HNHacker News
TopNewBestAskShowJobs

_yy

465 karma · joined June 25, 2015

submissionscomments
_yy··on Berlin public transport in real time
> Maybe German trains are so punctual that you can infer their position anyway.

That's what the map is doing, anyway (plus delays).

_yy··on Comcast injects JavaScript into webpages to show copyright notices to customers
Well, most people have email and the ISP can just require that they have a working email address on file.

That's how ISPs in Germany do it and it works fine. Or if it's urgent, they'll just call you.

No need to invent a new form of communication or do evil things with Squid.

_yy··on Visual Studio Code is now open source
IntelliJ! (and PyCharm, WebStorm, etc.)
_yy··on Linux has matured into a robust desktop operating system
> The grade of commercial software for linux is laughable

This highly depends on the industry. Camtasia and Screenflow are one thing, but many high-priced CAD / specialist / niche products are offering Linux versions nowadays, which helps Linux adoption in the enterprise.

_yy··on Linux has matured into a robust desktop operating system
> it sucks for everything else

What else does it suck at? "Desktop" does not mean "gaming".

> there is no solution that provides on-demand GPU switching AND proper external monitor support at the same time

Not true - this is highly hardware dependent. On recent Thinkpads, bumblebee works perfectly fine with externals monitors and has acceptable performance for most tasks (I use it with Blender and have no issues with it). There's still a performance hit since there's no DMA yet, but I hope that Nvidia will fix this one day.

> No. Look at the most recent SteamOS/PC review

It's still a viable gaming platform, even if performance for some recent high-end games is worse than on Windows. It's fine for hundreds of others.

But I agree with you - while it works well for me now, I've spent a huge amount of time debugging Linux graphics in the past and there is still lots of work to be done (and is being done - Wayland will significantly improve things). Right now, the Windows stack is superior.

_yy··on FastMail: Shutting down our XMPP chat service
Not true, XMPP does have that feature and there are multiple clients which implement this. It works amazingly well. It's not an extension, but part of the standard.

Example:

http://conversations.im/

_yy··on What MongoDB got right
RethinkDB took all the good parts of MongoDB and added proper engineering.

https://www.rethinkdb.com/

_yy··on f.lux for iOS is no longer available
My Galaxy S2 has a battery life of about 2 days and I haven't experienced any hangs for a long, long time.
_yy··on Self-hosted alternatives to popular cloud services
Another Github alternative: http://phabricator.org/, better than GitLab, even.

Self-hosted WebRTC audio/video conferencing: https://github.com/jitsi/jitsi-meet

_yy··on Grsecurity Developer Spender's Feelings on the State of Linux Security
He's actually talking about the SELinux/"RBAC in general" approach. His only criticism of Grsecurity is that it's not in the mainline and therefore not as effective as it could be.
_yy··on Latest Android phones hijacked with one-shot Chrome exploit
Does Google Chrome have a sandbox on Android?
_yy··on f.lux for iOS is no longer available
My Android phone just works™. No tinkering required. It's not even rooted anymore. I don't have to think about it at all.

Maybe you just had a bad device?

_yy··on f.lux for iOS is no longer available
Also that one: https://play.google.com/store/apps/details?id=mobi.pruss.Gal...

And Cyanogenmod has a built-in color temperature changer anyway.

_yy··on Grsecurity Developer Spender's Feelings on the State of Linux Security
Grsecurity's approach is superior to OpenBSD's, but both are acceptable.

FreeBSD is actually behind Linux - it lacks an effective access control framework and did not have ASLR until the latest release. At least they're working on it (TrustedBSD, Capsicum).

_yy··on Linux is fast, flexible and free. Experts say that comes with a security cost
Because it's superior to the alternatives, despite the security issues?

The malware problem did not affect Windows' popularity either.

_yy··on Linux is fast, flexible and free. Experts say that comes with a security cost
Well, Grsecurity did maintain their own Linux fork for the past ten years with an excellent security track record. The issue is that mainline is not interested in merging it, leaving most users vulnerable (since using a Linux fork in a production environment is something most users aren't going to do, even if there are clear benefits).
_yy··on Linux is fast, flexible and free. Experts say that comes with a security cost
> Android is inherently always going to be insecure as long as it's running with GSM, which is fundamentally broken

So because of the mostly theoretical threat of baseband vulnerabilites, we shouldn't bother securing the software running on the application processor? What if I told you that x86 suffers from similar "there's an omnipotent co-processor with access to your memory" issues?

_yy··on Grsecurity Developer Spender's Feelings on the State of Linux Security
Astonishingly so, since it's actually a very good article. Only one or two (minor) flaws in a long article about a technical subject, written by a journalist, is a good tally.
_yy··on Grsecurity Developer Spender's Feelings on the State of Linux Security
Arch Linux has a working out-of-the-box config too. The guy who contributed it to Arch Linux is Daniel Micay, who was also quoted in the WaPo article.
_yy··on Grsecurity Developer Spender's Feelings on the State of Linux Security
This is the Washington Post interview he wrote this for: http://www.washingtonpost.com/sf/business/2015/11/05/net-of-...

Source: https://twitter.com/grsecurity/status/662393322699415554

> Very fair article on the topic of Linux security: [...] … Was a pleasure talking with @craigtimberg

_yy··on 8-bit number to binary string
Yeah but that does not apply to jokes.
_yy··on System design implications of declining network latency vs. disk latency
Protobuf, probably.
_yy··on VW slumps to first quarterly loss in at least 15 years
General Motors - which knew about their broken ignition switches for over a decade - got away with a 900$m fine. That defect killed at least 124 people.
_yy··on PostgreSQL on the Command Line
Same issue for me. Probably readline-related.
_yy··on NTPsec is not quite a full rewrite
systemd-timedated looks promising for replacing ntpd for most client use cases.
_yy··on Catcierge: Image recognition and RFID chip reader for automated cat door
Wow... awesome project. That guy is living the dream...

https://github.com/JoakimSoderberg/catcierge

That cat house has better documentation, unit tests and code coverage than many commercial projects I've worked on.

_yy··on The Safe Harbor ruling stems from an earlier decision by an Irish court
> Today does not seem to be a good day for small cloud service providers.

Not for service providers in the US, but it's a great day for European cloud service providers.

_yy··on Is curl|bash insecure?
I fully agree with you. Though Sandstorm in particular explained why they do it this way:

Q: Installing software not managed by the distro’s package manager can be inconvenient for system administrators, especially those who are deeply familiar with the inner workings of their distro.

A: On these concerns: We hear you.

For now, we believe that having our own install scripts allows us to iterate faster, compared to maintaining (and testing) half a dozen package formats for different distros. However, once Sandstorm reaches a stable release, we fully intend to offer more traditional packaging choices as well. We still have lots of work to do!

So, there will be packages once it's stable. Right now, they'd rather spend their time adding new features.

_yy··on Django 1.9 alpha 1 released
Fabric exclusively uses the Paramiko SSH library, which means that it can't use any of the newer OpenSSH ciphers and is kinda slow. Ansible can use either. In my opinion, it's easier to work with than Fabric, too.
_yy··on Don't expose the docker socket, even to a container
> Google runs a significant portion of its internal operations in a container infrastructure and has for quite a while.[1]

They use containers inside virtual machines. Virtualization for security, containers for deployment.

← PreviousPage 4 of 5Next →