HNHacker News
TopNewBestAskShowJobs

tomputer

315 karma · joined March 12, 2015

submissionscomments
tomputer··on Gaia-X is a distraction which should be abandoned
I work in the hosting industry (euro) and most people I know never heard or care about this project.

Nextcloud CEO Frank Karlitschek well summarized it:

“I don't think Gaia-X has a future. It's basically a paper monster that will exist but will not have any impact in the market, unfortunately."

https://www.theregister.com/AMP/2024/01/08/gaiax_future/

tomputer··on Some Fritz!Box modems might have been hijacked
It seems the domain fritz.box has been suspended. March 5 was the first time this message got captured on archive.org[1]:

The Domain Name you have entered is not available. It has been taken down as a result of dispute resolution proceedings pursuant to the Uniform Rapid Suspension System (URS).

The fritz.box name servers also point to URS[2] name servers:

  Name Server: ursns1.viagenie.ca
  Name Server: ursns2.viagenie.ca
[1] https://web.archive.org/web/20240305162200/https://fritz.box...

[2] https://www.icann.org/urs-en

tomputer··on Backdoor in upstream xz/liblzma leading to SSH server compromise
Quoting[1] from Homebrew on Github:

>> Looks like that Homebrew users (both macOS and Linux, both Intel and ARM) are unlikely affected?

> Correct. Though we do not appear to be affected, this revert was done out of an abundance of caution.

[1] https://github.com/Homebrew/homebrew-core/pull/167512

tomputer··on New Intermediate Certificates
> reusing private keys is an enormous vulnerability.

As long as the private key is stored/handled safely and RSA/ECC is not broken, it is not vulnerable.

I do agree that key rotation is better/recommended practice.

> a single leaked private key means your entire site is compromised

The leak is the actual vulnerability. As long as the leak is still there and you are not aware of the compromised private key, a fresh new private key will probably leak again.

However, the chances of leaking may be greater if a private key has to be used in multiple locations.

tomputer··on Bitcoin Breaks $50K for First Time Since Hitting All-Time High in 2021
> That's why countries changed it, because they realized their economies were more valuable that their gold stash

Then it is interesting that, with gold being less valuable nowdays than fiat money, central banks (or countries) are still the largest buyers of gold.

tomputer··on What Was ISDN?
Same here in the Netherlands, somewhere between 1998-1999 using KPN Telecom. I was in high school and convinced my parents to upgrade from single-line PSTN to dual-line ISDN, so we could call and surf the internet at the same time. At the start of 1999, because of the rapid increase in phone and internet traffic, the national call tariffs had been reduced a lot[1]. Tariffs were even cheaper in the afternoon and during the weekend.

For normal internet browsing the single ISDN connection (64 kbps) was enough. Then later in 1999, Napster[2] launched and I was hooked! This made me use bundling ISDN channels quite a lot. Because of the cheaper tariffs, weekends where great because I enabled the bundling around midnight until early in the morning, so my parents wouldn't notice. :-)

I was on ISDN until 2002, when ADSL was available here and we could be online 24/7 for a fixed price. I do remember my ISP (XS4ALL) still had a fair-use-policy for downloading, which they removed a few years later.

[1] https://www.acm.nl/en/publications/publication/9213/OPTA-agr...

[2] https://en.wikipedia.org/wiki/Napster

tomputer··on The SEC attaches a string to Bitcoin ETFs
Coinbase Custody Trust Company, LLC (the “Bitcoin Custodian”) is the custodian for the Trust’s bitcoin holdings.

Source: https://www.sec.gov/Archives/edgar/data/1980994/000143774923...

tomputer··on Proposed SEC order to freeze, repatriate Binance.US assets
Isn't that almost always the logical consequence once you understand how Bitcoin works and you believe it can actually work as a safe haven investment?

Those who believe it can not work are most probably not invested. Those who believe it can work are most probably invested.

tomputer··on Biggest companies in the world by market value 2022
I stumbled upon this site a while ago which also includes ranking filters:

https://companiesmarketcap.com/

tomputer··on More than $70B wiped off crypto market in 24 hours as BTC drops 8% below $20K
This is exactly what makes Bitcoin a fantastic store of value. Bitcoin supersedes gold because compared to gold, it has no other use.

If Bitcoin would be used as a store of value instead of gold, gold can be used for other material purposes for a lower price. The same goes for real estate. A house does not have to be an investment asset or store of value. If (institutional) investors would use Bitcoin instead of housing, it could make housing affordable again. Or at least result in more fair/realistic housing market instead of the propped up market from the last few years.

Compared to gold and real estate, Bitcoin is a scarce asset that can easily be divided into small pieces. It has a liquid market and can be exchanged 24/7 anywhere in the world.

tomputer··on Is Crypto Dead?
> See, it's already over. If you have to explain that to a layperson, it's not going to get adopted.

