HNHacker News
TopNewBestAskShowJobs

tatersolid

2,120 karma · joined November 29, 2016

Head of Information Technology located on the NORTH coast of the USA.
submissionscomments
tatersolid··on Cloudflare outage on November 18, 2025 post mortem
> maybe briefly booting up another 100k isn’t going to be the end of the world

Cloudflare doesn’t run in AWS. They are a cloud provider themselves and mostly run on bare metal. Where would these extra 100k physical servers come from?

tatersolid··on TTS still sucks
This isn’t true in my experience. I’m a parent of three teens and they immediately exclaim “clanker” and hit skip when encountering any form of AI generated content on any platform.

They recognize AI slop easily and definitely do care enough to avoid it. As do their friends.

AI-generated content has near-zero commercial value long-term.

tatersolid··on IP blocking the UK is not enough to comply with the Online Safety Act
Interestingly many, if not most cybercrime organizations are on the OFAC list. So many companies who have paid when hit by ransomware have violated US law.

I am unaware of any prosecutions in this area.

https://ofac.treasury.gov/sanctions-programs-and-country-inf...

tatersolid··on Simple trick to increase coverage: Lying to users about signal strength
My house is also like this. No signal on any carrier, and same with one of my neighbors but not neighbor on the opposite side.

Looking at satellite view it is clear that the local municipal water tower is between a huge cell tower near the highway and my house. All carriers seem to lease that same tower only in my area.

It wasn’t like this when I moved in but I guess the carriers consolidated on that big tower near the highway about two years ago.

Radio shadows are a thing I guess.

tatersolid··on The cryptography behind electronic passports
Actually the two are very much not the same logically. The real text quoted first allows for servitude in limited circumstances. Your second modified version requires it.
tatersolid··on Microsoft 365 Copilot – Arbitrary Data Exfiltration via Mermaid Diagrams
One of my first jobs was as the programmer/IT/graphics guy at a newspaper. Everybody there was required to use em-dashes properly and regularly, and followed other esoteric rules from the Associated Press Stylebook that also regularly appear in LLM output.

This highlights just how much unlicensed copyrighted material is in LLM training sets (whether you consider that fair use or not).

tatersolid··on Harnessing America's heat pump moment
How did you run the fans on your gas furnace without electric power?

If you have a backup generator, is it too small for your AC in the summer?

tatersolid··on Testing two 18 TB white label SATA hard drives from datablocks.dev
Consumer Reports
tatersolid··on Ask HN: Why is software quality collapsing?
This is definitely not true for the client-side software under discussion. Millions of devices requiring more resources and energy. The problem is that’s an externality to the developer.
tatersolid··on US airlines are pushing to remove protections for passengers and add more fees
Is this a per-market thing?I’m from Chicago and therefore fly United with my family all the time. The website/app lets me pick all our seats at booking time in Economy class without any up charges.
tatersolid··on 450× Faster Joins with Index Condition Pushdown
Commercial SQL databases have been doing predicate push-down (even on joins) since the 1990s at least. It’s a table-stakes feature.
tatersolid··on Copilot broke audit logs, but Microsoft won't tell customers
How would you handle “company name” or other common phrases in search? Log 1M documents every time that phrase appeared in a copilot response for any user?
tatersolid··on The future of large files in Git is Git
The overwhelming majority of large assets (images, audio, video) will receive near-zero benefit from using the rsync algorithm. The formats generally have massive byte-level differences even after small “tweaks” to a file.
tatersolid··on Linux address space isolation revived after lowering performance hit
All the large cloud-hosted infra I’ve encountered in my career were written in JIT or AOT compiled languages (C#, Java, Golang, etc.) This is basically necessary at any sort of scale.
tatersolid··on New downgrade attack can bypass FIDO auth in Microsoft Entra ID
Basically all other identity providers are also vulnerable to phishers which strip out webautn calls in the payload when acting as a proxy to the real IdP.

