HNHacker News
TopNewBestAskShowJobs

caw

692 karma · joined October 2, 2011

submissionscomments
caw··on Apple Built A SIM Card That Lets You Switch Between AT&T, Sprint, And T-Mobile
You have to realize that it really wasn't until recently that you could do BYOD on the networks. They wouldn't give you a discount at all for owning the device outright, even at the end of the 2 year contract. There was no benefit to having paid $750 for a phone, except if you really really wanted that particular phone. The best math then was to upgrade to a new phone as soon as your contract ended. Otherwise, you were paying the built-in $10/mo or whatever for old tech. Far better to shell out $0-$200 for a new phone on contract and lock-in for another 2 years.
caw··on Ask HN: What would you hack on an 12-hour flight?
You might actually have power though. Check out http://www.seatguru.com/findseatmap/findseatmap.php, you can punch in your flight number and departure date, and it'll tell you which plane you're supposed to be on and what amenities it has, like power outlets and where they are.
caw··on Ask HN: Building a secure laptop for sensitive work data
Think of it this way, when you have a normal system, your write is flushed out to the disk as fast as possible. When you add in full disk encryption, you're going to have to encrypt on write. Your write won't be acknowledged until it's physically on the disk, so the faster your disk is, the faster your write will be acknowledged. Same thing with reads, the faster you can read, the sooner you can decrypt and return the data to the application.

So SSD is definitely the way to go if you want to encrypt the whole disk. If that's too expensive, get a 7200rpm laptop drive.

caw··on Ask HN: Building a secure laptop for sensitive work data
I've never considered Tor as a beacon of security, I believe it to be anonymity. If this is secure stuff, you probably want to VPN into a known good host using a hardware token device. Since this is a work thing, they should most likely host the VPN device in their server room with appropriate access to their file servers and intranet.

I've seen several variants of secure laptops. First one is no boot on the disk at all, just a full disk encryption and a bootable CD.

The alternative is generally just full disk encryption.

If you have a super secure laptop that your post leads me to believe you want, you don't want to write to USB ever. This is how data leaks if you ever have the laptop stolen. Instead, enable read-only on the USB ports (you can do this in Windows via regedit, haven't had to do a Linux laptop).

For traveling with secure devices, simply don't travel with the assembled device. Ship the laptop ahead of you, and only travel with the hard drive, which has the sensitive data. The laptop sans drive is mostly useless, and you're acting as the physical courier for the data. The Dell business laptops that only need 1 or 2 screws removed to take out the hard-drive work well for this.

Also use a SSD for FDE, it's just too painful on 5400 rpm.

caw··on Ask HN: Freelancer? Seeking freelancer? (October 2014)
SEEKING WORK - Remote / Houston

Linux DevOps / Sysadmin

Looking to setup a new computing environment, expand your existing, or bring in new services? Or are you swamped with Ops-related technical debt and need to get out from under the backlog before it hurts your company? I can help you find solutions to these problems and more.

I can also provide Linux and Linux sysadmin related training to your employees, so that they can grow and learn new skills.

If you're interested, my email is in my profile.

caw··on Germany’s great tuition fees U-turn
The HOPE scholarship used to pay full in-state tuition for full time students. It pays a bit less now, and that started around 2009, though they grandfathered in existing HOPE scholarship students.

Program rules: https://www.gacollege411.org/Financial_Aid_Planning/HOPE_Pro...

Payouts based on credit hours taken: http://www.gsfc.org/main/publishing/pdf/2012/hope_award_amou...

There's still a gap though, because of how GT's tuition works. The cost for under 6 hours is $2,675, and the cost for more than 6 credit hours is $4,501. The highest HOPE payment is $3,390, leaving you to pay roughly $1200 a semester if you take 15 credit hours. If you only take 12 hours (more realistic for GT students, particularly in later years), the state picks up $2,712, leaving you with $1800 a semester to pay for.

Of course this is tuition only. There's still mandatory fees of over $1100 (this has increased a lot since I was there, I seem to remember $500 or so) and optional fees, as well as dorms & food plans.

caw··on Ask HN: What should I do, 17 year-old dev?
Not only that, but '3pm to 3am' is also going to harm your chance for success at getting into the college(s) you want. You'll probably find your grades will start dropping with too much work and not enough sleep. If you're out at 3 I'm betting your school starts at like 7am.

