HNHacker News
TopNewBestAskShowJobs

bobbob1921

242 karma · joined June 3, 2017

submissionscomments
bobbob1921··on 12 years of Backblaze data center storage drives, visualized
Exactly, I’m. I was hoping to see all time drive failure data as well.
bobbob1921··on Saying goodbye to FFmpegKit
Its unfortunate that more corporations don’t contribute to the same open source that they make use of for profit. (I know some do however).
bobbob1921··on IPv6 Is Hard
I second this, it forces security by default (at least keeping devices from being directly exposed)
bobbob1921··on IPv6 Is Hard
I think you’re exactly right on this. Further , difficulty in remembering or visualizing IPv6 addresses I think makes it more difficult to understand how it works (vs learning how v4 really works) and thus weaker adoption
bobbob1921··on Hotline for modern Apple systems
Same! Managing servers with multiple external hard drives/scsi IDs !
bobbob1921··on Hotline for modern Apple systems
Lol! I made quite a bit of money through middle school and high school with this foolishness and hl servers. I was even able to pay a friend of mine in another part of the town, a cut if he allowed me to run some of my hotline servers on his new cable modem (since that was the first part of town to get them). Also ran a server on a T1 at an office of another friends.

Another blast from the past regarding hotline, figuring out how to name your hotline servers so that they appeared at the TOP of the various tracker lists. (And those app/server sounds!)

bobbob1921··on Meta torrented & seeded 81.7 TB dataset containing copyrighted data
Thanks, I thought it was a sarcastic reference to torrents. So this cleared that up
bobbob1921··on Why is Warner Bros. Discovery putting old movies on YouTube?
I can imagine that the DRM part is a difficult problem, however, why is DRM so important and require so much focus? I ask as the end goal of protecting the content is meaningless as I’ve yet to see content that does NOT end up on Pirate sites in perfect quality. (so why put so much effort into drm if it’s going to end up on pirate sites anyway.). Especially if DRM is causing UI issues or slowing down the experience. (I could be wrong about some of this as I’m not in the streamin specific industry.)
bobbob1921··on Nevada Court Shuts Down Police Use of Federal Loophole for Civil Forfeiture
This guy looks familiar from a video on YouTube of the traffic stop and cash seizure. If this in fact is the same guy and case from that video, I wonder what would’ve happened had this not been videotaped / posted online as I’m sure 99% of these similar scenarios are not. Civil forfeiture in the usa really is ridiculous, and I wish it would be radically changed/banned.
bobbob1921··on Regulations Enabling 6 GHz Wi-Fi
Your going to be hard pressed to saturate that “single” 2.5g eth port.
bobbob1921··on Passkey technology is elegant, but it's most definitely not usable security
Agreed, and some kind of appeals process/ external arbitrator, if your account is terminated due to terms of service or automation.
bobbob1921··on Passkey technology is elegant, but it's most definitely not usable security
I’m not saying I’m against 1pass adding the ability to export passkeys from 1Pass, however, doesn’t this increase the possibility of your computer is compromised (say remote control) and now your passkey is exported / moved to a new device and hacker auths in via that new device? (versus with a hardware passkey which cant be exported electronically)
bobbob1921··on Using AZs can eat up your budget – From Prometheus to VictoriaMetrics
I’m just throwing out a hypothetical, so I may be completely off base: perhaps aws charges high inter-AZ bandwidth prices to keep users from tunneling traffic between availabilities zones to arbitrage lower Internet/egress costs at AZ 1 vs AZ 3.

Outside of my statement above, I do agree that the cost Amazon pays for bandwidth between their sites, has to be practically nothing at their scale/size (and thus they should charge their customers very little for it, especially considering easy-multi AZ is a big differentiator for cloud vs self-hosting / colo). The user above’s dark fiber MRC prices are spot on.

bobbob1921··on Protecting undersea internet cables is a tech nightmare
I would think for longer run cables, a majority of the run is at a depth, such that anchors don’t even go that deep (except once you get closer to land/shore ) I wonder how far into the seafloor you have to bury a cable such that it’s beyond How deep an anchor can reasonably penetrate (even if the anchor is being dragged). I’m sure this adds quite a bit of cost to the fiber run anywhere you have to bury it, however, I know I’ve seen systems that use a sled and water jets down on the sea floor to bury the cable as it’s run.
bobbob1921··on Show HN: Open-source private home security camera system (end-to-end encryption)
Excellent set up, and in fact exactly what I’m using / how I’m set up. In addition for a few IOT type sensors and things like thermostats around my house, I have another vlan as well as a dedicated SSID tagged for that vlan, that only allows Internet access and everything else is dropped for that vlan. (Ie a firewall rule on the forward chain that drops anything in on that IOT vlan, that has a destination address of the private ip ranges: ie dst= 10.x or 192.168.x or 172…. anything locally that needs to access those sensors does so through the cloud/Internet, and for the one or two device devices that need to access them locally I have a fw rule allowing just that devices IP
bobbob1921··on Show HN: Open-source private home security camera system (end-to-end encryption)
The best human detection for cctv cameras (in contrast to motion only detection) is an open source project called frigate. You should definitely look it up. It does this better than any paid or free solution I’ve ever come across.
bobbob1921··on Yi Peng 3 crossed both cables C-Lion 1 and BSC at times matching when they broke
What I don’t understand - if the yi peng was intentionally trying to damage the FO cables, why would they not spoof or disable their AIS data/broadcast (ship tracking transponder which is the source of this positioning data we see). Anyone have some insight on that?
bobbob1921··on Launch HN: Sorcerer (YC S24) – Weather balloons that collect more data
Very cool and wishing you all the best of luck.

