HNHacker News
TopNewBestAskShowJobs

davb

2,843 karma · joined November 4, 2013

submissionscomments
davb··on GitLab Outage
Coincidentally (?) we’ve seen a huge uptick in failed login attempts to our MFA-protected admin accounts on our self-hosted Gitlab CE instance today. They’re coming from thousands of IPs across hundreds of networks (VPS providers and, apparently, residential proxies).
davb··on The Secret Life of Circuits
This book looks like it’s targeted squarely at people like me!

I’ve been a software engineer for the last couple of decades and I’ve tinkered with microcontrollers as a hobby but always been limited by my lack of electronics knowledge - very much trial and error to get a project far enough to be able to focus on the firmware (which is more my domain). I want to bridge the knowledge gap there.

My only formal electronics education was first year introduction to analog and digital circuits module at university two decades ago, led by a lecturer who assumed students had a huge corpus of pre-existing knowledge (and who I now suspect would have preferred to be supervising his PhD students and conducting research but had to make up the teaching hours - which I do understand).

I will definitely pick up a copy. However, Amazon UK (to avoid the NoStarch UPS shipping cost of $24) won’t get it to me until November. I’m excited to receive it.

davb··on Bring back crappy forums
I used to participate in a bunch of forums across an range of topics and in recent years considered starting one myself but with the OSA (Online Safety Act) in the UK, it’s not worth the personal risk.
davb··on UK set to announce social media ban for under-16s
But under Ofcom rules, it is social media if we are to assume that they’ll apply the same scoping as the Online Safety Act does for user-to-user services. I think a lot of comments here assume that only sites like Facebook, Instagram, TikTok and Twitter/X would be in scope, but I see no reason why they wouldn’t use the same definitions from the OSA (essentially any site where user-to-user communication and content posting takes place, including forums and aggregators).
davb··on Microsoft builds MacBook Pro rival with NVIDIA-powered Surface Laptop Ultra
Yes!! The Dell WD19 was notorious for that. My wife’s company used those - we couldn’t leave her WFH dock connected to our home network because of the wild broadcast storms causing our core switch to stop processing frames from her home office desktop switch. My org used HP Dock G5 units which behaved much better (besides the occasional firmware update killing video output until a power cycle, and inconsistent MAC address pass through between hardware revisions).
davb··on Google Chrome silently installs a 4 GB AI model on your device without consent
Indeed. We look after a huge, very diverse set of users (university science faculty - many thousands in our faculty, but tens of thousands across all faculties and professional services teams). According to https://gs.statcounter.com/browser-market-share Chrome has over 65% market share for desktops - not supporting Chrome would be overly restrictive.

Our users interact with a huge array of internal and external sites and web apps, virtually all of which will be tested on Chrome. Our LMS, collaboration tools, internal apps, SIEM tooling, HR systems, ERP, knowledge exchange partner portals - it's all been tested on, and works with, Chrome. And we're not in a position to force thousands of vendors to make sure their applications are standards compliant and work in less popular browsers (as much as we might like to). Not to mention the deluge of tickets we'd be dealing with when incompatibilities arise; banning Chrome would cripple us.

Google have backed us into a corner with this one by making a careless default choice that takes advantage of their market dominance and forces us to work around their decision.

davb··on Google Chrome silently installs a 4 GB AI model on your device without consent
An extra 4GB per user on our NFS home file server is going to be a huge pain (several thousand students). And for our Windows lab machines, they end up in AppData\Local (which isn’t redirected for operational reasons) so we either leave the profiles in place and let them accumulate (suboptimal) or clear out the profiles as we normally do and let it redownload, over and over again.

