HNHacker News
TopNewBestAskShowJobs

VTimofeenko

738 karma · joined November 16, 2021

Contact: hn@vtimofeenko.com
submissionscomments
VTimofeenko··on Show HN: difi – A Git diff TUI with Neovim integration (written in Go)
Check out whichkey and/or command line completion to find those commands easier
VTimofeenko··on Guix System First Impressions as a Nix User
True, it's not a full replacement for ipmi-ish tech. There are ways the deployed waiter can fail before it times out and triggers the rollback. Deploy often enough and you will hit all wonderful edge cases. I treat it as a first line of defense that saves me time on scooting the chair over to me server cabinet and yanking the cords.

WRT ephemeral state -- NixOS allows to minimize this. Coupled with impermanence, all non-declared and non-externally-retrievable state is wiped away upon reboot. And if it's not declative and not retrievable, I just don't use it. Homelab allows for a lot of choice in that regard

VTimofeenko··on Guix System First Impressions as a Nix User
I'd recommend sticking with deploy-rs. Saved me quite a few hours through its magic rollback which aborted an upgrade that borked VPN.
VTimofeenko··on The Value of Things
The screenplay part made me think. While it's true that an LLM could potentially generate a better^ script, while writing scriot the author would probably had had many ideas that did not make it to the final draft. Yet those ideas would definitely influence the final product, the movie. There's probably only so much you can put in the script really.

Meaning for the brother is one thing, but as a potential watcher, I would almost always prefer a movie that someone really cared about^^.

^: depending on the definition of "better"

^^: as a fallible human being I am not perfect at detecting that care, but there had definitely been cases in my life when someone was talking about a thing that I would not really care about otherwise, but their passion made the talk extremely interesting and memorable

VTimofeenko··on Booting from a vinyl record (2020)
Not an iPhone person, however when I force shutdown a laptop I am hacking away on, I do feel like I am strangling it with a pillow to ease it's suffering. But that feeling comes purely from my side, the machine shows no signs of life at that point anyway.

Are you referring to something like the GPRS staccato coming from speakers catching a cell phone call or the almost imperceptible flyback whine of a CRT?

VTimofeenko··on Booting from a vinyl record (2020)
You can't just drop this without examples. What OSes and what were their tells?
VTimofeenko··on Linux from Scratch
Having done this way back when on both: go with a VM first.

Targeting a known set of virtual devices makes a lot of things much easier when building LFS. Dev ux is also much nicer:, you get faster restarts, a socket and optional snapshots to go back to a known less broken state.

VTimofeenko··on Our approach to age prediction
Maybe at some point they will graduate to being able to predict who I am from "Friends"
VTimofeenko··on 3D printing my laptop ergonomic setup
The new one (full display under keyboard) is super interesting. I think they presented it at CES.

Previous one had I believe like a companion display occupying ~1/3 of the keyboard side which looked pretty neat. I wish frame.work had an option like that -- seems way more feasible than Lenovo's contraption with motors and flexible screen, though not sure if it would be possible given the space budget.

VTimofeenko··on 3D printing my laptop ergonomic setup
Lenovo recently showed a laptop with a screen extending upwards:

https://www.lenovo.com/us/en/p/laptops/thinkbook/thinkbook-p...

VTimofeenko··on Bubblewrap: A nimble way to prevent agents from accessing your .env files
Right, in DBs it's proper param binding + prepared statements.

I see what you're saying, makes sense.

FWIW there is (in analytics) also RBAC layer, like "BI tool acting on behalf of user X shall never make edits to tables Y and Z"

VTimofeenko··on Bubblewrap: A nimble way to prevent agents from accessing your .env files
That command will have to take some input from neural network though? And we're back in Bobby Tables scenario
VTimofeenko··on Bubblewrap: A nimble way to prevent agents from accessing your .env files
Tools may become dangerous due to a combination of flags. `ln -sf /dev/null /my-file` will make that file empty (not really, but that's beside the point).
VTimofeenko··on We can't have nice things because of AI scrapers
Well, to be fair, I did say "is not read beyond the code itself", header is not the code, so retry-after is a perfectly valid answer. I vaguely remember reading about it, but I don't recall seeing it used in practice. MDN link shows that Chrome derivatives support that header though, which makes it pretty darn widespread
VTimofeenko··on We can't have nice things because of AI scrapers
Genuinely curious: do programs read bodies of 429 responses? In the code bases that I have seen, 429 is not read beyond the code itself
VTimofeenko··on Windows 8 Desktop Environment for Linux
I really liked the idea of what they did with the start menu of win8. Whenever I opened the start menu, my intent was to focus on look for something in the start menu, not multitask, so live tiles were perfect. IIRC I even wrote a couple of toy apps with those tiles. Win8.1(blue?) was much more polished experience though, original 8 had a lot of rough edges.

I had an original Lenovo yoga and boy the desktop touch experience was bad. Hardware wise it wasn't winning any prizes either. The cooler died a couple of times and replacements were a pain to procure.

VTimofeenko··on The chess bot on Delta Air Lines will destroy you (2024) [video]
And if you are the airline the answer is a resounding "no"
VTimofeenko··on CLI agents make self-hosting on a home server easier and fun
On paper the numbers look right, but a week off _50kWh_ EV battery feels off.

What follows is back of the napkin calculations, so please treat it as such and correct me if I am wrong.

1. Inverters are not 100% efficient. Let's assume 90%

2. Let's also assume that the user does not want to draw battery to 0 to not become stranded or have to do the "Honda generator in the trunk" trick. Extra 10%?

3. 300W continuous sounds a bit low even with gas appliances. Things like the fridge and furnace blower have spiky loads that push the daily average. Let's add 100W to the average load? I might be being too generous here, but I used 300W, not the 200W lower bound.

