HNHacker News
TopNewBestAskShowJobs

SloopJon

2,602 karma · joined November 15, 2013

submissionscomments
SloopJon··on How to burn the most money with a single click in Azure
I know it depends on the site/app, but for a hobbyist, what is the biggest gotcha in a "got super popular over night" situation? If I look at the quotas and overages for low-end plans from the following providers, e.g., it's not obvious to me where the realistic bottlenecks are:

* Firebase Hosting with Firestore

* Cloudflare Workers Sites (using KV)

* Netlify (possibly w/ FaunaDB)

SloopJon··on Marvell Cranks Up Cores and Clocks with “Triton” ThunderX3
I think I've used one of these Gigabyte rack servers:

https://www.gigabyte.com/us/ARM-Server

I'm not sure offhand what the pricing is, but my guess would be less than $10,000, depending on the configuration.

SloopJon··on NPM Is Joining GitHub
Microsoft's corruption of ISO to standardize Office Open XML is much more recent than that.
SloopJon··on Most airlines face bankruptcy by end of May, industry body warns
Yes and no. As we've seen with empty or mostly empty flights to keep an airline's spot at the gate, airports are a finite resource. If airlines go bankrupt, you're likely to see consolidation exacerbated by a barrier to entry, absent regulation and/or antitrust enforcement.
SloopJon··on Lesspass – open-source stateless password manager
Then I don't understand how you "combine the master key and keyfile data to create your key." How do you change the master password without changing the generated passwords?
SloopJon··on Lesspass – open-source stateless password manager
The point is to decouple the master password from the generated passwords. The file can contain as much key material as you want, so it's stronger than any password you can remember.
SloopJon··on Lesspass – open-source stateless password manager
As someone who looked seriously at a scheme like this before reluctantly using a password manager instead, part of the appeal comes from vault anxiety. If I don't have the vault and a tool to use it, I can't access my accounts.

I like the idea of a scheme that I can use with a preferred utility, but which I could assemble from commonly available tools if necessary. It's not too hard to find PBKDF2 in a Python or JavaScript library, or reimplement it yourself using even more commonly available primitives.

To be clear, I was never under the illusion that a password generator is as secure as a vault full of random passwords. The point is to improve on password reuse, or trivial transformations on a core password. If you generate random passwords for every single account, this is not for you, but it's probably better than storing weak passwords in a vault.

The problem, even if you ignore the straw men that usually get pummeled on threads like this, is that as you address the practical and security limitations of a naive scheme, you tend to lose the simplicity of the initial idea. You end up adding counters and password rules, so you have state to maintain/sync. Even if you don't treat it as secret, it chips away at the essential appeal of the concept. One comment on this post even mentions using a key file.

SloopJon··on Lesspass – open-source stateless password manager
In general, these types of utilities don't treat the state (counters, password rules, etc.) as a secret, so I wouldn't count on the hash type being secret either. The security of this type of scheme depends almost entirely on not being able to reverse a presumably known key derivation function such as scrypt.
SloopJon··on Software optimization resources for C++, assembly, Windows, Linux, BSD, Mac OS
The code that looks most interesting is the vector class library, which is licensed under the Apache License 2.0.
SloopJon··on Folding@home takes up the fight against COVID-19
It looks like FAH has GPU support, but I don't see an AArch64 version that I could install on, say, an NVIDIA Jetson Nano.
SloopJon··on Ampere Altra 80-core ARM CPU
Is there a consensus pick for the best ARM system around $1,000? I'm not looking for my main workstation, just something usable for building and running ARM software, and maybe acting as a host for ARM containers. I've seen a few options:

Jetson AGX Xavier developer kit - 8 cores, 32 GB, for $700

HoneyComb LX2K mini-ITX motherboard - 16 cores, up to 64 GB, $750

96Boards Developerbox (Socionext) - 24 cores, 32+ GB, $1,200

I'd like a little more than the 4 cores and 4 GB you can get with a Jetson Nano or Raspberry Pi 4.

SloopJon··on Don’t Confuse a Bug’s Priority with Its Severity
My gut reaction to the headline and the article was that it's a mistake to make such a distinction. However, if you look at QA/Support owning severity, and PM owning priority, it potentially reduces conflict--what do you mean this crash isn't critical?!

I think they are highly correlated, but they occasionally diverge.

SloopJon··on When did Americans lose their British accents?
The front-page article on this site is "8 Surprising Facts about James Dean," so I wouldn't take it too seriously. It reads like a high-school or undergraduate essay. Also, FWIW, it's from 2012.

Hopefully a linguist will come along with better treatments of the subject, but Google turned up a couple of articles with more links:

https://curiosity.com/topics/the-american-accent-is-older-th...

http://www.bbc.com/culture/story/20180207-how-americans-pres...

And, of course, there's Wikipedia:

https://en.wikipedia.org/wiki/American_English

SloopJon··on Game AI Pro
"All chapters are available to download as of September 2019."
SloopJon··on Apple Aperture: Senior QA (2004-2005)
Flash-in-the-pan stories like this are fascinating to me. I've never seen this kind of drama at work. No nights, no weekends, no screaming, no passive-aggressive snubs like the gift-bag iPods. I did a double take on the dates when I first saw this on Daring Fireball--who has this much to write about in a year or two?

On the other hand, I've never built a product from scratch so quickly. Google and Facebook didn't exist when I started my current job. Now they're gazillion-dollar companies. I've had projects on my wish list longer than Aperture was a product.

