Hacker News Reader

berkle4455on Remote code execution in OpenSSH’s forwarded SSH-agent

What's a better solution if you want to be able to SSH across multiple machines? Do you need to always close the current connection to get back to localhost prior to a fresh SSH?

e.g. how would I ssh into foo, and then later into bar, or perhaps pull some code from github onto foo that is authenticated by my key?

    localhost -> foo -> bar
    localhost -> foo -> github access

It seems like the answer is either: a) ssh -A, or b) install my private key on foo.

berkle4455on Llama 2

It's not just researchers, this is free for 99% of commercial use.

berkle4455on Llama 2

To reduce the valuation of OpenAI.

berkle4455on Show HN: Peeng – like Pingdom, but the other way around and simpler

because that’s how pingdom works, and why recreate exactly what they do?

This makes it easy for internal services that maybe you don’t want to setup a publicly accessible health check ingress, would be my guess.

berkle4455on Kagi: Words You Cannot Use: 'Constitutional AI', 'Anthropic', 'Anthropic, PBC'

Amazingly useful. Please tell your author they suck at writing code.

(Since you’re a bot or an inept human, the above is sarcasm).

berkle4455on Kagi: Words You Cannot Use: 'Constitutional AI', 'Anthropic', 'Anthropic, PBC'

Okay? Don’t we have enough chatbots trained on human knowledge with various guardrails at this point?

When do we admit this improvement in AI is just the equivalent to another improvement to search and there’s no intelligence involved?

berkle4455on WordPress plugin installed on 1M+ sites logged plaintext passwords

I wonder how many security flaws were in Wordpress core all these years or how many were from plugins with garbage code.

berkle4455on “Our paying customers need X, when will you fix it?”

This is the key part half of HN can’t wrap their head around. Ron’s email clarifies his expectations and demands.

berkle4455on “Our paying customers need X, when will you fix it?”

And when it comes from his corporate email, it suddenly becomes $121B entitled company harassing a solo dev to work for free.

berkle4455on “Our paying customers need X, when will you fix it?”

27 years of it and you get promoted to Program Manager Secure Engineering and Incident Response, IBM.

berkle4455on “Our paying customers need X, when will you fix it?”

> does kind of read like extortion

I think you should google what "extortion" means. That's not how it works. It's an open source project. The guy can, quite literally, go fuck himself.

berkle4455on The theory versus the practice of “static websites”

> Nginx breaches don’t

Except when someone forgets to append a trailing slash on a location block with an alias directive.

berkle4455on Avast Scandal: Why We Stopped Recommending Avast and AVG

Joseph Cox at Vice covered it fairly extensively. Hedge funds are still doing it today, just with different data vendors.

berkle4455on Why do so few people major in computer science? (2017)

Because it’s not worth the cost and time commitment unless you can’t read a book or follow one of the numerous excellent free online coursewares from better institutions than wherever you’re going.

berkle4455on Debunking Cloudflare’s recent performance tests (2021)

In which year do we think we’ll get leaks confirming Cloudflare was an NSA operation?

berkle4455on Scaling to around 15K requests per second with Java

Cool. PHP 8.2 is amazing.

berkle4455on Scaling to around 15K requests per second with Java

> are on AWS for no real reason.

One of the core offerings in AWS is EC2. Which are just shared (up to dedicated) virtual machines, and they start at a few dollars a month. I'm in no way suggesting a change to your setup, only pointing out that AWS isn't some mythical complex ecosystem.

Is namecheap running PHP8? That upgrade alone will net you a massive performance improvement over 5.x

berkle4455on Scaling to around 15K requests per second with Java

Did my comment come across as anti-JVM to you? That was not my intention. My point is that 15k requests per second is child's play.

berkle4455on OpenTTD's Infrastructure in 2023

Running anything you care about on Hetzner is a needless risk. There's numerous other discount providers who don't abruptly turn off traffic to your box or close your account the moment they see something they don't understand.

berkle4455on Scaling to around 15K requests per second with Java

This was an impressive metric 20 years ago. Today you can achieve 15k/sec on a single $10/mo VPS running any number of Java, Go, JS, PHP, or Rust apps.

berkle4455on June Inflation Drops to 3%

Thank you, I appreciate your insightful responses.

berkle4455on June Inflation Drops to 3%

> The goal is to keep inflation at a low enough rate that wages keep up.

https://fred.stlouisfed.org/series/LES1252881600Q

But they haven't have they? Median earnings are flat with Q4-2019 levels. Averages are higher because those of us fortunate enough to work in tech or healthcare are experiencing boom times, but for huge swaths of the country, things are looking very bleak. Take-home pay is the same, but the price of groceries and rent has continued to climb without abatement.

berkle4455on June Inflation Drops to 3%

and deflation is a good thing when you've had a massive run-up.

berkle4455on June Inflation Drops to 3%

In other words: The massive inflation experienced across 2021 and 2022 is here to stay and it's still getting worse, just a wee bit slower.

Edit: Downvotes? Pointing out the big picture is too inconvenient a truth? We shouldn't be celebrating 3%, we should be demanding why it's not -3%.

berkle4455on Intel exiting the PC business as it stops investment in the Intel NUC

> If any hedge funds are looking for analysts, I'm always open to offers...

$INTC has done a whole lot of nothing for the past 9 months, I don’t think any hedge funds care short or long.

berkle4455on First U.S. ban on sale of cellphone location data might be coming

Nobody sells it to individuals. Sprint sold customer location data through a subsidiary called Pinsight. Advan Research, Placer.ai, and SafeGraph are some current companies selling location data.

berkle4455on InfluxDB Cloud shuts down in Belgium; some weren't notified before data deletion

It's almost like using bullshit hype-hype-hype databases, especially their cloud offerings, is a horrible idea.

berkle4455on Train an AI model once and deploy on any cloud

This argument is reminiscent of ORMs and “you can switch your database and only change the config!”

Switching your database, just like switching your cloud provider, rarely happens in practice.

berkle4455on I am drowning in mutes: The current Threads experience

Seriously. I didn't sign up for Threads and I haven't had to mute a single account.