HNHacker News
TopNewBestAskShowJobs

marcusb

3,342 karma · joined August 12, 2016

I mainly do backend development in Rust.

You can find me online at a few other places:

* Email: marcusb@marcusb.org

* Blog: https://marcusb.org

* Mastodon: https://mastodon.sdf.org/@marcusb

Certified “AI hater” — Ars Technica

---

[ my public key: https://keybase.io/marcusb; my proof: https://keybase.io/marcusb/sigs/M6JD8qft2hLYGUHk57yfm5NG9pN-BrilfjCak7rFOl4 ]

submissionscomments
marcusb··on Critical Cache Poisoning Vulnerability in Dnsmasq
If you can sniff traffic from the originating server, you don't need to guess either; if you are in a position to read the source port, you can read the transaction id and vice-versa.
marcusb··on Critical Cache Poisoning Vulnerability in Dnsmasq
Sure, but the author publishes their email address on the main dnsmasq page:

  Contact.
  There is a dnsmasq mailing list at http://lists.thekelleys.org.uk/mailman/listinfo/dnsmasq-discuss which should be the first location for queries, bugreports, suggestions etc. The list is mirrored, with a search facility, at https://www.mail-archive.com/dnsmasq-discuss@lists.thekelleys.org.uk/. You can contact me at simon@thekelleys.org.uk.
marcusb··on The Framework Desktop is a beast
AI Mini and AI Max. It has everything.
marcusb··on Open AI announces $1.5M bonus for every employee
"The market can remain irrational longer than you can remain solvent."

I wouldn't bet against these valuations with my own money -- at least to the extent you can -- but that doesn't mean it isn't a bubble.

marcusb··on We Don't Believe in Work-Life Balance
To borrow from the old saying, he may not believe in work-life balance, but work-life balance believes in him. He isn't building a "performance culture", he's gambling (whether he realizes it or not) on a liquidity event or reaching some sort of competitive moat before employee burnout, turnover, and technical debt overwhelms the company.
marcusb··on Dotfiles feel too personal to share
I ended up writing some pretty hacky elisp to automatically load my chezmoi templates if I try to edit a Chezmoi-managed file. It'll also handle applying and pushing saved changes to my git remote so I don't forget that either.

https://marcusb.org/posts/2025/01/frictionless-dotfile-manag...

marcusb··on “No tax on tips” is an industry plant
Well, they say they did experience it. You cannot possibly know otherwise.

There’s also another commenter in this thread who says they’ve lived in Ireland for their entire life and says they’ve experienced the same thing.

Then, there’s you.

There are two likely explanations I can think of for your behavior here. 1, you are arguing in bad faith. 2, you are unable, for whatever reason, to understand that others might have a different experience in the world than you.

In either case, I don’t see any point in continuing this conversation. Have a nice day.

marcusb··on “No tax on tips” is an industry plant
The original poster's subjective, personal experience with tipping culture in Ireland is "factually incorrect"?

Perhaps they just had a different experience than you.

marcusb··on How to Secure a Linux Server
They did a little threat modeling:

  Practical & real Example: "Some Robber invade a home, and steal the server (containing IMPORTANT business backups, and ownlife memories and blablabla). Not exist any disk/boot encryption. Robber have start the server on their 'safe zone' and start an bruteforce attack. He have cracked the local password by SSH with from sudoer user 'admin' success, yeah a dummy password, not THE Strong one/primary. He starts SSH session/or physical session with that cracked dummy/panic password with 'admin' sudoer. He starts feeling the server seems too much busy in less than 2 minutes until to freeze.. 'wtf!?! lets reboot and continue steal info..'.. sorry friend. all data and system was destroyed.". Conclusion, the robber cracked the dummy/panic/secondary password, and with this password its associated a script will do delete all files, config, system, boot and after than start charge the RAM and CPU to force robber reboot system.
That's...not a scenario I've focused on for my personal assets, and I'd be more worried about the duress password getting triggered by a random over- the-network brute force and losing my data, but to each his/her own.
marcusb··on How to Secure a Linux Server
Buy a Yubikey/Nitrokey. Get a second one and store it in a safe place in case you lose the first one.
marcusb··on “No tax on tips” is an industry plant
> I disagree. Irish are _much more_ receptive to criticism of the country from immigrants than most countries.