One question that came to mind, and this applies to all weather baloons not yours specifically, with the large number of weather balloons launched daily, how is it That more aren’t sucked into airplane engines causing potential disaster for the airplane? Thanks

bobbob1921··on Show HN: If YouTube had actual channels
I hate that if anytime I upload a short video it forces the video to YouTube shorts. Especially since I’m not making content for the public - it’s more a demo video or something to specifically send to a few people. As with so many services nowadays, I like the ability to use YouTube shorts when I want, but I hate that it’s forced upon us with no reasonable and consistent method to not use shorts at the users discretion.
bobbob1921··on Microsoft apologises after thousands report new outage
Ouch , ok was not aware of this one. Thanks
bobbob1921··on Microsoft apologises after thousands report new outage
How is this “another” Microsoft outage? I assume the first outage the article is referring to was the crowdstrike issue (not a Microsoft caused issue). Or perhaps I’m not aware of a different non-crowdstrike Microsoft outage recently?
bobbob1921··on Is Cloudflare overcharging us for their images service?
I feel many cloud billing models are set up to initially account for the abusers of the service, and then account for the legitimate users. (in other words everyone’s assume to be a scammer or abuser, until you prove otherwise).

It’s an interesting concept, a corollary would be walking into a physical store and being treated as a thief, until you check out and make payment. (in fact the opposite is true generally as they check your receipt on exit, or you walk through the magnetometers on exit). I’m not saying it’s right or wrong, just making an observation.

bobbob1921··on Unfashionably secure: why we use isolated VMs
My big struggle with docker/containers vs VMs is the storage layer (on containers). I’m sure it’s mostly lack of experience / knowledge on my end, but I never have a doubt or concern that my storage is persistent and clearly defined when using a VM based workload. I cannot say the same for my docker/container based workloads, I’m always a tad concerned about the persistence of storage, (or the resource management in regards to storage). This becomes even more true as you deal with networked storage on both platforms
bobbob1921··on Apple Maps on the web launches in beta
They don’t have the technology
bobbob1921··on MTV news website goes dark, archives pulled offline
Agreed. Maybe some of the file coin based crypto can donate some storage or integrate some storage space on their network as a charity/tax write off scenario.

The analogy that comes to mine in regards to MTV taking their full site off-line, would be the equivalent of a newspaper shutting down and destroying or burning all of the extra printed copies of their paper/articles they may have in their own archives instead of donating them to a local library.

bobbob1921··on MTV news website goes dark, archives pulled offline
Can someone explain why wayback machine and the other archive services aren’t filling in this gap/working in this case? (I.e., the article seems to say all archives are gone , I understand why mtvnews.com is now in-accessible, but why would the wayback machines archives be gone also ,just because the parent/ source website was shut down?) tks
bobbob1921··on What You Get After Running an SSH Honeypot for 30 Days
Not sure if op will see this, but with regard to his comments on MikroTik routers and frequently seeing in his honeypot logs, the command: /ip cloud print

he is correct, This is a MikroTik command- although mikrotik has this feature, disabled/ off by default, a lot of users make use of it, and running that command will (if cloud dns enabled), will show the dynamic DNS entry of the device he is connected to. Ie if the cloud DNS is enabled, the output from that command will be something like: Detected public ip: 34.2.82.3 DynDns: djwisyehd.clouddns.mikrotik.com (which will always be updated to the detected public IP address of the router)

So I assume the attackers run this command so that they can still reach the router in case it’s public IP address changes at some point. (And assuming that the device will still be accessible after any public IP address changes).

(or perhaps they run that command to see if the cloud DNS service is disabled, which is the default, in which case they will then enable it so that they will have a dynamic DNS entry for the device).

bobbob1921··on Battery-swap networks are preventing emergency blackouts
This is correct, an added benefit is if the power poles are actually down then the communication over the powerlines would be down, but that’s fine as power couldn’t be sent over the lines anyway in that case. What I wonder about/have concerns in regards to, is as someone else mentioned the relays required to turn on and off backfeeding in terms of electrical Utility workers having to de-energize a line to perform work. I’m not too sure that these workers can entrust their lives to the reliability of various (multiple) relays to not sporadically switch back on once the line has been confirmed as de-energized (in other words depending on the relay not to malfunction and re-energized while the workers are working upon the line )

I assume there will be some types of tools to monitor / alarm the workers for exactly this scenario (ie something they can attach to the line while it is being worked on and if it becomes re-energized an alarm will sound).

bobbob1921··on Fingerprinting VPNs with Custom Router Firmware [pdf]
Agreed, this seems more like a timing/correlation type of attack (or threat). Assuming that the same company has the ability to change the firmware on these home routers (your isp lets say), it seems to me it would be much easier for that company to just look at the same timing data on the ISP‘s own routers. (Ie customer IP address 24.3.1.7 has maintained a unusually long session with public IP address 70.4.1.8, which is a known VPN server/ vpn provider , thus that customer must be using a VPN).

Or even taking it a step further that customers IP address is communicating with known VPN server ports (or if port 443 is being used for vpn comms , then back to the original premise of the long sessions / packet counts to a single public IP address = vpn is being used.)

bobbob1921··on Engineering for Slow Internet
My experience agrees with this comment – I’m not sure why web browsers seem to frequently get hung up on only some Http requests at times, unrelated to the actual network conditions. Ie: in the browser the HTTP request is timing out or in a blocked state and hasn’t even reached the network layer when this occurs. (Not sure if I should be pointing the finger here at the browser or the underlying OS). However, when testing slow / stalled loading issues, this (the browser itself) is frequently one of the culprits- however, this issue I am referring to even further reinforces the article/sentiments on this HN thread (cut down on the number of requests / bloat, and this issue too can be avoided.)
← PreviousPage 2 of 5Next →