HNHacker News
TopNewBestAskShowJobs

Ayesh

3,618 karma · joined March 16, 2017

Reach out at https://aye.sh :)
submissionscomments
Ayesh··on Hetzner GPU Server
It's with ample RAM and the latest Intel CPU. Assuming the whole thing draws 100W, that's also including 72kWh of electricity.
Ayesh··on Not all TLDs are Created Equal
IIRC, the cost is ~$200k one time and ~$25/yr. Shitcoins get magnitudes higher crowd funding. Not impossible to do at all.
Ayesh··on Not all TLDs are Created Equal
.com is run by Verizon, and .bananas will be by another for-profit company (most likely Donuts).

If the .com prices were to be increased, there will be a huge backlash. As for .bananas, not so much.

.bananas might get blocked at TLD level, .com unlikely so.

Ayesh··on Rclone syncs your files to cloud storage
Some people might end up in the 10,000 (https://xkcd.com/1053/)
Ayesh··on What's that touchscreen in my room?
I'm gonna steal this to use in my casual conversations!
Ayesh··on What's that touchscreen in my room?
Yeah I think it makes more sense like you said. It has the Wifi stuff there already too.
Ayesh··on What's that touchscreen in my room?
My guess was that it probably had a time correction feature from those British radio tower integration, but this device is from 2015 (says in the article), so probably not.
Ayesh··on FAA orders grounding of more than 170 Boeing 737 Max 9s
I'm bored while waiting for my flight to take off in KLIA2 airport that AirAsia uses as its base. Their whole fleet is A320s. If the A320sbwere to be grounded, this airline will be pretty much done for.
Ayesh··on Ask HN: Experience Starting a Blog
I wanted to echo all the comments here saying to turn off comments is a great tip. I have quite a few blogs/personal projects that I write weekly or more frequently.

My tips would be:

- Use Markdown. It makes writing so much more faster and takes away the focus from markup.

- Do not focus too much in the technical details. Content is still the king.

- That said, make yourself familiar and follow great typography patterns in your blog. Use legible fonts faces and sizes, clear separation, hierarchy, etc has the best impact.

- Have your email address visible. I find it be more effective than contact forms. You will get all sorts of feedback, but you can still decide if you want to respond to them. In my experience, people who take the time to compose an email tend to provide constructive and generally positive feedback.

- Decide a "tone" that you want to follow. For example, I have my technical content separate from personal, and travel content separate from the rest. It's sometimes refreshing to be able to speak in different tones.

- Be open about what you expect from the blog as well. If you hope to land in a better job, saying it openly won't hurt.

Ayesh··on Ask HN: Experience Starting a Blog
> how do you go

Well that's the thing... You don't. It's a very passive approach if you are actively looking for a job.

Posting solutions to interesting challenges you come across has a lot of potential getting asked to interview for jobs that solve similar problems. A generic article about "top 5 Gen AI projects" will be fruitless, but a post about how you practically "abused ramfs to make database tests 5x faster" might be.

Ayesh··on Cleaning up my 200GB iCloud with some JavaScript
Im not in Apple ecosystem at all, so I don't have an answer to your question.

But in RAW/JPG world, the metadata and edits is already a solved problem with Sidecar files + EXIF data. Sure, EXIF fields are kinda messy but I'm sure it's better than Apple has rolled by their own.

Ayesh··on Use of HTTPS Resource Records
OpenSSL and Go crypt/tls has no support yet, so none of the webservers that depend on them support it. Apache, Nginx, and Caddy, they all need upstream ECH support first.

- https://github.com/openssl/openssl/issues/7482

- https://github.com/openssl/openssl/pull/22938

- https://github.com/golang/go/issues/63369

Ayesh··on Use of HTTPS Resource Records
I recently added HTTPS records to all of my domains, along with HTTP/3.

From query statistics, I see that around 15% of the queries are for HTTPS records, 30-35% for A and AAAA records, and the rest for RR types like NS, TXT, etc. Browsers make HTTPS requests in addition to the A/AAAA, so this makes sense.

In an ideal world, the ipv4/ipv6hints do the job if A and AAAA records, so a browser will only need to make an HTTPS request.

Ayesh··on Benchmarking 20 programming languages on N-queens and matrix multiplication
The state of PHP 8.3 and especially 8.4 is a lot better than HHVM. They have diverged quite a lot to a point that it's no longer a drop-in replacement.

PHP added JIT in 8.0, and these math-heavy tasks can take advantage of it. It's not trivial to fine tine JIT configuration though.

In PHP 8.4 (scheduled Nov 2024), there is a major upgrade to JIT as well.

Ayesh··on Git Branches Have No Rules
> wrong thing

Rebase/reset are major and first class features of Git. It's only wrong if you work with a team that expect the centralized server to be consistent.

Ayesh··on Push notifications – What to push, what not to push, and how often
This is especially annoying when they don't use different notification channels so I can't turn off individual types of notifications.
Ayesh··on Eating fewer calories can ward off ageing
I have trust in them that they will at least hand over the data for someone else to carry on if they have to turn off lights.
Ayesh··on New Ultra Fast Lossless Audio Codec (HALAC)
https://archive.md/0v1qg
Ayesh··on Evaluating new software forges
Having tried GitHub, GitLab, Source Hut, Codeberg, and BitBucket (RIP), I think the only serious options are GitHub, GitLab self hosted, and Source Hut.

