HNHacker News
TopNewBestAskShowJobs

k1rcher

105 karma · joined March 17, 2021

submissionscomments
k1rcher··on NixOS on Framework Laptop
I’ve only had mine for a day, but following the official PopOS guide[0] on the framework forums they advise manually setting mem_sleep_default to DeepSleep to override the default S2Idle, which was “burning through the battery” like crazy.” I’ve seen 5-6 hour runtimes with full brightness using with this option enabled (anecdata from a post on the framework or PopOS subreddit), which appears to be somewhat accurate with my setup (docker, Postgres, vs code, many Firefox tabs, slack, some other miscellaneous services running in the background).

[0] https://community.frame.work/t/framework-and-popos/2898

k1rcher··on L0phtCrack Is Now Open Source
Under 30 here and have only ever seen Hashcat as the predominantly used software for cracking hashes
k1rcher··on NixOS on Framework Laptop
So far, incredible! Still setting up my environment, but as far as how it’s running on the Framework, I 100% see myself fully transitioning to it from my MacBook.

Desktop wise, I’ve been using PopOS for 7-8 months now, so it’s quite great to have that same setup in a portable fashion now.

k1rcher··on Leave no trace: how a teenage hacker lost himself online
Obligatory link to the Hacker Manifesto: http://phrack.org/issues/7/3.html

“… we’re all alike.” Rest in peace, Edwin.

k1rcher··on NixOS on Framework Laptop
My Framework DIY just arrived this morning. I finished the build and installation of PopOS about an hour ago, but now I’m contemplating trying out NixOS due to this blog post.

Looks amazing!

k1rcher··on Twitch source code and customer data has reportedly been leaked
Got it in my seedbox as of 15-20min ago:

Downloaded: 7.84GB Uploaded: 64.64GB

sheesh, one popular magnet!

k1rcher··on British firm claims quantum-computing breakthrough
Why can this specific approach be cooled at room temperature, rather than the cryogenically cooled approaches seen elsewhere?

As a complete layman, is this a major breakthrough? The ability to communicate information via photons in a computational setting absolutely blows my mind.

k1rcher··on A Journey to the Disappointment Islands (2019)
This is a beautifully written piece and heightens my wanderlust even more so than I thought possible.
k1rcher··on Paid influencers must label some posts as ads, German court rules
This is enormously surprising to me. I can't seem to find any links to official legal code or documents on that page (seems to be a guide for influencers). What I'm specifically interested in, is what happens when as an influencer you _don't_ disclose an ad? Are there fines? Is it a series of "stern warnings", akin to the Comcast emails you'd get for pirating big Hollywood studio movies from public trackers on a home connection? An n-strikes and you're out system?

Influencers (in joint union with targeted advertisements-- and even more tangentially cross-site/browser/device fingerprinting) has made me extremely embittered and disillusioned to social media in general, going so far as to delete old accounts made while I was younger and even abandoning certain platforms. (early-mid-20's here btw)

k1rcher··on Ask HN: What problem are you close to solving and how can we help?
This is an affirmation I’ve been longing to here, lol!

I’ve already done the legwork, cloning to the current prod DB locally and playing around with migrations, but the fear of applying anything potentially-production breaking is scary to a dev who has never had to work on a “critical” production system!

k1rcher··on Ask HN: What problem are you close to solving and how can we help?
This is super interesting stuff.

First of all, I think the caching layer (which we currently don’t have) is going to be a necessity in the coming weeks as we scale for an additional project (that will be relying on this architecture)

Second of all, it is just PK lookups. We don’t actually have a single fk (contractor did not set up any relations), which makes me think moving all of this replicated JSON data from fields to tables may help.

The queries that are currently causing issues are not filtering out any data but returning entire records. In ORM terms, it is Video.objects.all(), and from a URL param in our GET to the api, limiting the amount of entries returned. What’s interesting is this latency scales linearly, and at the point we ask for ~50 records we hit the maximum raw memory alloc for PG (1GB) causing the entire app to crash.

The solution you propose for s3 blob store is enormously fascinating. The one thing I’d mention is these JSON fields on the Video table have a defined schema that is replicated for each Video record (this is video/sensor metadata, including stuff like gps coords, temperature, and a lot more).

So retrieving a Video record will retrieve those JSON fields, but not just the values: the entire nested BLOB. And does so for each and every record if we are fetching >1

Would defining this schema with something like Marshmallow/JSON-Schema be a good idea when you mention JSON schemas we control? As well as explicitly migrating those JSON fields to their own tables, replaced with an FK on the Video table?

k1rcher··on Ask HN: What problem are you close to solving and how can we help?
Interesting. I believe I noted a similar function in the Postgres docs I was scouring through Friday. I’ll give it a look and see what I can find.

