HNHacker News
TopNewBestAskShowJobs

netflixandkill

319 karma · joined March 3, 2020

submissionscomments
netflixandkill··on The Blue Hole in the Red Sea is the deadliest dive site in the world
I haven't been to the blue hole, but I can easily see nonchalant guides leading people to ignore any misgivings they had from what little training they may have had years ago.
netflixandkill··on The Blue Hole in the Red Sea is the deadliest dive site in the world
More likely that the target depth is down near 50m, which is well into the narcosis range for surface gas mixes. Particularly for inexperienced divers it is very easy to not realize what is happening and become too stupid to save yourself.

Higher salinity may exacerbate that but not by too much.

netflixandkill··on CEOs are hugely expensive – why not automate them?
The keys to wild success are getting in early and being lucky.

I'm entirely sure a lot of the early people at Amazon were in fact quite bright and hard working, and many good decisions were made, but plenty of other people knew selling stuff online was going to happen but couldn't get the stars to align on funding, or had a key member suffer a personal setback early on, etc.

netflixandkill··on Internet down in Tumbler Ridge, B.C., after beaver chews through fibre cable
If we can demonstrate to the beavers that BGP blocks running water, they may train themselves.
netflixandkill··on How Developers Choose Names
Discussions about naming schemes make me think of the old joke "until I got married, I had no idea there was a wrong way to boil water" or other variations of banal tasks :)

Perhaps there is an answer lurking out there in the universe, but it feels more likely it'll only be invalid pointer Aborted (core dumped)

netflixandkill··on Spanish police raid factory making 3D-printed weapons
It's not, that's nonsense or a gross misunderstanding.

In any case making gun barrels has been doable with fairly simple metal working tools long before 3d printing - particularly if you're not hung up on reproducible quality. But even that would still take a few hours. 3d printing is a bad fit for that task.

netflixandkill··on QUIC and HTTP/3 Support Now in Firefox Nightly and Beta
Quic has been around long enough that I suspect it's simply a common policy for both tcp and udp on 443. If you just want to charge for access, rate limiting is easier and there is almost never any local person involved in managing it.

A lot of VPN blocking isn't a specific, deliberate policy choice by the network owner, it comes in from default policy options on whatever awful vendor they use. The people seriously concerned about outgoing tunnels providing access back into protected networks that hides from normal packet inspection are a different case.

netflixandkill··on QUIC and HTTP/3 Support Now in Firefox Nightly and Beta
Been doing wireguard over udp 443 for a long time. Works pretty consistently.

Probably take a few years for the low-effort network blocks to figure out how to deal with that.

netflixandkill··on France cuts two nuclear-powered submarines in half to make one new one
A better law that more precisely addresses the various situations instead of depending on the verbiage chosen by the long dead.
netflixandkill··on FreeBSD 13.0
It's anything but the largest projects really. Even mainstream linux support for a lot of laptops is still iffy. Too much work for too few people and fewer willing to pay to make it happen.

It will be interesting to see if further ARM penetration into what was historically Windows-or-Mac only portions of the laptop market helps with that.

netflixandkill··on Pass: The standard Unix password manager
Unless you need multiple concurrent writers or some kind of RBAC it's going to be really hard for anything to beat the KP database just because it already takes into things like that into account, along with optional entry history, arbitrary associated values, etc.

Been using it both with computers/phones and via programmatic access on cloud storage for years.

netflixandkill··on Surface Laptop 4
Had surface pro 4, also nice hardware, decide it was going to update Windows right now 30 minutes into a trans-pacific plane flight even though every knob for updates was set to manual only.

Took almost all of the 14 hours over airplane wifi in which I could not work at all.

Gave it away to charity the day after I landed. Its sister unit a coworker had bricked itself about two years later.

netflixandkill··on Zoom zero-day discovery
I mean my laptop from 2014 had 32g (and like another 4g on the graphics processor) so that's not exactly outrageous for anyone doing serious work.

My laptop from 2019 also had 32g and was less than 2000 usd.

Obviously most people don't need that and I'm sympathetic to anyone having to run teams on some shitty IT-provided low cost laptop loaded with 7 different management spyware suites, but 16g-32g is not baller in a limo outrageous.

netflixandkill··on CPU-based algorithm trains deep neural nets up to 15 times faster than top GPU
The geometry calculations across matrices for 3-dimensional euclidean objects are both relatively easy to do directly in hardware and repeated in only slightly varying ways for the various rendering stages.

