HNHacker News
TopNewBestAskShowJobs

nodefortytwo

170 karma · joined June 1, 2013

[ my public key: https://keybase.io/nodefortytwo; my proof: https://keybase.io/nodefortytwo/sigs/kVp32xwmR4ZLIIkGGG3ZGuwz_o6-7HOB6mX-OwHFQFw ]
submissionscomments
nodefortytwo··on Lorem Gibson
Love the idea, I immediately went to grok (testing for work) and asked it to give me a few placeholder paragraphs in WG's style:

"The street pulsed with a neon hum, data streams threading through the air like ghost veins in a concrete jungle. Holographic hawkers flickered at the edges of vision, their pitches fragmented by the static of black-market neural rigs. She moved through the crowd, her optic implants slicing through the visual noise, parsing faces for tells of corporate loyalty or freelance desperation. Every step was a negotiation with the city's rhythm, a dance of survival where the wrong move could flatline you in a datastream dead-end.

In the shadow of a megacorp tower, its glass skin reflecting a fractured sky, the air smelled of ozone and recycled dreams. He jacked into a public terminal, his fingers dancing over a haptic deck scarred with use, pulling fragments of encrypted chatter from the dark pools of the net. The data was alive, slippery, coded in dialects of machine and man, whispering secrets of a deal gone sour in some offshore server farm. Trust was a currency nobody carried anymore, not when every connection could be a trojan horse.

She crouched in the alley, her smartcoat shimmering to match the graffiti-smeared wall behind her. The drone overhead was a cheap model, its sensors blind to her cloaking, but she didn’t trust it to stay that way. Tech evolved fast here, and yesterday’s edge was tomorrow’s obsolescence. Her neural feed buzzed with alerts—proximity warnings, encrypted pings from a contact she hadn’t seen since the Osaka run. The city didn’t sleep, and neither did its ghosts, their voices woven into the code that kept this sprawl alive."

nodefortytwo··on Wearing an eye mask during sleep improves episodic learning and alertness
> Logic dictates that very likely wearing the mask has no effect at all

What logic dictates that?

nodefortytwo··on Scaling up the Prime Video audio/video monitoring service and reducing costs
To be fair to AWS, they do work really hard to (at least at an account level) to optimize workloads with you. They do this so overall you'll move more workloads to them.

its quite simple, if workload x can be done 100% cheaper on-prem then its an obvious move (probably) if AWS manage to get that closer to 30-40% then the operational benefits of using AWS make more sense, more workloads, more total spend.

nodefortytwo··on Show HN: Neat – Minimalist CSS Framework
> -There is a semi-obfuscated IP tracker in index.html

you mean that counter script, it wouldn't expose anymore information than a basic access log, I would assume it just makes it marginally easier to see which of his subdomains are popular.

nodefortytwo··on JWT vs. Opaque Tokens
Not all requests are created equally, maybe you don't check jwt revocation on some high throughput read endpoints but on updates or reading of sensitive data you do check that list.

with JWTs you have the flexibility with the opaque you don't.

JWTs also allow you to do client-side logic on things like entitlements but then verify against database when the user tries to view something

nodefortytwo··on Supply chain attacks and backdoored dependencies
Add on to that developers that use Dependabot or Renovate to automatically merge PRs with minor version bumps to "ensure the latest security patches are applied"
nodefortytwo··on The Internet Archive Book Images has deleted their Flickr account
Why should flickr invest time doing that when the IA didn't want the account?
nodefortytwo··on Self-powered diaper sensors that monitor urine sugar levels
why would you want that? nobody would wake a baby to change a diaper.
nodefortytwo··on Apple doesn't care about album cover art
In my car when spotify is playing through carplay I get a nice album art on my screen and between my dials, it also uses the colour as a blurred background effect, quite nice and makes me appreciate the art even if i'm (hopefully) not directly looking at it.
nodefortytwo··on TLS 1.0, 1.1 officially deprecated
I am in the same industry and we have the same problem. We are moving to having "insecure" proxies that support TLS 1.1 for devices that can't update. It won't add much security but at least demonstrates its was an active decsion to support it rather than a config mistake.
nodefortytwo··on The Pentagon has ordered Stars and Stripes to shut down
"The eagerness to kill Stars and Stripes is hard to fathom. As the senators note in their letter to Esper, the $15.5 million saved by eliminating the newspaper’s subsidy would have a “negligible impact” on the Pentagon’s $700 billion budget."
nodefortytwo··on Dividing front end from back end is an antipattern
In some spaces it is required to split out the backend from frontends. We support nearly 100 different native devices (web, mobile, tv, stb) there is no way you could have a team own a feature from end to end, without having huge teams with very shallow domain knowledge.
nodefortytwo··on Show HN: Managing SSH Access to AWS EC2 Instances Using SSM
Shameless plug for a tool I build for ec2-instance-connect: https://github.com/nodefortytwo/amz-ssh

I think the advantage of not having to have a public bastion is pretty nice though. I think i'd consider SSM over ec2-instance-connect

nodefortytwo··on Why Nukemap Isn't on Google Maps Anymore
I have always found AWS support to be pretty fantastic.