Tangentially related for those who have experience, I am using Django-silk for latency profiling.

k1rcher··on Ask HN: What problem are you close to solving and how can we help?
Cheers for the response (and affirmation). After some latency profiling I am convinced proper cols with indexing will vastly improve our situation since the queries themselves are very simple.
k1rcher··on Ask HN: What problem are you close to solving and how can we help?
We are having atrocious READ/WRITE latency with our PG database (api layer is django rest framework). The table that is the issue consists of multiple JSON BLOB fields, with quite a bit of data— I am convinced these need to be abstracted to their own relational tables. Is this a sound solution? I believe it is the deserialization in these fields of large nested JSON BLOBS that is causing latency. Note: this database architecture was created by a contractor. There is no indexing or relations existing in current schema. Just a single “Videos” table with all metadata stored as Postgres JSON field type blobs. EDIT: rebuilding the schema from the ground up with 5-6GB of data in the production database (not much, but still at the production level) is a hard sell, but I think it is necessary as we will be scaling enormously very soon. When I say rebuild, I mean a proper relational table layout with indexing, fk’s, etc.

EDIT2: to further comment on current table architecture, we have 3-4 other tables with minimal fields (3-4 Boolean/Char fields) that are relationally linked back the Videos table with a char field ‘video_id’, that is unique on the Videos table. Again, not a proper foreign key so no indexing.

k1rcher··on TikTok requests access to devices on local network
From a legitimate reverse engineering/security auditing standpoint, cert pinning is generally very trivial to bypass.

see: Frida, xposed framework (not sure if still relevant)

k1rcher··on CSAM Detection Technical Summary [pdf]
For reasons unbeknownst to me at the time of writing (for it requires much more introspection), I think this would be OK if it were a service that ran only on icloud-stored photos— rather than apple devices across the board.

I’m not sure why this is the line crossed for me. Perhaps it is only because I willfully choose _not_ to store _any_ data on iCloud (or at the very least a minimum amount as possible). Even moreso, I’m a bit unsure of what that line even is.

Is it a software vs hardware thing? No, because one could argue the service is not Apple hardware-specific, but rather specific to the iOS software.

So perhaps the line crossed is this being an OS feature rather than a SAAS feature. It is unfortunate that the precedent has been set where I am OK with potentially privacy invasive features on SAAS products, but I suppose it is what it is.

k1rcher··on Show HN: Till – Unblock and scale your web scrapers, with minimal code changes
Does this have any sort of JavaScript emulation/support? Or is it purely HTTP requests?

The GID signature piece is especially interesting, I have ran into blockers in scaling scrapers in the past and this sort of organizational/tracking platform sounds awesome.

k1rcher··on Debian for Mobile
Semi-unrelated:

I’ve been eyeing the Pinephone for quite some time now. Do you use yours as a daily driver? Or have you paired it with an a more-mainstream iPhone/Android?

I’m currently using an iPhone as my social circle uses primarily uses iMessage and I’ve found it hard to migrate. As a secondary device for debugging, testing, and a “burpsuite playground” I’m using an extremely cheap Nokia I picked up a few years ago.

I think a Pinephone would be cool to replace the Android I have.

k1rcher··on Launch HN: Epsilon3 (YC S21) – Software for spacecraft and complex operations
Cool service.

FYI: after signing up with the MailChimp form, clicking the “Continue to website” link on the signup confirmation page results in a 404.

k1rcher··on Launch HN: Epsilon3 (YC S21) – Software for spacecraft and complex operations
> 1. They never get enough developers. 2. They usually get deprioritized in lieu of other projects.

As a dev currently building out several fairly-complex in-house tools for a small startup, I can relate to this first-hand.

It’s enormously frustrating as a perfectionist with a slightly neurotic obsession with (in a balanced and healthy way, trust me ;D) and appreciation for best practices, I have had to (against better judgement) sacrifice many things such as extensive time spent on in-depth automated testing, abstraction of reusable code for polymorphism and shared packages, extremely in depth documentation, and many other aspects that would contribute to long term viability and efficacy. This is of course for the sake of a business-friendly timeline, and that I can appreciate.

There is a definite balance, and I have (and continue to) learn enormously from this business view on software. The “it just works” ethos can be scary further down the road. The economic upsides to this perspective for an MVP or POC type of development are absolutely massive, but I can’t help but think this could be supplemented further by dedicating more resources to focusing on best practices.

Whether that focus comes from an internal team with more dedicated resources or a third party, I’m still unsure as to how that decision should be made.

Either way, it has been very helpful in further developing my skills in communicating things like tech debt (what notions like automated testing actually mean in terms of value to a SaaS company) to the CEO and other colleagues who do not have software dev experience.

k1rcher··on Launch HN: Epsilon3 (YC S21) – Software for spacecraft and complex operations
Wow. This is enormously impressive. I currently work for a small startup based out of Denmark in the renewable energies space (wind turbines) developing web based tools to assist in our ML operations.

