HNHacker News
TopNewBestAskShowJobs

bks

382 karma · joined February 12, 2011

submissionscomments
bks··on Whistleblower drops 100 GB of Tesla secrets to German news site
Its my understanding that the vendor that they were buying LIDAR from was either slow paid or never paid - and then cut them off. This is when LIDAR became less important in their marketing spin and they said that they do not need it.
bks··on Launch HN: Common Paper (YC W23) – SAFEs for Commercial Contracts
We as a small SaaS selling into large companies and Bonterms has made negotiating what previously took months into a few days. The customers legal team agreeing to using this format is the most complicated. We just mention that most real estate deals are negotiated on standard paperwork with an overriding cover page - and so do we. Works amazingly well.
bks··on Show HN: Skip the SSO Tax, access your user data with OSS
Great question, and as a vendor with multiple products that suffer from an SSO tax here is my $.02

As a small team we get constant requests to integrate with a customers SAML provider - eventually we just switched to https://workos.com/pricing We explain to our customers that we have a hard cost for the integration and we pass that cost to them directly. The SSO version of our product and our self signup product do the same thing the same way - it's the compliance or risk management requirement mandated by our customers that require that we sell it the way we do. In our case our SSO or Enterprise version is $125 more expensive than the self signup product. Our money is in the product itself not in the SSO.

bks··on Clog: Making a homegrown ClickHouse log for $20 a month
Is there a front end to Cloudwatch that can visualize the results in a way so that we don't need to give AWS account access to the viewer?
bks··on The AT Protocol
ATDT
bks··on Our domain and 700 non-profit sites got blocked by Meta
We had a similar issue but not identical which led us to deploying all customers on a subdomain or their own domain. Rather than theirBusinessName.OurDomain.com people switched to shop.theirBusinessName.com and we used DNS cnames to point back to our servers.

We issued LetsEncrypt certificates automatically using Caddy and it works remarkably well for us. It also led us to become a paid LetsEncrypt sponsor and we have been for the past 4 years.

bks··on Blue Zones, where people reach age 100 at 10 times greater rates
This ^^ https://www.mentalfloss.com/article/643186/why-old-ladies-ha...
bks··on End-to-End SMTP Delivery via WireGuard Tunnels
Did you consider ETRN?
bks··on I made a Google sheet of local elections and it's been removed from Google Drive
A way to export from google - Export a copy of content in your Google Account to back it up - https://takeout.google.com/settings/takeout
bks··on Snort – Network Intrusion Detection and Prevention System
This reminds me of when I used to run http://snortinline.com/ in 2004 - when having the IDS inline seemed quite cool.
bks··on Show HN: I Made a Magic Trick
brilliant and i gave you a twitter follow.
bks··on Tell HN: Microsoft 365 domain name hell
If I am reading this correctly your domain name .tld is the issue here and not the .onmicrosoft.com naming convention. If this is the case check where the DNS is pointing, and re-validate inside of 365. I assume that you are not going to switch your MX record until everything is validated, and then demonstrate to Microsoft with a DKIM record that you control the domain.

They should allow the switch of the .tld domain to your new tenant.

bks··on Ask HN: My client want an agent on my laptop. Is this the new normal?
If you are a contractor, ask your company admin if you are in scope. If you are in scope as them for a laptop. If you are out of scope, ask them to mark you out of scope for the audit.
bks··on Do not use Digital Ocean for production
AWS does not care about your spend - you can always add support and this is a % of your spend with a minimum. You can add it and remove support at will - https://aws.amazon.com/premiumsupport/plans/business/
bks··on Do not use Digital Ocean for production
https://docs.digitalocean.com/products/accounts/security/2fa...

Looks like they provide backup options.

bks··on Open source HIPAA compliance benchmark for AWS
I recently completed a SOC 2 Type I audit and tools like Lynis are indispensable not only to configure your servers according to a standard, but more importantly being able to produce evidence that the servers meet the standard.

This tool looks like it is for AWS / GCP accounts and help to both secure and to prove audit and compliance. The easier it is for the auditor to review your controls and evidence the easier to pass the audit. Really looking forward to using this tool and checking to see what has changed in the CIS.

bks··on Cloudflare silently deleted my DNS records
I would absolutely pay for this as a service. I just ran into an issue with AWS where there was a problem with my account, I was unable to send email from a specific IP in a pool of IP's bound to an ec2 instance.

The machine / IP combination has been working for years and then one day it just stopped. No emails from ec2-abuse, nothing in my support dashboard. After troubleshooting for a while I bit the bullet and ordered business support.

After cycling through three support agents over 48 hours Amazon said that they were filtering the IP because of spam complaints but neither the Abuse department nor my support liaison was able to see the block - it has been applied at the network level and the network team did not communicate the changes to the other departments.

