HNHacker News
TopNewBestAskShowJobs

CaptainJustin

469 karma · joined March 2, 2018

github.com/just1689
submissionscomments
CaptainJustin··on Perfect NAS Solution
It's lovely that these devices get a chance at being productive again.
CaptainJustin··on LockBit claims to exfiltrate 33TB of data from US Federal Reserve
One of the scary things about ransomware attacks is to think of the possibility of other actors having gotten in before and copied all the data. I can't imagine the security hole is always an unknown zero day.
CaptainJustin··on TrueNAS CORE 13 is the end of the FreeBSD version
I know this is only one aspect of a migration but it was at least trivial for me to import my ZFS cluster from TrueNAS Core into TrueNAS Scale.
CaptainJustin··on TrueNAS CORE 13 is the end of the FreeBSD version
A little off topic but does TrueNAS Scale require an Enterprise SSD for the OS drive? IIRC TrueNAS Scale runs Kubernetes under the hood. I'm curious if a regular consumer SSD would be quickly destroyed by the frequent random writes needed for K8s/etcd?
CaptainJustin··on Ask HN: Which password manager is the most secure and why?
Here's a wild idea!

- Bitwarden

- Self-host

- Don't listen on public Internet IPs or regular LAN IPs

- Listen on Tailscale IP.

- Put TLS in front of it the Tailscale way.

- Run Tailscale on all your devices and access Bitwarden from your private network.

CaptainJustin··on Ask HN: What do you use for a personal database?
I use PostgreSQL in a container in my home lab. The backup is uploaded to GCP every morning 0200 with a 90 day retention policy.

PostgreSQL handles my finances, my database of quotes & collection of notes.

CaptainJustin··on Announcing KataOS and Sparrow
The IOT space is famously immature on security. Hopefully Google's efforts here will go some way to improving the security side
CaptainJustin··on Tailscale SSH
> This lets people gradually use Tailscale SSH over time without messing with their system one.

That is something I have really appreciated about Tailscale. It seems to consistently not mess with the existing environment. Considering it does networking witchcraft and it works on a variety of architectures and OSs this is quite an accomplishment.

I suspect Tailscale's customers have found the same.

CaptainJustin··on Show HN: A friend and I spent 6 years making a simulation game, finally released
> Is the Mac/Linux community still so small that no one cares about it?

I'm battling to find it now... but I read previously that a game studio found 1. they received a lot more variety in support tickets from people on nix (lots of interesting window managers, distros, etc)

2. A huge portion of their support tickets were from the tiny portion of customers running nix.

This was interesting for me to read at the time because I had played with Unity and Unreal Engine. I found developing for a number of platforms to be relatively trivial - but then again I wasn't trying anything particularly impressive or distributing builds etc.

CaptainJustin··on Show HN: A friend and I spent 6 years making a simulation game, finally released
Congratulations and all the best for your venture!

One of my favorite aspects of Factorio was that the environment constrained your scaling. Grow out too fast and your tech won't be able to hold back the evolved hordes. Build too far away before you can defend it and it you'll be defending too far and wide before you even know it.

@iliketrains May I ask if this game will have an environmental component/conflict to constrain the player scaling various concerns and prevent it from becoming a uneventful sim?

CaptainJustin··on Show HN: A Reddit style site to discuss podcast episodes
On the other side of things, I wonder if you could create a decent value prop for podcast clients to embed your chat bit inline or similar
CaptainJustin··on Show HN: A Reddit style site to discuss podcast episodes
So glad to see this. There is a real opportunity to create a decent space for these discussions. Allowing the podcast host to determine the governance model could get interesting and the possibility of allowing podcasts to monetize their /r/ could make it attractive to them
CaptainJustin··on What are your most used self-hosted applications?
Started trying Vaultwarden last night and so far I'm really impressed. I have it integrated into my desktop, laptops and browsers. I just need to automate my backups. For self-hosting passwords and similar files it seems rock solid so far.
CaptainJustin··on How can I get my boyfriend to stop digging his tunnel?
I wouldn't worry. The Balrog shall not pass.
CaptainJustin··on Russian firms rush to open Chinese bank accounts
And the top exporter of wheat IIRC? Also Ukraine is something like top 10 wheat exporter.

[1] https://en.wikipedia.org/wiki/List_of_countries_by_wheat_exp...

CaptainJustin··on Russia space agency head says satellite hacking would justify war: report
At this point it feels like I hear "We will consider X as a declaration of war" from Russia every day or so. It reminds me of the Uno Wild Card. I wonder if they're using it as a catch all for any gaps in their armor?