As much as I’m against unexpected 4GB bloat for an AI model, I’d much prefer it to install one copy, system-wide. 4GB per Windows or Linux lab machine, rather than a 4TB minimum load on our NFS server and 4GB downloads per user, per machine on our Windows labs.

davb··on Unix co-creator Brian Kernighan on Rust, distros and NixOS
I actually found it really reassuring and a little enlightening that he had so little to say about those technologies. I find it very easy to get sucked into a technology vortex (especially on Hacker News), where the imposter syndrome creeps in and you feel like a failure for not knowing some trendy technology that “everyone knows, duh!”. The next time I feel like that, I’m going to remind myself that Brian Kernighan doesn’t know Nix, only used Rust once (and didn’t like it) and doesn’t even know what Linux distro he uses. And no one would ever accuse him of being an imposter or a failure!
davb··on Mac app launches slowed by malware scan (2024)
Related, I found that even after designating an application (iTerm2) as a "Developer Tool" in System Settings -> Privacy & Security, there were circumstances where notarisation checks were still carried out. Particularly, launching tmux then detaching and reattaching would cause the processes to no longer be exempt. This applies to any executable (+x), including shell scripts. I put together a test script that proves it at https://gist.github.com/davebarkerxyz/4111276ae1fb4a7566b271... (the second run is much quicker than the first one after a tmux reattach, but within applications marked as Developer Tools the times should be nearly identical).

Fortunately as of Sequoia (15.4.1), I'm no longer able to reproduce the issue.

davb··on Espressif's ESP32-C5 Is Now in Mass Production
Fortunately it’s only £16.40 with VAT and shipping to the UK. Approx $21.85. Comparable to the £9 M5Stack AtomS3 Lite (ESP32-S3) I picked up from Pi Hut recently.
davb··on Vibe Coding is not an excuse for low-quality work
Anyone who has maintained code that written by engineers new to the industry, who didn’t understand the context of a system or the underlying principles of what they’re writing, may disagree.
davb··on TikTok goes dark in the US
I’ve seen other versions of this like https://www.reddit.com/r/popculturechat/comments/1i4nm32/rip... - none of which mention Trump. I do wonder if this version (mentioning Trump) is real - the domain from the link is Foxnews…
davb··on Software engineer pay heatmap for Europe
Yeah, having the whole of the UK being one colour is pretty useless, given the huge disparity in wages and cost of living between central London and the rest of the UK.
davb··on Phishers Love New TLDs Like .shop, .top and .xyz
I use a .xyz for my personal domain (I could get my real name as the domain, and it was cheap). I use FastMail for email. Deliverability has been fine, with one exception - Radisson Red hotels. I’ve had two occasions in the last year when I’ve needed to email different Radisson Red properties, and both silently dropped emails from .xyz domains.
davb··on VirtualBox KVM Public Release
Thanks for the clarification, that’s really helpful. I think a paragraph under a “License” header in the README just reiterating what you said in that reply would be pretty clear.

I’m sure some people would make the assumption that it’s under the same license as the upstream package but in some environments absolutely clarity around licenses is really appreciated.