I told them that I would not be paying for a support plan (over $1000) to resolve a problem that I did not have any notifications or alerts or any way to troubleshoot for myself.

It required talking to two manager and almost a month before they finally agreed that the billing should be refunded. After lots of support tickets, emails, and phone calls I got the money back - but man... An ombudsman would have been amazing.

bks··on Ask HN: My manager suggested me to start taking Ritalin
In life, we all have blind spots. Things that are obvious to others with more experience but may be invisible to ourselves.

But it may have been a helpful suggestion from the manager based on observation or personal experience that the OP might have some attention deficit issues that may or may not be improved with medication.

Hanlon's razor may apply here also.

bks··on Show HN: Instantly make any Netlify form PCI DSS compliant
I am not 100% but I believe that 'Sure name' should be Surname https://www.screencast.com/t/VmRZ1dlH0T https://en.wiktionary.org/wiki/surname
bks··on Crystal 0.28.0 Released
We are using Crystal for our mail flow monitoring tool at mailflowmonitoring.com - create a free account and you can check it in action. It was a delight to deal with. We also created a Crystal email parser - https://github.com/amrood-labs/mail.cr
bks··on Mandrill has been down for over 30 hours with no explanation
If you just need outbound email submitted via smtp try outboundsmtp.com (I run it)
bks··on Ask HN: I set up my own domain for my email and it's all going to SPAM
Brad from DuoCircle here, if you need any help with sending let me know we have a few services that can help. We can smarthost your SMTP traffic on the outbound or we can forward your inbound email to the right destination.

My $.02 on the conversation is to double check your IP on some of the RBL services http://www.anti-abuse.org/multi-rbl-check/ to check to see if you are listed for any reason.

And then send a test email to https://www.mail-tester.com/ and check their scores. You SHOULD be able to get a 10/10 with a blank email as long as your authentication aligns.

Feel free to email me and I would be happy to help.

bks··on Phishing Is the Internet’s Most Successful Con
If you are looking for a straightforward way to protect users from phishing, consider rewriting the URLS in their messages and check their clicks in real time against databases of phishing feeds.

You can check against - Google Safe Browser, Phishtank and other free phishing feeds if you don't have the money for real-time databases or proactive site scrapers.

This is one of the ways that we protect the end user from Phishing at https://www.phishprotection.com - part of the magic is to do a bunch of sanitization before accepting the message including strict SPF, DKIM, DMARC validation / virus protection at the edge / and watching the registration of SSL certificates for commonly exploited domains https://blog.0day.rocks/catching-phishing-using-certstream-9...

If anyone is interested we rewrite URLs to match your domain name - something like linkcheck.yourdomain.com (protected by LetsEncrypt) and if you ever decide to leave you can export out the re-written URLs and redirect your domain to your own servers.

If you'd like to give it a try, feel free to let me know.

bks··on Sweden offers glimpse of a world without Amazon
Check out DAFT....
bks··on Let's Encrypt Root Trusted by All Major Root Programs
Congratulations to the LE team, we have been a very happy major sponsor the product. It works amazingly well in conjunction with Caddy for https://www.phishprotection.com.

I would be very interested to see the percentage of the Internet that is actively using LE certificates vs. the number of certificates that have simply been generated for valid domains.

bks··on WHOIS blackout period likely starting in May
I shifted my entire domain portfolio from Bulkregister.com to Uniregistry for this issue. Bulk charges $3 per domain per year and I saved thousands a year moving to Uniregisry.
bks··on California Votes to Require Rooftop Solar Power on New Homes
I agree with you. I just finished installing a solar system that covers 1.5x my needs in my Southen California house. 5.4kw. My system cost installed was $2.61/watt - with $7000 being labor from a contractor and $6300 the hardware and panels. And my payback will be 4.2 years based on the past 29 months of usage.

Let us assume that there is simply a hardware expense because the builders already have roofers and electricians. It’s such a fraction of a mouse fart (as mentioned) that going solar will essentially pay for itself after 2 years.

I can see builders charging a premium for the "electric car package" or the "double your consumption" service but something like 3W of production for each square foot per month would be amazing.

bks··on Run shell scripts on your remote servers via HTTP(s) endpoints
If you had to compare this to commando.io how would you distinguish the service?
bks··on Amazon opens 'Instant Pickup' points in US brick-and-mortar push
Except for my number 1 issue with shops...there is no way to check the inventory before you go. Their websites often suck at the store level inventory and if you do call customer care - and they do happen to send someone back to check it can take 10 minutes to find out if they have it, not just in their system - but on the shelf.

The elegance of Amazon is its logistics.

bks··on Ask HN: Should I buy a boat and live off the grid?
A subreddit on the subject - https://www.reddit.com/r/liveaboard/
← PreviousPage 2 of 6Next →