Can't handle more sanctions? Uno wild card! Don't want anyone supporting the Ukrainian defense effort? Uno wild card! Can't guarantee the security of satellites? Uno wild card!

CaptainJustin··on Ask HN: What's your solution for SSL on internal servers?
I asked a similar question previously: https://news.ycombinator.com/item?id=29995812
CaptainJustin··on Tell HN: Stack Exchange (Stack Overflow) is now blocking Tor
For me anonymity can be a part of my privacy posture.
CaptainJustin··on More than 1k Dutch residents plan to throw rotten eggs at Jeff Bezos' superyacht
Could you also translate that "Buy a boat, work yourself dead" ?
CaptainJustin··on Ask HN: Is it time for a home network TLD with TLS?
Exclusively within the home network
CaptainJustin··on Ask HN: Mistakes working with small local clients?
The following is my opinion. Others may have a different take on these ideas.

- Not charging enough from the start. Two clients accepted my rate way too fast.

- Giving time estimates for every piece of work rather than price estimates. Price estimates allow to you to charge for the value you provide rather than being limited to the negotiated hourly rate. Some tasks take a great deal of expertise and provide massive value but take only a short time. Don't bill them by the minute for that. Bill by value.

- Limit the number of changes they can make after completing a task or charge per hour after initial delivery. Some clients will take every opportunity to tweak something. It never ends. If that is happening on your (unbilled) time then your effective rate is falling with every new "quick change".

- Don't hand over work until the payment experience for a new client looks to be in good faith, regular and business usual. I've heard a few stories from friends about serial-exploiters who churn through freelancers trying to get most of the work done for free.

CaptainJustin··on Apache PLC4X announcing end of community support due to missing funding
This is dangerously close to being off-topic but it would be good to hear from people interested in PLC4X:

I would really like to see home appliance manufacturers extend their products with a simple 2.n IO pin interface at the back. Absolutely minimal. For example: a kettle could have an input pin to turn it on/off and an output pin that just writes whether it is on or not. A simple 4-pin interface on the back in this case. An ice-machine that has three size options and an on/off switch. The classic case of the bean-to-cup coffee machine.

Does anyone know if there is a standard (for manufactures) for this sort of thing? If this was a standard that added a dollar or 3 to appliances one could plug-in some IOT board that allows for Home-assistant or similar integration.

Of course I've completely ignored the question of whether or not a market exists.

CaptainJustin··on Every DoorDash employee, from engineers to CEO, will make deliveries
One of my favorite experiences working at a large bank was sitting in on calls in the call center for a morning. It blew my mind.

Our systems were terribly unhelpful in handling the average call. I was embarrassed to note the vast difference between the systems we gave our call center versus what we gave our customers. Also their needs were pretty much the same (obvious in retrospect). The customer-facing system had continuously been measured and improved for user experience and delight. The systems our call center used looked like a wasteland of retro tech. Agents were hopping between systems and copy-pasting sensitive customer data. For one simple customer query I saw an agent hop between 4 systems and 5 pages.

I left with my tail between my legs and a wealth of insights that continue to have an impact several years later.

CaptainJustin··on Knock Knock Who's There? – An NSA VM
In this spirit I've been playing with spun up Firefox instances in a Google Cloud Run. The container is stateless and goes away after I close the page that connects to video stream of the other container in my browser.
CaptainJustin··on A man who accidentally started an assassin hiring website
It's a grey area
CaptainJustin··on A man who accidentally started an assassin hiring website
I feel sorry for the control group
CaptainJustin··on Bank transfers as a payment method
In South Africa you can send money to anyone's phone number from several of the big banks. They can even be 'unbanked'. Regulation allows them to receive up to a certain amount before having to KYC and go through AML checks etc.

To access their money they go to an ATM and a challenge response is sent to their phone number.

CaptainJustin··on Greek myths of programming – how to find a mythological god of programming?
I would vote Hephaestus. Aside from what is mentioned in the post, Hephaestus [is supposed to have] created Talos. Talos was a humanoid perimeter patrol robot with offences capabilities. Maybe that makes him more Tony Stark than god of programming?
CaptainJustin··on “Click to subscribe, call to cancel” is illegal, FTC says
I love that idea. Can you imagine we had a standard around this? For example: Monthly payments - notification could go out >24 hours before the transaction will occur.
CaptainJustin··on Business Essentials
I have no evidence for this but I expect the experience would be similar to visiting an Apple store.
Page 1 of 4Next →