HNHacker News
TopNewBestAskShowJobs

X-Istence

7,174 karma · joined February 18, 2010

[ my public key: https://keybase.io/deltaregeer; my proof: https://keybase.io/deltaregeer/sigs/fB1spa9ustk6eYzq4uXRVHb1D85EaTlipzh1uutGT34 ]

Portfolio: http://deltaregeer.com/ Engineering Notebook: http://funcptr.net/

delta@regeer.org

submissionscomments
X-Istence··on History of 127/8 as localhost/loopback addresses (2021)
That's because bandwidth caps are enforced by the cable modem and not further downstream. When you pay for 10 Mbps down, 1 Mbps up, that is enforced by the cable modem.

Earlier versions of cable modems had flaws that allowed consumers to push configs on the ethernet port and uncap their cable modems and gain higher speeds than they had paid for.

X-Istence··on When Your Smart ID Card Reader Comes With Malware
It's not even about connecting them to gov't machines. The issue is that people are issued PIV CAC's to access their email and are expected to do so without having received government equipment (laptop/computer with CAC reader).

So they are left either not checking their email/answering emails from superiors or they have to buy a CAC reader themselves and use their personal equipment to access their email/government websites.

X-Istence··on Zitadel: The best of Auth0 and Keycloak combined
Do you have a source for the cut-off at around 400 realms?
X-Istence··on Why do USB-C hubs still have USB 2.0 ports? (2021)
Right, there are some USB-C docks that are not Thunderbolt that do DP alt mode, but many of the cheaper ones seems to come with DisplayLink technology built-in.
X-Istence··on Why do USB-C hubs still have USB 2.0 ports? (2021)
I have had multiple MacBook/MacBook Pro's, never had an issue with overheating while using external monitors. At one point I had 3 hooked up to my MacBook Pro.

The key thing is to not use it in clamshell mode.

Also DisplayLink wouldn't really help much with running cooler, since its drawing a virtual frame buffer using your existing graphics card anyway, although I don't know if macOS would recognize it and switch to the discrete graphics when in use vs continuing to use the iGPU.

X-Istence··on Why do USB-C hubs still have USB 2.0 ports? (2021)
Many USB-C docks use DisplayLink to create a virtual graphics card over USB, it is implemented as software that renders using your computers/laptops graphics card that then sends the output over USB to the DisplayLink controller.

Thunderbolt docks (and some USB-C docks) instead will use Alternate Mode to pass-through the DisplayPort directly from the computer/laptop to the attached monitor. There is no additional graphics card or PCIe device involved in the matter, and no virtual graphics rendering that is sending frames across USB.

DisplayLink is not great, especially on macOS, even on Windows it would cause random slow downs and in general when using it with multiple monitors it would cause random tearing and other issues. It was fine for spreadsheets and the like, but for video it broke down quickly.

Whereas alternate mode just passes through your graphics card output, so there is none of that, and instead you get the full rendering power.

X-Istence··on Apple, Google and Microsoft Commit to Expanded Support for FIDO Standard
That is exactly what Safari supports. Safari supports TouchID, FaceID (on iOS), and also supports storing data in a remote device with a QR code.
X-Istence··on Keycloak: Open-Source Identity and Access Management
The downside to using Red Hat Single Sign-On is that it is a vastly inferior product to using Keycloak upstream as it is so many versions behind.

This means that bug fixes and features haven't trickled down yet. Although RH SSO 7.5 jumped from Keycloak version 9.0.17 (in RH SSO 7.4) to 15.0.2 so there's some improvement there... but Keycloak just released 18.0.0...

X-Istence··on StarBook 14-inch
Why only a single USB-C port? Almost everything I buy these days has only USB-C ports/cables/charging.

It's gotten to the point now that I am increasingly frustrated with the fact that there are no good USB-C capable hubs that take a USB-C USB 4 and turn it into an 8 port USB-C hub. With a mix of 10 Gbps/5 Gbps/480 Mbps speeds.

I can get plenty of USB-C to USB-A hubs, but that is not what I want.

X-Istence··on Show HN: Warp, a Rust-based terminal
> - Sharing hard-to-remember workflows

Those get codified into ansible and deployed on CI/CD pipelines. This is an anti-feature. The day that someone suggests using a terminal to manage hard-to-remember workflows is the day I start a huge crusade to fix whatever process led to introducing yet another tool.

X-Istence··on Ubiquiti is suing Brian Krebs for his reporting on their breach
You are comparing their consumer routers to their business line-up. The management interface for the business line-up can be properly segregated onto separate VLANs to protect it.

