Hacker News Reader

preisschildon Pixel 11 Pro Fold feels like the end of an era

I just don't see why you would spend more than double (almost 2K USD!) for the fold phones though. I have large screens in my home to watch high quality video content. I do like the Pixel Pro XL series with 6.8" screens though, but they are a lot cheaper.

preisschildon Go 1.27

its simple and it works

preisschildon In 1962, Egypt's Missile Program Lost Its Key Scientist Without a Trace

On the other hand, the USSR was literally deployed on the ground during the war of attrition and shot at Israelis. So you can also blame Egypt/the USSR

preisschildon St Lucie Nuclear Reactor Unit 1 manually shutdown, 3 control rods drop into core

AIP range is still limited though, especially at fast speeds. Thats why even the newest 212CDs still have have snorkels for their diesel and diesels are loud. SSNs are much better for global power projection.

preisschildon St Lucie Nuclear Reactor Unit 1 manually shutdown, 3 control rods drop into core

They initially didnt have quick restart procedures for that and it contributed to a nuclear sub sinking. After that they added those procedures and improved the technology

https://en.wikipedia.org/wiki/USS_Thresher_(SSN-593)#Cause

> After the accident Rickover further reduced plant restart times, which had already been gradually improving with new technology and operating experience, in addition to limiting factors that could cause a shutdown.[26]

preisschildon St Lucie Nuclear Reactor Unit 1 manually shutdown, 3 control rods drop into core

An S5W scram probably has contributed to USS Tresher sinking because they couldn't get it running fast enough again

https://en.wikipedia.org/wiki/USS_Thresher_(SSN-593)#Cause

preisschildon RustDesk now supports true unattended remote access on Wayland

You can use the great oauth2-proxy as a forward auth proxy to archive that if you use nginx btw, i did that before envoy.

preisschildon St Lucie Nuclear Reactor Unit 1 manually shutdown, 3 control rods drop into core

could have been something as minor as some sensor malfunctioning.

preisschildon RustDesk now supports true unattended remote access on Wayland

You can use either iroh directly or do it like them with dns via pkarr and use mainline DHT and ed25519 public keys that you can share via separate channels

https://app.pkarr.org/

https://www.iroh.computer/blog/v1

preisschildon RustDesk now supports true unattended remote access on Wayland

I just have envoy proxy with the oauth + jwt filter in front of those services. Envoy does the oidc flow with pocket-id so I can use passkeys for authN. Envoy validates the resulting token and does authorization via ACL. Envoy then sends an authorization bearer jwt with the oidc id_token jwt to the backend (for example grafana). Grafana parses and validates the jwt and sets claims as userinfo (username, groups, email).

I think such setups are at least as secure as having tailscale in front of it and they are web standards conform. I dont need a client app like tailscale, I can just use my normal browser and internet conn.

I always make sure envoy/all other apps are on the latest security patcb anyways.

preisschildon RustDesk now supports true unattended remote access on Wayland

Ideally using ipv6 without NAT, but yeah hole punching or quic address discovery like iroh does works too

preisschildon Romania shuts only nuclear plant as heat causes drop in Danube River level

I think so

preisschildon RustDesk now supports true unattended remote access on Wayland

You could just make use of public oidc/oauth2 providers like Google/Github/Microsoft/Cloudflare Generic OIDC or heck, even your bluesky account via ATProto oauth

But yeah, you could also make use of your ed25519 ssh public key as client certificate and accept based on fingerprint like ssh

preisschildon RustDesk now supports true unattended remote access on Wayland

I still think its an essential feature for self-hosting, but they seem to be open to PRs so what is the problem?

preisschildon RustDesk now supports true unattended remote access on Wayland

I disagree, modern software should make encrypted connections over something like HTTP3 or QUIC directly so true secure end to end connectivity works. This would make VPN software such as tailscale obsolete.

preisschildon Romania shuts only nuclear plant as heat causes drop in Danube River level

https://en.wikipedia.org/wiki/Cernavod%C4%83_Nuclear_Power_P...

