10,031 karma · joined March 4, 2016
I have a blog: https://karl.kornel.us/
My HN handle is also my Twitter handle.
My work email is a!k!kornel@stanford,edu (with ! removed and , corrected).
This was posted a few times in the past, but never got too high. However, the post is (IMO) interesting!
https://news.ycombinator.com/item?id=39101463
• The cost of two hardware gateways (the depreciation cost, that is)
• The cost of 24x7xNBD (next business day) hardware support
• The cost of the user/session licenses (which might be depreciated also)
• The cost of software support/upgrades
It's definitely annoying to calculate! Since a heat pump's efficiency can vary with the outside temperature, it takes a bit of work to estimate your potential added electricity cost.
> What is going to happen to my digital copies?
> We understand that you may have concerns about your digital copies from Funimation. These Digital copies available on Funimation were a digital access to the content available on the DVDs or Blu-rays purchased.
> Please note that Crunchyroll does not currently support Funimation Digital copies, which means that access to previously available digital copies will not be supported. However, we are continuously working to enhance our content offerings and provide you with an exceptional anime streaming experience. We appreciate your understanding and encourage you to explore the extensive anime library available on Crunchyroll.
For an example, check out https://www.youtube.com/watch?v=vlauVZ_5Le0, a virtual controller operating a chunk of New York airspace. As he moves around the screen (for example, around 21:30), you can see he has various fixes displayed. Those will be important fixes from various approaches, and their coördinates will be coming from machine-readable data, ultimately (in the US, at least) coming from the FAA.
All of this is possible thanks to these materials, as products of the U.S. Government, not being subject to copyright in the United States.
I will say, one important thing that's missing is publicly-available mappings of three-dimensional airspace (latitude, longitude, and altitude) to ATC sectors, and mappings of ATC sectors to frequencies. If you had that, you could (for example) look at your flight's location (in FlightAware or the ADS-B Exchange), work out the likely frequency for the airspace, and (if it's available) listen to your flight on LiveATC).
Source: Was a VATSIM controller, controlling up to & including Indianapolis Center.
I worry that, some day, tech companies will be under a regulating agency like insurance is today. If that happens, we’ll probably deserve it.
Stanford Research Computing (https://srcc.stanford.edu) is a collaboration between University IT and the Vice Provost and Dean of Research. We operate HPC environments for researchers, we do one-time consultations on projects (from software and pipelines, to data management, to physical building design and fit-out), and we provide contract support for individual Labs, Departments, and Schools.
We have four open positions:
• GPU Cluster System Admin: We're looking to get an NVIDIA DGX SuperPOD for researchers to use. Besides running the system, you'll help users scope their jobs to maximize utilization. You should already know CUDA; integration with HPC; and ideally one or more of AI/ML software and frameworks, deep learning, and LLM training. More info: http://phxc1b.rfer.us/STANFORDOVPPFC
• Cloud Engineer: Most of our researchers use Google Cloud, but it can be difficult to manage, from admin and cost standpoints. Your job would be to help researchers deal with it all! You should already know Linux sysadmin stuff, as well as methods for doing compute in the cloud (from Compute Engine to k8s). GCP-wise, knowing BigQuery would be helpful. More info: http://phxc1b.rfer.us/STANFORD9AaPFE
• Data Center Engineer: You'll be based full-time at our primary research data center in Menlo Park (on the SLAC campus). This position includes everything from racking and cabling to maintaining and troubleshooting power distribution (415v Starline bus), UPS (spinning-mass), generators, VFDs, air handlers, chillers, PLCs, and the like. More info: http://phxc1b.rfer.us/STANFORD28DPFA
• Data Center Director: Our current Data Center Manager is getting ready to retire! We want to have a replacement hired in advance of that, to ensure a smooth transition. You'll manage two Data Center Engineers, work with Stanford Facilities folks, and possibly oversee construction of a future research data center. More info: http://phxc1b.rfer.us/STANFORDca_PFB
The data center positions are onsite; the others are hybrid. If you don't already live in the Bay Area, we provide a relocation incentive. Depending on where you live, we provide free transit passes. Unfortunately, if you don't commute, you will have to pay for parking for the days you're on-site (except at the data center). There is some on-call around the holidays. We get a 403(b) match, good healthcare, and 30+ days off per year (holidays + vacation). All Benefits are all publicly documented at https://cardinalatwork.stanford.edu/benefits-rewards.
