HNHacker News
TopNewBestAskShowJobs

jpambrun

796 karma · joined October 1, 2014

submissionscomments
jpambrun··on Show HN: An SQS Alternative on Postgres
Why use a service that comes with lock-in and poor developer experience when I can use the database I already have?
jpambrun··on Show HN: An SQS Alternative on Postgres
Retries are baked in as message re-becomes visible after a configurable time. For dead letter you can move to another queue on the nth retry.
jpambrun··on The AWS S3 Denial of Wallet Amplification Attack
It like if the gaz compagny billed you for more gaz your pipe can physically take. No amount of fine print can change physics. If they bill for some opaque internal metric they need to change the wording to reflect this on all documentation: "we will bill you for whatever we please, you can't audit and we won't explain how it works".
jpambrun··on The AWS S3 Denial of Wallet Amplification Attack
But you are not charged if it's not Internet egress, which makes your argument about compute/ram cost moot.
jpambrun··on The AWS S3 Denial of Wallet Amplification Attack
The consequence of your interpretation is that surprise billing is not even bounded by the physical limitations. This is absolutely not reasonable. I am the user with in the zip case. I knew this testing would incur a cost, but I could imagine it could be 20x my network speed and I have absolutely no control over what AWS claims to meter.
jpambrun··on The AWS S3 Denial of Wallet Amplification Attack
I had the exact same thing happen to me last Friday. My ISP metered 300GB, AWS measured 6,000GB. A factor of 20. I don't think this is reasonable.

https://news.ycombinator.com/item?id=40203126#40205213 https://github.com/ZJONSSON/node-unzipper/issues/308

jpambrun··on How an empty S3 bucket can make your AWS bill explode
Yes. It made many request with Range star- (i.e. without end).

500$ is not making a huge dent in the monthly bill for this. I just got a few laughs at my expense from colleagues..

I don't know how AWS meters, but, if your assumption is right, I can abuse this and generate a huge bill to anyone just by starting streams and not consuming then. I could generate 10s of gbps of "apparent" billable traffic with a puny VPS.

jpambrun··on How an empty S3 bucket can make your AWS bill explode
Today I was hit by a surprise 500$ bill by using byte range request within zip files without an upper bound, but not consuming the whole stream. I tested for about 45 min at about 1gbps. My ISP meter says I downloaded 300gb which lines up with physics, but AWS says it was 6000gb.

My first thought is that can be abused to multiply the damage if you want to engage in some cost based denial of service.

About every other week AWS gets out of their way to make us remember that they are the worst cloud around.

For reference https://github.com/ZJONSSON/node-unzipper/issues/308

jpambrun··on Google fires 28 employees involved in sit-in protest over $1.2B Israel contract
This is too much of a burden to ask. All reputable media announced that they accepted the case and this is a widely known and accepted fact. That they accepted the case is my only claim. It you found something interesting from the court documentation it is on you to bring it forward, not mearly to claim something is a large body of work may be favorable to your argument. You are just muddying the water. This is the tactic of those on the loosing side of an argument.
jpambrun··on Google fires 28 employees involved in sit-in protest over $1.2B Israel contract
In truth you need to check political beliefs that aren't in line with the company's. My previous job, many were very vocal supporters of Israel and that tolerated, support for suffering Palestinians was not. It needs to wholesale. Accept all political discourse or none.
jpambrun··on Google fires 28 employees involved in sit-in protest over $1.2B Israel contract
An authority on the matter, the international court, concluded it is credible that genocide taking place by accepting the case. We don't have to argue on this anymore. It is not a lie, it is a credible allegation.
jpambrun··on Anyone got a contact at OpenAI. They have a spider problem
It's a stretch to expect a human initiated action to abide by robot.txt.

Also, once you click on a link in chrome it's pretty much all robot parsed and rendered from there as well..

jpambrun··on Commission opens non-compliance investigations against Alphabet, Apple and Meta
That would be a net positive as we would all benefit from new players that would emerge and fill that void. Obviously your question was rhetorical and this won't happen.
jpambrun··on Lcl.host: fast, easy HTTPS in your local dev environment
I have another personal solution [0]. It's a DNS server that also gets a wildcard certificate and make it available with a secret. This is definitely in the convenience over security relm, but it resolve any pattern prefix-123-123-123-123-suffix.example.com to the enclosed ip (e.g. 123.123.123.123). It will resolve to 127.0.0.1 or any other ip happily. Now you just need to use the associated cert and enjoy https. Works great from with k8s ingress, caddy, node.. You don't have to fiddle with your trusted store and it works for everybody. I took inspiration from https://nip.io/ for the dns part.

