make the request (geolocation, external resource, purpose of external resource) and yet it did. I know this is just shifting blame but it's also a good argument for returning HTTP 451 to EU clients and be done with it.
2ion··on Germany to admit 400k skilled immigrants annually
I understand very well as I'm German.

Anybody who is usefully skillful and economically useful will be earning north of 57k. Anybody who is all that and earning less than the equivalent German is a means to keep salaries low. There is an oversupply of cheap labour fuelling the Niedriglohnsektor already.

That also means that high-performing individuals with an already appropriately high base income will be paying 42% on any € pay increase, which is not a good incentive to make people work more and/or more stressful and/or more highly skilled jobs /in Germany/. Why here, if you can be highly skilled and high earning in Switzerland and be able to achieve a multiple of net income and get a better pension system to boot?

2ion··on Germany to admit 400k skilled immigrants annually
It's even worse. The company I'm working at is discovering "near shoring" in countries adjacent to the EU, like Serbia. Much cheaper than local labour and no less qualified. For me to say, the contractors we're working with from there are just as good or better than the average developer Joe from here. As long as you can communicate in English, you can nearshore a lot of stuff. And esp. in Germany lack of English communication ability on the German side is one of the last barriers keeping nearshoring out of a lot of firms.
2ion··on Germany to admit 400k skilled immigrants annually
> I'm seriously wondering if people are only pretending to be stupid when talking issues about issues akin to this one, where it's very easy to scream: "racism" instead of providing actual solutions, or even discussing the problem. Germany has a lot of problems, as do other countries that rely on the 'never-ending' supplying of foreign labor(which is unrealistic).When you cut the pipeline of cheap labor:

To add to your point, the pipeline of cheap labor is also getting cut at the other end --- with quality of life increases, skill and education increase, manufacturing hubs like China are getting continuously more expensive to use vs already expensive local hands.

With this diminishing cost differential, the only way out is for the countries that were depending on that differential to increase their value-add to the global economy in order to eke out a new differential by being able to demand a premium on local products (knowledge products and physical products) because of tech/quality advantages.

Unfortunately, exactly in this regard Germany is also falling back in the world. After losing leading positions in consumer electronics (80s/90s), mobile communication technology (90s/00s) and so on, little is left except from big auto, and big auto is already generating most of their profits abroad rather than at home. Frankly, it's getting hard to see what the country is wanting to sell to the world. There might be some highly competitive businesses left (see BionTech by sheer luck, a so-called and often-praised hidden champion), but that's hardly entire sectors of the economy.

Again, I'm not able to discern what the selling point of Germany is supposed to be. And no politician has made any honest attempt to tell and plan instead of running on hope alone. At the moment, Germany's migration-fueled economy parts are growing based on the most primitive producitivity factor in existence --- head count. And head count is not going to be enough for the future. You need factor productivity, and that's not coming.

2ion··on Germany to admit 400k skilled immigrants annually
Literally every "skilled immigrant" is supposedly earning 57k or more. Everything else is a strategic move to keep salaries low. So, evey skilled migrant looking to work harder and more is going to get taxed almost half of that effort plus social constributions (up to the limit) and soli (still exists). There are tax-free allowances like in night shift bonuses, but those apply not to most workers. The base tax exempted income is much too low as well. Should be at least double the current 10k or so.
2ion··on I got pwned by my cloud costs
This is why I use fixed price offerings for personal projects.

A large bill is probably chump change for someone like Troy, for others it's a year or two of savings. The risk is not worth it.

2ion··on It’s great to be a consultant
From my personal experience, the best time I had as a consultant was when the client paid their bill :>
2ion··on Real-world stories of how we’ve compromised CI/CD pipelines
Jenkins is security game over if you overlook a small crucial configuration option or if you install any plugin (and it's unusable without some plugins), as plugin development is a free-for-all and dependencies between plugins are many. We basically decided that one instance of Jenkins plus slaves was unfixable and unconfigurable to use securely across multiple teams with developers of differing trust levels (external contributors vs normal in-house devs) and started fresh with a different CI design.

Jenkins is a batteries excluded pattern in one of its worst possible incarnations.

Jenkins is basically a CI framework for trusted users only. Untrusted workloads must not have access to anything Jenkins.

2ion··on Train burglaries in LA
The West is on a way to 2nd world status at best, comprised of 1st world enclaves / gated communities where things are in order and a wild 2nd world west.
2ion··on Firefox 96
> multi-account containers are the only major feature I could name that makes a major difference.

And for me, that's a key difference. Chrome, Chromium, Opera, Vivaldi, Brave, all garbage --- staying logged into several AWS SSM sessions in different accounts at the same time w/ full features, logged into several paypal accounts at once etc etc etc. The containers fix so much of web dumbness that they've become indespensable in my workflow, both at work and at home. Unless the other browsers have feature parity regarding MAC, they are not even among the competition.

