HNHacker News
TopNewBestAskShowJobs

patrakov

1,586 karma · joined December 21, 2020

submissionscomments
patrakov··on Free software scares normal people
For one of my relatives, it also never happened. I installed Linux on their laptop that was having issues and explained how to browse the web and use some apps.

They always answered me "it works well".

But what I found during my next visit is a paper with a telephone number of computer helpers, and the laptop was running a fresh copy of Windows, presumably installed by these helpers.

patrakov··on Free software scares normal people
While working for one of the previous companies, I hit a regrettable counterexample for the point in the article.

Developers built a web UI for creating containers for the labs, taking the advice from this (then future) article too literally. Their app could only build containers, in the approved way. Yet, not all labs were possible to run in containers, and the app did not account for that (it was a TODO). Worse, people responsible for organizing the labs did not know that not all labs are compatible with containers.

Lab coordinators thus continued to create containers even in cases where it didn't make sense, despite the explicit warning "in cases X, Y, Z, do not proceed, call Alexander instead".

So if you make one button you better make that it is always the right button. People follow the happy-but-wrong path way too easily if there is no other obvious one.

patrakov··on The scariest "user support" email I've received
Wait for the next step, when the lawyers collectively decide that the crook that designed the payload is innocent, and you, the one who copy-pasted it into the LLM for analysis, are the real villain.
patrakov··on Three ways formally verified code can go wrong in practice
There is a useful middle ground here. When picking the middle element, verify that it is indeed within the established bounds. This way, you'll still catch the sort order violations that matter without making the whole search linear.
patrakov··on Testing two 18 TB white label SATA hard drives from datablocks.dev
Not really. I know that my sleep is worth more than the difference between HDD and SSD prices, and I know the difference between the failure rates and the headache caused by the RMA process, so I buy SSDs.

In essence, what we together are saying is that people with super-sensitive sleep that are also easily upset, and that don't have ultra-high salaries, cannot really afford 18 TB of data (even though they can afford an HDD), and that's true.

patrakov··on Microsoft is plugging more holes that let you use Windows 11 without MS account
> Adobe is a permanent barrier to Linux adoption

I tried their online versions of Lightroom and Photoshop in Firefox on Linux, and I am quite happy to continue paying the subscription. It definitely takes less clicking there to remove an unwanted bird from the sky in a photo than it would take in GIMP or RawTherapee.

patrakov··on Show HN: Use the right credit card every time
Feature requests:

1. Ability to add a debit card and receive a "just use a debit card" advice.

2. Ability to enter single-transaction limits on cards. The absurdly low and non-negotiable online transaction limit on my debit card (30,000 PHP = 515 USD) is the only reason why I had to apply for a credit card.

3. Ability to enter bank conditions like "if you don't spend 50,000 PHP monthly from this card, we'll apply a 500 PHP service charge".

patrakov··on Retiring Test-Ipv6.com
Dear Sir,

The absence of IPv6 within our organizational network is a deliberate and carefully considered decision, implemented in accordance with the requirements of our current cyber insurance provider. Enabling IPv6 would invalidate our existing insurance coverage, which in turn would result in the loss of a critical client whose continued partnership depends on our maintaining this specific insurer. This dependency arises from regulatory obligations that compel our client to source services exclusively from suppliers holding cyber insurance from accredited providers.

We recognize the technical benefits of IPv6, but compliance and risk management considerations must take precedence under these circumstances.

patrakov··on Retiring Test-Ipv6.com
Yes - see https://www.reddit.com/r/ipv6/comments/1nf3ytq/how_do_i_comp...

I could not escalate this inside Globe Telecom (no way to reach engineers that understand what a "peering issue" is), and Level3 (the transit provider where all failed traceroutes were going through) did not respond to emails.

Thankfully, it's mostly fixed now - Level3 is no longer the last successful hop on any of the traceroutes. The only failing link is with Evoluhost, and the problem has been traced to a routing loop involving 2001:fe0:4775:1c0::1 inside Globe (that I have no way to complain about).

Today's situation: https://i.ping.pe/j/9/img_j99kbqkn.png

patrakov··on Kagi News
Feedback (if someone reads it): offer an option to translate everything to English. For example, news from/about Russia are in Russian, and thus I can't meaningfully share them to non-Russians.

That's despite the appropriate HTTP header:

Accept-Language: en-US,en;q=0.5

patrakov··on Bcachefs removed from the mainline kernel
The end result is still positive. Before the mainline submission, Bcachefs could not be DKMSed, as it relied on changes in other subsystems, as opposed to just additions, so you had to compile your own kernel. Now, it is available as something that can be compiled as a module for any recent-enough third-party kernel.
patrakov··on Privacy and Security Risks in the eSIM Ecosystem [pdf]
> This has fueled a global marketplace of online eSIM resellers [54], operating across borders with minimal regulatory oversight. These services are typically marketed through web stores and mobile apps, with providers operating across borders and often facing minimal regulatory oversight.

