HNHacker News
TopNewBestAskShowJobs

X-Istence

7,174 karma · joined February 18, 2010

[ my public key: https://keybase.io/deltaregeer; my proof: https://keybase.io/deltaregeer/sigs/fB1spa9ustk6eYzq4uXRVHb1D85EaTlipzh1uutGT34 ]

Portfolio: http://deltaregeer.com/ Engineering Notebook: http://funcptr.net/

delta@regeer.org

submissionscomments
X-Istence··on Apple Introduces AirTag
Someone already has.

https://appleinsider.com/articles/21/03/04/researchers-rever...

X-Istence··on Users are losing out against Big Sur’s sealed System
What do you mean that macOS doesn't virtualize memory? Would you mind expanding on your thoughts a bit more?
X-Istence··on It’s cheaper because we pass the risk on to you
Right... the wholesale cost was artificially being held low during that time because ERCOT was load shedding by disconnecting consumers.

The algorithm just sees load < available power and sets the price.

This means that as the load continued to shed, wholesale price would have continued to plummet, which would have caused more generation to go offline (as there's no demand for it, and price per kWh is dropping), which is the exact opposite of what was required to stabilize the grid.

Generation needed to be brought back online, and wholesale customers still connected to the grid (think large industry) should have pulled their load off the grid to restore capacity for the retail consumer.

X-Istence··on It’s cheaper because we pass the risk on to you
They also link to the order which explains why they made the decision:

http://www.puc.texas.gov/51617WinterERCOTOrder.pdf

Previously consumers were getting cut off because large industry was still getting low wholesale power and generators were not incentivized to spin up more capacity.

X-Istence··on It’s cheaper because we pass the risk on to you
It was artificial in that the Public Utility Commission forced the price up to force more non-retail load to be shed by wholesale customers (think fabrication and industry).

http://www.puc.texas.gov/51617WinterERCOTOrder.pdf

Retail customers weren't expected to be directly affected by wholesale pricing of energy, but when a provider passes through the wholesale price directly that goes out the window.

X-Istence··on The modern packager’s security nightmare
One of the issues with unbundling everything into its own package really comes to a head when it comes to how Python is packaged on Debian based systems.

They split out core components that are built-in to Python so that they may distribute them separately thereby breaking the Python version's default tooling that is supposed to exist, in the name of "not having dev tools installed alongside non dev".

Package maintainers have made life miserable for those of us who have to then help people through that mess so that they then may use the software we have written and or maintain. We have to write our quick start guides to tell users how to get a proper working version of Python on their system because the package maintainers deem their way of deploying Python the best way to deploy it.

"Your instructions are wrong, `python3 -mvenv venv` doesn't do anything, it just errors out saying I need to install something else, but when I install that package it still doesn't work".

Packagers that insist on splitting every dependency then put the onus back on the community to support it, they don't have to deal with it.

X-Istence··on The modern packager’s security nightmare
boto core/boto/boto 3 are the libraries, which awscli drives.
X-Istence··on Texas was minutes away from months-long power outages, officials say
It's the gas turbines and power plants that failed to come online due to frozen gas pipelines...
X-Istence··on Python Cryptography, Rust, and Gentoo
Cryptodome is a replacement or continuation of PyCrypto, a library that has had a large amount of issues, and while it provides the hazmat primitives it makes it easy to misuse them.

Cryptography on the other hand while providing the low-level functionality if required, provides a higher level interface on top of those primitives that makes it hard to misuse and thereby potentially make cryptographic mistakes.

X-Istence··on Go 1.16 will make system calls through Libc on OpenBSD
The downside to Go shipping it's own implementation of DNS resolution is that on systems that support far more rich set of DNS options (such as split DNS based upon hostnames in macOS) is that it doesn't work if the binary is built with a pure Go implementation.

That leaves users annoyed, because sending all DNS into a VPN tunnel is not always an option.

X-Istence··on Ask HN: Non-US Fired after bipolar depression shared with HR. Can they fire me?
> they got away with this because I am not us-citizen

Uhm... most of the US is at-will employment, which means they can and do terminate people at any point in time with absolutely no reason necessary what so ever.

There is 0 protection for employees in the US (in most cases).

This is not like Europe at all where there are rules around how you can fire people and legal requirements that need to be met.

X-Istence··on Pip has dropped support for Python 2
PyPI may exist and hold old packages, but even that will eventually bitrot, and the API that the old version of pip uses to download files may no longer exist in the future (as an example).

For those cases you will want to make sure you have a local mirror.

X-Istence··on Pip has dropped support for Python 2
It does talk to a package server, but you'll want to grab all the source code/wheels for the relevant packages before they are no longer available anyway, especially as many projects are no longer going to be available under Python 2.
X-Istence··on Creating Comfy FreeBSD Jails Using Standard Tools
Jails can be used for this. You can jail a process and only limit what it listens on for example.

  jail -c path=/ ip4.addr=disable ip6=inherit command=/bin/csh
for instance would run the command "/bin/csh" and jail it so that it doesn't get access to any IPv4 and it allows communications over IPv6 only.

So you can use jails to sandbox applications. You can also mount all paths are read-only and only the paths required for the application as read/write. jails can be very handy for all kinds of operations around that, there is no requirement that you provide the jail with a copy of the user land again, although that is the easiest way to run jails.

