HNHacker News
TopNewBestAskShowJobs

chucky_z

1,215 karma · joined June 16, 2015

[ my public key: https://keybase.io/chuckyz; my proof: https://keybase.io/chuckyz/sigs/TE7_P8BlEovO4suPMF-Ul1FrCWsehSIgTOp-NxZbW9g ]
submissionscomments
chucky_z··on A New Problem Is Brewing in the Beer Industry: One Million Kegs Are Going Stale
I had two bottles of a beer like that (Hunahpu), I drank one right away and aged the second for two years. The first one was an excellent beer, the second one was the best beer I've ever had in my entire life.
chucky_z··on Covid-19’s impact on Tor
Why not accept a job and simply decline to move?

I understand it's a shitty thing to do, but at the end of the day your health/sanity is more important than some companies. If you have a good manager/coworkers you can even get them to bat for you to stay, as a remote worker.

chucky_z··on It bid high and lost. Should Amazon be allowed a do-over on JEDI?
That's good to hear! I really wanted "hosted AD" from a cloud a few years ago, and Azure definitely did not offer this... or they marketed it so poorly I could not find it anywhere. :(

AWS has straight up guides for do's/dont's, and various ways to integrate their AD service with yours, including multiple scenarios such as running them as the masters of the forest, with read-only's on-site, and vice-versa.

chucky_z··on Ask HN: Programs that saved you 100 hours?
I cannot, as it was for a past employer and the code is not open-source.

I used TamperMonkey to include https://www.papaparse.com/, then injected a button into a web page. The user would navigate to the "start" page, and a button would appear, it was just a normal form button. They would upload a CSV, which I slurped into a cookie, webdb... and something else. That would then walk a known set of URLs to scrape the unknown URLs and click the required buttons to trigger javascript calls by the website itself, before building a further set of URLs to navigate. It would visit the "final" set of URLs, gather the info into a secondary CSV, then walk back up to the entrypoint before going to the second entry.

At the end, it would download the secondary CSV to the users disk in a format that was uploadable to another system.

The entire thing was in a single if statement because I was just learning JavaScript and did not know any other way to get around async problems at the time. :)

It was ugly, but worked awesome and since writing it several years ago has probably saved 10s of thousands of hours.

chucky_z··on It bid high and lost. Should Amazon be allowed a do-over on JEDI?
AWS does offer AD as a first class citizen... More than Azure.

AzureAD is not Active Directory, and unless something has changed a lot in the last year (maybe it has?), Azure does not offer anything that looks, smells, and feels like on-prem AD in the cloud.

chucky_z··on Ask HN: Programs that saved you 100 hours?
TamperMonkey! I've dealt with some monstrous websites which needed in-browser user-friendly automation, and TamperMonkey is that tool for the job.
chucky_z··on PgSync: Sync Postgres data between databases
It has a lot of required components, however I ran most of them in a single-component setup (e.g.: 1 zookeeper server , 1 kafka server; using only their provided containers) and got extremely far (think 1 billion rows a day ingested, then transferred to pgsql and s3) with some extra overhead still.
chucky_z··on PgSync: Sync Postgres data between databases
I found compiling with Clozure CL instead of SBCL leads to way better memory allocation/usage.

It's worth getting it going, it's one of the greatest tools in migrating things into and out of pgsql I've ever used. If you have pgsql in your pipeline, get it working.

I used this and debezium to really make my ETL pipeline absolutely bulletproof.

chucky_z··on HashiCorp Raises $175M at $5.1B Valuation
You can run vault on a single t3.medium backed by s3 with auto unseal and get pretty decent performance.
chucky_z··on HashiCorp Raises $175M at $5.1B Valuation
You don't want to pay $1/month to store a single secret. You want a nicer workflow for creating ephemeral users and tokens than AWS themselves have. You want to do on-the-fly encryption of all sorts of things. You want a real PKI without every bit of know-how.
chucky_z··on California Governor calls for home isolation for seniors, bars to close, etc
Warehouse employees tend to be quite far apart at almost all points in time except breaks, at all warehouses I've worked at.

On top of this, I believe current science says that covid-19 survives extremely poorly on most surfaces for the periods of time that are involved with storage + shipping.

chucky_z··on New Guides for Terraform Modules
I realize now my comment comes across as pretty bad, but I love (and use) every single Hashicorp product. They are the company that gets the entire DevOps paradigm more than any other single entity.
chucky_z··on New Guides for Terraform Modules
The guide.

Also, like, most of their examples ignore this data resource. That specific data resource, with terraform 0.12 makes building IAMs so much nicer, because you can mash a bunch of common ones together with for_each and generate policies in a dynamic way without having to learn dynamic IAM stuff, which is it's own thing entirely.

chucky_z··on New Guides for Terraform Modules
Anyone from Hashicorp -- y'all are gonna end me. Please put the best way to do things into your own docs. You have https://www.terraform.io/docs/providers/aws/d/iam_policy_doc... and can do

  data "aws_iam_policy_document" "s3_bucket" {
    version = "2012-10-17"
    statement {
      sid = "PublicReadGetObject"

      principals {
        type = "*"
        identifiers = ["*"]
      }
      actions = [
        "s3:GetObject"
      ]

      resources = [
        "arn:aws:s3:::${var.bucket_name}/*"
      ]
    }
  }

  resource "aws_s3_bucket" "s3_bucket" {
    bucket = var.bucket_name

    acl    = "public-read"

    policy = data.aws_iam_policy_document.s3_bucket.json

    website {
      index_document = "index.html"
      error_document = "error.html"
    }

    tags = var.tags
  }
chucky_z··on Coronavirus outbreak makes lobsters so cheap that sellers face a fatal blow
Yes, cars being the biggest problem. If you're broke and you buy a new car, you end up with a lease or something with a big down payment; the other option is you have a huge finance issue, where you won't finish paying off your car for 7 years after it has 100k+ miles, and now you still owe 5k on a car that's breaking down, with monthly payments of $500/month+.

