HNHacker News
TopNewBestAskShowJobs

X-Istence

7,174 karma · joined February 18, 2010

[ my public key: https://keybase.io/deltaregeer; my proof: https://keybase.io/deltaregeer/sigs/fB1spa9ustk6eYzq4uXRVHb1D85EaTlipzh1uutGT34 ]

Portfolio: http://deltaregeer.com/ Engineering Notebook: http://funcptr.net/

delta@regeer.org

submissionscomments
X-Istence··on People Loved MoviePass Nearly to Death
Yes, it makes sense.

When it goes under, you lose just that months fee. In the mean time you get to go the movie theatre.

X-Istence··on Tildes – A non-profit community site driven by its users' interests
On the announcement page you suggest not emailing you for an invite, yet here you are explicitly asking to be emailed for an invite.

I'd like an invite, and would be very interested in seeing how you built your Pyramid application (I'm a core dev for Pyramid/WebOb/Waitress) when it goes open source.

X-Istence··on Evolving Chrome's security indicators
> ut trying HTTPS first would be fantastic and eliminate one round trip for many of my sites that are not in the HSTS preload...

It's almost as if you didn't read my post.

Unless I can go register all my domains to be in the HSTS preload, I'd much rather Chrome tried HTTPS first, so I don't have to run a web server on port 80 that sends a 303 with https as the protocol.

X-Istence··on Evolving Chrome's security indicators
> Fail-open security is useless against any actual attack.

Except that if the user is not visiting for the first time, then HSTS comes into play if the security headers are set, browsers can let the user know something is amiss.

We both agree that fail-open security is useless, but right now Chrome and other browsers default to going to port 80 for first visit instead of port 443. All I am asking is that the default becomes 443, and the fall-back, for first visit, is port 80.

This way I can stop running web servers on port 80 that do nothing but send a 303 with https as the protocol for that particular domain.

X-Istence··on Evolving Chrome's security indicators
Is this also going to cause Chrome to attempt HTTPS before falling back to HTTP?

That would be the more useful change. If HTTPS fails (due to hostname mismatch for example), fall back to HTTP and warn, but trying HTTPS first would be fantastic and eliminate one round trip for many of my sites that are not in the HSTS preload...

X-Istence··on Unique IPv6 prefix per host [pdf]
BIRD or other BGP on the host running VMs/containers is what Calico does. We had it peer with our ToR "switches" over BGP.

We could do zero downtime, 1 or 2 packets lost live migration of workloads from one hypervisor host to another and had full ECMP capabilities.

We did this with both IPv4 and IPv6. There is nothing special about IPv6, but it does make it easier to aggregate routes.

X-Istence··on IPv6 excuse bingo
Not op, but when I went through the exercise, the only difference was that I changed the type of socket I was creating, and I used `getaddrinfo()` to get a list of addresses to bind to vs just binding to a single entity.

There really isn't a whole lot of work that needs to be done to support IPv6 in an application, especially new build.

X-Istence··on Pure CSS Francine
And the droopy eyes?
X-Istence··on US cell carriers are selling access to real-time phone location data
Yup, was able to track my phone to within a block.
X-Istence··on Don’t buy System76 hardware and expect to get firmware updates from the LVFS
How did:

> I don’t require an apology

Get turned into:

> [...] this demand for apology nonsense [...]

X-Istence··on SEC filing suggests MoviePass’ time is running out
I like my movie pass, and it has gotten me to the theatre more than I would have in the past... I aim for at least 1 movie a month, because a movie ticket costs 20 cents more than my movie pass subscription.

If I go twice in a month I can skip a month and not feel bad.

I don't buy concessions though, so theres no money to be made there.

Only being able to see a feature film once, not something I am entirely happy about because I'd have liked to see the new Avengers twice, but I can live with it. It does allow me to go to a movie I wouldn't usually see just because it's "free".

X-Istence··on YouTube Is Removing Some Nootropics Channels
Because the FDA has very specific rules as to what constitutes medical advice and what doesn't. The claim of "helps you sleep" is not medical advice and not regulated.

It's the reason so many "nutrition" companies can get away with claiming all kinds of things such as "burn fat faster". That statement means something to you and I, but it's not a medical statement.

X-Istence··on Ford to Stop Selling Every Car in North America but the Mustang and Focus Active
Not many Subaru enthusiasts that I've talked to want the BRZ to continue. It's a fun little car, but since it is not AWD it just doesn't really feel like a Subaru and the fact that it is also sold as a Toyota and a Scion really detracts from it.

I expect it to continue being a naturally aspirated engine with no STI badging, but I may be surprised.

X-Istence··on Ford to Stop Selling Every Car in North America but the Mustang and Focus Active
Nah, the 2.5L engine days are done. The new engine design is much better, only 2.0L, and can do much higher numbers than what Subaru has tuned them for. The power comes on quicker so it's got the same 0-60 as the 2.5L in the STI due to turbo design. the EJ25 has served its time, it is time to retire it.