If you have questions, feel free to reply here or email me (the info is in my profile)!
Tom Scott. “YouTube’s Copyright System Isn’t Broken. The World’s Is”. Chapter 2: “No Copyright Infringement Intended”. https://youtu.be/1Jwo5qc78QU
This is, I think, the most important part: The British Library isn't paying the ransom as a way to save money. They are taking that money (and more) and using it to rebuild, in (hopefully) a more-secure way.
I wasn't completely confused: I was a Mac OS user, and I had been around when the HFS+ filesystem was introduced to replace HFS. So I read through the documentation I could get, I learned how ReiserFS was a journaling filesystem, and decided to use it.
I kept on using ReiserFS as my preferred filesystem, any time there wasn't a need to use a different filesystem (for example, I continued using ext2 for /boot). I don't remember ever having an issue with it.
Then I started dealing with larger filesystems, and XFS was available, and I understood that XFS worked better on large storage. Around the same time, I learned of Hans Reiser being charged with killing his wife. I was confused and sad, but moved on.
I hope for all the best for Hans Reiser's children.
I wasn't completely confused: I was a Mac OS user, and I had been around when the HFS+ filesystem was introduced to replace HFS. So I read through the documentation I could get, I learned how ReiserFS was a journaling filesystem, and decided to use it.
I kept on using ReiserFS as my preferred filesystem, any time there wasn't a need to use a different filesystem (for example, I continued using ext2 for /boot). I don't remember ever having an issue with it.
Then I started dealing with larger filesystems, and XFS was available, and I understood that XFS worked better on large storage. Around the same time, I learned of Hans Reiser being charged with killing his wife. I was confused and sad, but moved on.
I hope for all the best for Hans Reiser's children.
Could you please provide a source for that? That can be an important distinction for an employee. For example, when answering the question "Why did you leave your previous job?" It's important for the now ex-employee to have accurat information.
No, you don't. Oregon Unemployment, Claimant Handbook, Section 6. Source: I helped a friend through unemployment. He was fired from work, and his employer provided a false reason for the firing, triggering denial of benefits. We looked at his options, and it would've been cost-prohibitive to retain a lawyer to fight it, which would've been required.
See https://www.kernel.org/doc/html/latest/process/2.Process.htm... for more details.
To make merges go smoother, there's a set of trees that are designed for developers to stage things that are ready to merge during the next merge window. linux-next is a good example: https://www.kernel.org/doc/man-pages/linux-next.html The Linux Networking folks have their own trees that fulfill the same role for their stuff: https://www.kernel.org/doc/html/next/process/maintainer-netd...
They give you the certificate, which contains the issuer's CPS. If it's an issuer that you (the domain owner) don't recognize, you have at least a starting point for reaching out.
> … and they take up to 24 hours to do that.
Indeed, the Maximum Merge Delay is 24 hours. But in practice, by monitoring multiple CT logs, it takes just a minute from successful issuance to having the certificate show up in at least one CT log (see https://utcc.utoronto.ca/~cks/space/blog/web/WebProbeSpeedNe...).
Let's Encrypt has supported RFC 8657 for over a year now: https://community.letsencrypt.org/t/enabling-acme-caa-accoun...
nocerts.example.com CAA 0 issue ";"
… telling CAs that they shouldn't issue certs for `nocerts.example.com` at all.
That being said, it would make things difficult when it's time to do a cert renewal: You'd have to update the CAA record, wait for it to propagate, do the renewal, and then set it back. And that's a window that could be exploited.
What could work is CAA, along with RFC 8657: Certification Authority Authorization (CAA) Record Extensions for Account URI and Automatic Certificate Management Environment (ACME) Method Binding (https://datatracker.ietf.org/doc/html/rfc8657). RFC 8657 extends the CAA record to say "Only this specific CA account may request certs for this domain" and/or "Only this specific validation method may be used when requesting certs for this domain".
Given a message M, length function L(), and MD5 hash function H(); is there an attack which can generate message M', such that H(M)==H(M') _and_ L(M)==L(M')?
In other words: Two different messages, both of the same length, with the same hash?
It's almost like a chosen prefix collision attack, but with no prefix (so P is empty) and a given message (M is known, M' is up to the attacker).
I ask because I frequently use GridFTP for data transfer, and it uses both the file length and the MD5 has to verify that files were transferred correctly.