> Make and model CANDU 6

> Unit 1, a CANDU 6-type,

> Four years later, Unit 2, another CANDU 6-reactor, achieved criticality

preisschildon Romania shuts only nuclear plant as heat causes drop in Danube River level

Can CANDU6 reactors be refitted with cooling towers? Only Enhanced CANDU 6 seem to offer this.

preisschildon Kubernetes on Oxide: How customer needs shaped our integrations

One cool feature of ceph is reed solomon erasure coding, myastor only does replication if storage efficiency is important

4+2 Erasure Coding has only half the storage overhead of 3x replication but the same fault tolerance

Also re spdk

https://muratkarslioglu.com/blog/io-uring-spdk-kernel-bypass...

preisschildon Kubernetes on Oxide: How customer needs shaped our integrations

I think it'd be cooler if you could just run kubernetes directly on their bare metal hardware without their hypervisor in between

preisschildon Kubernetes on Oxide: How customer needs shaped our integrations

Yeah me too, unfortunately I cant justify huge 100K USD servers so ill continue with cluster api provider hetzner and metal3. The whole CAPI ecosystem is quite cool.

preisschildon Bluesky's active user base is shrinking as its focus expands beyond the app

Bluesky is built on the open ATProto federation protocol just like Mastodon is built on ActivityPub, why do you think one is not open source or decentralized?

preisschildon Pixel Watch 5

Yeah I've been using Gadgetbridge[1]-compatible Amazfit watches and they last at least a week and have most functions I want from a smartwatch. For more complicated stuff I just use my phone.

[1]: https://gadgetbridge.org/

preisschildon Go is an ideal language for AI-assisted software engineering

Having maintained multiple etcd clusters for self-managed kubernetes the last few years I disagree with the "problematic" characterization.

Sure it may not be the best fit in a scenario where you want a cluster spanned over the entire globe (thats why GKE uses paxos-based Spanner instead of it) , but even spanned across an entire continent (in europe via glass fiber) it works quite well for me. Its one of the least problematic parts of the stack.

preisschildon Go is an ideal language for AI-assisted software engineering

Garbage collected languages like Go will always have worse performance than lower level languages like C (frr and bird are implemented in C).

Gobgp is great if you want to embed it directly into a Go app though. Talos Linux has done that recently.

preisschildon Letter to Governor Abbott on responsible AI infrastructure in Texas

Honestly, that sounds kind of arbitrary. Why should companies that use electricity be required to also produce electricity? This is what the market is for, so other Companies can produce electricity for money and other Companies buy that electricity.

And to which companies would this apply? Only Datacenters? There are other energy intensive industries too, should this also apply to them? And what is the cutoff for that? Does every bigger 21st century company also need to be an electricity company?

It would be less arbitrary if all negative externalities would be taxed (for example, carbon tax or noise pollution tax) and maybe prioritize households on the public grid.

preisschildon Fastmail offers EU data region

Its probably about end to end encryption. Protonmail doesn't store mailboxes in plaintext, only the client actually decrypts the mailbox. IMAPS only encrypts the conn between mail server and client.

preisschildon Fastmail offers EU data region

That was 2023 before the 2nd Trump Admin and before the Privacy and Civil Liberties Oversight Board that was supposed to be independent and protect against abuse has resigned.

preisschildon Fastmail offers EU data region

But this is completely worthless, they still fall under the cloud act. Trump Admin still has access to your mailbox.

preisschildon Fastmail offers EU data region

Its not about the people you send emails to, its about who has access to your entire mailbox.

In the moment that would be the Trump Administration for example.

preisschildon Fastmail offers EU data region

This is not an EU law anyways, this is snakeoil companies acting like having their data located in the EU will change who has access to it and will make it "GDPR compliant" (it wont since the CLOUD ACT still applies)