HNHacker News
TopNewBestAskShowJobs

ianpenney

242 karma · joined December 15, 2013

You can find me on the 20 meter band.
submissionscomments
ianpenney··on I think GCP is better than AWS (2020)
Tell me what your company’s existing IAM strategy is and I’ll tell you what cloud you should go all in on.
ianpenney··on Signal Identification Wiki
https://www.rac.ca/simulated-emergency-test-2023-operation-d...

> The Simulated Emergency Test (SET) is a Canada-wide exercise in emergency communications, which is administered by Radio Amateurs of Canada’s Community Services Officer and Section Managers.This year ‘s event is known as “Operation Dark Skies” and will be held in two parts which are described (here).

Our club will be on the air.

https://www.skywide.ca/acs/

ianpenney··on UK passport images database could be used to catch shoplifters
https://ottawa.ctvnews.ca/rcmp-crack-fraudulent-passport-sch...

https://en.wikipedia.org/wiki/Dean_Michael_Wiwchar

Slightly different case in nature but analyzing all the passport photos for duplicates is a no brainer move and led to at least one arrest and extradition in Canada. They allegedly paid drug addicts to file false applications in their names with different photos.

ianpenney··on National Film Board of Canada
My fav:

https://www.nfb.ca/film/waiting_for_fidel/

> This feature-length documentary from 1974 takes viewers inside Fidel Castro's Cuba. A movie-making threesome hope that Fidel himself will star in their film. The unusual crew consists of former Newfoundland premier Joseph Smallwood, radio and TV owner Geoff Stirling and NFB film director Michael Rubbo. What happens while the crew awaits its star shows a good deal of the new Cuba, and also of the three Canadians who chose to film the island.

ianpenney··on Ask HN: With FAANG turnover-why don't we know about actual recommendation algos?
Nice try, Internal HR Counsel.
ianpenney··on Kevin Mitnick has died
Update: had no idea Kevin was a ham. His licence got yanked. N6NHG SK.

https://twitter.com/kevinmitnick/status/551997777031340032

ianpenney··on Social engineering campaign targeting tech employees spreads through NPM malware
Retroactive scanning, you have a point. Integrating the scan into your CI/CD would catch it.

As for the numbers: see 39 mins into https://youtu.be/jWujI7Hk8O4

I used to work at npm as the SRE manager right before the acquisition and the ballpark figures make sense to me.

ianpenney··on Social engineering campaign targeting tech employees spreads through NPM malware
In his talk, Feross mentioned that it would cost approximately 1 billion dollars to scan the entire npm ecosystem. They do it on demand for their customers IIRC. Try signing up and running their scans on it.
ianpenney··on Social engineering campaign targeting tech employees spreads through NPM malware
But they’ve got a point. And they’re one of the first to market.

Yeah I’d get it if their solution was only tangentially applicable (it’s directly applicable). I certainly don’t want YC:HN to turn into GPT generated ad-city either.

If you met Feross, you’d agree he and his team are deserving of the credit for finding a timely and constructive solution to supply chain problems without filling OpenAI with your IP. He lives the kind of values we respect on YC:HN.

I had the pleasure at Refactor Conf in Toronto a couple of weeks ago. You can watch his talk here: https://youtu.be/jWujI7Hk8O4

(I have no pecuniary interest in Refactor conf. I just think it was an awesome time.)

ianpenney··on The bug at the heart of the NPM ecosystem
Related: Darcy’s talk from Refactor Conference a couple of weeks ago.

https://youtu.be/_O1nkYCN2io

Disclaimer: I used to work with Darcy at npm. Love the dude.

ianpenney··on Kevin Mitnick has died
The hacker community needs a word akin to “Silent Key” - in the ham radio community - that means a contributor that’s passed on.

Never met the guy but you’re damn right I know who he is. And I come from the middle of nowhere.

ianpenney··on Receiving unintentional voice transmissions from GPS satellites
The amateur radio service is not permitted to encrypt our traffic. That doesn’t mean we can’t. Theoretically (not legally tested) you could post the AES256 keys for your DMR radio to the public over the internet and then do it since you disclosed the necessary tools to decode your traffic.

Modern radios sync their keys when they are within range of wifi at HQ.

Also, see: https://www.cbc.ca/news/canada/toronto/toronto-police-tow-tr...

ianpenney··on Ask HN: (How much) do you get paid for being on call?
Ok, hah hah. Some of us are managers and need to actually do the negotiations to bring fairness to the job. If you have a way to broker this with the owners of companies that isn't indignant, please help me out.

I'd love to make this the reality, but it's just not.

ianpenney··on Ask HN: (How much) do you get paid for being on call?
I give my teams 1.5 - 2x time in lieu and jump in whenever relief or backup is needed.
ianpenney··on Ask HN: What modern amateur radio gear is worth getting?
NanoVNA for antenna analysis.