Sadly the consumer department doesn't seem to follow the same model as their business department.

X-Istence··on AWS Graviton vs. M1 vs. M1 Pro Node.js Benchmarks
I don’t think it’s an Apple issue.
X-Istence··on PEP 594 – Removing dead batteries from the standard library
https://discuss.python.org/t/pep-594-removing-dead-batteries...

Is my comment. It's the 6th comment down. Clearly I didn't make a strong enough case, but I certainly did advocate for it and mention that it is in use.

X-Istence··on PEP 594 – Removing dead batteries from the standard library
WebOb uses cgi for parsing multipart uploads/forms...

It's not obsolete, and it is heavily used, it's working software that works well. Ripping it out just means now there will be N copies floating around that will all need to get patched/fixed instead of just a single version included with Python.

X-Istence··on Namecheap: Russia Service Termination
Moving your domain name to a new registrar extends the time that your registration is valid.
X-Istence··on Namecheap: Russia Service Termination
Pardon my ignorance, but doesn't nic.ru already make money for each .ru domain that is registered?

Much like Verisign makes money for each .com/.net and Affilias makes money for each .name/.org that is registered?

Isn't the whole point of running a registry that you also get to collect some sort of fee for running the service?

X-Istence··on Reasons for servers to support IPv6
T-Mobile here in the US is a mobile provider, they don't have any landline service.
X-Istence··on Reasons for servers to support IPv6
With IPv6 and SLAAC your external IPv6 address changes on a schedule using privacy extensions...

Mine at home is configured to change every 30 minutes.

X-Istence··on Reasons for servers to support IPv6
Once you are working with VLAN's you are out of the bailiwick of consumer hardware, and you should be looking at more enterprise grade gear.

At that point having a default drop on the external interface and different rules for traffic traversing VLAN's is entirely possible, in fact that is what it is designed and built to do.

X-Istence··on Reasons for servers to support IPv6
> Hell I'm pretty sure comcast's cable modem doesn't even have IPv6 firewall capabilities and if they do it is default wide open. Thats not what I want. I have no interest in outsiders being able to ping hosts on my network or even know of their existence. I have no interest in letting random IoT devices expose open ports to the entire world (by default).

Comcasts cable modem also doesn't have any firewall for IPv4... it's a cable modem, it passes packets.

Your CPE (customer premises endpoint) is where the firewall lives.

> IPv6 is cool and all, but no consumer gear sets it up even remotely secure. At least with NAT a "script kiddy" grade attacker won't see what is behind your router. NAT isn't perfect but it solves a lot of problems. Not so with IPv6.

Most newer consumer gear that does IPv6 blocks all in-bound traffic on IPv6, just like it does on IPv4.

X-Istence··on JetBrains Mono – the free and open-source typeface for developers
Nope, that is still in the license.

See here (left off most of the agreement as the comment was deemed too long. See https://gist.github.com/bertjwregeer/faedb3d9dbf4b6e6d6ec0fa... for full license)

APPLE INC. LICENSE AGREEMENT FOR THE APPLE SF MONO FONT For iOS, iPadOS, macOS, tvOS and watchOS application uses only

PLEASE READ THIS SOFTWARE LICENSE AGREEMENT (“LICENSE”) CAREFULLY BEFORE USING THE APPLE SF MONO FONT (DEFINED BELOW). BY USING THE APPLE FONT, YOU ARE AGREEING TO BE BOUND BY THE TERMS OF THIS LICENSE. IF YOU ARE ACCESSING THE APPLE FONT ELECTRONICALLY, SIGNIFY YOUR AGREEMENT TO BE BOUND BY THE TERMS OF THIS LICENSE BY CLICKING THE “AGREE” BUTTON. IF YOU DO NOT AGREE TO THE TERMS OF THIS LICENSE, DO NOT USE THE APPLE FONT AND CLICK “DISAGREE”.

IMPORTANT NOTE: THE APPLE SF MONO FONT IS TO BE USED SOLELY FOR CREATING MOCK-UPS OF USER INTERFACES TO BE USED IN SOFTWARE PRODUCTS RUNNING ON APPLE’S iOS, iPadOS, macOS, tvOS OR watchOS OPERATING SYSTEMS, AS APPLICABLE.

1. General. A. The Apple font, interfaces, content, data, and other materials accompanying this License, whether on disk, print or electronic documentation, in read only memory, or any other media or in any other form, (collectively, the “Apple Font”) are licensed, not sold, to you by Apple Inc. (“Apple”) for use only under the terms of this License. Apple and/or Apple’s licensors retain ownership of the Apple Font itself and reserve all rights not expressly granted to you. The terms of this License will govern any software upgrades provided by Apple that replace and/or supplement the original Apple Font, unless such upgrade is accompanied by a separate license in which case the terms of that license will govern.

