HNHacker News
TopNewBestAskShowJobs

jarofgreen

1,151 karma · joined June 14, 2011

email james at my-username dot co dot uk
submissionscomments
jarofgreen··on Ask HN: What is the best way to author blogs in 2024?
https://jamstack.org/generators/ has a list of static site generators (I think you can ignore the "for jamstack" part).
jarofgreen··on I built an ROV to solve missing person cases
Lakes can have currents.

I wonder if pedantically speaking the definition of lake would include non-tidal in many countries but ....

A) humans use names sloppily and if it's an important detail I wouldn't assume a lake is non-tidal without checking.

B) non-tidal bodies of water might still change height over the year, for example after a heavy rainfall.

Mainly I'd question the need to automate it. It's difficult, and in many cases the cost of a human to drive it is tiny compared to all the other costs you need to pay so just do that (as in the article - those weren't automated). Also, driving them can be fun :-)

jarofgreen··on I created the largest curated directory of cybersecurity tools and resources
I've noticed a lot of people use git repos as a way to crowd source this kind of data, and I'm currently working on tools to help in that situation: https://mastodon.online/@jarofgreen/112506346958981241

I've written in the past about these types of projects: https://opendataservices.coop/blog/2020/05/07/community-data...

The exetools website seems to be on its way out (domain for sale, no updates), which shows how hard it can be to get these types of projects to go well - I'm hoping I can help a bit!

jarofgreen··on Michelle's List: A free, anonymous landlord review site
Totally this! In the UK many landlords only have one or a few properties and it would be obvious which tenant is bad mouthing you. In some cases there are laws against "revenge evictions" but I don't know how much people would be willing to get into a shitty situation and trust arguing about those laws just to leave a review.
jarofgreen··on Ask HN: How to do simple heartbeat monitoring?
I had a similar concern about a custom monitoring script that was regularly writing out a metrics file in Prometheus format to be picked up by the Prometheus node monitor. What if the script breaks?

So I set the script to also write out a metric that was just the time stamp the metrics were last updated. Then it was simple to set up an alert in Prometheus - I can't access the config now so you'll have to look it up yourself, but it was basically "alert if metric less than now minus a time gap"

jarofgreen··on How do you accidentally run for President of Iceland?
This one? https://www.theguardian.com/technology/2018/jan/15/hawaii-mi...
jarofgreen··on TfL's simple pop-up message led to a significant drop in paper ticket sales
I think in that situation most people would just walk away from the machine. Or try and press the red "start again" button.

Ok, maybe my suggestion is the wrong wording but I still think the original is confusing. If I'm going throught a process and suddenly get a confusing popup I didn't expect, my first instinct is I can press cancel and get back to what I was doing. But in this case it takes me out of the whole process.

But I'm not saying my UI choices are representative of all - really, it's about proper UI testing. The article doesn't say what user testing they did, if any.

I guess this falls into the trap a lot of tech metrics stuff falls into: ok, we can clearly show that sales of paper tickets fell. We assume there is a corresponding rise in card sales (But crucially, the article doesn't prove that). But what none of the stats can clearly show is whether people were happy with all this or not. Maybe they would have preferred the cheaper prices AND a paper ticket.

jarofgreen··on TfL's simple pop-up message led to a significant drop in paper ticket sales
Anyone else find the "buy ticket" and "cancel" button text confusing? I had to take a second to work out which one was which. I'd try clear text like "buy ticket anyway" and "use contactless".
jarofgreen··on Ask HN: Python Metrics Library
But then, Prometheus is open source and it's pretty easy to host your own server.
jarofgreen··on How I tripped over the Debian weak keys vulnerability
Well, I'll bet they haven't gone back to "put all the keys in ~/.ssh/authorized_keys" ...
jarofgreen··on Humans are not perfectly vigilant from Cory Doctorow
That's only the intro to the article and if you want to discuss that you can do so here - https://news.ycombinator.com/item?id=39848657

The article then goes on to make other points about AI and automation.

jarofgreen··on How I would automate monitoring DNS queries in basic Prometheus
Is that address correct?
jarofgreen··on How I would automate monitoring DNS queries in basic Prometheus
Interesting. Our contribution to monitoring DNS is to make sure our HTTP uptime checker runs over both ipv4 AND ipv6 as separate checks. That way if we mess up our AAAA record but not our A record (or vice versa) we still get a fail. I've looked at some commercial SAAS uptime checkers and no-one seems to offer this as a feature - have I missed one that does?

The way to do this in Prometheus is to use the following settings on the blackbox module:

    [ preferred_ip_protocol: <string> | default = "ip6" ]
    [ ip_protocol_fallback: <boolean> | default = true ]
https://github.com/prometheus/blackbox_exporter/blob/master/...

So you need 2 modules, one for each ip version. As for automating setting these up, we deploy our Prometheus server with salt so we can use Jinja templating in all our Prometheus config files. That really cuts down on repeating boiler plate code.

