HNHacker News
TopNewBestAskShowJobs

lathiat

4,394 karma · joined November 23, 2015

e9d97d2d4a137fcf296c2fb30e80f4e5aa0af50b8197ac37a429e5fe35cf3611
submissionscomments
lathiat··on Sunsetting Equinix Metal
Noooooo. Equinix Metal was one of the only places I could get by-the-hour machines with actual HDDs, NVMe and High Speed Networking, in multiple on demand for a day at a time. I use this for example for performance testing or situational testing of Ceph for example, where I need realistic actual hardware especially including HDDs, to match real world environments.

They had a lot of problems though, which didn't matter for me as much, but probably hurt for other people. For example there were no security groups and thus it was somewhat painful to not just expose your entire machine to the internet, without setting up your own linux based router. This is partly because the idea was you would interconnect with an Equinix Fabric (their virtual networking product) which sortof makes sense except you can't just deploy that without a sales contract and the cost of that would outweigh the cost I spent on the machines.

This sucks for me. But that doesn't surprise me given that I'm obviously not a profitable use case in isolation, I was just riding on the coat tails of their other business, and that mostly they were likely largely competing with cloud providers at this point which are better developed/more advanced.

There are other cheap data centre hardware providers but usually not by the hour, if they are don't do L2-adjacent 10-40Gbe networking and almost universally no one has HDDs anymore. I know, I'm a weird use case :)

RIP.

lathiat··on Linux connection tracking and (Slow) DNS
There is also a trap, which is that setting this in /etc/sysctl.conf or /etc/sysctl.d doesn't work, because the module isn't always yet loaded when those are set.

One fix is to load nf_conntrack at boot by adding it to the module load list

https://bugs.launchpad.net/bugs/1922778 https://github.com/canonical/microk8s/issues/4462

On a related note, the sosreport tool which collects outputs of a zillion different commands for diagnostics purposes, goes to great lengths and CI tests that no kernel modules are loaded by any of the plugins, for basically this same reason.

e.g. If the modules aren't already loaded, it will avoid running iptables -L and various other tricks: https://github.com/sosreport/sos/issues/1435 https://github.com/sosreport/sos/issues/2978

lathiat··on Apple Intelligence notification summaries are pretty bad
I have found the summaries reasonably good, with 1 exception it got completely wrong, but I only ever want them to summarise a stack of notifications from the same app, and never a single notification. Unfortunately there is no setting for that currently, it's all or nothing.

Would be nice if they had an option only to summarise multiple notifications in a stack, and not to summarise once you expand them.

Especially since so often its summarising a message that is barely longer than the summary. It seems to sometimes decide not to do that, but still so often does.

lathiat··on Reverse Engineering iOS 18 Inactivity Reboot
If you’re targeting these evidence grabbing/device exploiting mobs, generally the phones get locked into a faraday cage to drop the mobile network so that they can’t receive a remote wipe request from iCloud.
lathiat··on Tell HN: Ubuntu 24.04 force enables password auth, need to disable differently
You can still configure it to be key only, you just need to put your own override as a file in /etc/ssh/sshd_config.d/ rather than /etc/ssh/sshd_config.

The files are read in order, so your filename needs to sort after the 50-cloud-init.conf file. This would work: echo "PasswordAuthentication no" > /etc/ssh/sshd_config.d/60-password-auth.conf

lathiat··on Abusing Ubuntu 24.04 features for root privilege escalation
You can still configure it to be key only, you just need to put your own override as a file in /etc/ssh/sshd_config.d/ rather than /etc/ssh/sshd_config. The files are read ins order, so your filename needs to sort after the 50-cloud-init.conf file.

This would work: echo "PasswordAuthentication no" > /etc/ssh/sshd_config.d/60-password-auth.conf

lathiat··on Windows 11 ISOs for ARM64 devices
Someone still needs to write drivers, just like the Asahi Linux project.

