Hacker News Reader

arpinumon Fakecloud: Local AWS cloud emulator for integration tests

Funny fact, DynamoDB local fails about 100 of my conformance tests. Mainly around error message formatting and text. Just be careful about parsing those.

arpinumon Fakecloud: Local AWS cloud emulator for integration tests

Here are some bugs: - `ADD m.a.c :inc` update expression wrote a literal top-level m.a.c attribute but didn't change the nested number. - TransactGetItems returned fields not requested. - update expression can update the same key multiple times.

In total my conformance suite found 583 failures out of 1279 tests.

arpinumon Fakecloud: Local AWS cloud emulator for integration tests

"46 at true 100% conformance". This is factually incorrect. Inspected their DynamoDB service and it comes nowhere close to implementing the full api.

arpinumon Automattic has a new board after failed attempt to put CEO on leave

Alternative theory - the board and new CEO understood their actions had high risk of termination and needed compensation for that risk.

arpinumon SAML: A fractal of bad design

In a JWT this is simple, the signature checks the entire sig and data sections. In XML signatures it checks whatever it says it checks, a list of URIs, which may also be transformed.

So it is possible to have an XML signature that points to an element that does not include some important piece of data.

arpinumon SAML: A fractal of bad design

SAML is even worse than the article describes, problems like needing to check what the signature actually signs. But I'm optimistic about the future, instead of relying on libraries that do a lot, such as general xml parsing, we can support a subset of SAML and only the dialects of the top ~10 providers. Extreme niche providers can be added ad-hoc and only if the deal size makes it worthwhile.

arpinumon macOS 27 Golden Gate – Review

When Siracusa wrote the last review.

arpinumon How we rebuilt complex permissions without migrating to Zanzibar

They could have embedded Cedar into their system without adding on-premium burden.

arpinumon Object storage is all you need

My complaint is about your customer's choices, not yours. The customer solved their problem, but they also created the problem in the first place by building on an abstraction that hides capabilities they need.

arpinumon Tell HN: OpenAI keeps re-enabling the 'allow training' setting

https://openai.com/index/advanced-account-security/

> Automatic training exclusion. People working with especially sensitive information may opt not to have those conversations used for model training. With Advanced Account Security enabled, that preference is automatic: conversations from those accounts will not be used to train our models.

arpinumon Tell HN: OpenAI keeps re-enabling the 'allow training' setting

Documentation is not complete, it also protects your data from being used in training.

arpinumon Tell HN: OpenAI keeps re-enabling the 'allow training' setting

Turn on "Advanced Account Security", that prevents model training from being turned on.

arpinumon Object storage is all you need

> the database is the last thing you want to re-invent

good news, FoundationDB is already invented, and just slightly more tested than others on the market.

arpinumon Hitachi launches CO2 heat pump water heaters with solar-friendly tariff controls

CO2 does better with large temp deltas, like hot water tanks. Radiators don't produce large deltas - the inlet to outlet diff is typically under 10 degrees. But they run at higher pressures, making the manufacturing more expensive.

arpinumon Object storage is all you need

This is frustrating to read. Tigres is built on FoundationDB, but doesn't expose all FoundationDB operations like transactions, range reads, and get mapped range. They go through all sorts of complications to handle these issues, including a database for caching (and they don't consider thundering herd problems).

What if you just ran FoundationDB instead?

arpinumon Functional State Machines in Rust: Typestate and Newtype Patterns

It's mainly naming conventions so functions read more like a sentence, so `send_action(to_cell: X)`.

arpinumon Functional State Machines in Rust: Typestate and Newtype Patterns

I use Typestates and Newtypes extensively. The metric that shows Typestate and Newtypes are beneficial is: How many method calls or parameters can be called / used that compile but are not valid use cases. You want to minimise this number. I love having a type state where I can only make 1 or 2 method calls because the state enforces there are only a few parsing / validation / transition methods available. And there is only one valid way to supply the parameters, I cannot use the strings in the wrong location. I only wish we had named parameters like ObjC.

arpinumon Monzo Stand-In

Foundationdb has a good solution to this. Uses three regions, sync writes to regions 1 and 2 which should be near each other, sync writes to region 3. If region 1 dies then region 3 pulls last commits from region 2 before serving traffic. Small cluster manager runs in all three regions

arpinumon Smaller reactors bring nuclear power closer to fulfilling its promise

It gives evidence the viability of nuclear is a political choice. China is using proven designs and delivering a good price for base load.

arpinumon I Used AWS Cognito for a Startup. I Wouldn't Do It Again

They added new enterprise features, free ride is over if you want any improvements made to the service in the last 8 years.

arpinumon Smaller reactors bring nuclear power closer to fulfilling its promise

SMR is driven by funding, insurance, and regulation. China doesn't have these issues and builds conventional at a great price. China is building 37 reactors, only 4-5 are SMR-type units, and are larger at 600MW. The rest are standard PWR, and the 40+ in planning are dominating by standard PWR.

Regulatory risk is too high, building too infrequent to understand costs, funding for first-of-its-kind is too hard for nuclear in most countries. SMR makes it fundable. New designs give the hope that regulatory burdens can be lowered.

arpinumon How credit card rewards became a $9.2B wealth transfer

EU only capped fees for 4 party systems, and only for consumer credit cards. business credit cards and 3 party systems (American Express for example) are not part of the cap and you can get more rewards with these card types.

arpinumon Apple announces changes for apps in the European Union

> Web distribution, which is available only in the EU ... require every alternatively distributed app to go through Notarization — a baseline review focused on basic functionality and protection from serious threats.

This is quite a big change for EU users. What I don't understand is how Apple will track the new 5% commission for web distributed apps. You do need to register for the programme, so maybe that is one way they track businesses and get a right to audit their books.

arpinumon A Preview of DuckDB v2.0

ETL from DynamoDB into Ducklake

arpinumon Government sponsored study on alcohol doesn't stand up to scrutiny

Dose makes the poison. And some substances are beneficial at low doses and harmful at high doses.

Do you foreswear aspirin?

arpinumon Millions sent wildfire emergency phone alert

Sadly the government lost my trust to use the capability responsibly, I've opted out of future messages. https://www.gov.uk/alerts/opting-out

arpinumon Premier league bans gambling sponsors

It's a response to laws that prohibit advertising of alcohol in certain countries at certain times of the day. There may be a trend towards these products, but the prohibition prompted the advertising change.

arpinumon Premier league bans gambling sponsors

Same with the drinks companies, they switched to explicitly advertising their zero alcohol beers.

arpinumon Codex Security

I set --max-cost to 100, it bailed before finishing. Unknown if I would get full results for $105 or $500. Either way I lost $100.

arpinumon SQLite Is All You Need

I use a in-memory database per unit test with both rocksdb and sqlite, it is a game-changer to get better quality tests.

Overall premise is wrong though. Moving the database out of process will change performance characteristics and data architecture too much and will cause massive headaches at exactly the time when you are trying to scale with success. You should have out of process performance tests early to catch these issues, even if you do deploy a single node.

If success can be satisfied with a single node and you are satisfied with availability and recovery that gives you then great, but it isn't all I need.