Given the increasing sizes of framebuffers and textures it makes sense to localize that, although many CPUs now include a GPU equivalent on the same die and many of the same sort of instructions.

A lot of it comes down to how big and independent the working sets are as opposed to strict advantage in computation as well.

netflixandkill··on My NAS exposes itself over the internet without permission
UPNP doesn't "punch holes in NAT." It is dynamically configuring NAT to provide a specific translation. The same kind of dynamic translation happens the other way for any allowed outgoing traffic, and lots of old NAT traversal tricks made use of that before UPNP was a thing.

The hole was always there. People get this topic confused all the time because the majority of network devices doing NAT are also acting as firewalls of varying efficacy. There are basically no non-firewall routers anymore, they all have at least simple network address ACLs.

The purpose of upnp is touchless configuration. If you care about security, that is orthogonal to your goals, and so it must be restricted by some other policy enforcement.

netflixandkill··on My NAS exposes itself over the internet without permission
This sort of thinking is endemic in industrial networks; they finally internalized basic ipv4 concepts in the late 00s and never considered maybe the stateful tracking required for UPNP and other NAT tricks also might exist without it.

I've set up several private v6 networks to deal with renewable energy projects in which the integrator used the same ipv4 address blocks on every single one, and the whole 6to4 translation explanation landed like they had just seen a devil sorcerer graft a goat head onto a human.

netflixandkill··on Jump in cancer diagnoses at 65 implies patients wait for Medicare: study
The existing political "solutions" stagger on like walking corpses until they completely collapse, and are replaced by something that may or may not be any better based on the luck of who ends up making the decisions.

Fixed in place is rare unless something, usually external, overwhelms entrenched interests.

netflixandkill··on Apple to build battery-based solar energy storage project in California
In the very long term converting excess generation into methane is almost sure to happen provided that can get accurately carbon priced versus ground extracted gas.

It's not even just seasonal capacity shifting, any situation that weight matters in will favor LNG over electric batteries for the foreseeable future even if batteries get 10x better.

netflixandkill··on Apple to build battery-based solar energy storage project in California
It's not even really a question of attention so much as maintenance. Fixed up front costs are easy to handle as capital that can go into their rate cases, but more so power equipment lifetime is measured in decades and the discharge lifecycles of available battery technology is already not great for an installation expected to go to near full discharge on a regular basis.

If the planned usage is only a 10% semi-daily scenario for stability support that may result in 5-10 years longer lifetimes versus daily discharges for capacity shifting.

netflixandkill··on Solar Is Cheapest Electricity in History, U.S. DOE Aims to Cut Costs 60% by 2030
It's not cynicism, it's understanding capacity factors and how difficult large scale storage is. If solar panels have a capacity factor of around .25, which is what we're seeing in real installations worldwide, then it is necessary to overproduce by at least 4x and store it somewhere for off-peak solar production hours.

It's even worse if there is not other dispatchable generation available unless people are willing to accept periodic blackouts.

We're in the process of building out a combined solar and battery installations in Guam, which is about the ideal case with predictable weather, predictable load, little heavy industry and low potential for load growth. It'll enable them to retire all their old fuel oil generators, but they'll be keeping the diesel/LNG plant for at least the next 30 years even if they only run it a few days worth of time every month.

netflixandkill··on The Worsening State of Ransomware
There are USB drives that do vaguely similar things but it's all in software. It's difficult to do that unless the filesystem has append only functionality, metadata blocks are rewritten all the time even if data isn't.

For anyone who has serious (I.e. $$$) need of that they already have tapes and optical WORM media though.

You can do something conceptually similar with any sort of NAS that provides immutable snapshots as long as the management and control is effectively out of band.

The out of band part is the key. Our SAN data has snapshots. The backups are written to another storage device that only has an API key to write them to B2 storage. An attacker would effectively need to completely compromise multiple admins in the organization to get at all the stages of data duplication, and frankly there is no additional line of defense for total compromise if the attacker is willing to wait for physical tape or disk swaps.

Fortunately for ransomware, time is money for them too.

netflixandkill··on The world needs a software bill of materials
We're already living with dedicated software companies having serious issues with their internal lifecycles and secure build processes. The concept of a SBOM isn't bad but any nontrivial end product is going to be pulling in orders of magnitude more component software than even large nested BOMs do, and no one is willing to pay to maintain what they have internally, much less read and act on that.

