HNHacker News
TopNewBestAskShowJobs

hkolk

193 karma · joined June 22, 2011

submissionscomments
hkolk··on Re: [PATCH] OOM_pardon, a.k.a. don't kill my xlock (2004)
What is proposed is to not have an OOM killer with a selection process, meaning that the "someone other allocates" would be the one dying.
hkolk··on Open Source Resistance: keep OSS alive on company time
In the Netherlands the law is pretty straigtforward that this is a bad idea: > The "Nature of Employment" Rule: If you are hired as a software developer, almost any software you create (even in your own time) can be claimed by your employer.

We always advise our employees to request an exception for it. We are pretty relaxed about it, but we don't give out a blanket exception

hkolk··on Rust wont save us, but its ideas will
The second example given (extracting information from a web view) is also weird. The rust code has the exact same flaw as the java code, which is that they do not validate the source. I think the author didn't really understand the underlying problem here. Bounds checking was not the issue with the java (android) code
hkolk··on Unauthorized gem takeover for some gems
From what I understand, they only have to review/audit the times a gem was yanked, to see if it was a legitimate action. I reckon there is a lot less occurrences
hkolk··on Please put units in names
`m` is not a legal value, should be either `min` or `mo` for minutes or months respectively.

`s` is actually one of the SI base units: https://en.wikipedia.org/wiki/International_System_of_Units#...

edit: actually, month should never be used for the case described anyway... 28-31 days?

hkolk··on Ask HN: My boss doesn't think I'm doing good work, how to proceed?
if your manager is ok with it, don't register it as a sick day. Makes it potentially more complicated with the company doctor. Just consider it a workday spend on ...whatever. Manager being ok with it means you deserved it though :) (EU based engineering manager speaking)
hkolk··on ClickHouse, Inc.
We are using Clickhouse combined with GDPR's Data Deletion Requests. We store the user-ids in a separate system, and run the ALTER/DELETE statements once per week. Works pretty smooth, though I would prefer some more automation within Clickhouse for them.

Data for in-active users gets deleted because our clickhouse retention policy is lower than the in-active-user timeout

hkolk··on ClickHouse, Inc.
I wonder how this will play out with https://altinity.com who have been doing enterprise support for quite some time..
hkolk··on CoffeeShopWifi.com – An HTTP website for connecting to guest WiFi
same kind of website but easier to remember for me: http://neverssl.com
hkolk··on Steam's login method is kinda interesting
Rabobank was the one with the horrible non-native client so pretty sure he is talking about ING :)
hkolk··on iPhone 12 Pro Max Camera Review: Zion NP
You missed the "Do you take a lot of pictures with your phone?" If the answer is yes, you won't get to the mini.
hkolk··on An updated daily front page of The New York Times as artwork on your wall
Hmm.. not 100% sure but I see 2 bugs in the PHP script: 1. the src of the image in the HTML is the local path on the hosting server (it would become src="/var/www/nyt/nyt.jpg" ) 2. The v= parameter always uses current date, even if it downloaded yesterdays image. I assume it is being used to prevent caching, but thus doesnt really work. I'd use either an hash of the file or store the date used for the download in a variable and use that.
hkolk··on When we lose weight, where does it go?
There is a nice Ted talk about the same topic. Something I often link to people saying "I can eat everything I want in this diet..." The mathematics of weight loss | Ruben Meerman | TEDxQUT: https://www.youtube.com/watch?v=vuIlsN32WaE

My personal weight-loss (and now sports) is largely based on understanding how the human body works with metabolism.. carbs, fat, protein.. nice and geeky

hkolk··on AGPL License
IANAL (ofcourse) but in my limited experience:

1a: Not allowed provided because of AGPL (though would be allowed if it is GPL)

1b: Allowed, provided it is purely internal (as described here: https://www.gnu.org/licenses/gpl-faq.html#InternalDistributi... )

1c: Not allowed (this is a distribution, and actually is also in violation of general GPL)

1d: Not allowed, linking against the library means using it, which means GPL violation.

2: If (x) is licenses as MIT and does not contain AGPL underneath (it shouldn't, they are not compatible), you can take X under that MIT license. Regardless of actual repository layout.

3: Penalty is a pretty grey area, and this is a civil suite, not a criminal suite. As a result it goes into damages etc

4: I reckon EFF etc. Look for "GPL enforcement" (AGPL is not very different)

5: You can try.. but I reckon only in the discovery etc for a lawsuit a judge can force them to give access to the source-code to verify your claim.

