HNHacker News
TopNewBestAskShowJobs

pm7

62 karma · joined December 10, 2017

submissionscomments
pm7··on The $10m Engineering Problem
> If you wanted to compare apples-to-apples, you’d need to have (at least) three nearby colos with enough capacity to handle one going down entirely at peak load (“N+1”).

Not true if it's possible to fallback to cloud. That way we can have both high reliability and low cost (other then during outage/maintenance of collocation).

pm7··on Remove my password from lists so hackers won't be able to hack me (2017)
It's designed for devices which cannot do Google's 2FA, not for normal use.
pm7··on A detailed look at Ubuntu’s new experimental ZFS installer
> Sure but if you don't know how zfs works do you really want to figure it out in the middle of trouble shooting installation problems

Isn't it similar to using mdraid, lvm and dm-crypt without experience?

> or post install root volume problems?

In my other comments I suggested to not use ZFS for rootfs unless someone is already experienced.

pm7··on A detailed look at Ubuntu’s new experimental ZFS installer
> Furthermore, ZFS protects you from bitrot via multiple copies or RAIDZ or at least lets you know bitrot occurred (scrub).

Scrub is not even required for that: all data is checked when read, it's only for checking unused data.

> It lets you resize the dataset

Considering that you are talking about quota on directories, I'm not sure it is really advantage of ZFS. It's basic functionality.

pm7··on A detailed look at Ubuntu’s new experimental ZFS installer
Will you detect data corruption before your snapshots rotate? ZFS controls saved data. Also, it saves more more space then rsync as it can store just the difference (rsync will copy whole file if changed, which makes things like snapshots of virtual machine very impractical).
pm7··on A detailed look at Ubuntu’s new experimental ZFS installer
I think there are even some tools to do this directly in GRUB, at least for btrfs. We can have automatically created list of available snapshots.
pm7··on A detailed look at Ubuntu’s new experimental ZFS installer
> How many drives can you fit into a laptop?

Why?

One more addition to other replies: ZFS needs access to disks for self-healing (bit-rot detection and repair). It means that in the past if we wanted encryption, same date needed to be encrypted twice (one for every mirror).

Now with encryption in ZFS, date is encrypted before creating redundancy. We can even do a scrub without encryption key.

pm7··on A detailed look at Ubuntu’s new experimental ZFS installer
Unfortunately, FreeBSD uses different ZFS then Linux. Yes, it's crazy, but currently I think it is not guaranteed to be able to mount ZFS between these systems. Fortunately, FreeBSD is supposed to base their ZFS on Linux version in future.
pm7··on A detailed look at Ubuntu’s new experimental ZFS installer
> Why would you put ZFS on a laptop? How many drives can you fit into a laptop?

Checksums, compression, snapshots (so easy and fast incremental backups using send/receive).

ZFS is much more then RAID. Also, even with only one drive we can increase our chances a bit using copies=2.

pm7··on A detailed look at Ubuntu’s new experimental ZFS installer
I use it on both servers and notebooks. I did not notice increased power usage, but if it matters to you, you should check it.

I use it mainly for non-root volumes because of bad experience in the past (dkms deciding to not build zfs module on first try after update, kernel incompatibility, grub incompatibility, etc.). It's better now, but unless you are experienced I would suggest to not use it for root.

Main reasons I use it:

* checksums - I had undetected data corruption

* snapshots - great addition to backups

* compression

pm7··on A detailed look at Ubuntu’s new experimental ZFS installer
> I had to guess it would have an impact on battery life.

I guess it saves battery due to ARC (adaptive replacement cache).

> Unleas you're into either file systems or installers as a hobby, let others be the early adopters.

ZFS is already quite old filesystem as has great features (for example: checksumming, snapshots, compression) that should be already standard.

pm7··on “My Google account got suspended because of NewPipe”
There is huge amount of free mail service, unless you are talking about your own domain.

Even with custom domain, there are some mail providers that accept Bitcoin. See here: https://www.privacytools.io/providers/email/

And, once more: my previous point was that even if providers know your id, it is not public. There is no service you can use to ask what is name of e-mail address owner (I'm ignoring "whois", which is domain-specific, not mail).

pm7··on Ask HN: What do you self-host?
It's still public as of now.
pm7··on Ask HN: What do you self-host?
You may want to consider adding netdata user to docker group. It will allow checking Docker names of containers instead of numeric id.

Of course, it would simplify privilege escalation if someone successfully attack netdata service. If you want public dashboard, streaming is supposed to be quite safe (no way to send instruction to streaming instance of netdata).

pm7··on “My Google account got suspended because of NewPipe”
> Big email providers already do that.

It's exception, not rule. Even if they want you to give name, it's not something available for others if they only have e-mail address (unless address contains name).

pm7··on SEC halts Telegram's $1.7B token offering
Stock - in theory yes, but look at how massively overpriced they are now. For example, do you think 123B capitalization of Netflix is appropriate to value of company itself? If there was no expectation of stock value going up indefinitely, would it really sell for current stock price?

Currency - you said "state-backed" - backed by what? Forcing it's use by demanding taxes and paying salaries/bills is not "backed".

BTC: "most coins are held by a very low number of people" - can you prove it? Consider that keys to many old account are probably lost.

"Not backed out exchangeable by/for anything" - neither are most/all currencies. Even commodities like gold sell by much higher price that is "backed" by usage of these in industry.