Does every layperson have to adopt stocks or commodities? Are these also dead if a layperson does not adopt it?

tomputer··on Bitcoin worth $1.5B withdrawn from Coinbase in 48 hours
It is not recommended to split up your seed words[1]. Do not try to build your own scheme. If you want to store your keys geographically it is recommended to use multisig. You can also use a passphrase (13th/25th word) that can be stored separately from the 12/24 seed words[2].

[1] https://bitcoin.stackexchange.com/a/98423

[2] https://en.bitcoin.it/wiki/Seed_phrase#Two-factor_seed_phras...

tomputer··on PostgreSQL 15
Where I work we've recently upgraded many PostgreSQL servers from 9.x/10.x/11.x to 14.x.

A very cool PostgreSQL feature is that, if you install a second instance on the same server, it will by default use a different path and port to run the second instance.

  root@example:~# pg_lsclusters
  Ver Cluster Port Status Owner    Data directory              Log file
  11  main    5432 online postgres /var/lib/postgresql/11/main /var/log/postgresql/postgresql-11-main.log
  14  main    5433 online postgres /var/lib/postgresql/14/main /var/log/postgresql/postgresql-14-main.log
Now you can dump and import databases on the second instance and test your applications with the new version. If it all works as expected, use pg_upgrade[1] to migrate everything to the new instance and switch the ports after the migration.

I have only done this migration process on Debian systems but in my experience it worked fantastic!

[1] https://www.postgresql.org/docs/current/pgupgrade.html

tomputer··on Do central banks’ mounting losses actually matter?
> Bitcoin (now called Bitcoin Cash)

Wrong.

Bitcoin Cash (BCH) is a fork of Bitcoin (BTC). Bitcoin Cash is a spin-off or altcoin that was created in 2017.

tomputer··on HAProxy: How to temporary disable a back end server using the command line
Indeed! HATop is great to show the status, traffic, HTTP codes, errors or number of connections. It is also very simple to enable/disable HAProxy backends, for example:

  hatop -s /var/run/haproxy/example.sock
Use the arrows to select a backend server and press:

   F9 - Enable a backend server (Status: UP)
  F10 - Disable a backend server (Status: MAINTENANCE)
For Apple keyboards it is fn+F9 and fn+F10.
tomputer··on Spain will introduce free train travel
I did the same, visted Berlin a few weeks ago. It was indeed nice that I could take any S-Bahn or U-Bahn without checking the times or zones.

I hope they’ll continue with this type of ‘unlimited’ tickes. If only during peak summer/winter months. I guess a lot of people would gladly pay more for such unlimited (no worry) tickets.

tomputer··on Looming natural gas shortages has the EU scrambling for solutions
> Homes aren't heated with nuclear power, they're heated with gas. Industrial processes don't run on nuclear power either, they run on gas.

I'm glad that there are still people who understand this. In the Netherlands 90% of the homes[1] still run on natural gas and that's not something we can "simply" replace. It is possible and will eventually happen but it will take years if not decades.

And that's just homes in the Netherlands. Take a look at the global energy mix[2] how much the world still depends on gas.

[1] https://www-cbs-nl.translate.goog/nl-nl/nieuws/2021/07/92-pr...

[2] https://ourworldindata.org/energy-mix

tomputer··on Looming natural gas shortages has the EU scrambling for solutions
Gas prices were already rising since 2020 but yes, the Ukraine/Russia conflict made it worse.

Below a graph from the Dutch TTF Gas Futures from the past 2 years. The contract price is in Euros and Euro cents per MWh.

https://www.theice.com/products/27996665/Dutch-TTF-Gas-Futur...

Edit: those are just numbers on a screen but in real life that means the energy/gas bill increases between 5x - 10x if this continues.

tomputer··on Users may be unable to send email to outlook.com
Not sure if it's relevant, but I also see DNSSEC issues:

https://dnssec-analyzer.verisignlabs.com/outlook.com

tomputer··on ‘Blade Runner’ at 40
> It has a good pace, amazing visuals, asks tough questions, has some really good action sequences, etc.

If I may add: the score produced by Vangelis.

tomputer··on Tell HN: Coinbase now requires physical address of recipient in crypto transfers
Currently this seems to apply only for customers in the Netherlands:

https://help.coinbase.com/en/coinbase/trading-and-funding/se...

Related to this:

In 2020 the Netherlands approved the implementation for the European fifth Anti-Money Laundering Directive (AMLD5). Crypto providers operating in or from the Netherlands also needed to apply for registration with the Dutch Central Bank (DNB). Besides the AMLD5 implementation DNB required from crypto providers to implement additional measures, which is the same wallet verification that Coinbase now requires.