Unless, of course, the criticism is someone making a personal observation about how they saw tipping culture expand during their time in Ireland, right? Then the appropriate response is to generalize that Americans love making ignorant comments about other cultures.

marcusb··on GOP’s Josh Hawley and Democrats vote to advance congressional stock trading ban
Yes, it is a middle ground. The extreme positions here are "no equity ownership, directly or indirectly" and "no trading restrictions at all." Allowing index fund purchases is squarely in the middle of that continuum.

Additionally, your description of how people purchase and make money on indexes funds is incomplete at best. Really, it's just factually incorrect in that it presumes a certain purchase strategy. People do short-term, dopamine-inducing trades of index funds all the time.

But, I don't think elected representatives should be able to do that, either. At the very least, successful short term trading - directly or through an advisor, of an individual security or a fund - creates the appearance of impropriety.

marcusb··on Hawley and Democrats vote to advance congressional stock trading ban
> There's a middle ground somewhere in there I'm sure

The parent commenter pointed out the middle ground:

> I think only allowing congress members to buy and sell index funds is fine.

marcusb··on Our $100M Series B
> what I don't understand how these magical "sales people" apparently can't work for a fixed salary when literally everyone else can

It isn't that "sales people"[0] can't work for a fixed salary. The good ones just won't because they can find another employer that will pay commission, and they know they will make more with commission than without.

Employers will pay commission because that's how you attract the best sales people, and the best sales people are worth orders of magnitude more to their business than average sales people. Despite how much they earn, in general and compared to their average peers, the best sales people don't cost orders of magnitude more (5x is a more typical spread in tech sales.)

The advantage of 100% commission -- where it is legal -- is pretty obvious from the employer's view point. The company only pays for production. These sales people are commonly (but not always) independent contractors. The benefit for the sales person is a little less obvious, but, generally, they have more autonomy, a simpler comp plan without any caps, and earn more per dollar sold than they would on a base + commission plan.

0 - whether magic or not

marcusb··on Allianz Life says 'majority' of customers' personal data stolen in cyberattack
Why would it be? Is Allianz Life a covered entity? If so, why would it depend on the specific CRM being used?
marcusb··on Major rule about cooking meat turns out to be wrong
And Meathead over at Amazing Ribs[0]. Their explanation[1] for the "stall" (evaporative cooling) in smoking large cuts of meat is great as well.

0 - https://amazingribs.com/more-technique-and-science/more-cook...

1 - https://amazingribs.com/more-technique-and-science/more-cook...

marcusb··on Make Your Own Backup System – Part 1: Strategy Before Scripts
The drive enters the cycle again. I use the drives until they show signs of failure (SMART monitoring/testing), or until I need to upgrade for capacity reasons.

I'm using "recertified" (really, used) drives that I've written about here: https://marcusb.org/posts/2024/03/used-hard-drives-from-tech.... They are inexpensive and, so far, have been very reliable. (And, yes, I've done restores from the backup sets.)

marcusb··on Staying cool without refrigerants: Next-generation Peltier cooling
A friend had a Peltier cooler on a late 90s/early 2000s CPU and had the condensation problem. The cooler (or maybe CPU, or both; I can't remember which) had an algae-like growth all over it.
marcusb··on Make Your Own Backup System – Part 1: Strategy Before Scripts
It's pretty simple: the backup host has the backup disk attached via a usb cradle. There's a file in the root directory of the backup disk file system that gets touched when the drive is rotated. A cron jobs emails me if this file is more than 3 months old. When I rotate the disk, I format the new disk and recreate the restic repos for the remote hosts. I then move the old disk into a fireproof safe. I keep four drives in rotation, so at any given point in time I have the online drive plus three with progressively older backup sets in the safe.
marcusb··on Make Your Own Backup System – Part 1: Strategy Before Scripts
> Ransomware is really clever these days and if you PUSH your backups, it can also encrypt or delete all your backups, because it has access to everything

That depends on how you have access to your backup servers configured. I'm comfortable with append-only backup enforcement for push backups[0] with Borg and Restic via SSH, although I do use offline backup drive rotation as a last line of defense for my local backup set. YMMV.