"value purely coming from someone else being there to buy it" - there is some value in being able to transmit/store value

"Great for dissidents, tax evaders and anything illegal" - I would actually say cryptocurrencies are awful for these applications: there are little places where you can pay with them and many will require verifications (and will report significant transfers). Bitcoin blockchain is public allowing tracking of transaction. On the other hand, cash? Accepted anywhere, non-trackable and people are already experienced in money laundering.

"but not really any other case for its existence except among those with a radical distrust in government" - distrust in government seems to be just healthy at the moment (for example, see civil forfeiture and Snowden).

pm7··on SEC halts Telegram's $1.7B token offering
Just because he created software doesn't mean he issues BTC. Bitcoin by design doesn't grant him any control like that.

Pyramid scheme? Do you even know what does it mean? If Bitcoin is pyramid scheme, so are many others things like stocks, currencies etc.

pm7··on Adobe deactivates all Venezuelan accounts
Nextcloud?
pm7··on The privacy trade-offs of cheap Android smartphones
Main issue is that drivers are only in binary form and not compatible with recent linux (kernel) versions.
pm7··on Vulnerabilities exploited in VPN products used worldwide
I was just benchmarking routers in VM. I also tested Openvpn vs Wireguard. Results:

  Openwrt 18.06.4 32-bit
  wireguard: 645 Mbit/s ping 1.1ms
  openvpn: 164 Mbit/s ping 1.2ms

  Openwrt 19 (snapshot r11159) 64-bit:
  wireguard: 1.16 Gbit/s ping 1.1ms
  openvpn: 230 Mbit/s ping 1.2ms

  pfsense 2.4.4-p3 (amd64):
  openvpn: 115 Mbit/s ping 1.2ms
It was tested by moving traffic between two virtual bridges, Debian>router>Debian, on KVM (libvirt), CPU E3-1270, kernel: 4.19.0-4-amd64 #1 SMP Debian 4.19.28-2 (2019-03-15) x86_64

1 core, 2GB per VM

iperf3 -t 60

  Settings:
  Wireguard: defaults
  OpenVPN: no compression, udp, tun, defaults
I would also note that I setting wg took about 5-10 minutes while setting openvpn took about an hour.
pm7··on A Manager’s Guide to Kubernetes Adoption
Could you explain what do you mean by "NFS hardware offload"?

Google search points mostly to VMWare-specific "VAAI NAS framework", which doesn't seem to be useful in case of database over NFS.

pm7··on Show HN: Memorize Terminal Commands
That might make sense if there is some canonical answer to your questions. But if you arbitrarily choose "right" answer you are annoying people who already have some experience. But then, I guess you target people with little to not experience, right?
pm7··on Show HN: Memorize Terminal Commands
Why not do it by default? Why do you believe you can choose one "right" pattern?

Also:

Questions repeated multiple time within single session.

  Question: Write the command that clears the terminal
  command line screen and shows it as new
  Your answer:
  reset
 
  Correct answer:
  clear
"Clear" will not fix terminal in some cases. Maybe do not ask for "and shows it as new" and note you only want to remove current text?

  Question: Write the command that you use
  to move into your home directory '~'
  Your answer:
  cd
  
  Correct answer:
  cd ~
pm7··on Gmail tracks the history of things you buy, and it’s hard to delete
Unlisted disadvantages are that they do not allow sending with "From" other than primary mail address (which limits usage of catch-all domains) and I had to contact them multiple times to get responses.

https://news.ycombinator.com/item?id=19946607

pm7··on Gmail tracks the history of things you buy, and it’s hard to delete
I recommend checking out add-on Virtual Identity for Thunderbird. It will use "To" address as "From" by default when writing reply, allows editing "From" directly in new mails and will remember what address to use with any recipient and.

Unfortunately, some mail providers (like Migadu.com) block sending mails with "From" anything other than primary user address, even through they "support" catch-all. I was especially disappointed as that stopped me from using IDN mail address. I successfully created mail account using Punycode and I was able to receive mails with national characters, but their filter stopped me from sending.

I know IDN mail address is risky, but it's something I wanted to test. My surname contains non-ASCII character.

They indicated in January that they are working on allowing customization "From" filter customization, but it is still now available and contact with them is very difficult (they are not replying to mails unless you repeat question a couple of times). To be fair, I'm not paying yet (I wanted to test IDN works and it did not, so I'm not very interested in paying when they offer free account anyway).

pm7··on A 'Blockchain Bandit' Is Guessing Private Keys and Scoring Millions
> I would publish the destination address with a message saying what had happened

Bitcoin does not support embedding messages in addresses (and embedding messages in transactions is controversial as it will be stored in blockchain forever, so many block explorers do not render such messages to discourage it).

pm7··on Ephemerand – GPS-based random number generator
In case of open distributed systems just one bad actor can delay his message and modify it as needed to get desired results.

Author even stated similar scenario:

For instance, the miner who constructs the block can influence the randomness by choosing to not publish the block if the blockhash is disadvantageous.

pm7··on Ephemerand – GPS-based random number generator
I think there were some ideas on proof of work or alternatives that could use random number available at the same moment for all participants. Unfortunately, it seems that numbers generated by this could be influenced by USA.
pm7··on Liberapay – A recurrent donations platform
It's their choice to not compete with Patreon. See FAQ: https://en.liberapay.com/about/faq

"What are the differences between Liberapay and other recurrent crowdfunding platforms like Patreon?

1. Liberapay is only for donations, meaning that transactions must not be linked to a contract nor a promise of recompense."

pm7··on Ask HN: Where did you learn modular electronics?
When you need to connect something specific, I can recommend checking http://www.pighixxx.net/ It helped me quite a bit in the past.
← PreviousPage 2 of 3Next →