HNHacker News
TopNewBestAskShowJobs

ceinewydd

100 karma · joined February 18, 2024

submissionscomments
ceinewydd··on Ask HN: Who is hiring? (July 2026)
It's generally not great form as a 2 day old account on HN to be copying and pasting the same stuff all over. Some of your language also looks a bit unusual: you're replying to threads where people want software engineers saying technologies are irrelevant and you're using "latent space acupuncture". o.O

Would definitely recommend reading https://news.ycombinator.com/newsguidelines.html

ceinewydd··on Sam Altman's home targeted in second attack
Why should he have to afford heavy security? Why is this behavior normal?
ceinewydd··on State of Homelab 2026
Looking forward to the follow up post, State of Bunker 2029.
ceinewydd··on Live facial recognition cameras may become 'commonplace' as police use soars
This isn't really surprising from the UK. If you go back 15-20 years, taxing a vehicle to drive on public roads used to involve displaying a "Tax Disc" in your windscreen, on the off-side of the vehicle.

They abolished this system in 2014 [1] because they'd long since reached saturation of permanent Automatic Number Plate Recognition (ANPR) readers [2] from >11000 cameras on UK roads, and scanning over 50 million vehicles per day.

It's also common to have 'Average Speed' systems on major roads and even country roads where the accident rate exceeds a threshold defined by the local councils. Those will issue you a Penalty Charge Notice (PCN) and points on your licence for a moving violation if you exceed the speed limit. Beyond the 'Average Speed' infrastructure is a giant number of fixed cameras which measure speed and capture imagery of your vehicle, number plate, and the driver and automatically issue the PCN for speeding, and mobile vans operated by the authorities and deployed anywhere they consider a "hotspot".

All of this costs you money immediately to pay the PCN, costs you money over time because insurers hike their rates, and after 2-4 violations in 36 months, can result in you losing your ability to drive and trigger an extended "retake driving test" (after your disqualification period).

This is much more draconian than the United States where in many states a moving violation (like a speeding infraction) will only be processed by a policeman pulling you over for a chat.

[1] https://www.gov.uk/government/news/vehicle-tax-changes

[2] https://en.wikipedia.org/wiki/Automatic_number-plate_recogni...

ceinewydd··on A day in the life of a prolific voice phishing crew
This exists. https://en.wikipedia.org/wiki/STIR/SHAKEN
ceinewydd··on Happy New Year 2025
Happy New Year, HN!
ceinewydd··on Lfgss shutting down 16th March 2025 (day before Online Safety Act is enforced)
A fair number of sites hosted and operated outside the European Union reacted to GDPR by instituting blocks of EU users, many returning HTTP 451. Regardless of whether you believe GDPR is a good idea or not (that's beyond the scope of this comment), the disparity in statutory and regulatory approaches plus widely varying (often poor) levels of 'plain language' clarity in obligations, and inconsistent enforcement, it all leads to entirely understandable decisions like this and more of a divided internet.

Thank you to those who have tirelessly run these online communities for decades, I'm sorry we can't collectively elect lawmakers who are more educated about the real challenges online, and thoughtful on real ways to solve them.

ceinewydd··on Telegram founder Pavel Durov arrested at French airport
https://x.com/filosottile/status/987376021589692416?s=21

I'm not sure that counts as an impeccable track record.

ceinewydd··on Show HN: Every mountain, building and tree shadow mapped for any date and time
For me, Firefox and without iCloud Private Relay engaged, Maxmind is within about 2km and doesn't get the city correct (but we're right on a border), and IPinfo is about 15km as the crow flies (and gets the city entirely wrong).
ceinewydd··on Self-hosted offline transcription and diarization service with LLM summary
Why does your website just say “ROFLMAO” — pretty hard to take seriously.
ceinewydd··on AWS CEO Stepping Down
There’s a middle ground:

For cloud-like provisioning experiences and paying by the hour you can use DigitalOcean, Vultr, or alternatives.

Deploying GPUs? Something like CoreWeave may be optimal.

Want inexpensive costs for dedicated hosts? Hetzner, OVH.

There are many, many advantages to using AWS but equally many alternatives that are viable and which aren’t “doing it yourself” in a hardware and network sense.