B. Title and intellectual property rights in and to any content displayed by or accessed through the Apple Font belongs to the respective content owner. Such content may be protected by copyright or other intellectual property laws and treaties, and may be subject to terms of use of the third party providing such content. This License does not grant you any rights to use such content nor does it guarantee that such content will continue to be available to you.

2. Permitted License Uses and Restrictions. A. Limited License. Subject to the terms of this License, you may use the Apple Font solely for creating mock-ups of user interfaces to be used in software products running on Apple’s iOS, iPadOS, macOS, tvOS or watchOS operating systems, as applicable. The foregoing right includes the right to show the Apple Font in screen shots, images, mock-ups or other depictions, digital and/or print, of such software products running solely on iOS, iPadOS, macOS, tvOS or watchOS. Your use of the Apple Font shall also be subject to any specific use restrictions with respect thereto as set forth in the Apple Font or Apple’s Human Interface Guidelines.

You may use this Apple Font only for the purposes described in this License and only if you are a registered Apple Developer, or as otherwise expressly permitted by Apple in writing.

B. Other Use Restrictions. The grants set forth in this License do not permit you to, and you agree not to, install, use or run the Apple Font for the purpose of creating mock-ups of user interfaces to be used in software products running on any non-Apple operating system or to enable others to do so. You may not embed the Apple Font in any software programs or other products. Except as expressly provided for herein, you may not use the Apple Font to, create, develop, display or otherwise distribute any documentation, artwork, website content or any other work product.

Except as otherwise expressly permitted by the terms of this License or as otherwise licensed by Apple: (i) only one user may use the Apple Font at a time, and (ii) you may not make the Apple Font available over a network where it could be run or used by multiple computers at the same time. You may not rent, lease, lend, trade, transfer, sell, sublicense or otherwise redistribute the Apple Font in any unauthorized way.

X-Istence··on Mozilla's Firefox Relay to be added to disposable-email-domains blacklist
Something like OpenID connect?
X-Istence··on Google says iMessage is too powerful
That's the same with WhatsApp/Signal/Telegram/others... unlike email which was distributed.
X-Istence··on Google says iMessage is too powerful
You can use iMessage with an Apple ID without having any phone numbers associated with it.

There's no carrier required at all with iMessage. With RCS you HAVE to have a carrier.

X-Istence··on AWS power failure in US-EAST-1 region killed some hardware and instances
Having had to restore a NetApp cluster from backup because the disks would no longer spin up after having been running for 4+ years... yup. The hardware was fully working and according to all internal metrics was still perfectly good, but a power outage and they never came back up.
X-Istence··on AWS power failure in US-EAST-1 region killed some hardware and instances
When you've got a massive datacenter packed, even 0.01% is a meaningful amount of hardware.
X-Istence··on AWS power failure in US-EAST-1 region killed some hardware and instances
Having worked in datacenter where servers were running for 5+ years in racks, when the datacenter went dark due to a UPS going up in flames there were definitely systems that did not come back online.

Most notably we had a large NetApp array that would not boot, once we replaced the controllers we had lost 13 out of the 60 hard drives in the array. They would no longer spin up. Like physically seized. Because they had been spinning for so long, they would have likely kept spinning just fine, but with power gone, it was done.

Fans are another fun one, anything with ball bearings really. Power supplies are another issue, due to the sudden large inrush of power when the switch was flipped back to on, some power supplies had their capacitors go up in smoke.

This is not rare, this a common occurrence. When you have an absolutely massive footprint with thousands upon thousands of servers, that have been running for a long time, there will be things that just don't come back once they have stopped running or when the electricity is gone.

X-Istence··on Amazon EC2 M1 Mac Instances
Github Actions has macOS available as a builder.
X-Istence··on Pull Through Cache Repositories for Amazon Elastic Container Registry
Unfortunately we can't just add this as a registry-mirrors in the docker daemon.json which means we still need to write all our Dockerfile's/build processes/container image selection to use the new ECR image URL, which is a shame.

Google supports this within GCP: https://cloud.google.com/container-registry/docs/pulling-cac... which makes it easy to avoid going all the way to Docker Hub for images.

X-Istence··on IPv6-only subnets and EC2 instances
No, NAT gateway for IPv6 does not make sense.
← PreviousPage 4 of 34Next →