HNHacker News
TopNewBestAskShowJobs

KenanSulayman

1,319 karma · joined April 23, 2011

CEO at SIGDEV Securities. Engineering Lead & VP Infrastructure at Styla. Other: PsychonautWiki, Tor.

https://sly.mn | https://github.com/19h

https://sig.dev

submissionscomments
KenanSulayman··on Mitigating Memory Safety Issues in Open Source Software
> The new Rust-based HTTP and TLS backends for curl and now this new TLS library for Apache httpd are an important starting point in this overall effort.
KenanSulayman··on Mitigating Memory Safety Issues in Open Source Software
> The new Rust-based HTTP and TLS backends for curl and now this new TLS library for Apache httpd are an important starting point in this overall effort.
KenanSulayman··on Homebrew 3.0
Apple is invested into MacPorts (and also pays several employees working on it).
KenanSulayman··on The Secure Messaging App Conundrum: Signal vs. Telegram [pdf]
> Telegram has plans to monetize metadata just like WhatsApp.

This is a blatant lie without any evidence. Durov said they might consider advertising in channels, as is currently already done in many languages -- just not through Telegram directly.

KenanSulayman··on The State of IPv6 support on the Tor network
I'm running the apx exit node family since about 2015.

For the first few years I've been a regular visitor to the local police (my ISP Hetzner at that time gave my name and address out), but eventually Hetzner banned me for generating too many abuse-tickets for them, which is unfortunate but clearly understandable.

I moved all the servers to a colocated rack in a datacenter in Amsterdam (Netherlands) and haven't had a problem since. But I guess that's only possible because I'm able to deal with the abuse messages directly now.

That said, the servers are handling a few terabytes per day each but I still have only received two abuse messages in the last 2 years. I don't know if that's related to the fact that people complain less now than they did in 2015 and 2016, or that the exit nodes now clearly indicate they are exit nodes (when opening their IP or hostname with a browser).

KenanSulayman··on Buy Don't Build
ELK is killing it. Especially with their apm server.
KenanSulayman··on Wall Street Begins Trading Water Futures as a Commodity
These aren’t water contracts as in “settlement in water” — they’re settled in cash and they’re water INDEX futures. There’s simply no way this will affect actual water shipments beyond maybe being used as hedge for water producers (which is rather unlikely).
KenanSulayman··on Show HN: My GitHub Readme Is Interactive
I absolutely love the drawings. They're just so cute..
KenanSulayman··on C++ Lightweight, cross-platform, HTML rendering engine for desktop apps
That's a great repository, thanks.

However, Servo just isn't ready yet. There are just so many rendering issues that it's worth waiting for it to become more mature. (If you don't believe me, open https://psychonautwiki.org with Servo..)

KenanSulayman··on C++ Lightweight, cross-platform, HTML rendering engine for desktop apps
I'm using headless UL to statically render articles on-demand so that CDN caches can be warmed up at each PoP so that people from less fortunate areas (middle-africa, southern americas, researchers in either pole of the earth -- yes we had them, former soviet countries, ..) can access the wiki just like any other user would. It strips out the unneccessary bells and whistles.

Also I think Adam is a great person and I think it's worthwhile to support his project.

KenanSulayman··on C++ Lightweight, cross-platform, HTML rendering engine for desktop apps
1. Valid point.

2. ?

3. Chrome (or more specifically CEF -- Chromium Embedded Framework, the one used by Spotify et al.) is significantly more heavy than UL. Memory use is massive. Google doesn't care about API stability and ABI breakage is so common you'll have to keep up with all API changes (the ones published and documented anyway...) to get anything done. Good luck embedding Servo!

4. ARM support is coming.

---

> the others are 'community maintained'. Whatever that means.

I maintain the Rust binding to Ultralight [0] via the CAPI to provide an ergonomic way for people to work with it. Adam is busy improving Ultralight itself, so I find it worthwhile to maintain it. That's what it means.

[0] https://github.com/psychonautwiki/rust-ul

KenanSulayman··on Ts-migrate: tool to automatically migrate JavaScript projects to TS
Who hurt you?

This project is meant to make developers more efficient and support them in migrating projects to TypeScript. The entire point of TypeScript is to make developers more efficient, too, through clear structuring, types and assistance through its toolchain.

Static typing does not protect you from integrity issues. However, it allows you to extend existing code with confidence.

I'm not sure if you work in a team, but your general attitude isn't exactly conducive to a constructive, open and efficient working environment.

KenanSulayman··on Show HN: Find HN threads about the page you're browsing
This is great!

I'm also using [0] which displays mentions of a site on reddit.

(And while you're at it, one [1] that replaces youtube comments with reddits comments from the subreddit threads where a video was posted to.)

[0] https://chrome.google.com/webstore/detail/reddit-check/mllce...

[1] https://chrome.google.com/webstore/detail/karamel-view-reddi...

KenanSulayman··on Google starts testing its replacement for third-party cookies
Google does not need any cookies for Google properties because Google Chrome sends an `x-client-data` header to them.
KenanSulayman··on eBay’s Critics Faced an Extreme Case of an Old Silicon Valley Habit
> She had met a man on Match.com who claimed to work in construction in San Jose, Calif., and he had convinced her to send him a topless photo. He was threatening to email the photo to the entire company if she did not pay him $10,000.

