HNHacker News
TopNewBestAskShowJobs

commercialnix

35 karma · joined July 2, 2024

I am a part of a team that provides expertise managing fleets of user endpoints and also servers/cloud for large commercial environments. On this site I occasionally share an in-the-trenches perspective of expertise-driven use of open source in commercial environments.

Due to unethical mafioso tactics of some of the "big tech" companies, commercial entities are not named.

submissionscomments
commercialnix··on Alacrity to Federated Cryptography
The cartoon dogs give me a clear signal I am not going to bother reading this page.
commercialnix··on Is Telegram, Ukraine's most popular messenger app, a Russian Trojan horse?
It's amazing what stupid behavior you can get people to act out by putting some cutesy stickers and background wallpaper on things.
commercialnix··on Deterministic Replay of QEMU Emulation
I like your thinking. Deterministic replay with QEMU is supplemental to the larger goal of reproducible builds. The communities concerned with the topic of reproducible software not only expect cohesive human-readable code that runs deterministically to produce binary reproducible results, but their originally stated goals require it.

Deterministic replay with QEMU is a "power tool" in the larger picture of these efforts.

commercialnix··on Top Chinese general tells US to stop colluding with Taiwan
East Taiwan is best Taiwan. West Taiwan is getting out of control. Let's send more weapons to East Taiwan.
commercialnix··on Knockknock: Simple, secure, and stealthy port knocking implementation (2012)
When Wireguard first came out I wrote some scripts for myself. Later on I used SaltStack to configure Wireguard for customers with sets of laptops in the dozens or more.

https://Netbird.io is probably something you may be interested in.

commercialnix··on U.S. Ambassador says Canadians are consuming 'unhealthy' amount of American news
"I am morally superior because I have the correct beliefs, as validated by the artificial applause on The Daily Show"
commercialnix··on Knockknock: Simple, secure, and stealthy port knocking implementation (2012)
Knockknock was one of my favorite things back in the day. I love Moxie's mindset. Nowadays I put Wireguard in front of everything.
commercialnix··on Microsoft donates the Mono Project to the Wine team
You already posted one of the dumbest things ever posted on this site.

"no u" isn't going to change that.

commercialnix··on Attempting to Use GNU Guix (2019)
I am on a team that provides commercial support for our Linux based user endpoints. We do not deploy endpoints with WiFi cards that require closed-source firmware.

  https://www.thinkpenguin.com/gnu-linux/wireless-n-m2-ngff-card-v2-tpe-m2ncrd2
commercialnix··on Starliner Is Such a Disaster That Boeing May Cancel the Entire Project
SpaceX values meritocracy first and foremost. Boeing, not so much. One of these companies has a very bright future.
commercialnix··on Microsoft donates the Mono Project to the Wine team
> I've already got 300 people [..]

Given the style of writing and argumentation you have prevented here, no one with leadership experience in the software industry is going to actually believe you. Maybe they're lateral to you.

And, even then, arguing quantity of engineers over quality of engineers is a pretty bad argument, especially on this site. So, yeah.

commercialnix··on Microsoft donates the Mono Project to the Wine team
We didn't replace the HTML with Rust, if that's what you thought you were getting at. We use HTMX.
commercialnix··on Pavel Durov has visited Russia more than 50 times since his "exile" in 2014
Anyone speaking, let alone behaving, like Telegram is "secure", ipso facto has won a Darwin Award. We won't see the results in the short-term, but yeah they have won it alright.
commercialnix··on Microsoft donates the Mono Project to the Wine team
I write fullstack web applications in Rust, client-side too with a shim for interfacing with some JS for the DOM.

So, I can agree with you in the abstract, but I'm gonna have to see you as part of the crowd that "hasn't figured it out yet".

commercialnix··on Unlocking the Pixel 9 bootloader breaks some Pixel AI apps
I'll gladly finance at 4x the cost (so like around $5,000) to purchase an alternative Pixel for a fully open source bootloader with physically compartmentalized chips with open interfaces and a less sleek device.

