HNHacker News
TopNewBestAskShowJobs

DenseComet

806 karma · joined November 6, 2017

submissionscomments
DenseComet··on Apple Silicon Macs can't boot from external drive if internal drive failed
Yep on M1 macs there is no T2, it's already been integrated.
DenseComet··on Browser Fingerprinting Without JavaScript
More permissions are not the right answer. Too many and users get conditioned to blindly clicking accept.
DenseComet··on Swift Distributed Actors
This seems like a super interesting feature to have as part of a language. I hope Swift can eventually become more of a general purpose language, as its actually pretty nice and they're introducing features like this that clearly targets server-side programming. However it seems right now its tied to much to just iOS development and Xcode, which doesn't make for a great experience using it for other things.
DenseComet··on Alphabet Third Quarter 2021 Results [pdf]
Thats an insane conclusion imo. Weekend work being normalized leads to unhappier employees. Working longer also doesn't just mean more productivity, there's been many cases of four day work weeks causing no change.

Employees are a company's most valuable resource. A company looking to grow and innovate must take care of its employees and part of it is respecting their time.

DenseComet··on The day my script killed 10k phones in South America
iCloud Lock is tied to your Apple account though and I don't think a financing company can use it to remotely lock your phone.
DenseComet··on NixOS and the Art of OS Configuration (2018)
For a daily driver, I'd just use nixos-unstable instead of a specific release to get access to all the up to date packages. It's actually not as unstable as the name might imply. PRs are merged into the master branch of nixpkgs and are only merged into the unstable branch once the updated package is successfully built so it tends to be perfectly OK for daily use.

A lot of updates do get backported to stable branches and you can do it yourself pretty easily if you need an update, so running stable for servers makes sense. But for a desktop I prefer the rolling release, always updated model.

DenseComet··on Cloudflare Uses HashiCorp Nomad (2020)
I attempted to use Nomad for a couple months before going back to Kubernetes using k3s. The main issue I ran into was that there is no out of the box solution for ingress and it ended up being quite difficult to get something working reliably. With k8s, I was able to hook it up to cloudflare tunnel using ingress-nginx very easily and it was all integrated into the standard way of doing things.
DenseComet··on Cloudflare for Offices
Cloudflare Access does Zero Trust, something like Tailscale provides a mesh network with SSO. Tailscale has cool ACL rules, but it's not really the best way to implement true Zero Trust, especially for web applications.

I personally use Tailscale for as its a lot easier to use when you're the only one on the network compared to configuring Access for everything, but CF's zero trust stuff is quite enticing if you're running a business.

DenseComet··on Mosquitto: An open-source MQTT broker
NATS actually also has support for MQTT[0]. If you already have a deployment for queues, microservices, etc, using the NATS mqtt endpoint seems like a very good option.

[0] https://docs.nats.io/nats-server/configuration/mqtt

DenseComet··on Cloudflare R2 storage: Rapid and reliable object storage, minus the egress fees
You can take a look at Workers Sites instead. Similar to their Pages solution, but with a lot more flexibility.
DenseComet··on Spotify Box
Wow this is a super impressive project. I was originally expecting a device built around a Raspberry Pi, but this is a completely custom designed linux board!
DenseComet··on Covid Pass in Lithuania: How vaccine mandate laws have upended my family's life
He mentions a reasonable reason as to why his wife can't get vaccinated sure, but that has no affect on him getting vaccinated. The enforcement might be heavy handed, but as you mentioned other places including the US have some sort of vaccine mandate and moving isn't going to solve the issue.
DenseComet··on What is this Gemini thing, and why am I excited about it? (2020)
Nowadays, all certificates have to be submitted to Certificate Transparency Logs and must have attached proof to be considered valid. Also, there are CAA records to ensure that only specific CAs are able to issue certificates.
DenseComet··on Reality Check for Cloudflare Wasm Workers and Rust
Workers doesn't really do regions. The code runs in whatever datacenter is closest to the user. It also doesn't have the concept of durable disk. You can use KV, with its trade-off of eventual consistency, or use something like FaunaDB or Firebase, but that means that the request has to wait for the request to the backing service. Its also not super great for long running tasks. The possibility is there with Workers unbound, but I found the pricing structure for it to be a bit opaque.
DenseComet··on Belgian ISP under 250 Gbps DDoS for days on end
Thats not really a solution. If you're getting hit with a 40Gbps attack and are running a website and you can simply use Cloudflare, that's a perfectly valid solution. Sure it means that some folks can't crawl your sites and a small number of people might get hit with captchas, but it's better than having no site.

I think people who make this argument tend to forget that Cloudflare is an infrastructure provider that the website owner employs. It's not really MITM if the site owner explicitly asked them to terminate TLS so that CF can provide load balancing, tunneling, and a number of other services. It's the exact same as using an AWS ELB. Yeah it terminates TLS, but you can't really say its doing MITM since the site owner specifically configured it for that purpose.