Also, Subaru STI has already been using the 2.0 DIT engine for the WRX STI in Japan. See the WRX STI S208: https://www.caranddriver.com/news/wing-swap-jdm-subaru-wrx-s...

X-Istence··on Ford to Stop Selling Every Car in North America but the Mustang and Focus Active
Even Subaru retailers and corporate that I've spoken to as a Subaru ambassador are still not sure why the hatch was discontinued and it is still one fo the most requested things from Subaru.

A WRX hatchback would be amazing

X-Istence··on Java SE 8 business users must buy a licence from Jan 2019 to receive updates
Python does LTS, although they don't explicitly call it LTS:

https://devguide.python.org/#status-of-python-branches

Each Python version is supported for 5 years. So if you start building on Python 3.6 you are guaranteed to have a supported version till 2021. Upgrade to 3.7 (due out in June) when released and you'll be set till 2023.

So yes, Python does offer free LTS.

X-Istence··on A smarter SmartOS? (2016)
Might just be the MongoDB package then? That's the most recent one where I've noticed that upgrading the package caused MongoDB to be restarted.
X-Istence··on Google changes its messaging strategy again: Goodbye to Allo, double down on RCS
Head on over to Europe, and:

> Ik steur je wel even een appje

(I'll send you an message on WhatsApp)

is the norm in The Netherlands. My entire family, extended family, and everyone around them is all on WhatsApp. While I communicate with iMessage/SMS with friends in the US, that's not the case outside of the US. Everyone seems to have WhatsApp, most people don't use Google hangouts or other services alongside that, let alone SMS.

X-Istence··on A smarter SmartOS? (2016)
Red Hat/CentOS does this too...
X-Istence··on The ASUS Tinker Board is a compelling upgrade from a Raspberry Pi 3 B+
I've got a Rock64 on order, I'll be interested to see what my experience is with it.
X-Istence··on Apple open-sources FoundationDB
Is the wire-compatible clone of the MongoDB API available?
X-Istence··on Shortest bit sequence that's never been sent over the Internet (2017)
I think you should take a gander at this: http://nowiknow.com/shuffled/
X-Istence··on A smarter SmartOS? (2016)
I have other bits of software that manage that part for me, as part of my automation.

Why would I expect a package manager to also restart my services?

I need to make sure that other parts of the stack can either handle that service going away gracefully, or have automation around it, my package manager can't know the dependencies in which certain services should be stopped/started for example to allow for graceful failover. It's illogical to try and place all of that logic in the package manager, that is not its job. Especially if there are other config changes that need to happen too that are not part of that package management system.

Humans can still be out of the picture without a package manager starting/stopping/restarting services. Your suggestion of it being part of a maturity model don't make sense. I asked for the package to be upgraded, not for the service to be restarted.

X-Istence··on The ASUS Tinker Board is a compelling upgrade from a Raspberry Pi 3 B+
Unfortunately this is not aarch64. There is something to be said for having a single instruction set, makes package building and distribution simpler.
X-Istence··on A smarter SmartOS? (2016)
> It's never appropriate for, e.g., a PostgreSQL package to create a postgres account and configure a postgres service running as that account -- this is not how I want to run postgres

I don't mind it creating a postgres account, but what I do mind is the package automatically enabling the service, and starting the service.

Even worse, on Linux, most packages will be helpful, for example upgrading the MongoDB package on CentOS? It'll helpfully restart the service for you.

Nevermind that you've just scripted this and it's being run on all of the servers all at once so instead of doing a nice easy rolling upgrade WHEN you are finally ready, it's done at the same time.

I hate this behaviour. Let me worry about the lifetime of processes, don't auto enable them, don't auto configure them, let me worry about making sure systemd knows it is time to start/stop them.

FreeBSD let's me upgrade packages all day long, and until I restart the service, nothing happens. That way I can upgrade the packages, make sure everything looks good, then restart the service.

X-Istence··on Pinebook: An Affordable 64-bit ARM based Open Source Notebook
> * It does in fact turn on.

That is something you and I both have experienced with this laptop :P

As for the rest, it really is bad. Like really bad. Although I did get lucky, I have 0 dead pixels.

X-Istence··on Pinebook: An Affordable 64-bit ARM based Open Source Notebook
FreeBSD makes images available for it that you burn to the SD card and pop in and you are off to the races, although just for -HEAD so you end up chasing new images every so often since the system is still heavily in flux.
X-Istence··on Radio Hacker Can Hijack Emergency Sirens to Play Any Sound
Yes.
X-Istence··on Python 2 will be replaced with Python 3 in the next RHEL major release
The C api isn't the blocker for removing the GIL. The blocker is that Python is a dynamic language and there is no good way to know if another thread has just changed the underlying function on an object or not without having fine grained locking.

Fine grained locking works, but is expensive for non-multithreaded applications and slows down Python. It would speed up multithreaded applications though.

X-Istence··on Making the Touch Bar useful by abandoning Apple guidelines
Go buy a Windows laptop instead. I don't think Apple is going to do away with it.
← PreviousPage 14 of 34Next →