We have enterprise support at work with a named TAM who is amazing.

On my personal projects I have standard support and was able to speak to a very very capable tech on a sunday morning within 20 minutes.

Azure are pretty decent too, although they offload a lot of enterprise support to their partner network, but that works well enough.

GCP on the other hand...

nodefortytwo··on Kuma, a new universal service mesh
Really looking forward to trying this out. I get K8s is the bees knees and everything but we have an ECS history that will take time to migrate to K8s. I'm glad to see a modern service mesh not just targeting the collective
nodefortytwo··on Software made me loathe my car
I agree, I have Android Auto in my 2019 VW Tiguan. Its awesome but its very easy to spend more time than you think picking a playlist from spotify etc.

With your phone you know not to touch it when driving but the center console feels acceptable.

I had one close call where the car's auto breaking saved me from hitting a car that decided to turn without indicating. now I treat my centre console almost like my phone, I will use the console stopped at lights but not my phone.

nodefortytwo··on Amazon.com Announces Second Quarter Sales Up 20%
Where I work we spend millions per month on AWS, its our primary cloud platform.

At that scale the UI of the console really doesn't matter, everything is IAC so developers rarely need to directly access AWS. The one thing we do use is the Cost and Usage explorer which has a reasonable UI

nodefortytwo··on Logs vs. Metrics: A False Dichotomy
Although I agree in principle one other aspect that becomes critical in high volume systems is efficiency.

Logging is generally a text stream and in production should only be warning+ levels (imo) so the impact on performance is negligible and really only when something is going wrong.

I want metrics all of the time, potentially 10 or 20 metrics per request/action, a high performance, low network method for sending those metrics with low latency is critical.

We need both systems and both should be treated as tier 1 systems within an organisation. I don't think pushing metrics into a log stream is a scalable architecture.

nodefortytwo··on Lyft Files S-1
You are also calculating based on list price, with Enterprise discount, certain services can be quite a lot cheaper with spend that high.
nodefortytwo··on Coding as an Engineering Manager
For me I have always found the best projects to work on are Developer Experience projects.

In most companies its hard to dedicate the time to DevEx but as a manager I can rock out a few features for our cli in a couple hours. If i'm delayed it doesn't really hurt the status quo but when I succeed my developers love it because I make their lives easier (the (almost) entire point of being a manager). It scratches the coding itch too although I have lost many evening and weekends getting carried away.

nodefortytwo··on Sops – An editor of encrypted files using AWS KMS and PGP
We have been using Sops for a few months, it's pretty impressive really.

reading your Sops config during githooks allows you to ensure everything is encrypted before commit.

The only downside I have come across is that if you accidentally encrypt a file twice you essentially lose the data. obviously, this is user error but some additional protections around this would be good.

nodefortytwo··on Ask HN: Is S3 down?
Not seeing any errors from eu-west-1
nodefortytwo··on How much does employee turnover really cost?
In my business I do try to minimise turnover for almost purely emotional/moral reasons. It's good to have a team that as close to friends as possible. The technical cost of staff turnover is minimal because systems and processes should be designed in a way that anyone can leave without impact to the business for obvious reasons (illness, relocation, family circumstances)
nodefortytwo··on Design better databases
Yeah, i found that that too, spent 10 mins poking at it:

http://dbpatterns.com/documents/5707794a1514b4252236dcbe/

better, but not finished...

nodefortytwo··on The Elephant in the Room: Web design work is drying up
That maybe true but those who have work won't be emailing asking for help. You are still only sampling a skewed group.

We use freelancers a lot to supliment our inhouse skillset which I think is the industry standard

nodefortytwo··on Farewell to Flash
There are still places where flash reigns, mainly in digital out of home.

Its changing though, but it does mean we need a standardised way of deploying bundles of html/css/js and traditionally we haven't been great and standardising.

nodefortytwo··on WebMate: Automatic cross-browser testing
How do I set-up a paid account?
nodefortytwo··on The FDA buries evidence of fraud in medical trials. My students and I dug it up
Could this type of investigation be done automatically. pulling data from FDA and cross referencing against medical journals and FDA redacted docs.

I would love to try however I don't feel i know enough about the available data to work out what would be required

nodefortytwo··on Show HN: End-to-End Encrypted Cloud Storage. All Open Source
With ubuntu client, is there a cli exposed? we use ubuntu servers for our infrastructure, it would be nice to deliver files from certain servers to non-techincal users, is that possible
nodefortytwo··on Astral – Organize Your GitHub Stars with Ease
It would be awesome if it showed popular tags for a repo rather than having to manually tag each one. Maybe it does have that feature and i just star obscure repos
Page 1 of 2Next →