Given how good virtualisation mostly is these days, I don't really expect Apple to do that at this point.

lathiat··on Bypassing regulatory locks, hacking AirPods and Faraday cages
Still did it on 18.0. It just averaged the two ears into a single profile.
lathiat··on Show HN: Bluetooth USB Peripheral Relay – Bridge Bluetooth Devices to USB
I had a similar problem but dual booting windows/linux. Though I managed to share the link keys with some registry hacks in the end.

https://gist.github.com/madkoding/f3cfd3742546d5c99131fd19ca...

lathiat··on Bypassing regulatory locks, hacking AirPods and Faraday cages
It also applied the same profile to both ears, which matters for some. My hearing loss is highly asymmetric.
lathiat··on Show HN: Ratarmount 1.0.0 – Rapid access to large archives via a FUSE filesystem
This is awesome :)
lathiat··on A deep dive into Linux's new mseal syscall
This may help a bit: https://lwn.net/Articles/948129/
lathiat··on Chromium uses web search for .internal TLD instead of opening URL
Rendezvous = Bonjour = Multicast DNS Service Discovery
lathiat··on Apple Passwords’ generated strong password format
They do have a big list of exceptions for password rules, you can find more details here. Seems they are collaborating with some other password tools, so maybe at some point switching products won’t help? Not sure. Bit Warden seems to make no attempt as this currently: https://rmondello.com/2024/09/29/new-quirks-who-dis/ https://github.com/apple/password-manager-resources/blob/mai...

But you can also fix it yourself if it fails. How is detailed here: https://support.apple.com/en-au/guide/iphone/iphf9219d8c9/io...

lathiat··on The science of "Zoom fatigue"
I have to agree with this, I find no video much more exhausting and difficult to follow.

I do have quite a few people that are non native English speakers that though not really difficult to understand, have great english and don't have very thick accents, does still up the difficulty slightly. Most of them also don't have the greatest audio setups (but not the worst, often plugin headsets with the dangly mics).

I love the video, lack of it drives me nuts.

lathiat··on Austin 3.7 – Python frame stack sampler for CPython
Austin is a great tool, along with it's friends like rb-spy, py-spy, perf, bpftrace.. the ability to trace live activity in production is a super power problem solver.

I honestly don't know how people solve anything without tools like this.

lathiat··on 1 bug, $50k in bounties, a Zendesk backdoor
You can have a Google ID on any e-mail address, even without workspace. e.g. You don't need gmail to use YouTube.
lathiat··on 1 bug, $50k in bounties, a Zendesk backdoor
I love the old school logos for Twitter, MySpace, Facebook, etc in the footer.

Takes me back to a more innocent time of the Internet.

lathiat··on 1 bug, $50k in bounties, a Zendesk backdoor
I think what he means is, if you have an @gmail.com account via Google, that is pretty good proof of control. But if you have any other e-mail (e.g. a custom domain) via Google, it's not.

Similar with Apple, if you were signing in with an @icloud.com, it's pretty good proof, but if you have an Apple ID with a third-party e-mail it's not proof of current control of that e-mail.

That's my guess.

lathiat··on Emirates airline bans pagers and walkie-talkies after device attacks in Lebanon
Specifically "Fifth Freedom" flights, but they are a minority of Emirates flights, often with a subset of the people that flew the Dubai connecting section.
lathiat··on Terminal colours are tricky
Was going to say "hey just set $TERM", then saw your comment and actually read the article which covers all of this pretty well. But, not only am I annoyed about this, but I feel that being annoyed about this confirms I am definitely getting old. yells at cloud

Starting using Linux at 15 in 2002. Didn't realise how "early" that was then (especially compared to now, seemed old then). Been working professionally in the space since 2006. Now I'm 37. Yikes.

On the plus side it definitely works for your more basic tools.. for most of the non-basic ones, as a hack you could pipe the output to "cat" as most tools try to detect if the terminal is interactive or not to remove colors from output being piped. It also annoys me we don't have a better way to signal that, and I have to pass --colors and hope it's supported to every command where I want the colors but just to filter the output by line with grep.

Anyway...

lathiat··on Legalizing sports gambling was a mistake
There are no pokies outside the Casino in Western Australia (Perth). And thus no pokies at sports clubs or bars etc. It’s glorious.

I admit to not being entirely sure what "Sports Clubs" are over east though or why they need propping up by gambling. In any case, it works fine here.

You CAN get a permit for a few bits of "gambling" that is mostly only for "sports clubs" but it's very VERY restricted, and mostly like actual games with people like Poker, Two Up, etc. It's not really a problem in nearly the same way, and no machines: https://sportscommunity.com.au/club-member/wa-gambling/

lathiat··on Tcl under fire: report suggests its QLED TVs might not have any quantum dots
Eggdrops, get your eggdrops here!
lathiat··on macOS Sequoia is available today
I use the "Multitouch" app from the same developer which integrates Rectangle with some other things.