0 - https://marcusb.org/posts/2024/07/ransomware-resistant-backu...

marcusb··on Known Bad Email Clients
We’ll have to agree to disagree about that. The clown-emoji guy is out of line (at least, I wouldn’t respond to a user that way,) but the reporter:

* opens up his bug report passive-aggressively complaining about not getting a response to his emailed report, which he sent to a completely unrelated domain

* immediately fished for a bug bounty payout

* submitted his report against a 2.5 year old release, wasting maintainer time and then pushes back that because it came with his preferred distribution[0] that made it the Evolution maintainer’s problem.

* when the maintainers pointed out this was a dependency problem, accuses them of “buck passing” and demands they warn users of specific distributions about the problem he reported, which is, of course, completely impractical for them to do.

* does not engage at all with the Webkit developer who is trying to explain what the problem is and why fixing in Webkit is the right thing.

* demands one of a selected list of fixes from the maintainers. Note: if his suggested fixes are so simple, a PR at this point implementing one of them would have probably been more productive than what he did post:

  I understand that this is completely out of your power to do anything about, and that it is also completely out of your power to put a notice in the UI about the functionality not working for privacy purposes. Please add clown and face-palm emojis to this comment as per my other comments, to indicate you have read it.
He didn’t do himself any favors and, IMO, doesn’t have much of a leg to stand on to complain about the tone of the response he got. He got back what he put out.

0 - a distribution, by the way, that is notorious for distributing hacked up out of date software. See: the OpenSSH key saga as well as projects like XScreensaver that have Debian-specific FAQ entries telling their users how to get reasonably up to date software (https://www.jwz.org/xscreensaver/faq.html#upgrade)

marcusb··on Known Bad Email Clients
Not defending the GNOME devs as being perfect, but I'd suggest reading this from the start: https://gitlab.gnome.org/GNOME/evolution/-/issues/3095 and then deciding if the author is really being affected by a "toxic development culture" at GNOME.
marcusb··on Cloudflare 1.1.1.1 Incident on July 14, 2025
You cannot throw a rock without hitting a product marketer describing everything not-their-product as "legacy."
marcusb··on Two guys hated using Comcast, so they built their own fiber ISP
I once spent half an hour on the phone with a dialup customer who couldn't get connected. Fortunately, they fixed their own problem - they had been entering the "letter zero" instead of the "number zero" (their words.)

Took another call from an irate dialup customer who demanded a refund - he didn't know he needed a computer to use the internet -- and had driven himself mad dialing up our modem bank with his telephone and waiting for the training tones to subside so he could begin to navigate the internet as he imagined it to work: press 1 for email, 2 for news, 3 for weather...

Despite the proliferation of smart phones and greater prevalence of home networks, I don't think the situation has changed much for a segment of the population once you get down to troubleshooting why something isn't working. The skills and the willingness to just try to fix the problem aren't there.

marcusb··on A.I. Might Take Your Job. Here Are 22 New Ones It Could Give You
Yes. It is on the list of jobs that will be lost to AI tool use.
marcusb··on Grok: Searching X for "From:Elonmusk (Israel or Palestine or Hamas or Gaza)"
Sorry. Site rules prevent me from responding to your comment in the manner in which it deserves.

Have a nice day.

marcusb··on Grok: Searching X for "From:Elonmusk (Israel or Palestine or Hamas or Gaza)"
For the record, I remembered the rough Chomsky quote, and found a page[0] with the exact verbiage but no context. I went with my memory on the context.

0 - https://www.goodreads.com/quotes/9692159-i-m-sure-you-believ...

marcusb··on Grok: Searching X for "From:Elonmusk (Israel or Palestine or Hamas or Gaza)"
My mistake, thank you.
marcusb··on Grok: Searching X for "From:Elonmusk (Israel or Palestine or Hamas or Gaza)"
This reminds me in a way of the old Noam Chomsky/Tucker Carlson exchange where Chomsky says to Carlson:

  "I’m sure you believe everything you’re saying. But what I’m saying is that if you believed something different, you wouldn’t be sitting where you’re sitting."
Simon may well be right - xAI might not have directly instructed Grok to check what the boss thinks before responding - but that's not to say xAI wouldn't be more likely to release a model that does agree with the boss a lot and privileges what he has said when reasoning.
marcusb··on Who is Soham Parekh, the serial moonlighter Silicon Valley can't stop hiring?
... and Flo, Matt, and some dude named Haz. Did that not fit your narrative?
← PreviousPage 3 of 9Next →