HNHacker News
TopNewBestAskShowJobs

john37386

442 karma · joined November 22, 2017

submissionscomments
john37386··on My Custom CSS Reset
scroll down and it should pop from the left at some point. Maybe try in private mode?
john37386··on My Custom CSS Reset
Ya me too. I wonder if someone could try to trick a 3d effect and that it feels like something alive is coming from the screen
john37386··on My Custom CSS Reset
The little man that appeared on the side really scared me! I mean wow, but for a second I really thought something was coming out of the screen.
john37386··on AWS price reduction for data transfers out to the internet
It sounds like a nice move to start increasing competition on bandwidth out by cloud providers. Let's see if the market will follow. Indeed, it doesn't change much for big players, but it is a lower monthly/yearly bill for the startups and smaller players. Bandwidth out was always the small asterisk that most people forgot to estimate and/or read properly in the contract. Don't underestimate your bandwidth out from your cloud provider in your business plan. It can really go out of control quick.
john37386··on What every IT person needs to know about OpenBSD Part 3: That packet filter
I used pf + carp on OpenBSD in 2004. It was really awesome to failover from 1 firewall to the other without losing tcp + udp states for all the servers and clients behind the cluster. pf is really powerful. pf on OpenBSD even more! Another nice features is to tweak some tcp options per rules. Let's say you want to fast expires tcp port 443 connections to your cdn servers but, still keep normal tcp timeouts for the rest. Nice article
john37386··on Tesla drivers left unable to start their cars after outage
I agree and I don't understand the point. There might be something that you and I don't see. Anyone has a clue on why it's important to have such a huge infrastructure just to start a Tesla car?
john37386··on Tesla drivers left unable to start their cars after outage
Why do owners of Tesla cars need an App to use their car? What is the advantage of needing a central infrastructure + app just to start your car?
john37386··on Demystifying OpenZFS 2.0
What is the difference between Klara and IXSystems? Are they competitor, partners or something else?
john37386··on “Click to subscribe, call to cancel” is illegal, FTC says
I might change my strategy and finally call them at some point. It's just frustrating to be stuck in this situation. Thanks for the tip.
john37386··on “Click to subscribe, call to cancel” is illegal, FTC says
I subscribed to a weekly meal kit. It was very easy to onboard and I liked the service for many months. My situation changed and I no longer needed their service. I wanted to cancel my subscription and it's impossible to do online. It's written in super small to call their happy representative. I didn't like this situation so what I'm doing is skipping the meal kit for the next 4 weeks. Every month I log on their website and skip the next 4 weeks... I'll do this until my credit card expired. Just for this, I won't recommend them to anyone. It's sad because I kind of liked it when it was useful to me.
john37386··on The History of OS/2 (2001)
I recall having 8 MB of RAM and a lot of swap or whatever they called it in OS/2 Warp. It was really beautiful graphically and felt ahead of its time. But, it was not fast and far from warp speed. Thanks for explanation about codename Warp.
john37386··on The History of OS/2 (2001)
I recalled OS/2 Warp in the mid 90's. Anyone knows why they called it OS/2 Warp in that era and not just OS/2?
john37386··on Facebook-owned sites were down
Yes I meant for transferring to another DNS server. In this case, they can't.
john37386··on Facebook-owned sites were down
There is always a step which involve to email the domain when a domain update its information with the registrar. In this case, facebook.com and registrarsafe.com are managed by the same NS. You need these NS to query the MX to send that update approval by email and unblock the registrar update. Glue records are more for performance than to make that loop. I'm maybe missing something but, hopefully they won't need to send an email to fix this issue.
john37386··on Every device with FB app is now DDoSing recursive DNS resolvers
At this point people hope it will just restart so that we can all resume a normal life. There can only be 2 options. It will be fix very soon or it will be a hell of a night with a lot of coffee.
john37386··on Facebook-owned sites were down
Good catch. Hopefully, they won't need an email sent to fb.com from registrarsafe.com to update an important record to fix this. What a loop.
john37386··on Facebook-owned sites were down
I don't know. I doubt. It's just funny to think that you need email to fix BGP, but DNS is down because of BGP. You need DNS to send email which needs BGP. It's a kind of chicken and egg problem but at a massive scale this time.
john37386··on Facebook-owned sites were down
Yeah the patch to fix BGP to reach the DNS is sent by email to @facebook.com. Ooops no DNS to resolve the MX records to send the patch to fix the BGP routers.
john37386··on Facebook-owned sites were down
Imagine if they need access to fb.com email to re-enable the access for the on-site technician.
john37386··on Facebook-owned sites were down
Even the Name servers are not returning any values. That's bad.

dig @8.8.8.8 +short facebook.com NS

These are usually anycasted, meaning that 1 ip return in NS are in fact several servers spread in several regions. They are distributed to closer match through agreements with ISP with the BGP protocol. Very interesting, because it seems that it took 1 DNS entry misconfiguration to withdraw M$ worth of devices from the internet.

john37386··on The Software Industry Is Still the Problem
In Quebec/Canada there is this huge company called Trigone. They build all kind of big buildings here and their modus operandi was to create shell companies around Trigone. So the shell company would build the building and instantly bankrupt after. The people who bought part of the new building were stuck with all kind of problems and no way to fight back.

The RBQ which is the agency in charge of making sure the rules are respected for construction, removed all their licenses yesterday.

It took years, but finally people will no longer suffer from crooked builders.

Here is the news. It's in french. https://ici.radio-canada.ca/nouvelle/1828502/construction-re...

I wish there was some kind of agency in charge of penalizing crooked software companies which are known for years to screw businesses. It will take time, but we will get there.

john37386··on DoS attacks against my online game
Make sure you won't use the 100Gbps in the full month because it might DDoS your wallet ;)
john37386··on 'This is a food bank now': Workers seized a McDonald's in France
I like this sentence from the article: "They come without a smile, but they leave with one". I'm loving it.
john37386··on Fastly Outage
You might be right. Here is another update from fastly:

The issue has been identified and a fix has been applied. Customers may experience increased origin load as global services return.

Let's see

john37386··on Fastly Outage
It's probably a DDoS attack.
john37386··on Fastly Outage
Here is lesson to learn for shopify talented staff. Don't put all your eggs in the same nest. I'm sure they can build something better than that. Hopefully, they will learn from this outage.
john37386··on Fastly Outage
It should be resolve soon. From fastly status page:

The issue has been identified and a fix is being implemented. Posted 1 minute ago. Jun 08, 2021 - 10:44 UTC

john37386··on DOJ seizes $2.3M in cryptocurrency paid to the ransomware extortionists Darkside
bc1 is for bech32 addresses. A feature of the new segwit. Aparently there is a way to predict the private key derived from using multiple times the bc1 address. Details are available here: https://sudonull.com/post/8212-Bitcoin-Pseudo-Random-Number-...

Could it be that bech32 is less secure than thought?

john37386··on Hunting down the stuck BGP routes
This is less likely to happen these days as BGP routes are now validated through an open registry like RPKI https://www.arin.net/resources/manage/rpki/

I am not aware how popular and which company are using it, but I doubt that youtube is today as vulnerable as it was in 2008. BGP securities has a lot of tractions these days and is an interesting topic to follow.

john37386··on Hunting down the stuck BGP routes
Nice article on the basic functionalities of the Internet backbone. I really like the animation explaining this article with nice pictures. In short, BGP has a bug that potentially created a huge outage in August 2020. The proposed fix is to imrove the BGP protocol with a new feature. It's not easy because, it's the backbone of internet. Let's see where this will go.
← PreviousPage 2 of 4Next →