TinySA for spectrum analysis. Use an attenuator to see why Baofengs aren’t very good.

Arrow 144/440 Yagi antenna for talking to LEO satellites.

KrakenSDR for direction finding.

Icom 705 Radio for your primary transceiver. AH705 Tuner.

Yaesu FT5D for your handheld.

GD77 with OpenGD77 firmware.

MMDVM hotspot.

That should blow the bank and get you at 90% of anything anyone can do.

ianpenney··on The world's largest "radio" station (2005) [pdf]
There are some Amateurs who’ve used the 2200m and 630m wavelength bands. Mostly using Morse Code, FT8 and WSPR modes as they are narrow bandwidth weak signal modes.

https://youtu.be/FuugH6jn9rc

https://www.qrz.com/db/?callsign=dl4eai

In fact some of them appear to be transmitting FT8 even today.

https://pskreporter.info/pskmap.html?preset&callsign=ZZZZZ&w...

ianpenney··on Should you standardise tools in your company? Case of Miro vs. MS Whiteboard
My advice here won't be one-size-fits all and there's far too much to cover against your company's mission to just give you a hot list of tools I like.

The biggest line of battle is going to be Google Workspace vs Office 365. I'm fine with them both, but not fine with giving them both to everyone. The problem is, if the majority of your company's documents and drive data is fractured over both MS and Google's clouds, it's going to be a nightmare to manage. Choose one and make them your identity provider and life partner. I understand the finance team probably needs a stand-alone Excel license, though.

The other very important part of standardization is hardware. This is something I had to get a bit ruthless about, because managing a fleet over an entirely remote trans-border workforce is expensive if you expect quick turnaround times on onboarding and an immediate replacement for that VIP who just cracked their screen.

I ended up setting up a rapid logistics operation using drop shipping.

Sales, marketing, etc get a 13" Macbook Air M1. Developers get a 16" M1 Pro because they justifiably need the performance.

No, we don't do custom orders. Not big enough to have spares of all kinds in stock (Apple supply chain lag was a real drag last year). Apple's MDM systems make those machines useless bricks to anyone outside the client's company. (If this sounds like something you need, reach out to me!)

I guess I'll just add that my biggest pet peeve with SaaS vendors is how they want you to pay for the super-duper-expensive package just to get SSO / SAML. That's ridiculous. It's not a cost center for you and it reduces both our risk. If I don't see at least "Sign in with Google" in your cheapest plan, I'm already pissed off as a customer and not going to be your change agent.

ianpenney··on Should you standardise tools in your company? Case of Miro vs. MS Whiteboard
Sometimes the mandate is not just to save money, sometimes it’s about putting the business in a compliance posture that will enable you to land revenue from large enterprise customers who have security and data requirements. And then to not get sued into oblivion by their highly paid numerous lawyers.
ianpenney··on Should you standardise tools in your company? Case of Miro vs. MS Whiteboard
If you want to go fast, go alone. If you want to go far, go together. If you want to pass an IT audit, good fucking luck to you.

I have about 20 years of experience dealing with this ranging from mostly harmonious all the way to civil war.

100 employees and 130 different SaaS tools. Got buy in from senior management to reduce footprint to lower cost and increase security and compliance only to get pushback from every middle manager that would bring up these same reasons why THEIR team is special.

Ok Mr/Mrs Team lead… be careful what you wish for because TCO and full RP status is now on your head. And I know you don’t have the experience to assess the costs, risks and admin workload but you’ve managed to convince the CEO. Not my problem anymore. I’ll let the auditors know where to find you when it comes time.

At least I was smart enough to know to keep Miro, though. They’re reasonably good at managing data over the course of staff churn and the flexible licensing is nice.

Try convincing everyone that grammarly is a keystroke logger.

ianpenney··on Are We Engineers?
> The Iron Ring is a ring worn by many Canadian-trained engineers, as a symbol and reminder of the obligations and ethics associated with their profession. The ring is presented to engineering graduates in a private ceremony known as the Ritual of the Calling of an Engineer. The concept of the ritual and the rings originated from H. E. T. Haultain in 1922, with assistance from Rudyard Kipling, who crafted the ritual at Haultain's request.

https://en.wikipedia.org/wiki/Iron_Ring

ianpenney··on MyHouse.WAD - Inside Doom's Most Terrifying Mod
The "woo" involved is kind of dumb, like the time traveller classified memes [https://en.wikipedia.org/wiki/Safety_Not_Guaranteed]. But, the amount of work that went into the ancient art form of level building is unparalleled.
ianpenney··on The Strange Devirtualization of Techno
Freetekno was a movement in Canada where people exploited crown land laws and went to the middle of nowhere to rave in peace. They used early satellite maps and reconnaissance. It’s dead. Wish I had participated.
ianpenney··on The Strange Devirtualization of Techno
Thank you so much for helping me elaborate on this.
ianpenney··on The Strange Devirtualization of Techno
I’m having trouble explaining why many commenters are missing the point about this guys little diatribe, but I’m going to try because I like this community.