SloopJon··on Microsoft Application Inspector
Not sure how I missed that. The wiki page it links to has a nice list, which is apparently related to Visual Studio Code.
SloopJon··on Microsoft Application Inspector
It doesn't appear to be parsing at all. It's just looking for patterns.

If you look at languages.json in RulesEngine/Resources, files with the extension .html (and some others) are recognized as "html", with type "code":

  {
    "name": "html",
    "extensions": [ ".html", ".htm", ".cshtml", ".tmpl" ],
    "type": "code"
  },

This sets the scope for the patterns in AppInspector/rules/default; e.g.,

  {
    "name": "Content Management Framework: Wordpress",
    "id": "AI021200",
    "description": "Development Framework: Wordpress",
    "applies_to": [ "javascript", "html" ],
    "tags": [ "Framework.CMS.Wordpress" ],
    "severity": "moderate",
    "patterns": [
      {
        "pattern": "wordpress",
        "type": "string",
        "scopes": [ "code", "comment" ],
        "modifiers": [ "i" ],
        "confidence": "high"
      }
    ]
  },
This seems like it would be prone to a lot of false positives, but I haven't tried the tool.
SloopJon··on Microsoft Application Inspector
I don't see any mention of the languages that it recognizes, but a perusal of some of the JSON files leads me to believe that this handles many different languages. It seems that it's by way of regular expressions, though, not language-specific parsing.
SloopJon··on My 2020 Hackintosh Hardware Spec
I thought you could only run Mac VMs on a Mac host. Has that changed, or did you hack VMware somehow?

Our automation group has a couple of maxed out trash cans just for Mac VMs. The IT department probably can't wait to replace them with the new rackmounts.

SloopJon··on Qt Offering Changes 2020
We'll have to see what license they apply to the binaries. As the copyright holder, they wouldn't have to use (L)GPL. If the binaries are redistributable, then maybe someone will mirror them. Otherwise, people can build them from source, as many Linux distributions already do. If the source license were changed to prevent that, then I think we'd see a hostile fork pretty quickly from the last free and open source version.
SloopJon··on Every classic Half-Life game is now free on Steam
As some of the other comments have noted, this is like a free-to-play weekend, but longer. It does not appear that you can associate it with your account for free.

I was surprised that I don't already own Half-Life on Steam. I have the Orange Box, but I guess I only have boxed copies of the older games and expansions.

SloopJon··on Parachuting for Charity: A 5-year audit (1999)
I did my first timed 5K over the holidays for free through a local parkrun:

https://www.parkrun.us/

Apparently they're sponsored, but I have no idea who sponsored this one.

SloopJon··on Many games are held together by duct tape
> Mike Vrabel taking penalties to burn the clock might seen unfair

Certainly not unfair to do it against Bill Belichick, who did almost the exact same thing earlier in the season--first time I'd ever seen a delay of game or false start penalty declined.

SloopJon··on JetBrains Mono: A free and open-source typeface for developers
Emacs has a minor mode (prettify-symbols-mode, I think) that makes substitutions like these. I tried it for a couple of months, but decided that it wasn't for me.
SloopJon··on What is wrong with all those AArch64 desktops?
Getting Tensorflow set up on the Jetson Nano was harder than I expected. Do you, by any chance, have Docker working with GPU support?
SloopJon··on ClickHouse cost-efficiency in action: analyzing 500B rows on an Intel NUC
I'd say the materialized view is the main thing:

> Thus, we add the following materialized view ... At the end we should have 1440 times fewer rows in the aggregate than the source table.

The cost of populating that view is amortized over the 17.5 hours it took to load the data.

SloopJon··on ‘Tesla killer’ Mercedes EQC flops with 55 units sold in Germany
Strangely absent from the blog post, or the article on which it is based, is the price of the vehicle. It mentions "numerous Tesla Model 3s", but I suspect that this thing costs more than a Model X.

The other factor, of course, is infrastructure. What is the availability of Mercedes-compatible chargers, compared to Tesla?

Edit: I stand corrected on the price. I don't know about Germany, but pathartl's quoted US price, while quite a bit more than a Model 3, would be less than a Model X.

SloopJon··on Open-Source Engine for Heroes of Might and Magic 3
I think I have the Linux version of this game in my attic.

Steam and GOG had big sales through the end of December that had me looking at some old games like this. I thought about getting some Microprose games to spare me the trouble of copying them from 5.25" and 3.5" floppies (if they're even readable anymore), but I figured it was just as well to leave the graphics and gameplay to my rose-colored memory.

It did get me thinking about what it takes to bring classic games to a modern audience. Grim Fandango and Age of Empires have gotten updates, primarily to the assets. The negative reviews tend to focus on old-fashioned gameplay, or bugs that still haven't been fixed after umpteen years.

A project like this reminds me of the ScummVM engines, which basically provide a new platform for old assets. It's harder to get excited about this, because it's just one game.

SloopJon··on C++ Pattern Matching Proposal [pdf]
From the Exhaustiveness and Usefulness section:

"inspect can be declared [[strict]] for implementation-defined exhaustiveness and usefulness checking."

"having a __: case makes any inspect statement exhaustive."

"any case that comes after a __: case would be useless"

SloopJon··on A Database of Fugitive Slave Ads Reveals Thousands of Untold Stories (2018)
According to freedomonthemove.org, there are 22,236 advertisements. If I search (registration required) for transcribed ads, I get 6,920 results. Transcriptions are not visible in the default view. Select the icon on the right to see images and transcriptions side by side.
← PreviousPage 13 of 26Next →