For all intents and purposes, AGPLv3 is GPLv3 with the addendum that distribution also covers "As a Service". Also.. at our company we completely banned AGPL because we simply don't want to deal with any potential violations. So I reckon 1b in your example would also not happen in a place like Facebook (I reckon all 4 companies have an AGPL ban in place :) )

hkolk··on Announcing Yugabyte DB 2.0 GA: High-Performance Distributed SQL
Ehm yeah. If it was groundbreaking. But there are 5+ other contenders in this field who are dealing with the same issues, and in some cases are fairing better. We are currently evaluating multiple NewSQL vendors, and it really does come down to the details making or breaking the case. I am not sure what potential NDAs I am on so I can't share details, but there is a sharp difference in one company and another claiming "Distributed Serializability". Cockroach for instance enforces a lot of stuff to maintain consistency, and as a result can be (or is) slower. But at least it's also predictable. In the end it's all trade-offs and I actually like the Yugabyte product a lot. I just wish they are more transparent about what choices they made and the impact of that
hkolk··on The not so hidden cost of sharing code between iOS and Android
I would be careful to attribute framework decision making to careful thought. This is more the regular organizational dysfunctionality. Either:

- The entire organization uses a single framework (and improves on it), which will lead to a bunch of teams grumbling that "We are only using X because of organizational pressure, while Y is much better"

- You leave freedom to the org to pick their technology, and hope/steer people towards certain parts. But you will have to accept some divergence from the norm

I prefer the second org, and luckily I am in such a place where we can use Go while the team next to us is on Scala, and we weigh in-house developed technology against publicly available technology on ROI.

hkolk··on Java 12
Our company (on the scale of running it's own private cloud) has switched over to OpenJDK. Oracle is a non-issue for us

For people actually working with JVM and the languages on top of it, nobody really is worried about Oracle. The way the licensing is set up, they just don't have enough power to coerce people to use their version. It would kind of be like the SCO case if they came after it. I think they went after Google for Android simply to protect their IP, and that one they even "lost" (which detracts also from their possible future lawsuit on enforcing Java licensing)

hkolk··on Stop Wasting Connections, Use HTTP Keep-Alive
Better yet.. switch to http2 (where keep-alive is deprecated): https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Ke...
hkolk··on Show HN: Visalist – Find visa requirements for countries around the world
I noticed Hong Kong is missing (one of the SAR's in China). They have specific visa rules compared to mainland China

Overall pretty useful site!

hkolk··on Pwning eBay – How I Dumped eBay Japan's Website Source Code
Interesting enough Yahoo Japan was/is always a distinct company from Yahoo itself. Japan is special from a silicon valley perspective I guess...
hkolk··on Pwning eBay – How I Dumped eBay Japan's Website Source Code
Some more information: https://www.slideshare.net/RandyShoup/the-ebay-architecture-... (slide 10) That ebayisapi.dll was 3.3 million lines of code. Currently it is only still in the URL for SEO/backwards compatibility reasons, all of their main frontend code is Java based (V3/V4)
hkolk··on Pwning eBay – How I Dumped eBay Japan's Website Source Code
For what it's worth, ebay.co.jp is actually not running on their main platform. You can see the difference in the HTML code between ebay.com, ebay.de (both on the main platform) and ebay.co.jp (wordpress based). I actually don't even know if they are showing eBay listings on that website...

Good find though, and embarrassing failure. Especially since most eBay properties have penetration testing and automated scanners being run on them

hkolk··on Code that breaks 2 or 3 times every month
I would expect to use the first day of a month as a default, just like when time is not specified it should use 00:00 as default. Taking the current time/day as a default sounds off.

Probably hard to fix backwards compatible though...

hkolk··on Tomorrow is the shortest day of the year: 23 hours, 59 minutes, 38.7 secs
Leap seconds are not accounted for in epoch-time. Basically, 23:59:59 and 23:59:60 have the same value (this also makes it easier by not having to handle the 60 :) )

We disabled leap-seconds at work in our NTP servers, and just use the normal mechanisms to compensate slowly.

hkolk··on Yottabyte
So let's check the sources: [2] A journalist 'Estimates', probably based on the Wired article [3] Contains the word 'yotta', but says 'handle', not store (which makes sense, considering it's a lot easier/cheaper to process something then to store it). This actually references a DoD report. [4] Does not contain the word 'yotta'

Maybe NSA is doing something undiscovered, but this feels more like sensationalism then realism. I'm sure they have a lot of storage and can probably rival google on data storage, but I doubt they have some sort of magic god-like storage and search facility

hkolk··on Firefox 23 will block non-SSL content on SSL pages by default
We are running one of the largest sites in the Netherlands with protocol-independend css/js/img: http://www.marktplaats.nl/ Haven't heard real complaints from the users about broken things. Probably anecdotal but it saves quite some complexity
hkolk··on Paypal To Drop VMware From 80,000 Servers and Replace It With OpenStack
Hmm, eBay has worked extensively with rackspace for cloud-platforming though, so I think it's mostly Xen: http://www.rackspace.com/knowledge_center/case-study/an-open... http://hardware.slashdot.org/story/11/08/03/0219230/ebay-dep...
hkolk··on The danger of the trailing dot in the domain name
From the looks of it, Safari ignores the trailing dot when validating (as you can see when going to https://www.facebook.com./ ). Curl on the other hand doesn't
hkolk··on Opera moves to WebKit
Working for one of the biggest sites in the netherlands: 0.31% is Opera's market share at our site. It's not on our supported browsers list
hkolk··on Elon Musk calls NYT review of the Tesla Model S ‘fake,’ citing vehicle log data
Netherlands mostly runs on 16A@230v wiring/breakers, coming to 3.6kW. At least for the last 20 years (kind of important for at-home lanparties :) )
Page 1 of 2Next →