In principle, sure, but in immediate practice it would be like california forcing the labeling of basically everything as carcinogenic -- a step sort of in the right direction but mostly useless in practice.

The one thing that absolutely needs to be considered is not constructing it in a way that encourages private and unmaintained forks or requiring business contractual liability. Most of software only works as well as it does because there is so much really good open source to draw on.

netflixandkill··on Nyxt Browser
This is primarily why I use Brave, particularly on phones. I've had some form of ublock and js whitelisting since 2002 or so and don't even recognize most sites without them.

I assume a lot of the potential "early adopters" for any new browser are privacy/security focused and as neat as it is conceptually that's going to be a steep climb for any new project.

netflixandkill··on The Kilobyte’s Gambit
Reddit sadly went the way of mostly write-only microblogging a long time ago now. I'm not sure what the solution is between invite only subs or heavy and time consuming moderation, and random comments that are just people thinking out loud, as using any sort of karma metrics would be useless when you can get 20-30k off a no effort post in a popular sub, but I also doubt that reddit the company spends much time worrying about it.

I can't remember who I stole "the internet is write only" but it's felt very true as audience size exploded.

Perhaps the worst part is that it's self reinforcing in either direction, and few people ever leave the agora unless they delve into niche subjects, so they bring the agora mentality with them.

netflixandkill··on Remembering Allan McDonald, who refused to approve the Challenger launch
> It's one thing to praise a hero like him... but how can we be that guy while having a stable job?

You decide that ethics and life are more important that your next few paychecks years before the event that makes you stand up and speak out. Sort of the stoic version of dress for the job you want.

For many businesses, from the regular employee perspective, a lot of the hard ethical questions unfortunately got answers and built into policy years agoz often well before platforms and products got big for those that succeeded. Getting old discussions resurrected is and likely will remain a hard problem in human organizations forever.

Perhaps counterintuitively, working on systems with clear life safety concerns often makes it easier since there are very clear consequences. It's one of the reasons for very harsh regulatory penalties, to be big and shocking enough for those that don't have strong ethical paradigms. In the industries I deal with there are several "million dollar per day" fine structures I hear people going on about that I never correct with more accurate information because if they're oblivious enough to not understand they're also oblivious enough to need that fear.

netflixandkill··on It Turns Out You Can Bullshit a Bullshitter After All
Bullshitting is manipulative storytelling. Some of what a bullshitter says is true. Some of it they even believe is true. Some of it they desperately want to be true. What's outright false they would say is unimportant and deflect rather than argue about.

But they're saying it to get something they want or avoid something they don't want, and they'll tell any remotely plausible story to make that happen. Bullshitters change the story to fit the situation, often in real time as it develops.

Lying is more straightforward in that the liar is saying something they specifically know is not true to deceive the listener.

netflixandkill··on The Texas power outage is a nation-wide problem
Had Texas been attached to the eastern interconnect, and remained connected through 25-30 GW of shortfall, yes, rotating blackouts would have been spread across dozens of states.

The blackouts in the MISO and SPP areas were not as bad, but still had to happen to weather (pardon the pun) generator failures.

netflixandkill··on The Texas power outage is a nation-wide problem
Nobody had a problem with it being "global warming" until the mid 90s when political interests made a culture war point. They would have done so regardless of how accurately the phrase described the phenomenon.
netflixandkill··on The worst of the two worlds: Excel meets Outlook
Comically with their resources they could have put together a type-safe back end on sqllite with multiple available frontend APIs to gradually transfer users to Excel But Not Shitty, yet seem to have made no effort towards anything like that.

I still see people getting date and numeric fields mangled by excel on analysis processes that take literal days to solve because it ends up recursing over all the cells multiple times, and yet even showing them a simple Python or whatever program that does the same thing in minutes, and the result is still put in excel, the next time they need something similar ... Here's another excel abomination.

These aren't dumb people. They've been trained by Excel that the world is awful, slow, and error prone.

netflixandkill··on How Covid brought the future back
Indeed. I mean, I own Telsa stock, so I'm not unhappy about what it's doing, but I'm not about to invent reasons why it makes sense. Eventually the major manufacturers like Toyota and VW are going to pivot and Tesla is going to be an entertaining footnote of daring that paid off ... in past tense.
← PreviousPage 2 of 4Next →