But this is exactly the situation we have with VPNs. VPNs have proven themselves to be a useful tool for censorship circumvention, and foreign eSIMs are thus an interesting alternative suitable for this purpose, especially if traditional VPNs are blocked by the state.

patrakov··on In the era of "Vibe Coding", when Agents are writing code – what are you doing?
From a recent submission: https://donado.co/en/articles/2025-09-16-vibe-coding-cleanup...

And I am just a support person, so not directly affected. My core tasks are to support customers and to provide input to developers about the common points of struggling.

patrakov··on Ceph on NVMe Made No Sense to Us–So We Built a 40x Better Alternative
1+1 erasure coding? WTF? Is this a fancy name for RAID1?
patrakov··on Apple: SSH and FileVault
It makes sense temporarily. You can always move the key to your pocket later if nobody steals it.
patrakov··on PureVPN IPv6 Leak
Yes, all inbound ports are open.
patrakov··on PureVPN IPv6 Leak
They assign it directly to the interface, and letting others connect to stuff behind CGNAT is indeed my use case.

Two other VPNs working for this purpose are OVPN (+1 for them using WireGuard, but their Singapore node is slow) and SwissVPN (limited to only 30 Mbps by contract, but they do provide these contracted 30 Mbps).

patrakov··on PureVPN IPv6 Leak
This is still true for ISPs that don't monitor their IPv6 connectivity. I was forced to disable IPv6 recently because of this: https://www.reddit.com/r/ipv6/comments/1nf3ytq/how_do_i_comp...

And before you say "change the ISP": Globe is the only one that does not refuse to provide services to foreigners and does not lock you up into a 24-month non-cancellable contract, which is longer than any available non-resident visa.

patrakov··on PureVPN IPv6 Leak
They are one of the few VPN providers that give out public IPv4 addresses, and you can even get a static one. So, if you are using them for having a public IP, not for privacy, please continue doing so.
patrakov··on PureVPN IPv6 Leak
SwissVPN provides a /64.
patrakov··on Three random words to create a password that's 'long enough and strong enough'
These really have to be three random words from a 7000-word dictionary, not three words "randomly" brought up by a human brain.
patrakov··on The idea of /usr/sbin has failed in practice
A literal reading of this "cannot be run as non-root at all" interpretation would be: no commands ever should be in /usr/sbin, as a regular user might want to see their --help, and this doesn't require root privileges.

Sarcasm of course.

patrakov··on Ask HN: Is GPT-5 a regression, or is it just me?
You are not alone.

Another pet peeve is that it, when asked to provide several possible solutions, sometimes generates two that are identical but with different explanations.

patrakov··on Wayland breaks the tools I use to make a living
And, as explained, it doesn't matter. The problems, at root, are human psychology and incompatible but popular software, and that's sufficient to drive people away. And the issues are not new: we had exactly that with Windows Vista.
patrakov··on BCacheFS is being disabled in the openSUSE kernels 6.17+
I still have a btrfs with a big problem: more disk space used than expected. The explanation was helpfully provided by btdu:

    Despite not being directly used, these blocks are kept (and cannot be reused) because another part of the extent they belong to is actually used by files.
    
    This can happen if a large file is written in one go, and then later one block is overwritten - btrfs may keep the old extent which still contains the old copy of the overwritten block.
patrakov··on Hetzner Storage Boxes
pCloud offers a 399 EUR lifetime plan for 2 TB of storage, and you can buy this twice or more to add up the capacity.

The catch is the proprietary protocol, supported only by their own app and rclone. WebDAV works on paper, but is too slow to be useful.

patrakov··on AI code is creating more Ops incidents – who should own fixing them?
This article is an ad.
patrakov··on NPM debug and chalk packages compromised
No. It only proves that TOTP, as implemented by mobile apps, is useless against phishing.

The extension from https://authenticator.cc, with smart domain match enabled, would have caught this by showing all other TOTP codes besides the one intended by NPM.

On a Mac, Keychain would also have caught this by not autofilling: https://support.apple.com/en-ph/guide/passwords/mchl873a6e72...

patrakov··on How can I deal with a team member who is always complaining?
Reality check.

Complaint: tickets created by the QA team for developers, even seemingly trivial ones, stagnate in Jira for months and sometimes years without anyone looking.

Written plan: Hire somebody who will be actually responsible for planning and prioritization. Hire more developers, so that the existing ones are not overloaded.

Reality: "This is not a realistic plan. There is a budget, and you are not the one who makes hiring decisions, so shut up and stop creating tickets unless there is something really serious".

So - is the complainer above serious, or not?

(all of the above is pure fiction)

patrakov··on De-Googling TOTP Authenticator Codes
There was a misguided line of reasoning that if you can back up a digital artifact, it is no longer eligible as a "something you have" type of security credential.

Earlier versions of Google Authenticator did not have any export functionality at all, and the only way to transfer the codes to a new phone was to use a Google backup of the old phone, which is only possible during the initial setup.

← PreviousPage 3 of 22Next →