HNHacker News
TopNewBestAskShowJobs

ricardbejarano

1,554 karma · joined September 12, 2018

Site Reliability Engineer at Cisco. Author of The Homelab Handbook. Builder by passion.

https://www.bejarano.io

submissionscomments
ricardbejarano··on Where Do Great Ideas Come From?
Boredom.
ricardbejarano··on [dead]
Many people asked and now I’ve managed to update the guide for macOS Ventura (13.3).

Be safe!

ricardbejarano··on Porsche boss faces software woes keeping VW a step behind Tesla
I believe new Mazdas come with no direct connectivity and have no touchscreens. You can still connect your Android Auto or CarPlay device though, and control it with a knob.

It is the balance I like. I don't own one (yet).

ricardbejarano··on YKK zippers: Why so many designers use them (2012)
Cloudflare.
ricardbejarano··on Labstack/echo: High performance, minimalist Go web framework
I like echo very much, specially for its middleware engine.
ricardbejarano··on Algorithms you should know before you take system design interviews
1. Round-robin

That's all.

ricardbejarano··on SMS phishing is way too easy
Author here. Thanks for reading.

I didn't want to explain that in the article because I don't think it adds value.

I suggest you read up on the SMS protocol, basically anyone on the network, if able to inject any arbitrary packet into it, can.

If you don't even want to buy equipment or even code, take a look at AWS SNS or (i believe) Twilio too.

ricardbejarano··on SMS phishing is way too easy
Hello, author here.

What I ask is for iOS and Android to have the "this message was not verified" warning, as shown in the last screenshot, whenever the sender ID is displayed without any form of verification (such as, the aforementioned country-specific sender ID registries).

If browsers show "not secure" unless verified by SSL, apps should show "not verified" unless verified _somehow_.

The "how" may or may not be possible at this moment, but in any case, warn by default.

Is that naive?

ricardbejarano··on SMS phishing is way too easy
Correct.
ricardbejarano··on SMS phishing is way too easy
Didn't know that, jeez.

Imagine what that could look like with voice AI getting better and better.

ricardbejarano··on Hardening macOS
Not OP but author, you're right. Totally agree. I will update the post.
ricardbejarano··on Bitcoin Falls Below $20k for the First Time Since 2020
Still priced 20k above it's value.
ricardbejarano··on Show HN: Go Template Preview – Powered by WebAssembly
It... should, i think? I'll try!

Binary size is the main issue with Go WASM, the binary on this is 4MB, and it only does templating.

TinyGo won't work because it doesn't have reflect (which I need for parsing arbitrary JSON).

But I'll give it a spin. Thanks!

ricardbejarano··on Show HN: Go Template Preview – Powered by WebAssembly
I'm afraid it cannot, since those functions would need to be compiled into WASM first, and that's something the browser can't do.

What I could add, though, is a bunch of "standard" functions (like the ones found in Hugo, for example).

Noted!

ricardbejarano··on Show HN: A site that puts in a referral for you for your dream job
This dilutes the value of referrals, which:

1. makes it harder for those who earned it to get the boost they need; and

2. will cause this very site to fail right after it succeeds.

I get the idea, and I think the intentions are great, but I don't think the means are net positive.

ricardbejarano··on Ask HN: What is one book you would recommend everyone to read?
Chris Voss (Never Split the Difference) is largely responsible for my income level today.

Absolutely life-changing book.

He also made a MasterClass.com video course with the same content, if you'd rather watch than read.

ricardbejarano··on Show HN: Infracost (YC W21) – Open-source cloud cost policies
I just came here to say that Infracost is an awesome tool that has great potential.
ricardbejarano··on Aranese: Spain's little-known language
> It’s complicated than that. Valencian is at best a dialect of Catalan

If anything, Catalan is a dialect of Valencian since Valencian precedes Catalan. Source: look it up.

Catalans are taught a different story in school, which makes most of them believe your statement. Source: I am from Catalonia and I was taught Valencian to be one of Catalan's dialects, until I met some friends from Valencia who educated me on the subject.

ricardbejarano··on Bitwarden: Free, open-source password manager
I've used it before, it sucks.

It does the job, but very poorly. Same as LastPass.

I use 1Password now. If I didn't want to pay for it I'd use KeePass.

ricardbejarano··on Bitwarden: Free, open-source password manager
LastPass, everyone hates it including me.
ricardbejarano··on Show HN: I'm 15 and building a live quiz app for classrooms: Quickz
> Currently it only supports Google login, mostly because I don't trust myself enough to safely manage and store credentials. Many schools are already in the Google ecosystem, so for now it should be enough.

That's senior-level decision making right there!

Storing creds is tough, all your users already have Google accounts, and most of them probably prefer logging in with a click rather than remembering a new set of creds. It also puts a higher barrier of entry for fraud, since new Google accounts require phone number verification.

I'm a SRE so if you need ideas for the hosting/infrastructure side of things, feel free to ask!

ricardbejarano··on Ask HN: Hacker News, but for Finance?
Yes please, I thought of asking several times about something like you describe, but never got to do it.
ricardbejarano··on Almost free serverless on-demand Minecraft server in AWS
BunnyCDN works like that.

I prefer to be billed whatever it costs but have my service up all the time.

ricardbejarano··on When the policeman becomes the criminal – how Cloudflare attacks my machines
How's that an attack, really?
ricardbejarano··on Taildrop was kind of easy
There is ACL support on the Admin console.

Lets you choose which users/machines/tags can talk to who. Tags are like groups.

ricardbejarano··on Docker Hub Is Down
Beware these sort of status pages are not automatic.

In most large orgs, updating public status pages are whole 30+ minute process, as the message must be explained to the customer care team, drafted, vetted if it's something worthy of appearing in HN, put into the application, reviewed before putting it live, then published.

There are some (all?) players in the status page business that can integrate monitoring sources with results live, but no one will use those for fear of publishing downtime when there's not.

As a customer, I'd rather you report fake downtime than fake uptime, but that's how it is.

ricardbejarano··on Google finally revealed how much personal data they collect in Chrome
Chrome's the fastest browser on the market. That, along with some nice marketing strategy is what makes it the absolute market leader.

The reason Chrome is so fast, is most likely thanks to the performance (harmless) data it collects. Firefox may be proud of not collecting as much data, but (at least on macOS) they spend twice the battery to render twice as slow.

Not saying you shouldn't be able to choose what data you're collected (which, you are) but there are reasons (not necessarily evil) to get that data to the devs.

ricardbejarano··on Google finally revealed how much personal data they collect in Chrome
Fair enough.

But beware, Chrome's lead on render speed is most likely thanks to the performance data they collect. Any other browser you may choose might not collect that data, but don't be surprised if it halves your battery life and takes twice the time to render stuff (such as Firefox in macOS about 6 months ago, don't know how it performs now).

There are reasons for data collection, and I don't think everything is used for malitious intent, which is DDG's point.

ricardbejarano··on Google finally revealed how much personal data they collect in Chrome
I'd love to see some data to back your point.

Is browsing history being used as evidence in criminal prosecution? Where? How?

ricardbejarano··on Google finally revealed how much personal data they collect in Chrome
Fair point, I do believe we shouldn't live in a world where we have to continously watch what flags has our software enabled, but I guess I'm someone who's always alert (or at least that's what I tell myself).

At this point, I think mine is more of a nihilism towards this as I cut everything at the only reliable level: the network. But even then, I've hammered myself way too much over privacy, and it didn't make me any happier, since, at the end of the day, if anyone wants to track you, they'll track you.

← PreviousPage 2 of 5Next →