2ion··on Apple said to be preparing for iPhones without SIM card slot in 2022
Where I live (Germany) this is completely unfeasible and untrustworthy for yet another reason: telcos and ISPs (the big telcos here are ISPs as well). There are not many industries where contract agreements are handled by electronic and manual processes so unreliably, erroneous and intransparently as they are at ISPs and telcos. I wouldn't trust them with managing an eSIM for me ever. Given how important a phone number is these days, again, never. When the simplest processes don't work (point in case: wanted to change a prepaid plan online (should be possible) -- it was not possible, buttons simply greyed out for no reason and/or missing, customer rep totally clueless).
2ion··on Microsoft Teams: 1 feature, 4 vulnerabilities
It's a monospaced font. Though even if it should have to render everything at least once, it should be in the blink of an eye --- at this point I'm almost convinced that getting a laptop with 10th gen i7 class CPU, 32G RAM and a RTX2060 graphics card to absolve myself of desktop performance issues was a mistake as it forces my to run Windows for flawless Optimus interop and does not get rid of desktop performance issues either. Maybe font rendering is not optimized enough or not accelerated at all, but a few million letters the most of them not even visible should be nothing on this machine drawing 100W and more but not performing much better at this specific task than my Haswell laptop from 2014.
2ion··on Hidden Networks in TP-Link Routers
They also used to be able to be set up standalone without controller (have one AP lite as well) but they removed that from their "apps" a while back (already set up APs keep working in standalone mode). This has caused me to make new AP deployments around the house using TP-Link Omada APs w/ OpenWRT firmware instead. Ubiquity is no longer worth the premium if they keep messing with the software side of things (although their hardware keeps working well).
2ion··on RCE in Visual Studio Code's Remote WSL for Fun and Negative Profit
That's good to know. It was still locked down when I looked into it last time.
2ion··on Microsoft Teams: 1 feature, 4 vulnerabilities
Even a very large amount of data pasted should not blow up a text box in 2021. I mean, on Windows you can paste an object referring to a data blob pretty sure, macOS surely has something similar and on X/Wayland you could sniff and size of data pasted in advance and do something useful. If it's plain text like JSON even 5G of plain text should not bring a text box to its knees when the memory is available, it's not being rendered at the same time ... still getting irritated by Firefox taking forever to render a 10M email source code in plain text when it could do something smart and render/view only the viewport that's showing. Somewhere GUI engineers stopped being smart.
2ion··on RCE in Visual Studio Code's Remote WSL for Fun and Negative Profit
In a sense Microsoft forgot its own learnings. Because of exactly things like this they prevent UWP apps from connecting to localhost by default and make it very annoying to circumvent and from my experience, the circumvention is not exactly a stable setup. So they really don't want you to do that, and somebody thought enough to make it extra difficult. So, they have UWP, all those well thought-out policies, then make an editor ecosystem out of web technology and throw everything out of the window. No surprise from a $T company with more teams than countries on Earth that not everything is coordinated, but they should have a guy with the required knowledge and sensibilities on any major product team. Apps installed from their "store" are relatively safe, but then they put a (extension) store inside their app again, which is unsafe :/
2ion··on If 6G becomes just 5G+ we’ll have made a big mistake
Don't worry, in Germany you can't even financially afford to have full LTE download speeds without data cap on more than 1 or 2 personal phones so you can be sure nobody else will pay out of their arse to connect everything to 6G nobody can afford.
2ion··on The Big DevOps Misunderstanding
A huge part is companies rejecting simpler solutions.

For example, you can use latest systemd to basically replace all of docker and then some. It provides advanced sandboxing, resource control and job control for units and even manages "containers". Which is why my private servers mostly use systemd properly configured to provide what containers are thought to provide. The deployment is switching out a binary or add a directory tree, override a .service line and then reload and restart. Easy.

Though over a 10 year period, companies, developers and operators went all-in on "container runtimes" and here we are.

That being said, things like kubernetes are NOT NEW and NOT DIFFERENT from solutions like corosync+pacemaker (who remembers them?). They do the same thing, with the same levels of flexibility and extensibility and pluggability, just with containers. From my POV people who are surprised by k8s and its complexity never lived or forgot the cluster tech of the 00s. It's just about to come together as a circle, and the next iteration seems to be micro VMs instead of containers.

2ion··on The Big DevOps Misunderstanding
It's "why would a frontend developer build inside a docker image". You wouldn't believe the absurd problems in npm dependency chains when you try to build natively on macos and windows and linux. Especially "native code" in npm deps is not always the best quality and tested on all platforms it is declared to support. Better to build in Linux and run in Linux all the time (via containers or VMs).
2ion··on The Big DevOps Misunderstanding
> require a bunch of external systems to work

- unit tests should always complete locally - integration could also complete locally but are allowed more complex scenarios - in any case, we require developers to pull all their deps through a caching proxy (external system) to keep a lid on what they use, keep a lid on licenses used in our software, and keep open a door to centralized vuln tracking & management.

Though if you can't fully test a software locally by getting all units and integration components to spin up, this is mostly a consequence of bad system design, for example, if the one application depends on another one which can't be run locally, reasons for which are (a) no bootstrappable dev environment (b) no test data management/generation (c) no license (d) too complex for the originating team to provide or (e) proprietary applience no one but the operating team understands. (a) through (e) all encountered at $currentjob and not happy about it, but what can you do? beg the other team to fix their shit and wait or just bite the apple and deploy to "dev stage" to get the testing done.

2ion··on Bottles: GUI front end to run Windows software on Linux
Why is this better than playonlinux (contains "quirk" solution for lots of productivity software and is also based on fully managed invidiual wine prefices) or lutris or steam w/ proton for games?
2ion··on Internet addiction and the habit of book reading
I jealously preserve my time and habit of reading lots of books because it's a main contrast to digital life. A welcome pause from the distractions of nonlinearity in online media and electronic devices (such as e reading devices). It's relaxing. Physical books are still a favorite pastime.
2ion··on Google Drive could soon start locking your files
Your data belongs on other people's storage in encrypted form only. I have long stopped trusting clouds with my private data in plaintext.
← PreviousPage 2 of 12Next →