None of this is to say DIY is a terrible choice either and everyone’s got an opportunity to consider time (initial setup; ongoing maint), costs, and also expertise and ability to do a good job.

ceinewydd··on 2024 iPad Pro benchmarks blow every PC we've tested for past 6 months–except one
I’m hoping that they finally execute an M4 Extreme, oriented towards Mac Pro. There was rumor they’d do this in M2 era but it didn’t come to pass unfortunately.

https://9to5mac.com/2022/10/03/m2-extreme/

ceinewydd··on Raspberry Pi CM5 seen in the wild
Be aware that discussing anything in the CM5 Forward Guidance document is tricky, the document still says -

"This whitepaper is restricted and covered by the Raspberry Pi Ltd non-disclosure agreement (NDA). It should not be copied, shared, or duplicated without permission."

ceinewydd··on Raspberry Pi CM5 seen in the wild
They get installed in stuff like the Home Assistant Yellow, or the Timecard Mini.

https://www.home-assistant.io/yellow/

https://www.jeffgeerling.com/blog/2023/time-card-mini-adds-p...

ceinewydd··on Raspberry Pi CM5 seen in the wild
Eben Upton was refusing to be drawn on specifics when Jeff Geerling and others chatted to him [1] about roadmaps recently. Nevertheless, the rumor is that CM5 will be drop-in compatible with the CM4, the details of that have been available via their NDA portal [2] for a few months now, but I think even this leak on Twitter (just a box with a label) is a breach of an NDA / embargo, so we might not know officially for a little bit yet?

[1] https://www.tomshardware.com/raspberry-pi/raspberry-pi-compu...

[2] https://pip.raspberrypi.com/categories/945-forward-guidance

ceinewydd··on Jellyfin 10.9.0
Every 12 months or so because it’s mostly automated with netboot.xyz and Ansible.
ceinewydd··on Jellyfin 10.9.0
Ubuntu 18.04 LTS went EOL in May 2023 for anyone not paying Canonical for ESM, so their choice to not build for it seems entirely reasonable.
ceinewydd··on Fedora Asahi Remix 40 is a big step forward for Linux on Macs
Best for what, and for whom? Just saying “Best Distro” feels like an extraordinary claim.

To give two examples of where it might not be best — running Fedora on a server, or running Fedora on a workstation where you need long-term stability and support for running CAD/CAM or CFD software which doesn’t play nicely with major OS changes every few months.

ceinewydd··on Brilliant is out of money, lays off all staff, shuts down
Brilliant was a Smart Home company who made light switches you could install, replacing your existing ones.

They only offered cloud control and APIs were private — they actively rebuffed any attempt by the community around Home Assistant to better support their product.

No Matter, nor ZigBee or Zwave, so with the shut down they are another IOT device you essentially need to rip out and throw away, this is painful since they were approximately $350 USD each.

ceinewydd··on Judge mulls sanctions over Google's destruction of internal chats
Do you think that should extend to recording some or all meetings at a company?

A group of executives meets. Should that meeting be recorded, even if it’s not a “hybrid” meeting and entirely happened in person?

A group of engineers meets. How about that one?

This seems like a hard issue. If the court creates a precedent here, I expect any sensitive discussions that might have any sort of future liability will just go back to verbal conversations (if allowed), and then aren’t we back to where we are today, with no record?

ceinewydd··on Cheyenne Super Computer Auction
I ended up reading all the documentation provided alongside the auction because I was debating making a bid. I decided not to in the end.

In total, Cheyenne weighs in around ~95000lbs in weight, they require it be broken down in <= 3 business days on site and only offer 8AM - 4PM access. Therefore you'll need to support unbolting and palletizing all the cabinets for loading into a dry trailer, get a truck to show up, load, then FTL to the storage (or reinstall) location of your choosing for whatever's next.

Requirements for getting facility access seem to mean you bring both labor and any/all specialized equipment including protective equipment to not damage their floors while hauling away those 2400lb racks. Liability insurance of $1-2M across a wide range of categories (this isn't particularly unusual, or expensive, but it does mean you can't just show up with some mates and a truck you rented at Home Depot).

I'd guess you're looking at more like $25k just to move Cheyenne via truck, plus whatever it sells for at auction, unless you are located almost next door to them in Wyoming. Going from WY to WA the FTL costs alone would be $6-7k USD just for the freight cost (driver, dry trailer and fuel surcharges), add a bit if your destination doesn't have a loading dock and needs transloading for the last mile to >1 truck (probably) equipped with a tail lift. All the rest is finding a local contractor with semi-skilled labor and equipment to break it down and get it ready to load on a truck and covering the "job insurance".

Warehouse costs if you're breaking it for parts won't be trivial either and you'd be flooding the used market (unfavorably to you) were you to list 8000 CPUs or 300TB DDR4; it could take months or even to clear the parts without selling at a substantially depressed price.