[0] https://github.com/jpambrun/dnsssl

jpambrun··on Show HN: Not sure you're talking to a human? Create a human check
For a) to make sense, the AI needs to have the authority and means to issue credit or refunds. If it doesn't it's just waisting your time.
jpambrun··on Epic says Apple will reinstate developer account
Outcompete them all by creating an amazing store with 3-4% fee and you will be the last one.

The mandated monopoly with 30% fee alternative is unreasonable.

jpambrun··on BlackCat ransomware group implodes after apparent payment by Change Healthcare
The onus is not on me here. I was only pointing out this is old data and the date is all I needed.
jpambrun··on BlackCat ransomware group implodes after apparent payment by Change Healthcare
I agree that gift cards are also overrepresented in frauds, bring little value to society and should be banned.

Surely we can all agree that the benefit that cash bring still outweigh the wrongful use. When it's no longer the case I imagine it will be phased out too.

jpambrun··on BlackCat ransomware group implodes after apparent payment by Change Healthcare
It would kill the ETF and all exchange. It would make paying ransom impossible. The value would plummet. It would continue to exist of course, but would be functionaly dead. Sounds easy really.
jpambrun··on BlackCat ransomware group implodes after apparent payment by Change Healthcare
The argument that crypto bros are useful idiots to criminals, sanctioned states and rich early adopters is much more reasonable, no?
jpambrun··on BlackCat ransomware group implodes after apparent payment by Change Healthcare
2020 is ancient and the second link doesn't look impartial. Denying cryptocurrency facilitate criminal activities is as like denying the sky is blue.
jpambrun··on French court issues damages award for violation of GPL
Likewise, it is hard for me to understand how people think your argument makes sense.. I work in ML, although not LLM, and I do understand how they work. I don't think you can reduce LLMs to obfuscating copy-pasters. I believe they are closer to our internalizing process and they can come up with novel solutions to never seen before problems.
jpambrun··on French court issues damages award for violation of GPL
If I read your code, learn from it and later write something inspired and based on the knowledge I internalized, am I violating your license?
jpambrun··on French court issues damages award for violation of GPL
"And that is what this breaks down to, is a LLM learning? or is it just regurgitating?"

You can make this argument for any artist. We study whole art movements which are periods of time where all art looks the same. Somehow, we want code production to be completely novel with no prior inspiration?

To your second point. I agree. There is limited expressivity in code implementation. As a human how would you cope with that? You can't recall any prior code you may have seen and you must write completely different code than anything in existence or face copyright litigation?

jpambrun··on French court issues damages award for violation of GPL
The rules remains the same. If you reuse a significant amount of code as is, you are infringe copyright. If you internalized some new knowledge based on some code and come up with a new implementation.. this is how we human learn. This is expected. Why would it be different for llm?
jpambrun··on French court issues damages award for violation of GPL
Copilot does small-ish snippets. It does not recreate a whole project. I am on the fence about the morality, but it won't recreate elastic search for Amazon to resell as a service.
jpambrun··on US prescription market hamstrung for 9 days (so far) by ransomware attack
If my house depends on your house being sound, then yes, I should be allowed to nondestructively inspect your house form the outside or with whatever access you gave me.

This analogy has limits, but I work in the medical field. I even worked at change healthcare until last year. The consequences of PHI data breach are almost unbounded. Furthermore, If I put my reputation and that of the business on your service you better bet I will poke around with whatever access you gave me.

jpambrun··on Show HN: Marimo – open-source reactive Python notebook – running in WASM
I would like to build image labeling tools with bounding boxes and pixelwise segmentations. Ideally it would support 16bit grayscale medical image. As a stretch goal it would support 3d stacks of image for a CT or MR. This is obivously too much to ask, but I would like to have a way to build it. It would require some sort of custom frondend events making it to the back end.
jpambrun··on Show HN: Marimo – open-source reactive Python notebook – running in WASM
I stumbled on this about two weeks ago. It's amazing. It solves the global variables issues in notebook and saves as plain text. I showed it to my coworker and they were all very excited. With a plugin system it could replace gradio, streamlit and jupyter. I really hope it does.
jpambrun··on Netlify just sent me a $104k bill for a simple static site
By the time you forgive the bill you may have caused significant psychological distress, maybe even irreparable. This doesn't feel like a responsible approach.
← PreviousPage 2 of 12Next →