4. Vehicle side might need some consumption. If powering off the battery, it would probably need to cool the battery or keep some smarts on to make sure it does not drain or overheat? Genuinely not sure how to estimate this, let's neglect it for now.

Math is (50kw - 10%(inverter loss) - 10%(reserve)) / 0.4 = 100 (hours), ~ 4 days.

The above calculations assume a sane configuration (proper bidirectional wire, not suicide cord into 12v outlet). Quick skim of search for cars with bidirectional charging support for home shows batteries between ~40kWh(Leaf) to 250 kWh (Hummer).

So looks like one should be looking for ~80kWh battery, which actually most of the cars in the list have.

Again, very back of the napkin, would probably wanna add 20% margin of error.

VTimofeenko··on CLI agents make self-hosting on a home server easier and fun
Oh, I see! Genuinely curious -- what kind of EV has a battery to power a house for a week?

> maintain my familiarity with it in case I need to use it late at night in the dark with an ice storm breaking all the trees around us.

That's the way to do it. I usually did my trial runs during the day with light readily available but underestimated how much I needed to see what I am doing. Now there's a grounding plug and a flashlight in the "oh shit kit".

VTimofeenko··on CLI agents make self-hosting on a home server easier and fun
We had a 5 day outage last year, got a generator at the tail end of the windy season and made exact same jokes.

A year later another atmospheric river hit and we had a 4 hour outage. No more jokes.

Make sure to run that generator once every few months with some load to keep it happy.

VTimofeenko··on IBM AI ('Bob') Downloads and Executes Malware
A non-deterministic process at that. Coding agents are basically "curl into sh" pattern on steroids
VTimofeenko··on CUDA Tile Open Sourced
> Learning requires participation

I won't argue, but there is a middle ground between articles consisting of pure JAFAs and this:

> accommodate readers who won’t even type four letters into a search bar

I think it helps if acronyms are expanded at least once or in a footnote so that the potential new reader can follow along and does not need to guess what ACMV^ means.

^: Awesome Combobulating Method by VTimofeenko, patent pending.

VTimofeenko··on Texas is suing all of the big TV makers for spying on what you watch
Fair question, it does look a bit jarring when not rendered. I write a lot of markdown and it's a very strong force of habit to use backticks to sort of highlight a technical term and turn it into a noun. Similar to writing endash as a double hyphen.

When I read what I write, my eyes glance through backticks and maybe come back if I need to parse the inner term in more detail.

VTimofeenko··on Texas is suing all of the big TV makers for spying on what you watch
> If you're tracking packets can't you tell by the data size? A 4k image is a lot more data than a hash.

I admit, I've not gotten around to properly dumping that traffic. For anyone wanting to do this, there's also a spike of DNS requests every hour on the hour, even if tv is off(well, asleep). Would be interesting to see those too. Might be a fun NY holiday project right there. Even without decrypting (hopefully) encrypted traffic, it should be verifiable.

> Also just curious, what happens if you block those requests?

Due to `*.roku.com` DNS black hole, roku showed no ads but things like Netflix and YouTube using standard roku apps("channels") worked fine. I now moved on to playing content using nvidia shield and blocking outside traffic completely. Only odd thing is that the TV occasionally keeps blinking and complains about lack of network if I misclick and start something except HDMI input.

VTimofeenko··on Texas is suing all of the big TV makers for spying on what you watch
Main data comes from unbound[1], I use vector[2] to ship and transform logs. Dnstap[3] log format IME works better than the standard logs, especially when it comes to more complex queries and replies. Undesired queries get 0.0.0.0 as a response which I track.

Firewall is based on hand-rolled nftables rules.

[1]: https://www.nlnetlabs.nl/projects/unbound/about/ [2]: https://vector.dev [3]: https://dnstap.info/Examples/

VTimofeenko··on Texas is suing all of the big TV makers for spying on what you watch
Most likely case is that the tv is computing hash locally and sending the hash. Judging by my dnstap logs, roku TV maintains a steady ~0.1/second heartbeat to `scribe.logs.roku.com` with occasional pings to `captive.roku.com`. The rest are stragglers that are blocked by `*.roku.com` DNS blackhole. Another thing is `api.rokutime.com`, but as of writing it's a CNAME to one of `roku.com` subdomains.

The block rates seem to correlate with watch time increasing to ~1/second, so it's definitely trying to phone home with something. Too bad it can't since all its traffic going outside LAN is dropped with prejudice.

If your network allows to see stuff like that, look into what PS5 is trying to do.

VTimofeenko··on More than 100 rally against data centers at Michigan Capitol
Anecdata, but I was once on a tour of a colocation DC. Located in Vegas, near the old town in a basement of some office building. Completely unassuming from the outside. Inside it was a little loud, but not terribly so. Busy street level noise maybe.
VTimofeenko··on Home Depot GitHub token exposed for a year, granted access to internal systems
The sorting briefly switches to reverse order there, so no contradiction.
VTimofeenko··on Home Depot GitHub token exposed for a year, granted access to internal systems
Before. _E_ight vs _F_our.
VTimofeenko··on Home Depot GitHub token exposed for a year, granted access to internal systems
I will not argue with the stock part. When the search _does_ finish, stock info is usually correct IME.

What grinds my gears is the speed of this search, regardless of the phone reception. Even on the desktop it feels like they have a bunch of interns running a sneakernet. Or the website is laden with pointless javascript that slows everything down before the search is actually performed.

I go to the same Home Depot every time. (Well I don't if I can help it, but that's beside the point). There is no reason they cannot store the preferred store in the localStorage or cookies or wherever else. Other stores have figured this out.

← PreviousPage 2 of 13Next →