HNHacker News
TopNewBestAskShowJobs

kassner

472 karma · joined July 8, 2013

submissionscomments
kassner··on Show HN: A free curl API for IP data (we scan the IPv4 space in <24h)
Nice to have another alternative, thank you!

Can you disclose how your assemble your GeoIP information? It doesn’t seem to match Maxmind’s for the couple of IPs I’ve tested.

One small piece of feedback: the CIDR pages don’t make much sense to me. For example, https://worldip.io/range/1.0.0.0/8 shows as Cloudflare owns the /8, when they actually own the /24, /8 is not allocated. I understand those pages are generated, so please consider something similar to bgp.tools’s prefix not found page, which shows me all allocated ranges, including sub-allocations: https://bgp.tools/prefix/1.0.0.0/8

kassner··on Ask HN: Protecting your Sites/Services from Unwanted Traffic?
In a similar tone, I made Caddy module that temporarily blocks an IP address once it tries to access specific URLs: https://github.com/kassner/caddy-trapdoor It’s great to catch those bursts of requests, nowadays I see a single IP probing hundreds of paths in a couple of seconds. This catches majority of them for me.
kassner··on Short sellers notch $8.7B profit as SpaceX shares dip to IPO price
Their datacenter at Datavägen 15 is about 100 meters/yards away from residential buildings, not a great example.
kassner··on We’re making Bunny DNS free
It depends how much EU do you need. ZeroSSL is through HID Global, part of Assa Abloy, a Swedish public company. HID, however, is American according to Wikipedia. Caddy uses ZeroSSL by default.

If you want only single host certificates, Actalis is Italian and issues free ones as well: https://github.com/acmesh-official/acme.sh/wiki/Actalis.com-...

kassner··on We’re making Bunny DNS free
I don't have a credit card on file, I'm not sure how they are going get paid if my balance goes negative.

Also: https://support.bunny.net/hc/en-us/articles/360000235911-How...

But yes, other services will run until your account is dry, then it gets suspended. You can't set a spend limit on your scripts without it taking down the whole account. You can't do cost optimization, but at least you are protected from going bankrupt.

kassner··on We’re making Bunny DNS free
It’s not like they’re going to put a debt collector after the $0.73 that you’d owe, so I’m not sure what was your point. If you want the services to continue you gotta have some balance. If they allow your account to run below balance I’d say that’s on them.
kassner··on We’re making Bunny DNS free
You wouldn’t be charged thousands because the service is pre-paid. Your websites will be suspended once the balance runs out, but you can re-establish them once you add more balance.

AFAIK is the only provider in which you can have functional billing limits and not just alerts that still depend on you reacting on them in time.

kassner··on We're making Bunny DNS free: because a faster internet won't build itself
TBF you can keep the account dormant if you delete all the resources. I have like $3 in balance left for over a year now.
kassner··on DNS is for people, not for IT infrastructure
Ansible will be terrible slow to update things if you're geographically far from the servers. Updating around 100 servers from another continent already takes longer than a 5 minute TTL. Parallel connections only work up to a point before a playbook run always have at least one failure and requires a re-run.

Ansible also does not have locks or parallel users coordination, so you’ll need a single user/VM/GHA workflow running the playbook or at some point concurrent users will start overriding each other.

kassner··on Anthropic raises $65B in Series H funding at $965B post-money valuation
Token Now Pay Later coming soon then
kassner··on Goodbye Visa and Mastercard: 130M Europeans switching to sovereign payment
I wonder if at some point we’ll be start taking about non-smartphone sovereign payments. The main reason I still use card is to be able to use it without a phone, and the technology of debit cards (around Europe at least) is quite OK. Maybe Europe should have a parallel payment track that is just a new card brand.
kassner··on I returned to AWS and was reminded why I left
It is pretty much unacceptable to have a domain bouncing emails, so I’d be out of the provider before the MX TTL even expires.

For outgoing emails, reputation is a huge issue, but at the same time it’s also fairly trivial to set up a (different) 3rd-party (gmail, outlook, sendgrid, whatever) with previous reputation so you can get back communicating.

kassner··on Show HN: PHP-fts – Full-text search engine in pure PHP, no extensions
1. Both tools will not catch it, you need something like https://github.com/maglnet/ComposerRequireChecker

2. That doesn’t apply to PHPUnit specifically, but if you, for example, import PHP-cs-fixer as dev dependency, it will bring symfony/console, and if you rely on that on your own code without importing it on composer.json as a regular dependency, the class will be missing when you composer install for production.

kassner··on Show HN: PHP-fts – Full-text search engine in pure PHP, no extensions
> I would recommend declaring the phar dependency with phive

+1. This eliminates a whole class of bugs in which you declared phpunit as a dev dependency but end up using a class that it brought in without declaring as a regular dependency. Without an external linter, you can’t really catch that until your production code doesn’t bring the class in and throws a fatal error.

kassner··on Backblaze Pricing and Product Updates
That’s a 15% price increase. Last increase from $5 to $6 was in October 3, 2023.
kassner··on Europe's $24T Breakup with Visa and Mastercard Has Begun
> Brazil with Pix

Are you aware of any banks that don’t require you to use their Android/iOS app to use PIX? I’ve had accesss to maybe a dozen banks and none had that ability. Sometimes you get via web, but needs their app’s 2FA to log in.

kassner··on Spotify won court order against Anna's Archive, taking down .org domain
Spotify does not own that copyright, only a distribution license. How they can get away with it?
kassner··on AWS European Sovereign Cloud
There are some EU cloud providers that try (OVH, Scaleway, Hetzner, Upcloud, Evroc), but AWS is a product 20+ years in the making and only in the last 5 that people are really opening their eyes to the sovereignty problem. And even if those providers did have the money and regulation breaks AWS had, today is a much different market than the one AWS grew up with, in which there wasn’t an incumbent and they were leading the market. Nowadays everyone has to be at least similar to AWS for people to consider it, and I feel sovereignty alone is not enough.