This is also interesting for other reasons; in host downtime situations you can sometime see they will drop one type of traffic and not the other.

jarofgreen··on You cannot simply publicly access private secure links, can you?
As well as what the others have said, various bits of software make the assumption that 1) may be private and to be careful with it and 2) isn't.

eg Your web browser will automatically save any URLs to it's history for any user of the computer to see but will ask first before saving passwords.

eg Any web proxies your traffic goes through or other software that's looking like virus scanners will probably log URLs but probably won't log form contents (yes HTTPS makes this one more complicated but still).

jarofgreen··on Figure out who's leaving the company: dump, diff, repeat
In your git & sqlite setup, I'm not sure which way round you are thinking - which is the SSOT (Single Source Of Truth) and which is the handy cache.

I've been working on a tool that treats the git repo as the SSOT then lets you dump out all kinds of formats for data work including a sqlite DB. I haven't had as much time as I would like on it but it's at https://pypi.org/project/DataTig/

jarofgreen··on Show HN: Name That Nation
Static?
jarofgreen··on Tell HN: Revolut suspended my account for no reason
https://www.citizensadvice.org.uk/debt-and-money/banking/com...

"Banks and building societies are required by law to have a written complaints process which tells customers how to make a complaint."

jarofgreen··on Show HN: Is It Toxic To? – Check if a plant is toxic to your pets
The original home of the content may have more on this (but it crashes my phone browser so I can't check): https://www.aspca.org/pet-care/animal-poison-control
jarofgreen··on Show HN: Is It Toxic To? – Check if a plant is toxic to your pets
The original content has a big "Donate" button, which is now gone.
jarofgreen··on Choose Postgres queue technology
> I’d love to see more neoq-like libraries for languages other than Go.

Python has Celery, but maybe the author is looking for more choice between brokers. https://docs.celeryq.dev/en/stable/index.html

jarofgreen··on OpenFarm – a free and open database and web application for gardening knowledge
But then only technical people could contribute information. The website may be trying to make it so all gardeners can contribute.
jarofgreen··on Ask HN: Is There a Crunchbase for Policitians?
There used to be this project: https://www.mysociety.org/2019/06/26/placing-everypolitician...
jarofgreen··on You can serve static data over HTTP
I really like endoflife! It's great for looking up dates with a consistent UI and also codenames - I could never learn that Debian Bullseye was 11 or all the other silly codenames so I look them up here. Thank you!

We also do something similar on Datatig, which is a tool I'm writing for the general situation of crowdsourcing data in Git repos. It makes it easier for people to submit data and then creates usable data and handy websites. The static website output has an API which is just static JSON files. https://pypi.org/project/DataTig/ or https://datatig.readthedocs.io/en/latest/

jarofgreen··on The time I accidentally spent a year combatting fraud
It's a general ORM issue.

I once took a Python API with SQL Alchemy and took 30% of the speed by adding an eager load instruction to a query. Python profiling showed a lot of time in the ORM & database, then turning on SQL logging made the issue obvious.

Still feels like it should be called the "1 + N" problem tho. The 1 query happens first, then the N queries afterwards.

jarofgreen··on An exploit can reveal your KeePass master password in plaintext
Special password books exist.

https://www.amazon.co.uk/password-book/s?k=password+book

Often people will mock them on social media for the likes, but actually in some circumstances ... I think they are the best option.

(They can be made stronger too - tell people to remember one word that they put in front of all their passwords but don't write down, like "cat". Then anyone who steals the book can't use it but they are still using different passwords for each site.)

jarofgreen··on DJI drone flight log viewer
There is also https://www.phantomhelp.com/logviewer/upload/ and https://airdata.com/ - that's just links, not a recommendation.
jarofgreen··on A search engine for your personal network of high-quality websites
There is another serious point about the name I haven't yet seen any comments on.

Grep the open source project has spent years building up it's name and it's good will by being - as you point out - a great tool.

You are now attempting to claim some of that good will just by copying the name when you have nothing to do with grep.

If you did that to a commercial company they'd sue you for trademark infringement.

(Hopefully this is a serious enough point to not count as a "tangential annoyance")

jarofgreen··on John Glenn’s $40 Camera Forced NASA to Rethink Space Missions
If you like this check out https://www.penguin.co.uk/books/443162/apollo-remastered-by-...

> In a frozen vault in Houston sits the original NASA photographic film of the Apollo missions. For half a century, almost every image of the Moon landings publicly available was produced from a lower-quality copy of these originals.

> Now we can view them as never before. Expert image restorer Andy Saunders has taken newly available digital scans and, applying pain-staking care and cutting-edge enhancement techniques, he has created the highest quality Apollo photographs ever produced. Never-before-seen spacewalks and crystal-clear portraits of astronauts in their spacecraft, along with startling new visions of the Earth and the Moon, offer astounding new insight into one of our greatest endeavours.

I saw the exhibition in Glasgow, was good!

jarofgreen··on A Welsh firm breeding maggots to heal wounds
Rose George's book "Nine Pints: A Journey Through the Mysterious, Miraculous World of Blood" has a chapter on medical leeches if anyone is interested - still used today!
jarofgreen··on Show HN: Minesweeper on a chess board with chess pieces as mines
I've been playing the daily puzzle for a week, it's fun. Well done :-)
← PreviousPage 3 of 19Next →