Worst case scenario you fail out your senior year of high school and have to repeat, which I've seen happen to a friend of mine.

caw··on Top 10% of American adults consume, on average, 74 alcoholic drinks per week
Presumably it uses the US Standard drinks, found here: http://www.cdc.gov/alcohol/faqs.htm#standDrink

To save the click, it's 14g of alcohol, which is roughly a 12oz beer (5% ABV), 5oz wine (12% ABV), and 1 shot of 80 proof.

caw··on Ask HN: What DB to use for huge time series?
I wouldn't say it's a horror story, it's just not really for time series "big data". The backend guys have had to muck about with the data a lot to get good performance out of it. There's some optimizations we missed on the sysadmin side too, like sharding the cluster after it got to ~250GB, and now it's many times that. Our Mongo clusters have been running production for well over a year.
caw··on Ask HN: What DB to use for huge time series?
My company is currently using Mongo, and while it works, I wouldn't recommend it. We're looking at Cassandra and Elasticsearch, which seems to be a lot more promising.
caw··on Ask HN: What is your favorite keyboard for a mac?
A few of my co-workers have that and like it, but if you don't want laptop keys there's always the Microsoft 4000 (what I use), or 8000 for wireless. On the 4000, things like the volume buttons work out of the box with a Mac, but not all of the other special keys do.
caw··on Ask HN: How do you backup your systems?
Mostly using the application-specific backup tool (pgdump, mongodump, etc) to S3. For system configuration it's all in Chef, so I backup chef.

For a few flat file tools I just tar up the directory and upload that.

Sometimes, I just take AWS volume snapshots. That'll get the whole data or / partition, which also lets me instant restore the machine, or attach the data partition to a newly built machine.

caw··on Ask HN: Why have an administration domain?
One benefit is related to DNS. If you assume fbsrv is an internal network, you have to be on the company network in order to access it. This automatically restricts everything on fbsrv.com to company machines on the VPN or things in the datacenter. Now when you see db1.fbsrv.com you know that it's your database server on your private network, and none of that traffic is going across the internet.

You can do the same thing with subdomains (e.g. internal.foobar.com), and then tree off of that (db1.site1.internal.megacorp.com), but that gets confusing.

caw··on Ask HN: What's the funniest thing you've done with code?
My job as a student involved working in an IT office, and we had a policy of "always lock your screen". Those who didn't got creative pranks put on their computer. Only rules were no root level pranks and it had to be SFW.

Some of them I can remember

- Randomly eject CD drive. This was done in various formats like a background script running, aliased commands, etc.

- Alias 2 commands to each other (e.g. switch ls and cd)

- Switch key bindings

- Wallpaper switching

- Screensaver switching

caw··on The laws of shitty dashboards
The problem is that the OBD codes aren't always specific. Sometimes they're specific enough to diagnose the problem, sometimes they're not, which is why you still need someone with auto expertise to correctly identify the problem. Most shops will warranty against unneeded repairs as a result of reading the code by virtue of buying their $99 "Check Engine Light Service" (whereas Autozone's reader is free to borrow). I've been in the situation where a shop made a check engine light repair that didn't fix the problem, so they made another $500 repair to actually remedy the problem.
caw··on Ask HN: What do you use to buy and sell stocks?
No, but at the same time I've never needed their CS. The one time I've called was to inform of international travel. Total time spent on the call was less than 5 minutes. Did the same thing for my Visa card and that took over 15.

My only other interaction with them is when they send me new cards to activate, like if my card is going to expire or they want to issue me a new number. Activation is all automated and takes 2 minutes.

Fidelity brokerage I think is a separate service organization, and have had no problems with them either about account questions.

caw··on Ask HN: What do you use to buy and sell stocks?
I use Vanguard as well, most of my trades with them are their ETFs or Mutual Funds so it's no fee (I don't trade very often, maybe every 6 months to rebalance).

My stocks are predominantly in Fidelity because I have their 2%-back-on-everything AMEX, which rolls into my Fidelity Brokerage account. $7.95 trades which I think is pretty standard for mega-bank retail trades without trade volume or account balance discounts.

caw··on Ask HN: Aren't self-signed certificates preferable to unencrypted connections?
I think we could get some kind of intermediate state though - Red is the expired/invalid cert, yellow could be valid self-signed (where you don't trust the issuer), and green is fully validated trust.
caw··on Show HN: Password Protect Your Webcam
Don't have a Windows box, but sounds like fun discovering how to disable it.

* If locked, I assume it prevents access even by changing the USB port?

* Does it prevent other use of the USB ports (flash drives, etc)?

* Does it prevent all cameras, or just the camera identified while the software was running?

caw··on How to cost account HPC compute hours?
HPC costs vary significantly with the hardware and size of datacenter, if you want to break it down. It's probably best to ask them what the cost would be if you weren't a federal employee. Otherwise, ask them for a total cost of ownership for a server or total cost of operation per year per server, and you can divide that out by compute-hours (cost per core-hour).

