HNHacker News
TopNewBestAskShowJobs

0xedd

335 karma · joined January 18, 2022

submissionscomments
0xedd··on Twitter data breach exposes contact details for 5.4M accounts; on sale for $30k
I only killed 10 people, officer, not 100; therefore, I'm not a criminal.
0xedd··on GoodbyeDPI: Deep Packet Inspection circumvention utility
No. That's just propaganda. The purpose is to further vendor lock you. MS has a minute share in the world of OS, completely outclassed by Linux. They're trying to force their way in by fooling people like you that something like Pluton is required.

The only reason they dominate the PC market share is because their spyware OS is installed by default and people don't go around switching OSes.

An anecdote about security; at my workplace, one of the top 5 security firms in the world, secure boot isn't required nor is MS. Makes you wonder.

0xedd··on GoodbyeDPI: Deep Packet Inspection circumvention utility
No. When all "gates" in a domain have this sign, it isn't less upsetting.
0xedd··on Dutch schools must stop using Google's email and cloud due to privacy concerns
Installing over network is ancient. Here's one option https://docs.oracle.com/cd/E19127-01/ultra27.ws/820-6772/z40...
0xedd··on Android removes much of Fuchsia-related code as Starnix project progresses
Disgusting move by Google to further reign in what hardware and software you can use, how you use it and how quickly you have to upgrade your device.

If they only wanted to cut ties with Oracle Java and have an unrelated OS, they'd adapt Linux. A number of companies are already working on it. But, that won't let Google own the entire chain from hardware to software in order to screw over customers.

Zero innovations in the mobile world for easily a decade. Because companies like Google are too busy running VMs on mobile.

0xedd··on Need some advice, feeling depressed about the direction of our industry
As a code developer, there is no reason to not keep coding. You don't have to deal with infra or packaging/deployment. It sounds like bad management on your company's part. In the few large companies I've worked at, software architects, programmers and DevOps were responsible for the different parts of what you mentioned. The architect designs and directs the "engineers" (software/DevOps). For example, "Java guys, please read all config from env vars", as part of good microservice design. Naturally, the service implementation itself should be part of a larger whole; most likely multiple small microservices. And you, the coder, just follow the design. DevOps take care of infra, ci and cd according to the same design. Overlapping domains are discussed and brainstormed.

Having said that, you are wrong in thinking you can learn something that'll last more than 5 years. It's possible but the field isn't about doing the same thing for a long period of time. The job description is better put as "quick learning capability". Which you said yourself; you need to adapt as time goes on. That doesn't necessarily mean AWS. It means Java WebFlux, in your case. AWS and k8s are, each, huge huge topics. They can each employ a team. You shouldn't dive deep into it unless you want to change career paths. AWS to become a cloud architect or k8s to become whatever-cool-name-that-hat-has. You can't be top gun Java dev and cloud architect. It's too much. Select few gurus could exist that excelt in both. But it's simply too much information to keep up with and not a realistic job description/requirement.

Bottom line is you need to continue to adapt in your field of choice (Java or AWS or k8s) and turn your critical eye to your own company. Something there sounds off. The DevOps guy should be the one to tell you lambdas can be written in Java. And the vprnd should be the one to choose Java, seeing as most of the company already knows Java. The architect can give you guidelines how to design your implementation to be compatible to cloud architecture. And you can just learn a few basics about AWS lambdas to be able to debug.

Anyway, sounds like a midlife crisis. Hang in there. I got myself a sports car.

0xedd··on 15.ai
Amazing and inspiring. Hat's off to you.
0xedd··on UK Government Officials Infected with Pegasus
NSO isn't the equivalent of NSA. While NSA is part of the US government and actively spied on allied countries with no repercussions, NSO is a privately held company employing ex intelligence. With mandatory service at 18 and the private sector paying between 8 to 10 times more, it's common to find these intelligence boys leaving the service asap and working in different private companies.

Implying Israel has anything to do with NSO or that the government is behind it, coupled with the amount of attention this gets relative to a company like Italian based Hacking Team (which both the FBI and Russian government made business with) is cause for concern. Is this hacker news or culturally biased vent club?

I think the domain cyclonefront is nice for a new forum, don't you? You can be an admin there, grow a short mustache and do quarter jumping-jacks.

0xedd··on How did I get so unhappy working in tech?
Have yet to meet a company where a developer's opinion is taken into account in software architecture and solution design. And, usually, like some other guy here said, they aren't invited to these types of meetings, at all.

The best line I heard, from a team lead that wouldn't back a "don't implement a task queue using postgresql", was "because I don't understand it/am not familiar with it [the alternative solution, RabbitMQ/whateverelse Q], we're not doing it". Other times it's just silence and, then, in an email or through somebody else "we don't want to do the incorrect solution". Without offering alternatives or what's "incorrect" about them.