In other words: making a cloud provider isn’t that difficult, making a cloud provider that people will use INSTEAD OF AWS is an exponentially harder problem.

kassner··on One Number I Trust: Plain-Text Accounting for a Multi-Currency Household
> asset we have is our home and there are many websites out there that tell you how much it's worth but they each vary an awful lot and change dramatically - so much so sometimes that any savings you've made in the same period are eclipsed

I honestly completely ignore my purchased home value. It is not a regular asset because you have to make use of it, you can’t really liquidate it without a substantial change in your life (renting, marrying, going homeless, etc). If you trade it, you’d have to use that money to get some other housing. My strategy in my personal finances is to threat the house as if I’m renting. The money is gone from the balance, the equity isn’t tracked anywhere.

kassner··on One Number I Trust: Plain-Text Accounting for a Multi-Currency Household
You are the exception. Most people follow the “Parkinson’s Law” for money.
kassner··on One Number I Trust: Plain-Text Accounting for a Multi-Currency Household
> Budgeting can make that manageable by significantly lowering your living standard

I’d say that budgeting allows you to see how far off your ideal standard you are living. Spending too much on the kids school can be a deliberate choice or an afterthought from 4 years ago. Budgeting lets you see that and be deliberate about those choices.

kassner··on 10 years of personal finances in plain text files
In the 2010s I had used virtually all existing Personal Finances software on the internet and ended up building my own [1] that I still maintain and use to this day.

A ton of software out there was too US-centric, sometimes not even supporting multi-currency, or the UI being terrible to a newcomer. I've recently tried Beancount, but it still didn't convince me to switch over, because:

1) Double-entry bookkeeping is about what happened, and I want the software to tell me what's coming up. I can still handle that in Beancount, but it's unaware of $CURRENT_DATE, making it labour intensive: if you post an expense for the next week, it will already deduct it from your balance, you'd have to post the item as a liability, and then later move the liability to an expense once it actually hit the bank account (and you have to do that manually);

2) I matured my personal finances by following the YNAB method, and I'm not sure how to apply that to DEBK;

3) I think most people use a Personal Finances software differently than me. I see discussions about importing transactions and monthly reconciling. I open it nearly daily to check what is coming up, and I post transactions as soon as they happen. I want to know how much clothing/groceries/restaurant budget I have left before I leave home;

Any tips on how to handle those things on Beancount/DEBK, or that's just not for me?

1: https://www.kassner.com.br/projects/money/

kassner··on I migrated to an almost all-EU stack and saved 500€ per year
I had troubles with Apple blocking a bunch of range IPs from OVH, because they don’t handle abuse claims. It didn’t show up in blocklists at the time, but was in practice unusable.

IME anything that can be purchased by an average developer is in some list nowadays and deliverability is always crap (with luck it lands on spam folder).

kassner··on I migrated to an almost all-EU stack and saved 500€ per year
> Thats just a matter of buying a decent IP

Please expand on this. Public cloud IPs would be on spam lists, and providers like Hetzner and OVH aren’t any better. Where does one go to buy a decent IP?

kassner··on I'm returning my Framework 16
> Does Framework get mainstream media treatment?

I automatically bundle Linus Tech Tips into mainstream, mainly because how much people with no hands-on experience (i.e.: bring their laptops to a shopping center’s IT shop to upgrade RAM/SSD) around me watch it. I hope that eventually they are encouraged enough to try stuff on their own, and if they are in that mindset, framework is the best brand they can buy.

kassner··on I'm returning my Framework 16
I think it depends. At least on $dayjob’s stack (webdev/Go) both are interchangeable and I’m fine using either. Ofc they aren’t the same thing, but depending on your task and constraints, both a MacBook or a Framework can attend your needs.

I can agree with you that they don’t have the same position, but users are going to see a Framework laptop on mainstream media and are going to compare options. A few might try out, and even though they’ll get frustrated, they might now understand the ideology around open hardware.

kassner··on How I Left YouTube
Ditto. From all the places that I’ve quit, the only counter offer I’d accept would be “we’ll implement this structure/process change that is slowly killing your will to work here”.
kassner··on How I Left YouTube
I can’t wrap my mind around those goals, because (IMHO) the number one thing that would improve viewership is entirety outside of YouTube’s hand: content quality. So the author can only ever move needles that are thrice removed (i.e.: improving backend tools -> creators have more time -> creators create better content) or are statistical coincidences (we made the buttons round -> viewership went up 0.2%).
kassner··on I'm returning my Framework 16
The MacBook Air 15” costs €1399, doesn’t sound too economical to pay double the price for the extra 0.9”
kassner··on CSRF protection without tokens or hidden form fields
Exactly.
Page 1 of 8Next →