DenseComet··on Show HN: Medusa – Open-source alternative to Shopify
Could be an issue with content blockers and safari. The page works fine with safari for me.
DenseComet··on An interactive 19-lesson course to master VSCode's keyboard shortcuts
To be productive in VSCode, you don't need to know any shortcuts or do any tutorials because it can be used completely via the gui. Doing 19 lessons on VSCode shortcuts is akin to doing an Emacs course, not a tutorial.
DenseComet··on Revolt: Open-source alternative to Discord
Discord doesn't do E2E encryption, although those numbers for Signal and Whatsapp are pretty impressive.
DenseComet··on Ask HN: State of art distributed message-oriented middleware?
If you have things running in a DC where connectivity between all nodes is possible, then ZMQ / NanoMsg will work, but having a broker tends to make things easier with regards to connectivity, which is why IoT always tends to use systems that require static brokers. Logging and monitoring might also be easier with a centralized broker, depending on your needs.

I've found NATS to be a pretty nice solution, its very lightweight and capable of doing low latency at most once delivery, as well as at least once. I've also found that the libraries are pretty decent and includes support for request/response among other things.

DenseComet··on Ask HN: Most secure way to run Nextcloud?
STUN isn't something that runs on your router. You can disable UPnP in your router and still use Tailscale perfectly fine.

https://tailscale.com/blog/how-nat-traversal-works/

DenseComet··on Ask HN: Most secure way to run Nextcloud?
Yes! Tailscale is incredibly useful and a great way to access your devices. For public linking, if you don't want any open ports, you can use Cloudflare Tunnel. Note that in this case, for your own use, you should still be accessing Nextcloud via Tailscale, as its P2P, so it'll be substantially faster than routing via a CF datacenter.
DenseComet··on Go 1.17 Release Notes
Go isn't low level in the same way that Rust is. Both languages have their places, but Go seems to be more of a better Python/JS, whereas Rust is a better C++.
DenseComet··on Balena Etcher Pro – Fast write to multiple cards or USB disks at once
I once nuked my OS partition flashing a USB drive using dd. Completely my mistake, but now I just stick to using etcher.

Takes three clicks, doesn't require me to remember how to use dd, and prevents any stupid mistakes.

DenseComet··on The Problem with Ethereum
Seems like one of the core arguments of this is that the the core devs have pushed the difficulty bomb multiple times because they've missed their original timelines for switching to PoS without any repercussions.

It seems to me that this is actually the correct thing to do. I'd rather the core devs take their time and iron out the issues instead of being incentivized to play fast and loose with a system that manages billions.

DenseComet··on Apple dropped plan for encrypting backups after FBI complained (2020)
From the screenshot of turning on "Use Recovery Key":

> If you create a recovery key and can't access your devices, Apple won't be able to help you regain access to your account or your data.

That sounds like E2EE backups, but its impossible to know if that is truly the case until they provide more details.

DenseComet··on Against Overuse of the Gini Coefficient
Its very clear too, looking at the cryptocurrencies with the highest market caps. Very few are inflationary because the goal is to make the founders wealthy.

Take a look at any subreddits for these currencies too and you'll find the same sort of thing too. For example, I think the tech behind polkadot is a neat idea, but go to r/polkadot and all you'll find is discussion about prices and staking rewards.

I have a lot of mixed feelings about the space. A lot of the tech is pretty interesting and is pushing distributed consensus forward. On the other hand, 99% of people involved are trying to make a quick buck.

DenseComet··on An app for M1 Macs that plays the sound of a fan as CPU usage goes up
I'm also trying to figure out a solution for remote access/file sync. I've been using resilio sync to sync my files between my laptop and desktop. It works great, but it destroys battery life on my laptop, so I've been looking for solutions.

Syncthing is next on my to try list, but its very similar to resilio sync so I don't have high hopes. iCloud drive/dropbox/etc have issues with syncing git repos, so not sure about that either.

DenseComet··on A privacy war is raging inside the W3C
Do you have a list of sites on Gemini that are interesting or useful? I don't use the web because it uses HTML or because it has JS or really any particular technical feature. I use it because it has sites like HN and Google, and I think the same thing applies to Gemini. I love the ideas behind Gemini, but I'm not sure why I'd use Gemini if there are not interesting sites.
DenseComet··on Audacity fork creator steps down. Claims his life is in danger
The issue with having your address known isn't a random person showing up to your door, because the chances of any of them actually coming to your place is very low. The issue is having the police showing up at your door with guns blazing. This has become a huge issue for live streamers and youtubers and has led to deaths.

https://en.wikipedia.org/wiki/Swatting

DenseComet··on Apple Reportedly Storing over 8M Terabytes of iCloud Data on Google Servers
The article claims that Apple is on track to spend around $300 million on GCP storage services this year. With redundancies, server costs, and DC costs, the upfront price could easily touch 3 to 6 billion, or 10 to 20 years of GCP storage costs.
← PreviousPage 4 of 9Next →