GitHub owned by MSFT aside, and also putting their AI push _also_ aside, GitHub has things like Sponsors, Dependabot, and code scanning that you won't find anywhere else. They sure are luring you into ecosystems that require a huge escape velocity, but GitHub serves as less-friction entry point to open source software.

GitLab self hosting is also nice and flexible, but it has a more "enterprise open source" feeling to it. Debian and Drupal can take advantage of it, but I don't see myself hosting mini projects like my mini CSS library that is also used by three other strangers.

Source Hut is really nice too. Admittedly I don't like email based workflows, so I haven't really thought about moving anything there. But Source Hut has "unlisted" repos, which I thought was really clever and missing from other forges.

Ayesh··on SSH3: SSHv2 using HTTP/3 and QUIC
Strict SSHFP can theoretically solve it [1], assuming it's used in the first place and has DNSSEC. I personally use it for all servers I manage purely because I like the additional security, but it not at all common and DNSSEC isn't all that perfect either.

[1] https://aye.sh/blog/sshfp-verification

Ayesh··on SSH3: SSHv2 using HTTP/3 and QUIC
SSH over QUIC would be nice.

I don't see any advantage of layering HTTP/3 here. It adds more friction, and the only advantage it brings is being able to "hide" the SSH server over a URL path. I guess x.509 certificates would be fine, but SSH hostkeys, SSHFP or TOFU is enough and far more secure (because it implicitly pins the server public key).

It's a relatively new project from the looks of it, so I'd definitely not use it anywhere half important having to create something interesting with QUIC and HTTP/3.

Ayesh··on CPNG, a backwards compatible fork of PNG
> screenshots

For browsers, there are extensions that can create SVG screenshots. They work by either copying or inlining CSS into the SVG. They don't work all the time, but worth giving a try first.

For Firefox, see https://addons.mozilla.org/en-US/firefox/addon/svg-screensho..., it worked relatively well for me.

Ayesh··on DNS Exfiltration Tool
I monitor DNS queries made by some of my servers by setting a DoH server to systemd-resolve, some of the top queries are:

- OCSP servers to query TLS certificate validity. This is necessary because I have configured my web server to staple OCSP responses. (`e1.o.lencr.org`)

- Software repos (apt, dnf, etc). `livepatch.canonical.com` being the top contender.

- GitHub

The only place that TXT records are used in the very popular use cases would be an email server. SPF, DMARC, and DKIM all piggy back in TXT records. I would also imagine a lot of Microsoft stuff like AD use DNS .

Ayesh··on Show HN: Beeper Mini – iMessage client for Android
There really is no free lunch.

// insert some clever "you are the product" here.

Ayesh··on Does uBlock Origin bypass the latest YouTube anti-adblock script?
Very misleading.

It downloads a text file maintained by someone at a repository that lists all uBO YouTube Fixes, and compare it to the latest YouTube JS files. Not all JS updates contain anti-adblock codes, so what this website shows is pretty misleading.

Ayesh··on The worst thing about Jenkins is that it works (2019)
I moved from Jenkins to Travis several years ago, and Travis's UI and configuration was such a fresh breath. Back then, pretty much _every_ OS project used it because of their generous offerings for open source projects. I agree with this comment that, and from my own experience living through the transitions, Travis CI made a massive leap leveling up the modern CI we have today.
Ayesh··on Chrome's next weapon in the War on Ad Blockers: Slower extension updates
AMO also takes several days for plugins to update. I recently wanted to update Bitwarden addon, which took well over two weeks for it to land on AMO.

Addon sideloading is only possible on Firefox Developer edition (which I use, so it didn't bother me much).

Ayesh··on Exploring Self-Hosted Email Services
I'll try to fill in.

I'm very aware that I'm in a bubble with my peers, so these are certainly opinionated.

I would pick Postfix because it's more maintained, and what most of my peers use it too. It's a PitA to configure, but there seems to be many resources online. Most of the configuration are quite common, so that one-time configuration is manageable.

Exim is pretty robust too. I don't have a strong reason to not use it, except that I don't have many close peers who use it. Really nice configuration. If you have a multi-tenant setup, Exim would serve better.

Qmail, despite being unmaintained, is praised for being quite secure. I suppose it's the low number of CVEs.

There is also msmtp that provides sendmail compatibility, but uses an external smtp server (like AWS SES) to send the actual email. This is what I use when the server I'm sending from has low IP reputation but I don't want to change my app to use a REST API to send email.

Ayesh··on Exploring Self-Hosted Email Services
This certainly seems to be the consensus about self hosting email, but but I'm now convinced otherwise.

I send a couple newsletters (one tech related, other for marketing for a coffee shop/bakery I own), and it was fairly easy to land on inboxes. Now, I don't know with a 100% certainty that they were delivered, but if DMARC records and bounces are anything to go by, self hosted emails aren't all that hard.

When you buy a VPS, it helps to check if the IP you receive is already blacklisted. After that, it's easy to use some outside service to monitor DMARC responses and blacklist. There are about 40 black list databases. My domains and the IP address are on none of them.

Ayesh··on NPMprune: Remove unnecessary files from node_modules to optimize storage
Yeah no.

Npm already does it at the package registry with ignore/npmignore files, and that's the package authors choice. How much storage can you really save? 50MB? 200MB? is it really worth the risk of running rm on some glob pattern and cross your fingers the packages don't require any of the deleted files?

← PreviousPage 4 of 32Next →