davb··on VirtualBox KVM Public Release
That appears to be the VirtualBox OSE license, copied from the original Oracle package, not the license for this specific release. It’s unclear how this new derivative or work is licensed.
davb··on VirtualBox KVM Public Release
The blog post mentions an open source license but I can’t immediately see it in the post or the repo (perhaps I’m just missing it). Any idea what license this is released under?
davb··on Sqlite3 Utility in the Browser
I was looking for something just like this the other day. I’ll often import a CSV into SQLite to do some ad hoc data analysis and transformation, but realised how useful it would be to have a JS/WASM based tool I could host on a static site for my colleagues (academics who don’t necessarily feel comfortable working in the terminal). Being able to say “import your CSV here and run some of these example queries” would be so useful. No complex web app or reporting suite to host, and nothing to install.
davb··on Pigging
Similar experience here - I was making changes to the internal phone directory program and seen an entry for the “Pig Launcher” on a platform. As someone new to oil and gas, I thought it was quick funny.
davb··on Os.js – open-source JavaScript web desktop platform with a window manager
It wasn’t that I couldn’t find a terminal supporting background images (indeed, this is very well supported). It was that I couldn’t find anyone referencing using subtly textured (slightly noisy) images to avoid a very solid background.
davb··on Os.js – open-source JavaScript web desktop platform with a window manager
Meta, but I love the simplistic design of the landing page. That textured background is so much less brutal than a solid colour. I thought about using a background like that in my terminal (to give it a very subtle paper like quality) but was surprised to find nothing online about other people doing the same (I had hoped for screenshots and texture packs).
davb··on Techdirt has been deleted from Bing and DuckDuckGo [fixed]
Whatever the complaints about DDG, I still commend yegg for engaging here. I can’t imagine the head of Google Search or Bing doing the same.
davb··on Shopify employee breaks NDA to reveal firm replacing laid off workers with AI
Agreed. And chatbots also leave no room for discretionary exemptions. My headset microphone broke recently (after the warranty period) - emailing the company and asking if there was any way I could buy a new one netted me a free replacement and a nice note from a real person. I’m 100% convinced that a chatbot would have told me that based on the serial number my headset was out of warranty and ended the chat.
davb··on Shopify employee breaks NDA to reveal firm replacing laid off workers with AI
No, the people building the shite customer service chatbots that we all hate using should take a stand.
davb··on Mid-1990s Sega document leak shows how it lost the second console war to Sony
It looks like the top line is “Screw better technology” (with the r dropped off).

“RR - What were FY96 [Financial Year '96] SW sampling limitations”

“RPG’s most messy” (with a superfluous letter in there).

davb··on Adobe Account Expiration
Their (Serif / Affinity) site license costs are exceedingly reasonable, too. Especially for education customers.
davb··on Microsoft is bringing GPT-4 to US Government agencies
Except, LLMs don’t cite their sources accurately (if at all). A Google search may yield information with a source I can verify; my understanding is that LLMs are fundamentally incapable of doing so.
davb··on Website hosted on a 24 year old Linux server
I'd say https://neocities.org/ is the modern reincarnation of Geocities.
davb··on Why not tell people to “simply” use pyenv, poetry or anaconda
Python runtime deployment is a major pain point for us (CS department at a university).

On the most tightly managed lab machines, which are all in lockstep on a fixed configuration (latest Ubuntu LTS with a updated image pushed annually), we can provide a consistent Python setup (e.g. Python 3.10 and a fixed set of C-based modules like psycopg2). However, our staff and PhD desktops and laptops are more diverse - with the OS often only being upgraded when the distro is going out of support, they could be running n, n-1 or n-2. That, most likely, means three different Python versions.

We could use pyenv to let people install their own preferred version. Installing with pyenv requires building from source (slow on some of our oldest machines). This also means installing the Python build deps, which is fine for our departmental machines but not possible on the HPC cluster (operated by a different business unit) or the Physics shared servers. It's also less than ideal for our servers where students deploy their projects (where we want to minimise the packages installed, like the build-essentials meta package).

It's also a massive stumbling block for less experienced students with their own laptops which could be running any distro, of any age. Many CS101 or engineering/business/humanities students taking a programming class, who have never programmed before, would really struggle.

So, classes might tend towards teaching lowest common denominator Python (i.e. the oldest conceivable version a student might have installed on their machine).

Sure, we have in-person and remote lab machines students can use - but it's not always convenient (especially for the data science / ML students running Jupyter notebooks with their own GPU).

There are workarounds, but they all have serious downsides.

Compared with Node.js and Go, where users can just download the appropriate package and unzip/untar the runtime or compiler version of their choice, deploying the Python runtime has enormous friction (especially for less experienced users). This has the bonus of simplifying deployments elsewhere in our infrastructure (CI/CD, containers, etc).

And while we all complain about node_modules, Python venvs not being trivially relocatable is another huge frustration.

We've used Anaconda, but that comes with its own issues (most recently, finding that it ships with its own gio/gvfs binaries and libraries which fail to mount our CIFS DFS shares - causing confusion for users running `gio mount` from within a conda environment).

davb··on Your "simulation" might not need state
The stateful example is much easier to read.
Page 1 of 16Next →