Trying out the new macOS version.. it's a little fiddly to activate sometimes didn't want to go. Then the margin/spacing between the edge of the screens was annoying. Though I discovered that there is an option under "Desktop & Dock" in settings you can turn off called "Tiled windows have margins".

What I haven't figured out is if you can create a keyboard shortcut to tile left or right without using the mouse... so far have not figured out how to do that. Couldn't see an option for it.

Those settings revealed another option though to "Hold key while dragging windows to file". If you hold that key you don't actually have to drag to the edge, just move it to the correct side of the monitor (or not really move it at all if it's already on that side). Interesting alternative.

But I really often specifically use a keyboard shortcut for tile left, tile right or tile left third/middle third/right third (on a 35" Ultrawide).

lathiat··on How on-the-wrist sleep apnea detection works
The watch can ramp the detection up for periods of time if it chooses, such as when doing a workout. But also, people with sleep apnoea tend to have their O2 trend low not just go briefly low.
lathiat··on Greppability is an underrated code metric
These are both of the problems I regularly have. The first one I immediately saw when reading the title of this submissionw as the "super case insensitive" that I often see when working on Go Codebases particularly when using a combination of Go Classes and YAML or JSON. Also happens with command line arguments being converted to variables.

But the string split thing you mentioned happens a lot when searching for OpenStack error messages in Python that is often split across lines like you showed. My current solution is to randomly shift what I'm searching for, or try pick the most unique line.

lathiat··on Starlink will provide free global cellular emergency services access (e.g. 911)
I did cover that :)
lathiat··on Starlink will provide free global cellular emergency services access (e.g. 911)
Apple is paying a pretty penny to GlobalStar for a similar service. Though the iPhone version (which works now in the iPhone 14 and 15, though is also country-dependent) is a very low bandwidth text-based option that can take a minute or more to send and require special pointing at satellites. Starlink is claiming to be able to deliver a limited number of voice streams direct to devices, even for non-emergency.. how the delivery of that goes in actual practice remains to be seen.

Apple have basically said its free with any supporting iPhone for "the first 2 years" and then extended it a year so far (https://www.apple.com/au/newsroom/2023/11/apple-extends-emer...)

It totally makes sense as effectively a (fairly expensive) marketing expense to sell iPhones. But I have wondered how much of that limited time freebie is just legalese protection for the event they discontinue the service or something, versus some possible future where they actually tried to charge for it in some way. That seems like a PR nightmare.

I'm curious to see how that goes long term.

The cost seems to have been in the $200-$500m range, source: https://www.apple.com/newsroom/2022/11/emergency-sos-via-sat...

lathiat··on Removing stuff is never obvious yet often better
That is the value of testing things. Sometimes the result is non obvious :)
lathiat··on Big Pharma claims lower prices means giving up miracle medications. Ignore them
In Australia, prescription drugs generally cannot be advertised to consumers. Additionally, prescriptions for all drugs are written in the generic drug name form and not the branded form.

That said, where this currently seems to fall apart is the pharamacies.. most only stock a single "brand" and pricepoint for many drugs, two at most. Most pharamcies aren't online so you can't easily compare prices. In practice, I have frequently observed over many different prescriptions a price different of 1-2x between pharamcies in the same area for the exact same thing and dosage. Additionally, the way we fill scripts here you don't even get the price until you go to pay and theyve already labelled your box with your script, etc.

There's also largely no pricing on the shelves, even if you can see the behind the counter ones.

The only thing that saves us, is that "many" but not all drugs are subsidised by our public health care and the government negotiates the price. But for any non-subsidised drug it's open season and also much of the pricing is "per dispense" and not at all related to the drug quantity.

e.g. 4x10mg or 28x5mg of the same drug has the same price.

Also recently the much-publicised Ozempic which is used for weightloss and diabetes which is $150/dose here, because the price is fixed by that government negotiated price for diabetic patients but off-label prescribers get the same price even when not subsised by the government and they actually have to pay the full $150. They launched the literal exact same drug for weight loss as "Wegovy" but they vary the recommended dosages a little so that in practice you can't cross-fulfill the prescription. The exact same 1mg is $150 when sold as Ozempic and $250 when sold as Wegovy :) And for some straight reason the weight loss dose is "2.8mg" but the diabetic doses are 1mg and 3mg.

← PreviousPage 3 of 34Next →