The 10 dollar words in his work don’t impress me much, but there’s something of substance here. It’s gonzo and authentic. I like it.

I don’t live in Berlin, never have, probably never will… but I’ve visited. And I was fortunate enough to visit Berghain, Ohm, Katerblau, Tausend and the Fuck Parade. All the “cool” spots in a very short set of trips over some years. I also framed my outings in my mind as “research”, with a cheeky grin. So there’s my pedigree that aligns with the motif of a neophyte Berlin experience.

Some of these scenes are inclusive in the LBGTQ, racial, and identity sense, but exclusive in the attitude / personality sense. It’s not what you’re born with. It’s what you do with it. What a weird paradox. Inclusively exclusive.

So, look, some of you reading this don’t want to go to things like this and take drugs (you don’t have to) and let loose. Some of you do. Some of you would be welcome and you’d “get it”. And some of you wouldn’t. And Sven Marqhardt [https://www.gq.com/story/berghain-bouncer-sven-marquardt-int...] isn’t psychic but he’s good at his job. (He pretended to try to tick me off by telling me cigarettes aren’t allowed when I knew they sold them upstairs.)

And all that’s ok. The most striking part of Berlin’s music and party culture to me is the comfort with being bluntly but fairly critical. Of eachother, of music, of clothing and fashion… in order to create a time and a place for something we don’t even know what it is yet. That something has been created and then appropriated over and over again. They didn’t invite everyone to these parties for a reason, but due to the internet and their success? Here’s everyone! And there was I. But I tried my best to contribute positive vibes and make real human connections and memories. Not to just promote consumption and capitalism and some shitty clothing from SHEIN.

The author was on a mission to journal the truth. They did a good job. What positive message one could take away from this is to be comfortable in yourself and what you like and remember that art of surfeit has hunger, and such is a fun way to while away your time before you die.

ianpenney··on Show HN: TxtNet Browser – Browse the Web over SMS, No Wi-Fi/Mobile Data Needed
Quick somebody PoC this with SMSGTE over APRS! (So you can browse the web over ham radio. Ridiculously impractical but delicious!)

https://smsgte.org/

ianpenney··on Ask HN: Main things to consider when building an app for business/enterprise?
What happens when your unencrypted laptop gets stolen or lost?

Go read the Cloud Security Alliance’s CAIQ questionnaire. There’s much more to serving enterprise than just your code quality and cloud platform. You need to operate the business in a safe way.

ianpenney··on Recommendations for Japan Travel
Yo you ever been to Nakiryu for ramen though? It’s fire. The instant stuff they have at 7 is also incredible. (Michelin rated instant noodles. Seriously.)

Also I can’t remember the name of the place (Aka something) in Shinjuku but they do a spicy AF Nabe and a chicken wing that is literally the hottest thing I’ve ever eaten. I took a tiny bite and felt like I was going to die. They give you disposable gloves to handle it. My partner was in agony the next day.

Eh. It’s a whole country. There’s something for everyone. I’ll take Ootoya or Matsuya or Pepper Lunch any day. Will never eat at Coco Curry again though. Got food poisoning there once.

ianpenney··on Recommendations for Japan Travel
Brighton is SO COOL. No sarcasm. Really loved it.
ianpenney··on Recommendations for Japan Travel
Learning to say the following in the language of the land will get you further than 99% of tourists.

Hello

Please

Thank you

Excuse me

I’m sorry

Most notably - speaking Catalan instead of Spanish in Barcelona will endear you to locals in a way you wouldn’t believe.

You do you, though. I had to google the hiragana for that phrase. I can’t read Japanese worth a damn.

ianpenney··on Recommendations for Japan Travel
I’ve been 18 times and I had a good chuckle at this story and the comments. All largely inaccurate. Especially the bits about APA and Kyoto.

Y’all reek of FOMO and exoticism. Chill.

Just go with it. You’ll be fine. Live your normal life, just in a different place. You can gaijin smash through anything if you’re a jerk. If you’re not, I’m sure you’ll find a way to be less shitty as a tourist and someone will appreciate it at the time - and forget about it the next day.

My favourite dining experience was going to Savoy and leaving it to the staff to make whatever they’d recommend. おすすめは何ですか? They have a pizza that’s not on the English menu. A woman from Boston sat at the counter and annoyed absolutely everyone in the restaurant with her loud, obnoxious behaviour, poor Japanese accent, and “I’m the main character” vibes. Classic Roppongi.

She didn’t get the secret pizza.

← PreviousPage 3 of 4Next →