It will take probably several thousand hours in labor to break this for parts assuming you need to sell them "Tested and Working" to achieve the $50/CPU unit pricing another commenter noticed on eBay, and "Untested; Sold as Seen" won't get anywhere near the same $/unit (for CPUs, DRAM, or anything else) and so even assuming $25/hr for fully burdened relatively unskilled labor, you could well be talking up to $100k in labor to break, test and list Cheyenne's guts on eBay or even sell onward in lots to other recyclers / used parts resellers. I don't think I could even find $25/hr labor in WA capable and willing of undertaking this work, I fear it'd be more like $45-60/hr in this market in 2024 (and this alone makes the idea of bidding unviable).

A lot of the components like the Cooling Distribution Units are, in my opinion, worth little more than scrap metal unless you're really going to try and make Cheyenne live again (which makes no sense, it's a 1.7MW supercomputer costing thousands of dollars per day to power, and which has similar TFLOPs to something needing 100x less power if you'd bought 2024-era hardware instead).

Anything you ultimately can't sell as parts or shift as scrap metal you are potentially going to have to junk (at cost) or send to specialist electronics recycling (at cost); your obligations here are going to vary by location and this could also be expensive -- the leftovers.

If anyone does take the plunge, please do write up your experiences!

ceinewydd··on Cheyenne Super Computer Auction
Sure, but you can get (much) better price-performance-power out of a CPU which isn't approaching a decade old, when mining ASIC and GPU-resistant cryptocurrencies like Manero. I don't know it'd be worth the effort to buy E5-2697-v4 CPUs which are running in such a specialized configuration over and above AMD Ryzen or EPYC CPUs in commodity, inexpensive mainboards.
ceinewydd··on Passkeys: A shattered dream
Not currently. Someone already did lots of research on this — https://community.bitwarden.com/t/passkey-portability/59177

There’s some hope for interoperability between password managers someday. There doesn’t seem to be agreement on how you can securely export, transfer and import today however.

ceinewydd··on Passkeys: A shattered dream
I’m really not sure the “only real solution” is every human needs to selfhost a password manager. That’s ill-advised; an extreme take.

The vast majority of the population will do a worse job on the availability and security of a selfhost solution than 1Password, whose core business and value proposition is password management.

I’m a very happy user of 1Password for Families and consider it the likely the best ~$50 a year that I spend on hosted technologies.

ceinewydd··on Ask HN: Have you performed a penetration test for your company?
Pricing tends to be a spectrum. If I’m just getting a report which interprets some commonly-used scanners, that’s cheap(er) — this feels like a “Box Check” test if I gave it a term. When someone’s going beyond scanners and digging into source code to find issues — that’s often more valuable. Bringing specialized knowledge about cryptography to evaluate our implementation? Also more valuable!

Beyond pricing have you thought about your differentiation, or what’s special about you? Are you able to do web applications, but i.e. intending to be focusing on industrial control systems, financial systems? Are you going to be comfortable auditing C# or Rust and identifying issues? Do you know a lot about Kubernetes? Are you focusing on cloud environments, if so, are you more specialized on AWS, Azure or GCP?

Next thing I think is important to be able to answer: why award the business to you over Deloitte, or over a smaller shop with a good reputation like Cure53, Trail of Bits, TrustedSec, etc? Perhaps you’re a prolific speaker in the security community at Black Hat, Defcon, CCC, or something?

If you’re going to be a one-man band, does that rule out engagements large enough to require 5 people for a month? (Sometimes engagements are urgent and multiple people sure helps them go faster).

Good luck on the new venture.

ceinewydd··on Florida inmates charged for prison cells long after incarceration
Was it picked as $50/day because that represents some (not even most) of the cost to the State of Florida for incarcerating you for crimes? Did Florida justify this or decide that taxpayers shouldn’t be so heavily burdened by individuals who decide to commit crimes?

I’m not even sure this is simply a “rent” — unlike renting an apartment or a house (shelter), while the prison is also shelter, it also has to be 24x7 staffed with guards (and likely other personnel like a medical clinic). There’s fixed costs like utilities which probably don’t vary much based on population (lighting and heating), and variable costs like food, water and waste management.

It’s certainly a bit crazy to charge someone for 7 years if they only serve 70 days, but I see some logic to charging per day you’re actually incarcerated. It’s not a “rehabilitation friendly” policy due to the effects on your finance after release, but it may be argued it amplifies the deterrent — “if you don’t want to do the time (and pay); don’t do the crime”.