Basically you must disable all other phishable forms of MFA fallback if you want phishing-resistant FIDO2/passkeys. Conditional access policies in Entra can do this selectively or org-wide. If you don’t do this you’re relying on “end user training and wariness” again as phishing protection.

tatersolid··on The History of F1 Design
Unusable on an iPhone. Can’t scroll
tatersolid··on The US Relies on 51 Forty-five-year-old ships to Transport its Military Overseas [video]
> On the other hand, I’m not sure any direct confrontation with a near-peer military would last long enough for that to matter.

Hasn’t Ukraine shown us the opposite? Drones of all typees covering the battlefield have reset military doctrine once again. That war has been anything but quick.

tatersolid··on At Amazon's biggest data center, everything is supersized for AI
Beer brewing.
tatersolid··on Nuclear Explosion for Carbon Sequestration
We have drilled many oil wells deeper than 7km. We will just need a wider bore to fit that chubby nuke down the hole.
tatersolid··on Windows SPNEGO Nightmare: Critical RCE Vulnerability
Looks to be reachable through many service ports, including http/https in at least some circumstances. I have not seen reliable information if default configurations of IIS are exploitable.
tatersolid··on Supabase MCP can leak your entire SQL database
> unless an explicit policy grants permission

Three months later, all devs have “Allow *” in their tool-name.conf

tatersolid··on Supabase MCP can leak your entire SQL database
>Which is exactly why it is blowing my mind that anyone would connect user-generated data to their LLM that also touches their production databases.

So many product managers are demanding this of their engineers right now. Across most industries and geographies.

tatersolid··on Using the Internet without IPv4 connectivity
In IPv4 if your NAT or your ISPs CGNAT stops mapping everything breaks.

Having a stateful mapping device inline in the network sucks for reliability in general. Native IPv6 removes the requirement.

tatersolid··on What CSS length unit should you use?
Confusing UX in my opinion… I like the general idea but a series of questions presented sequentially would be more useful.
tatersolid··on Avoiding the Global Lobotomy
Wasn’t it really only the Chicago Public Schools that were closed for so long? As I recall most everything else sort of opened in some capacity within a year, even sporting events and concerts.
tatersolid··on Cross-Account and Cross-Region Backups with AWS Backup (and Friends)
Wildfires, hurricanes, tornadoes, blizzards and ice storms, earthquakes… many regional disasters are temporary but it can take very long to bring everything back online. AWS can also always lose a whole region for an extended period due to software and control plane bugs.

Even if all your apps and data stores are active-active multi-region you can be in a world of risk with no DR for a long time if your DR region fails. If your data size is small that vulnerability window might be small but if you’ve got petabytes you’ll be without lifeboat for a days or weeks until you can take another “full” DR copy.

tatersolid··on Billions of login credentials have been leaked online
A passkey never exposes a secret to the website, so neither malicious scripts (e.g. via ad networks or analytics “partners”) nor malicious browser extensions can scrape the password.

Plus passkeys are inherently phishing resistant, and don’t rely on the end user being wary when autofill don’t work. Autofill doesn’t work a lot, due to broken sites blocking paste as well as stupid sites that have you enter your creds to into multiple domains. (Yes, I’m looking at you, United Airlines…)

tatersolid··on Air India flight to London crashes in Ahmedabad with more than 240 onboard
Anecdotally there seems to be a bit more air traffic in around Chicago versus 2019, but perhaps I just notice flights overhead more now as I commute downtown far less. This site shows current ORD volume at roughly 2019 levels:

https://chicagoairportguide.com/statistics/

tatersolid··on Apple introduces a universal design across platforms
To prevent random shutdowns.

Apple absolutely effed up by not communicating the specifics well, but that’s corporate policy. Apple docs have always been targeted at the non-technical user and therefore inadequate for others.

tatersolid··on Bruteforcing the phone number of any Google user
My old man was a doctor and the local phone company at the time (GTE) automatically made our home number unlisted. Presumably this was done for other “critical” professions who might receive many home calls that should be directed at their place of work.

Being unlisted was sometimes devastating to a 1980s kid’s social life… I missed out on multiple birthday parties and other invitations. My sisters probably lost out on some dating opportunities.

← PreviousPage 3 of 33Next →