Bitonic (a dutch crypto broker/provider) filed a lawsuit against DNB regarding the additional wallet verification requirement, which was not part of AMLD5. DNB formally acknowledged the complaints from Bitonic and revoked the wallet verification. I'm not sure but I believe (until now) it has only be revoked for Bitonic.

Bitonic published some articles on their site:

https://bitonic.nl/en/news/206/dutch-amld5-implementation-la...

https://bitonic.nl/en/news/224/lawsuit-bitonic-vs-dutch-cent...

https://bitonic.nl/en/news/231/dnb-formally-acknowledges-com...

tomputer··on Bitcoin Is a Hideous Monstrosity Made Out of Computers and Greed
> Except finance is extremely advanced.

Exactly. This is a problem. It can be so advanced that almost nobody understands it.

Now take a look at how advanced Bitcoin is:

  Total circulation will be 21,000,000 coins. It'll be distributed
  to network nodes when they make blocks, with the amount cut in half
  every 4 years.
  
  first 4 years: 10,500,000 coins
  next 4 years: 5,250,000 coins
  next 4 years: 2,625,000 coins
  next 4 years: 1,312,500 coins
  etc...
  
  When that runs out, the system can support transaction fees if
  needed. It's based on open market competition, and there will
  probably always be nodes willing to process transactions for free.

  Satoshi Nakamoto
tomputer··on Are blockchains decentralized?
> Your argument strikes me as very odd -- you seem to suggest that nothing can beat Bitcoin in theory, but Ethereum is already beating it in practice.

In theory everything is possible. I do not follow the beating really. They can both exist with different use cases.

Bitcoin wants to be digital gold (and money) and Ethereum wants to be a smart contract world computer running dapps. They solve different problems.

tomputer··on Are blockchains decentralized?
> Ethereum is already much better at it's core

What you and many others seem to overlook is first mover advantage, network effects and most important: trust. Bitcoin is not Yahoo or Facebook, it is not a company product which has to improve and break things all the time.

In the long run Bitcoin is a store of value. That requires trust, which takes time. To gain trust over time it has to move slow and steady because there can be no mistakes.

When it comes to money and trust it is almost impossible to get a second chance (see Terra UST). Just one mistake could result in everyone distrusting Bitcoin.

tomputer··on Nginx 1.22.0 stable released with OpenSSL 3.0 support
Correct. I thought it was worth to mention OpenSSL 3.0 because this is now the “stable” release.

For production I always use the Nginx stable releases.

tomputer··on Crypto assets are ‘worth nothing,’ says ECB’s Christine Lagarde
Full quote from the article:

My very humble assessment is that it is worth nothing. It is based on nothing, there is no underlying assets to act as an anchor of safety.

tomputer··on .01% of Bitcoin holders hold 27% of all Bitcoin
The parent post was about trading/selling crypto for money without exchanges. Gold has indeed some other use cases.

It is however not possible to send physical gold over the internet. Gold is also difficult to verify. You'll probably need to rely on a broker/shop and their tools to test if it's real. Bitcoin is relatively easy to verify with software anyone can download for free.

tomputer··on .01% of Bitcoin holders hold 27% of all Bitcoin
Bitcoin is more like holding a piece of gold. If all gold exchanges are closed you can still trade your gold with someone in person. You don’t get your money without ever selling your piece of gold to someone else.
tomputer··on Ask HN: Why does nobody support h.265/HEVC anymore?
FFmpeg and VLC seem to use (lib)x265 for H.265 content.

Is a license also required if the x265 codec is used? Or does that depend on whether the software is for commercial use?

tomputer··on Tailscale raises $100M
For almost a decade I have worked with IPsec and OpenVPN solutions for both client and site-to-site VPN tunnels. On enterprise hardware, community/proprietary software and at public cloud providers. I still work with these because today many vendors only support IPsec.

A few years ago I discovered WireGuard and I was really amazed how easy it was to setup a tunnel. Especially if you've dealt with IPsec before. It felt as easy as creating an SSH tunnel between two servers, with only 4 or 5 lines of code in a config on both sides.

Then last year I discovered Tailscale and I was blown away! How did this even work[1] without opening ports in the firewall? And how cool is it that I no longer have overlapping addresses[2] from other networks. Within 15 minutes I had my own mesh network between my Mac, iPhone, Raspberry Pi and other servers. Fantastic!

I'm on the Personal/Free plan but if this would no longer be free, I would be happy to pay for this service (shut up and take my money).

[1] https://tailscale.com/blog/how-tailscale-works/

[2] https://tailscale.com/kb/1015/100.x-addresses/

Page 1 of 3Next →