During this time, your rent has likely been raised each of these years.

Also during this time, you started making 50k, and are probably still making 50k.

The United States is in a very vicious cycle, mostly based around living, working, and commuting.

chucky_z··on The Zen of Go
As someone who has written more C# and Java than Go... I can read Go much easier than most other languages. I can step into a huge codebase and usually quickly reason what/where I need to make my changes without too much effort. This can be the case with C# and Java, but it seems to almost always be the case with Go.
chucky_z··on New AMD EPYC-based Compute Engine family, now in beta
I'd like to add to this and say that a server being down for 6 hours, that if over the life of its uptime (months? years?) saves uncountable number of hours on computations and complexity, is so worth it.

Heck, even a machine like that being down for a week is usually still worth it.

chucky_z··on Running servers and services well is not trivial (2018)
HCL2 feels like the farthest ahead right now, if you don't want to deal with straight up python or ruby.
chucky_z··on Local bookstores have a new weapon in the fight with Amazon
alibris.com already does this and it's pretty dang good. I buy all my physical books through them
chucky_z··on Ubuntu 20.04 LTS Adds WireGuard Support
RHEL themselves vendor RHSCL -- https://developers.redhat.com/products/softwarecollections/o...

For CentOS and friends there is https://www.softwarecollections.org/en/

https://access.redhat.com/products/Red_Hat_Enterprise_Linux/... are maintained by RedHat directly.

chucky_z··on Gravity: Upstream Kubernetes packaging tools
Anyway, just a 1-person note, but "here's an open source bottom layer for you to build (x) on top with the ux of teleport/gravity" would be incredible.
chucky_z··on Gravity: Upstream Kubernetes packaging tools
Would Gravitational ever think about creating a more generic layer on this, e.g.: to manage Mesos, Nomad, or something else entirely like Corosync via some kind of driver system?

I love Teleport but don't use k8s anywhere.

chucky_z··on Equinix is acquiring Packet
When I worked for a web host the drivers license/passport was normal. It sounds weird but stops some fraction of scammers.
chucky_z··on Big Prometheus: Thanos, Cortex, M3DB and VictoriaMetrics at Scale
Isn't this the whole point of the federate endpoint? That you just run a central Prometheus pair to federate metrics at low resolution from a ton of places?

I only care about high resolution metrics for alerts. Otherwise I can just take a handful of them at 5m intervals, but from a lot of places.

chucky_z··on One Medical S-1
Right, because there aren't a million people living there; that's why I specified peninsula/south bay, bay area.

I would probably not use One Medical if I was still living in central FL, where I never encountered these problems.

chucky_z··on One Medical S-1
I should add a caveat that One Medical is basically always the same price.

I've had really bad experiences with anything labeling itself an "urgent care clinic," and pricing.

chucky_z··on One Medical S-1
My answer is "Why doesn't everyone use One Medical and have a doctor?"

To laser-focus on the peninsula/south-bay in the bay area; going to PAMF or Stanford Medical typically results in a 2-3 day wait to see a Dr.

If you're sick, you want to see a Dr asap. I have a doctor at PAMF, a doctor at Stanford Medical, and One Medical. If I am sick, I simply book an appointment at One Medical usually 30-min ahead of time, see them, get whatever treatment I need and go back home and be sick.

When something is truly wrong I start at One Medical for temporary help, and immediately book either at PAMF or Stanford depending on who is available sooner.

chucky_z··on Ask HN: How do you manage logs for your backend services?
If you can't do 1200 logs/sec with that hardware + elasticsearch, you've done something horrendously wrong.

You can do 1200 logs/sec with a container limited to 1 core and 256mb of memory running elasticsearch.

chucky_z··on A lot of complex “scalable” systems can be done with a simple, single C++ server
This is why I ran Redis on a single server with no failover strategy. Our team spent maybe 15 hours workshopping a handful of other things (redis cluster, sentinels + replicas) before realizing we could spend an hour to have everything sit in a degraded state working around it while Redis itself was fixed. Redis only failed once ever and it took all of an hour to fix it, all during non-peak hours.
chucky_z··on The Eternal Novice Trap
What would you call "knowing JavaScript?"

I've written some greasemonkey scripts for automating work-related tasks, and done some very basic editing for helping others with visual stuff. I've fixed some folks node code, but that was just reading docs and applying the few lines of change.

There are a lot of positions that never really touch js. My most recent project was working a lot with Chef, which is just ruby all the time.

← PreviousPage 9 of 16Next →