These are common scenarios in mega corps. The above couple of anectodes were from one of the largest payment processing company and one of the largest b2b security company.

Oh, and you'll forgive my endless rant, the best one was out of some multi-billion nasdaq blabla company: CTO was absolutely ADAMANT how to implement encryption at rest. Using some tool from his college days. But, that tool wasn't maintained for years and didn't make use of Intel's AES-NI. Even though we explained him about latter, showed him the numbers using simple Linux tools, he kept scheduling meetings "to show us". Needless to say, using Intel's AES-NI was a good approach, compared to software-level encryption. Absolute waste of a couple of weeks.

0xedd··on Ask HN: What jobs can I have knowing Python?
Using frameworks is a must. Writing maintainable code is a must.

DevOps - you'll quickly run into requirements to write parallel work. Not using something like fabric is a waste of your employer's money hiring you. You'll quickly run into requirements to use ansible/terraform/other. Same applies here; surrounding tools with subprocess and parsing stdout/stderr is a waste of your employer's money. Use appropriate packages, instead.

DataScience - all the cool toys, from simple stuff like pandas, or more focused ones like working with spark and the plethora of big data libraries require indepth knowledge of both the library and the underlying datastore. Combined, you make the most of your time and hardware. Not doing so, and only writing something that works on a small scale is a common costly mistake.

Security - python is just a helper tool. Your requirements, depending on position, will be focal knowledge about a domain and its set of tools. From highly skilled domains like research onward to threat hunting, PT and to the entry level stuff like NOC.

You're better off enjoying the little wins in life and dealing with the less pleasant moments. That'll give you a nice career in anything you choose.

0xedd··on Switching from pyenv, rbenv, goenv and nvm to asdf
Installing dependencies, per the docs, before installing python works well. Installing library dependencies for packages also works well. It's not dissimilar to compiling c/c++ where you have to read the installation docs. And the docs better be updated.
0xedd··on Ask HN: If you used to be socially awkward and shy, how did you improve?
Yogi meditation. Best learned at a traditional yoga center and not a gym/YouTube.

The most impressive sight was a young teenager there. Both parents were practitioners. The kid was calm, mature and volunteered frequently.

0xedd··on Why is it hard to buy things that work well?
Nokia.
0xedd··on The new silent majority: People who don't tweet
Don't use Twitter. It's rigged to piss you off. Use federated microblogging and join a like minded instance. I don't know about web 3.0 but the former is very appealing and works ok.
0xedd··on The new silent majority: People who don't tweet
Wrong. Facebook whistleblower says company made profits from making people suffer. People suffer from reading cesspool produce. Facebook used big data insight to expose users to cesspool produce.

Twitter isn't dumber.

(Assume this was written with kindness)

0xedd··on Norway Chess cancels Alexander Grischuk
Just because you can speak or write, doesn't mean you should. Nothing you said is reasonable.

Japanese American imprisonment without due process or access to legal counsel during WW2 was condemnable. You advocate the opposite. I mean, nothing was written against then, was it?

Advocating for an individual's human rights and disassociation from their government's actions doesn't mean unequivocal support for the latter.

0xedd··on Nintendo is removing switch emulation videos on Steam Deck from YouTube
You've been brainwashed, friend. There's no reason in the world _I_ should switch up (pun, heh) hardware at the pace of the manufacturer. But, that's what happens when corporations are kept unchecked. _They_ decide that every x years, I need to upgrade or decide what I use it for (violence and harm excluded). Were I able to repair it or use it however I wish, that'd not be the case.

Nintendo needs to make a better argument for their hardware if they want people to buy it. Not by dictating laws about hardware usage. Simply put, they're living in the past where different hardware and different firmware mattered.

What's next, Microsoft doesn't let me run anything other than Windows on my hardware? Wait ... https://support.microsoft.com/en-gb/windows/enable-tpm-2-0-o... https://www.microsoft.com/security/blog/2020/11/17/meet-the-...

Hey look, propaganda! Your favorite <3 Hopefully, this is a wake up call for you to read between the lines. In this case: No, Microsoft did not invent secure cloud computing.

0xedd··on Nintendo is removing switch emulation videos on Steam Deck from YouTube
Piracy's impact on the digital industry is propaganda. No link has ever been established by factual data. It's just corporations' PR.

The Government Accountability Office came out in 2010 with a report that said these numbers “cannot be substantiated or traced back to an underlying data source or methodology.”

http://freakonomics.com/2012/01/12/how-much-do-music-and-mov...