With a lifelong obsession with cosmology and astronomy, and perhaps even more applicably relevant; our own human advancement to and into the stars, I have increasingly become more and more inclined to the notion of further developing my current skillset with the eventual goal of transitioning to the space industry.

My recent experience and exposure to renewable energies has given me massive insight to just how important companies like you guys are to furthering humanity’s progress. My question to you all regarding your technology, is how you manage what I imagine to be extraordinarily large, rich, and complex datasets that must vary between use cases (you mention hotels, debris removal, etc.). The data between these use cases must vary in structure— how is it normalized/standardized to work with your pipeline(s)? The commonality I see (as a fairly novice layman in terms of space technology) is of the rocket propulsion, orbiting, and payload delivery kind, but I’m sure the data it is far more nuanced and goes far beyond that.

Furthermore, is any sort of machine learning applied on your side, perhaps in some sort of statistical analysis / metric reporting?

I’m going to definitely keep an eye on you all at Epsilon3. Perhaps you will be looking for more engineers with web dev, data, ML, and cyber/info security experience in the future!

Huge props. I can tell there is an extraordinary amount of innovation involved with this venture. Excited to see where you all go with this =)

k1rcher··on HTML and CSS techniques to reduce your JavaScript
Wow, this looks bloody brilliant. I’ve only recently begun feeling more “comfortable” writing JS on the fly for frontend development (previous roles were nearly all backend-centric), but one big issue I’m facing is managing the ever-growing ecosystem in a way to minimize complexities in a timely and efficient manner.

HTMX seems as though it will catalyze those efforts.

k1rcher··on Proposed futex2 allows Linux to mimic the NT kernel for better Wine performance
This is interesting. Does anyone know of previous figures on Windows virtualization improvement?
k1rcher··on Vertical turbines are more efficient in large-scale wind farms: study
So this reflects economy of scale (more turbines per area) rather than higher output/turbine, right?
k1rcher··on Show HN: Notesnook – A cross-platform privacy focused zero-knowledge notes app
I love the sound of that.

So far I think the UX is incredibly sleek from my brief usage of the iOS app. Writing markdown feels really good, this will be a large improvement from the stock iOS app.

Excited to check out the VS Code extension and desktop experience.

k1rcher··on Show HN: Notesnook – A cross-platform privacy focused zero-knowledge notes app
This looks really interesting, will check it out- the privacy aspect is very intriguing.

However I must say that I find myself having difficulties adapting to a new note taking environment. I always seem to drift back to simple markdown notes in my preferred editor.

Perhaps this is due to ease of access and how efficiently I am able to write markdown. The only real issue I have with this system is organization. It’s very difficult to track down a specific note in a file that I have not worked on recently.

For more general note taking and journaling I still prefer pen and paper, but that is a whole other topic of discussion :)

k1rcher··on The makers of Eleuther hope it will be an open source alternative to GPT-3
While the fraud implications of convincing generative text is quite daunting, it's great to see progression in this field.
k1rcher··on The Deno Company
Hm... I think the biggest issues I experience have more to do with frontend design rather than composing JS itself.

I love using it as a "one-off" scripting language which usually involves interaction with some sort of an existing codebase.

I'm also fairly confident in doing any sort of backend-centric work, in which existing components most likely exist as well (or at the very least something POC-esque to iterate on or scaffold from).

With that said I believe most of these difficulties stem from most of my experience being backend-centric roles, so when it comes time to implement a frontend from scratch, I become unsure of where to start. The sheer amount of technologies available and vast amount of flexibility is also very intimidating.

However I've been slowly but surely immersing myself in the stack(s), and have found that much like my experience with CSS the best way to learn is to simply do it-- making mistakes and learning from them in my exploratory learning.

I do appreciate what you said about build pipelines and feel much better about my current projects :-)

quick edit: I think my lack of experience in functional programming is another factor here, however Typescript's object orientated style is very attractive.

k1rcher··on The Deno Company
This is fascinating. As someone who programs primarily in Python, I have been struggling with adapting to a JS-heavy environment in the past several years.

I have began utilizing Node + React for frontend use cases but find that my build pipelines become incredibly cluttered and esoteric rather quickly.

Am going to explore wasm solutions, thanks :)

k1rcher··on Visa Plans to Enable Bitcoin Payments at 70M Merchants
That's a very good question, one that I don't have an answer to. "A very solid choice" was a very poor choice of phrasing. I was intending to generalize the reasoning behind the recent surges in value and popularity.

My statement was more intended to be a critique on the current perception to the layman. I believe bitcoin and crypto as a whole should be looked on as a currency, rather than a get-quick-rich investment that absolutely anyone with a spare penny can leverage for their own profit.

← PreviousPage 2 of 3Next →