I don't give a shit about Ai slop.

commercialnix··on Arrest of Pavel Durov, Telegram CEO, charges of terrorism, fraud, child porn
If you can post another contact other than LinkedIn, maybe Matrix or SimpleX, that'd be great.
commercialnix··on Arrest of Pavel Durov, Telegram CEO, charges of terrorism, fraud, child porn
Exploit their smartphone then email tidbits of their more outstanding Facebook chats, SMS messages, maybe some nudes, and recordings of their phone calls. You will see the "I don't care about security attitude" do a hard 180 real quick.
commercialnix··on Arrest of Pavel Durov, Telegram CEO, charges of terrorism, fraud, child porn
Did she also believe the "fine people both sides" thing was a hoax?
commercialnix··on Cautionary tale on using Chase bank for indie business
The more important thing is that I don't have to be. Multi-Sig is still far less risky, complicated, and/or costly than the capriciousness or really -- let's just call it what it is -- outright criminality of fiat institutions. Some could try to explain behavior of fiat institutions as incompetence, but then we're just back at criminally stupid (courts are consistently clear that negligence is a form of criminality).

By professional crypto groups and smart users, for high dollar accounts Multi-Sig with hardware wallets from diverse vendors are used. None of them are by Ledger, because Ledger's firmware is closed source.

For Ledger specifically, I already do not trust Ledger.

Trezor is fine.

commercialnix··on Accident Forgiveness
The last time I was involved in this kind of thing (long enough but not too long ago), we ran Postgres and other databases strictly in K8s per a mandate by our CTO. Using reserved instances are great for avoiding a lot of cost.

I think for that particular firm, "K8s tax" measured in fiat currency is negligible and anything on the human side their people upon hearing "K8s tax" would respond with some ridicule along the lines of "someone doesn't know how to computer".

To be fair, most of the commenters on HackerNews should use something like Heroku.

commercialnix··on Accident Forgiveness
Yeah, not _everything_, but almost or "pretty much" everything. The main exception to "everything" ultimately being S3, and some monitoring exceptions here and there that are purely cloud-side like monitoring AWS' Service Control Policies and using some cloud-side AWS tooling.

AWS has very nice one-to-one mapping of K8s serviceAccount with IAM roles.

We used some cryptography-centric GitOps patterns to eliminate any human hands beyond a dev environment which also helps IAM be easier (but of no less reasonable granularity and quality).

> the jump to some much cheaper bare metal hosting is not that far.

Heh, at a consulting firm I was at not too long ago, all the K8s nodes were sole-tenant on the cloud providers these K8s nodes were on. Intra-cluster Cilium-based Pod-to-Pod networking across cloud-based datacenter sites has been super smooth, but I have to admit I'm probably tainted/biased by that team's uncommon access to talent.

commercialnix··on Accident Forgiveness
Would you be interested in a cloud provider that did not charge for inbound or responding (outbound in response) bandwidth?
commercialnix··on Accident Forgiveness
Keeping everything, including mission critical databases, "inside" Kubernetes is smart. The smart people keep everything "in" Kubernetes. Everyone else can pay up.
commercialnix··on oh-my-posh: The most customisable and low-latency cross platform/shell prompt
The fresh grads in question came from reputable UC schools. Given the degrees they were (or almost were) holding, and where they came from, they are expected to at least give a shit about Unix-like systems, if not actually have a clue about them.

We are a business, not a charity daycare, we do have to actually *judge* employees we hire on their merits.

> number of startups do use Mac

Modern day macOS is "fine" for the people who will be doing everything they do in Google Chrome.

The organizations I tend to frequent are of very high talent density, hence a software developer who forthcomingly prefers macOS and is clueless about *software* (ie operating systems) in a fundamental way is looked down on (and rightly so) by the higher echelon of talent.

commercialnix··on oh-my-posh: The most customisable and low-latency cross platform/shell prompt
The competency crisis is very real.
commercialnix··on Cautionary tale on using Chase bank for indie business
> and one which had a data breach less than a year ago

Did not impact the viability of the hardware product at all.

commercialnix··on Cautionary tale on using Chase bank for indie business
> because it decided to keep all of its funds in cryptocurrency and it either tanked overnight, they lost the key, SBF took their money because he felt like it

Tell us you don't comprehend cryptocurrency without telling us you don't...

commercialnix··on Cautionary tale on using Chase bank for indie business
> If the customers don't have Bitcoin, they're not going to pay you in Bitcoin.

Every customer my firm has offered a 15% discount if paying with BTC via Coinbase has taken it.

commercialnix··on Cautionary tale on using Chase bank for indie business
This.
commercialnix··on Cautionary tale on using Chase bank for indie business
You need access to a good lawyer or you're going to get run over. When you sue, you can sue for legal costs, damages to your business, and punitive damages.
Page 1 of 4Next →