0xedd··on Cybercriminals who breached Nvidia issue one of the most unusual demands ever
Irrelevant. It would be relevant if others could write an open source driver. Which, effectively, they can't.
0xedd··on Cybercriminals who breached Nvidia issue one of the most unusual demands ever
Source: "trust me, bro" Here you go, kid:

https://www.statista.com/statistics/326707/bitcoin-price-ind...

https://www.statista.com/statistics/371895/inflation-rate-in...

A great insight would take into account more prominent cryptocurrencies and 3rd world countries but you don't throw pearls before swines.

0xedd··on Cybercriminals who breached Nvidia issue one of the most unusual demands ever
The US is a small part of the world. Just a reminder. You can open a bank account in the EU that allows depositing cryptocurrency. The US is on the decline. It's propaganda is great, though.
0xedd··on Cybercriminals who breached Nvidia issue one of the most unusual demands ever
Percentage wise it looks small but numbers are impressive. Monthly active steam users using Linux was reported at over 1 million last year https://www.gamingonlinux.com/steam-tracker/
0xedd··on Cybercriminals who breached Nvidia issue one of the most unusual demands ever
"You don't own your hardware" is a very long list in my book.
0xedd··on Speeding up Go's built-in JSON encoder for large arrays of objects
No. CSV plays nicely in big data. JSON doesn't.

Tabular data allows you to easily optimize performance and costs. For example, Google decided it is a good idea to export some of its billing data columns as JSON. As a consequence, filtering by a low cardinality value means parsing a large amount of data because it's in a JSON column. Something that would otherwise be cheap in a classic columnar compression. Where the value is stored once along the number of subsequent rows with the same value. BigQuery bills according to amount of data parsed.

The above anecdote doesn't cost much, fortunately, because the billing data isn't large. But, in terms of a data pipeline development costs, I don't use it in the context of big data.

0xedd··on RISC-V is succeeding
That's the equivalent of saying forking is bad.

The big plus of RISC-V is allowing those who accept the risks and cost to experiment and develop new specialized components. Arm won't let you.

0xedd··on EU to mandate public salary information for all job postings [pdf]
despite pay gap shown time and time again to be fiction, government monkeys are still dancing to that out of key tune.
0xedd··on Linux developers patch security holes faster than anyone else, says Google
Either an MR or a merge into the kernel, yes. But, regardless, the comparison omits open auditing vs a closed one.

With closed systems being able to decide what to disclose and obfuscating their own system, the [power] user is less likely to have actual numbers of anything. Be it how many flaws or how many were discovered internally and placed in the backlog. Then, you throw in some PR requirements into the mix and you'll never have a clear picture of what you're using. Just a sales pitch in a different medium.

This is an important dimension.

0xedd··on Linux developers patch security holes faster than anyone else, says Google
Sounds horrible. Product justified git [version] tagging should be done with names and not semver/other. It was very simple: "Marketing pitches it better so more sells". Threw devs and DevOps into the pits of hell, adding unnecessary cost to many tasks.
0xedd··on Linux developers patch security holes faster than anyone else, says Google
It's very simple. You assume your favorite OS is written by more skillful developers or steered by more skillful architects/tech-lead or overseen by more skillful team leads.

Any of these are wrong.

Propriety systems are closed and obfuscate their flaws.

0xedd··on Daily chart: A new low for global democracy
The brainwashed majority of this board is amazing. The previous comment here is true and people judge, from their leather sofas, thousands of kilometers away, a culture as well as a country without knowing the least bit of history about them outside of mainstream media.

In a political context, we can't have political discourse that doesn't align with the Western fantasy? How far have you fallen. Freedom, free speech and all those slogans are just a disgusting lie.

For those who downvoted it and reported it are invited to turn off their TVs and read Time Immemorial. A book written about the recent (decades) history of the region. With quotes and sources cited at the end of it. Ranging from UN, public announcements and other documents.

For example, absolutely everyone ignores the fact that the region of Palestine includes Jordan. A country 4 times the size of Israel with much less populace. When they shriek Palestinians, no one thinks of Jordanians. Strange? Nah, brainwashed. In Israel, 20% of the population are Arabs. 20% of parliament members are Arabs. Arabs are exempt from the mandatory 2-3 years military service. Arabs receive a special scholarship to universities, regardless of their SAT score. No wonder the heads of hospital departments and country's top doctors are Arabs. Yet, the west is somehow convinced there's apartheid here. Successful propaganda is successful.

You must understand there are over 7 billion people on this earth and most are different than you. In addition, it isn't a defacto rule that everyone alive in 2022 is civilized, will not lie and let you live. Something that the West assumes like some knee jerk reaction.

A small anecdote - my colleague is Arab, works as a DevOps engineer, makes 150k USD a year, had an onboarding bonus of 40k in stocks and receives a "top up" additional stocks every 6 months after 2 years. How much do you make compared to the "oppressed"?

Anyway, ignore your ego and finish that book.

← PreviousPage 5 of 7Next →