HNHacker News
TopNewBestAskShowJobs

xfer

1,138 karma · joined April 28, 2017

submissionscomments
xfer··on NixOS is not reproducible
I pressed C-c accidentally during the upgrade(wrong terminal) and it broke the entire system(had to manually change a few files rebuild initramfs to be able to boot). I would take the complexity of Nix without a thought.
xfer··on Just want simple TLS for your .internal network?
Or use a wildcard cert for all internal certs.
xfer··on Aider: AI pair programming in your terminal
Like another commenter I also use it for initial exploration in uncharted territory. For coding only helpful with autocompleting error strings. Even then, it messes with normal auto-complete, might get rid of it.
xfer··on Creating an autonomous system for fun and profit (2017)
Well, no such thing as stable addresses since you don't really own IP addresses, you are leasing from RIR. But, if you are fine with APNIC allocation, see if RIPE PI Allocation is sufficient for you, they are much cheaper(RIPE charges $50/yr), add some LIR cost, total would be <$100/yr.
xfer··on Indian ISPs: We already give govt full access to web traffic
Do you see a green lock with message saying "your access is restricted" in the US?

Do you see any TLS connection resets based on SNI? If not, most(all?) indian ISPs already visibly do far more than average American ISP.

xfer··on Signal Says It Will Exit India Rather Than Compromise Its Encryption
Nobody in india uses SMS to communicate, it is solely used for verification OTP. It's never been a thing, so not sure what you are talking about.
xfer··on Building the SHAKTI Microprocessor
Here : https://gitlab.com/shaktiproject/cores/shakti-soc
xfer··on Against DNSSEC (2015)
Can you not mitm the CA's dns lookups for http, tls-alpn challenges and make them sign the certificates for you? How does letsencrypt prevent this? Do they check with multiple resolvers around the world?
xfer··on GitHub Copi­lot inves­ti­ga­tion
> There is a similar gymnastics done by human engineers today due to the issue of patents. I don't think this is a good trend to uphold.

Are you arguing that copyright laws should be abolished? I have no problem with that as long as it's clearly defined, you can't not respect copyright of open source code but enforce it for proprietary code, just because the value is arguably non-monetary.

xfer··on GitHub Copi­lot inves­ti­ga­tion
> An editor extension allowing search of github would be at least as easy to use to violate licenses

Well, try doing that for music or movies or proprietary leaked codebase.

If you think copilot is uniquely producing things that are not that different from humans then surely no one would have any problem with feeding it massive amounts of corporate programs?

I am not aware what writers are doing but there have been plenty of uproar regarding stable diffusion. I have a feeling that if any tools like this get built for musicians/film-makers, it will look vastly different from the current situation.

xfer··on GitHub Copi­lot inves­ti­ga­tion
The difference is if you build tools that can be used to violate existing copyright laws your tool will get taken offline by the same corporations. Yet they are selling one that can be used to do so.
xfer··on GitHub Copilot, with “public code” blocked, emits my copyrighted code
Exactly, it would actually benefit many C/C++ programmers. Some components of NT are very high quality, why not wash their license if the aim is to empower the programmers and also make some profit?
xfer··on GitHub Copilot, with “public code” blocked, emits my copyrighted code
LGPL is open source, the scandal is violating the license agreement.
xfer··on Some remotely exploitable Linux kernel WiFi vulnerabilities
You are assuming copying around buffers won't consume any cpu? Maybe it's perfectly fine, maybe it's not. But it needs some experiment before we can handwave it.
xfer··on JetBrains invites developers to join the Fleet Public Preview Program
I also think vscode is really good enough for development and has a healthy plugin interface. I only miss my vim navigation when working in it, nothing beats vscode remote mode and it's free.
xfer··on So You Want to Compete with Steam (2018)
It's literally a free game, with no strings attached. The only downside is the game gets heavier on resources with these items when you play with players with these items.

Valve is certainly doing(has done) better than the market ethically, you need to look into their competition to see the state.

xfer··on NaN Boxing (2020)
Is that a good trade-off sacrificing fixnum bits? I guess it would make sense when the language is intended for scientific programming.
xfer··on India is almost 80% IPv6
The ipv6 routing on major ISP(Jio) that started popularizing it is pretty bad, half of the packets go to singapore and back to india. You often need to explicitly use v4 to get better latency.
xfer··on Show HN: Open-source APM with support for tracing, metrics, and logs
Anyways to export dashboard for public viewing, maybe even static image? It looks like all drawing is done client side at present.
xfer··on I ran the worlds largest DDoS-for-Hire empire and Cloudflare helped
A DDoS Protection company doesn't know what the state of the market is? Really? Feigning ignorance on this matter is not very honest.

Your aws story is completely irrelevant since AWS doesn't sell counterfeit luxury handbag insurance. Would you argue amazon webstore doesn't know about fake products in their marketplace?

xfer··on Flicking the kill switch: governments embrace internet shutdowns
It's not hard to do this if you collaborate with your upstream or run your network, you have to ban all datacenter/hosting companies networks as well. Then your users complain they can't access your service because their vpn is using these networks...
xfer··on Flicking the kill switch: governments embrace internet shutdowns
We are talking about internet shutdowns not "bans", so how are you going to "circumvent it with a bit of knowledge", unless you plan to break into isps buildings and you need a license to operate an ISP in India in case you didn't know.
xfer··on Amazon, Verizon found using IPv4 240/4 addresses
IPv6 space is too big to scan, a /64 network is already a big problem. Botnets require vuln device to have internet connectivity, they don't need to have inbound connections. Most of them use udp/dns etc. for control.
xfer··on IPv4 Address Auctions
Well if your IP address is that much of a security risk for you, then I hope you have the discipline to never visit anything without vpns/proxychains.
xfer··on IPv4 Address Auctions
> I frequently still buy things over the VPN and stay logged in with accounts attached to me.

They are talking about *registration*, how often do you register new accounts?

I also believe all registration forms should outright ban non-ISP IPs.

xfer··on Remote Attestation is coming back
You should read about North Korea's linux distro if you believe that they will be forced to create an open computing world.
xfer··on The Dangers of Microsoft Pluton
This is the problem, when normal people stop buying PCs, only gamers and enterprise customers remain. So they will sell what their customers want.
xfer··on Xz format considered inadequate for long-term archiving (2016)
You use CoW on filesystem level and take snapshot every 5 mins. Your concerns about write coming from above is gone.

The point about being able to use different media like bluray drives is a valid point but since xz doesn't do any correction it doesn't really matter, it has to be done out-of-band anyway.

xfer··on Rocky Linux 9.0
The target audience is the machines that host your vms, these need to have a stable environment for a long time(of course patched for security when needed).
xfer··on Today’s JavaScript, from an outsider’s perspective (2020)
You don't need to use any tool, it's a general purpose programming language, so "making a script to analyze csv" requires you to learn the basics of programming and what csv is.

It's not unnecessarily complex, but expecting people to handhold and teach you programming for free when you haven't shown any commitment to learning is silly. If you were to do this, you will essentially be writing programs for clueless people for free and they just move on(they may not learn anything).

If you want to learn programming join a bootcamp or a hacker group or get a formal education(where people will be paid for this).

Page 1 of 23Next →