X-Istence··on New MacBook Pro models to feature magsafe, no touch bar and more ports: analyst
Only one way to do that due to physics. Thicker screen.
X-Istence··on Lack of Vitamin D is associated with SARS-CoV-2 infection and mortality
Appreciate the warning, but I started taking supplements due to a previous doctor recommending me to take them.

Then that doctor retired and I got a new doc who didn't read that in my previous charts, so they were surprised when the results came back, evenjhough I was taken supplements.

X-Istence··on Lack of Vitamin D is associated with SARS-CoV-2 infection and mortality
I live in San Francisco. There's plenty of sun, I don't spend an awful lot of time outside though, and especially not uncovered or without adequate sun screen to protect my tattoos and my skin (skin cancer sadly runs in the family)
X-Istence··on Apple Backtracks After Popular Mac App 'Amphetamine' Threatened with Removal
System Preferences -> Battery

Select either Battery or Power Adapter to make changes to how the system will go to sleep/turn the display off after a certain amount of time.

X-Istence··on Lack of Vitamin D is associated with SARS-CoV-2 infection and mortality
I'm a big guy. 300 lbs. Was at 2,500 IU, now at 5,000 IU.
X-Istence··on Lack of Vitamin D is associated with SARS-CoV-2 infection and mortality
I've been taking Vitamin D supplements for the last year, and most recently I had my doctor run tests. They were very surprised that the test came back and I was under the minimum range, even with the supplements.

They had not expected that at all. So instead they asked me to up my dosage. Ever since then I've felt mentally better than before, it really helped my mood and improved my ability to think.

X-Istence··on Atlassian Cloud ToS section 3.3(I) prohibits discussing performance issues
Other commenters have hit on this already, but the worst one that bites me all of the time is this one:

1. I click a link to an issue 2. I need to do something on that issue, so I attempt to click on a particular section to go make a modification 3. Bam, some background script has loaded, some new piece of content was shoved in, and what I clicked wasn't the thing I was expecting to click

Also, certain interactions within JIRA take far too many steps, and each one takes far too long to load, so it makes me dislike JIRA even more.

Project managers love JIRA, but engineers don't, because each time you make us wait we are less inclined to deal with the software that PM's need us to use so they know how things are going, so instead we get more meetings. If JIRA were fast, we could cut down on meetings.

Please make JIRA fast.

X-Istence··on How Graphviz thinks the USA is laid out
Did you open it in a tab that was not immediately made active?

There seems to be some sort of issue with Twitter whereby the javascript to fetch/render the tweet doesn't fire if you open it in a background tab and then visit the tab.

Refreshing the page causes the javascript to correctly fire and the tweet is displayed. This is due to Twitter no longer pre-rendering the page server side, its all done client side.

Also makes it impossible to use Twitter from a browser with javascript disabled.

X-Istence··on Twitter cut off the ability to read a tweet by fetching its URL with a HTTP GET
I'm running Safari 14.0.2 on Mac OS 11.1. Safari does lower background javascript execution, it allows it to save on battery life for background tabs.

I want this. I want it to save battery life.

So Twitter should make sure their javascript executes correctly when it is foregrounded and Safari does start executing it.

Either way, I honestly don't care too much why it is broken, Twitter could have sent a pre-rendered page down.

X-Istence··on Twitter cut off the ability to read a tweet by fetching its URL with a HTTP GET
This is an issue I've noticed too... when I open a new tab (in the background) to Twitter, then Safari won't execute the javascript until I go to the tab and hit refresh.

It sucks, because it adds a new refresh cycle just to see the tweet.

X-Istence··on Cyberpunk 2077 removed from PS Store and refunded
I do hope that this means we continue to get updates... how does that work if it is no longer on the store?

I don't want to refund the game, I want to keep it, I have so far been enjoying it and I am playing on a base model PS4.

X-Istence··on Highly Evasive Attacker Leverages SolarWinds Supply Chain
Yes, absolutely. Oh, the amount of outdated software that your average corp runs is mind blowing. Not only that, but if you have a tight IT department, the amount of shadow IT that happens because of the too onerous processes put in place by IT will leave so much infrastructure that is critical but not managed correctly.

As a security professional, getting people to upgrade simple software is difficult enough, upgrading critical infrastructure used 24/7 by the development team... forget about it.

X-Istence··on OpenSSL Security Advisory – EDIPARTYNAME null pointer de-reference
Yes, there are plenty of regulated environments (whether government or commercial) that require FIPS because it means the specified ciphers are all approved and the libraries are to have passed certification.

It's a pain in the ass at times because it means things like Ed25519 and ECDSA not over NIST certified curves is not allowed...

X-Istence··on Improving DNS Privacy with Oblivious DoH
Create a loopback interface and assign it the IP address you want redirected, then have your DNS resolver bind to those IP's.
X-Istence··on AT&T Fiber in the SF Bay Area is flipping bits
Yes, all bits are being flipped. TLS connections drop because the message can't be authenticated, HTTP or other plaintext protocols will continue on with bad data.

So yes, it is blowing up all sorts of traffic everywhere. You just don't notice when it is plaintext.

X-Istence··on Docker's Second Death
The op has posted in this thread that they are no longer at Red Hat... so your comment is wrong.
← PreviousPage 6 of 34Next →