Worst case just take the EC2/Google Cloud/Azure numbers, since that's your market comparable providers. Any papers or ROI calculations you can fudge with "approximately" or "at least". I'd guess that your HPC provider isn't as cost optimized as EC2.

caw··on Ask HN: What is the best laptop for Linux?
My coworker just bought a Schenker s403 because he was looking for a replacement laptop to run Ubuntu on. European company, but they ship to the US, and they'll happily throw in a US power cable if you request one in comments when purchasing. I'm pretty sure you don't have to pay VAT either, so that gives you an extra discount there.
caw··on Will We Ever See InfiniBand in Desktop Computers?
10GBASE-T isn't popular because your cable runs are cut short.

Costs have come down a lot on fiber. A short range SFP is like $120 or so, and short range cables are like $3 per meter.

What a lot of people do as a stopgap is binding ports together, using something like LACP. There's trade-offs of course. A 4 port 1000BASE-T card could be used to boost a few important servers.

caw··on Ask HN: Took a new job, not happy, but baby is coming
Welcome to office politics at bigco! You're upheaving the existing processes and people don't like that. You have to remember that the trade-off for working at a big company is larger scope projects, higher pay, more upward momentum in exchange for working fewer hours, dealing with more bureaucracy, and having a more limited scope role. Most of the people you work with really want 40 hours a week, and you will really want 40 hours a week in 7 months. I can't tell from your original post if you're working 60 or 40 and just being more efficient. If it's the former, stop now. Go home at 5pm, have a beer, enjoy life, and try to repair some of the relationships with your coworkers before they turn into backstabbing assholes. If it's the latter, you might want to slow down the rate of change, or at least change the way your coworkers do their jobs. Change how you work. If you need to change how everyone else works, get buy-off from other people before you impose. Sometimes you need to impose changes, but that burns political capital and goodwill until they can see it's better. (Note, if it's not better, this obviously means you'll never regain the expended social capital)

With the exception of your coworkers begrudging your work output, are they still generally cool & interesting people that you can learn from and get along with? Then you should really consider staying.

As far as challenging work, you're what, 3 months into the new job? Depending on your boss, he could be holding back some cards so you get a slow exposure to the company. I'd highly suggest talking to him and reconcile what you thought the position was versus what you perceive it is now. He's obviously impressed with you now, so you'll have much more slack to do what you want.

caw··on Do Not Use Amazon Linux
Red Hat is made to use Red Hat repos. You may have to enable epel or epel-testing for packages that are newer or have software that Red Hat isn't interested in maintaining.

Red Hat also isn't meant to be bleeding edge, it's a very safe, stable server distribution. If you want a desktop use Fedora.

caw··on Ask HN: Should I be a plumber?
There's 3 bundle options. The minimum package including the book is $69. http://doubleyourfreelancing.com/rate/
caw··on Nintendo Open Source Software Source Code Distribution Page
Most games have all of this info in the credits, and if you get a manual anymore, in there.
caw··on I'm 28 and frustrated – can I still have programming career?
You shouldn't worry about it. I worked with a guy that was did construction for at least 10 years before he went into a tech field. If that massive career shift didn't impact him, a few months while you finish up your self study definitely won't. I believe it show initiatives to a potential employer that you're trying to improve yourself and took a pretty hard job in the meantime to pay the bills.
caw··on Show HN: NomadList – The best cities to live and work remotely in
It really depends, and you should really check. I went to Israel for a week for business meetings, and needed a work visa. Coming from the US, I didn't need to file paperwork ahead of time, but coming from some other non-US branches I may have needed a letter of invitation from the local branch to do a business meeting and then leave.

Yes you can come in on a tourist visa and work, and I'm sure some people do that, but if you're looking to be on the full up and up, even short stays may need work visas.

caw··on I created my own MMO and lost 100 pounds
I haven't played an MMO in a long time, but when I played Final Fantasy XI, a large majority of the players were Japanese. The developers included an auto-translate function so you could have something like "Let's go kill [boss name]" and [boss name] would be translated to either English or Japanese depending on the player settings. Once you got familiar with the game and what you did in it, seeing just [stuff] in the brackets got you the gist of what they were saying.

Unless you were trying to learn Japanese though, that's as far as you got -- you couldn't have the seamless "mata a 12 [green dragons]" unless you knew your hiragana/katakana.

caw··on Ask HN: Guidelines/steps to setup a secure Linux server for static site?
* Disable everything that's not the web server

* Turn on the firewall to only allow 80/443 and SSH in case you turn something else on

* only use passwordless SSH

* Use the latest version of (apache | nginx | other web server)

* subscribe to a mailing list for exploits for the software you're using

* Patch monthly, if not sooner for critical bugs

← PreviousPage 4 of 25Next →