> With her permission, Mr. Sullivan’s team took over her account and redirected her extortionist to a payment scheme that they knew would reveal his identity. They determined he was a former Google intern living in Nigeria.

> Mr. Sullivan’s team hired Nigerian contractors to confront him. He confessed and surrendered access to his computer and online accounts, which showed he was extorting female executives across Silicon Valley. Investigators were able to destroy the nude photos and warned his victims not to pay.

...

> a former Google intern living in Nigeria

> hired Nigerian contractors to confront him

All of this is both insane and fascinating..

KenanSulayman··on Jepsen: Redis-Raft 1b3fbf6
Redis does have tests, especially for the clustering feature..

https://github.com/antirez/redis/tree/unstable/tests/cluster...

KenanSulayman··on macOS Big Sur Preview
Apple wants members of their $500 Universal App Quick Start program to send back their Developer Transition Kit (DTK) units after the program automatically expires (!) after one year. [1]

Citing directly from this document:

> You agree to promptly return the Developer Transition Kit to the Apple address designated by Apple no later than thirty (30) days after the end of the Term, or as otherwise earlier requested by Apple (including via email or announcement by Apple on developer.apple.com).

> At the end of the Term, You agree to immediately cease all use of the Developer Transition Kit and the Universal App Quick Start Program.

> Failure to return the Developer Transition Kit may result in the suspension of Your Developer account or termination of Your Developer Agreement.

Admission to the program costs $500. What??? ...

Why did they not mention this anywhere but the terms of service?

[1] https://developer.apple.com/terms/universal-app-quick-start-...

KenanSulayman··on 'Into The Wild' bus removed from Alaska wilderness
It was the Alaskan National Guard who removed the bus. [1]

[1] https://www.dvidshub.net/news/372418/alaska-national-guard-a...

KenanSulayman··on Apple patches CVE-2020-9859 (unc0ver)
The more interesting part is that unc0ver exploits a bug that was reintroduced by Apple: https://twitter.com/s1guza/status/1266433756270866433 ..
KenanSulayman··on Apple Mail randomly becomes the frontmost application in macOS
Funnily enough most of the times Mail came up was due to me accidentally pressing cmd + i in a browser.
KenanSulayman··on Kafka Removing Zookeeper Dependency
Finally! Having had to deal with properly setting zookeeper up on multiple mesos clusters was so painful and recovering from outages via s3 backups so excruciating.. I feel somewhat ashamed that in two out of five cases we simply went with the managed Kafka by AWS because the team didn’t feel confident enough to maintain the cluster.
KenanSulayman··on Show HN: Tracking stock trading by US Senators
More like he's doing pretty big orders (i.e. ICE bought at high $20m volume)
KenanSulayman··on GitHub issue calling for retraction of Imperial College study for codebase flaws
Not only that. It's an awful precedent to shoot down any research based on the implementation of it. That's more than just a misunderstanding; it's a fundamental misunderstanding of how research and scientific processes work.

The issue claims the tests are broken because they're checking for checksums instead of actual data -- but what they really do is to check for the sanity of the implementation to be actually implementing the mathematical models that are underlying to it.

KenanSulayman··on Popcorn Linux
My first thought was: wow, they took this idea so far now they made an OS out of it.. I imagined an OS preconfigured with torrent clients, easy-to-use VPN client, fancy Netflix-like media center...
KenanSulayman··on Why Restaurants Are So Fucked
Wow, $11 for a kebab?? I just ate one for 3.50€ around the corner the other day (Berlin) and the shop didn’t have to close even after all that lockdown.

Maybe the reason the margins are so low in the US is that everyone tries to rip each other off?

If all the providers of utility services (cleaning, water, electricity, ...) start to push the pricing limits, no wonder you’ll end up having no margin left at $11.

I’d rather make the kebabs myself every single day at that price!

KenanSulayman··on WireGuard on K8s: road-warrior-style VPN server
You can use a different container as network in docker: 'container:<name>' would route the container traffic through specified container.

Example vpn container:

  docker run --name foo --cap-add=NET_ADMIN ...
Other container:

  docker run --net=container:foo ...
Now you'd need to specify the respective routing rules [1] in the container.

[1] i.e. https://github.com/bubuntux/nordvpn/blob/master/start_vpn.sh...

KenanSulayman··on WireGuard on K8s: road-warrior-style VPN server
Well if you make it a DaemonSet you could technically use the container as the network interface of other containers throughout the whole cluster. That said, I'm very happy that his example k8s deployment uses secrets.

I didn't know Ubuntu 20.04 back ported WG into its 5.4 kernel. I spent a few hours yesterday fixing a node after breaking ZFS because I upgraded to 5.6 for WG support. I feel rather silly now..

edit: rektide mentioned 'kilo' which actually does exactly what I said (https://github.com/squat/kilo).

KenanSulayman··on GitHub has completed its acquisition of NPM
Much better: mandatory vendoring of packages. Can't break and being forced to push the packages to the repo makes you appreciate the lack of transient dependencies.
KenanSulayman··on Comparing HTTP/3 vs. HTTP/2 Performance
The USP of h3 isn't peak performance, it's 95th percentile latencies.
KenanSulayman··on Popcorn Time 4.0
It's rather suspicious that the macOS binaries are distributed as pkg files requiring root permissions...

Edit: the binaries inside seem OK. I assume it's to bypass the Gatekeeper lockdown when a user downloads an app file.

Page 1 of 8Next →