HNHacker News
TopNewBestAskShowJobs

Dunedan

2,748 karma · joined November 8, 2016

submissionscomments
Dunedan··on Custom firmware for MI fitness band
I'd love to see a full featured open-source firmware for the Mi bands, as the original firmware requires an device-specific Xiaomi-issued key for Bluetooth pairing. For obtaining this key you have to use the Amazfit App with an Xiaomi account at least once. For details check out https://gadgetbridge.org/basics/pairing/huami-xiaomi-server/

While thinking about it, I wonder if that's even compliant with GDPR, as it forces users to provide their email address for no good reason.

Dunedan··on Outlook/Hotmail is no longer blocking my mail server
Why do you put mail servers on your block list which never sent spam? And why do you make it nearly impossible to get unlocked once on that list?
Dunedan··on Outlook/Hotmail is no longer blocking my mail server
After many years of regularly getting blocked by Hotmail and outlook.com, I just decided to reject every incoming email from Hotmail and Outlook with an error message explaining the situation. If they don't allow me to respond to emails sent by their customers, why would I allow them to send me emails in the first place?
Dunedan··on Untyped Python: The Python That Was
> Here is what has changed: we no longer trust developers as much and we are re-introducing the complexity that we were fighting. Modern Python can at times be impossible to comprehend for a developer. In a way in some areas we are creating the new Java. We became the people we originally displaced. Just that when we are not careful we are on a path to the world's worst Java. We put typing on a language that does not support it, our interpreter is slow, it has a GIL.

If you believe type hints in Python are a net negative, then just don't use them.

I also don't get the performance argument: Type hints aren't evaluated at runtime, so whether code has them or not shouldn't matter for performance.

Dunedan··on Amazon ElastiCache Serverless for Redis and Memcached is now available
Pricing looks fine until you read the fine print [1]:

> Minimum metered Data Storage: 1 GB per cache

That means each cache costs least $90/month.

[1]: https://aws.amazon.com/elasticache/pricing/

Dunedan··on Volvo delivers 74-tonne electric truck
> The Polish railways network consists of around 18,510 kilometres (11,500 mi) of track as of 2019, of which 11,998 km (7,455 mi) is electrified. [1]

As only ~65% of the polish rail network are electrified, I'm sure there are still plenty of Diesel powered trains operating in Poland.

[1]: https://en.wikipedia.org/wiki/Rail_transport_in_Poland

Dunedan··on Privacy is priceless, but Signal is expensive
> Storage: $1.3 million dollars per year.

> Servers: $2.9 million dollars per year.

> Registration Fees: $6 million dollars per year.

> Total Bandwidth: $2.8 million dollars per year.

> Additional Services: $700,000 dollars per year.

Signal pays more for delivering verification SMS during sign-up, than for all other infrastructure (except traffic) combined. Wow, that sounds excessive.

Dunedan··on HTML First
I'm a big fan of that approach, but it's kind of funny (and sad) that such a simple page doesn't even look as intended with JavaScript disabled, as there are some placeholders of CloudFlare's Email Address Obfuscation visiable in some of the code listings.
Dunedan··on Post Mortem on Cloudflare Control Plane and Analytics Outage
> While most of our critical control plane systems had been migrated to the high availability cluster, some services, especially for some newer products, had not yet been added to the high availability cluster.

> The other two data centers running in the area would take over responsibility for the high availability cluster and keep critical services online. Generally that worked as planned. Unfortunately, we discovered that a subset of services that were supposed to be on the high availability cluster had dependencies on services exclusively running in PDX-04.

> A handful of products did not properly get stood up on our disaster recovery sites. These tended to be newer products where we had not fully implemented and tested a disaster recovery procedure.

So the root cause for the outage was that they relied on a single data center. I find that pretty embarrassing for a company like Cloudflare, which powers such relevant parts of the internet.

Dunedan··on Apple unveils M3, M3 Pro, and M3 Max
Depends on what you consider an upgrade. As M3 cores perform better than M2 cores, I expect the M3 configuration to perform similar to the M2 one, even though it trades performance cores for efficiency cores. Apple apparently believes that its users value improved efficiency for longer lasting battery more than further improved performance.
Dunedan··on A more mature take on stateless Terraform
> Have Terraform plug into your Git history, take the Terraform code from the previous commit, and use that to calculate the old tree.

So instead of generating state by doing API requests, this would generate state from code in git, which does not necessarily represent the real world state of resources.

As much as I'd want Terraform without state I believe using Terraform code in git as state creates more problems than it solves. This approach isn't able to recognize changes made to resources done outside of Terraform. It also assumes the previous version of the Terraform code in git is always the one which got applied last, which isn't necessarily the case.

Dunedan··on A more mature take on stateless Terraform
How would that result in more API calls than Terraform with state? When creating a plan, Terraform does already compare stored resource state and actual resource state, which does require doing API requests for each resource.
Dunedan··on Carrefour puts ‘shrinkflation’ price warnings on food to shame brands
I had a similar experience recently. The jar looked the same, but as it turned out they simply used significantly thicker glass to hide the weight difference caused by the reduced content.
Dunedan··on I cycled to all the villages in alphabetical order
related: https://news.ycombinator.com/item?id=34168284
Dunedan··on Nokia Keeps the Dream of the ‘90s Alive with an Update to Its Dumb Phones
Both phones are GSM-only, so not that useful in many countries, where the 2G networks got already shut down or are in process of being shut down.
Dunedan··on Splitting the Web
Guess what your doctor does to look at your X-rays: The chance is high that he'll just execute the .exe file on the CD-Rom too. I've witnessed that already multiple times and always cringe, because of the obvious security implications. It'd be so straight-forward to compromise a doctors office by handing them over a different CD-Rom with malware instead.
Dunedan··on Zenbleed
AWS does offer Zen 2 based EC2 instances though (C5a family for example).
Dunedan··on The deindustrialization of Germany
That's a reference to the so-called "Agenda 2010": https://en.wikipedia.org/wiki/Agenda_2010
Dunedan··on Show HN: Software Developer salaries in Germany by technology and city
> The salary statistic data is based on over 2750 jobs with salary ranges which have been published on our job board so far.
Dunedan··on How Canva saves Amazon S3 costs
Something which is often overlooked is that transitioning objects in S3 to another storage class using lifecycle policies is a one-way operation. If you later notice that the chosen storage class doesn't fit or your use case changes, you can only go "forward" using lifecycle policies and not "back" to e.g. "S3 Standard" [1]. Going "back" is therefore a quite costly and cumbersome operation, as you have to apply the change of the storage class to each object individually.

[1]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/lifecy...

Dunedan··on You can link an OpenPGP key to a German eID
Here is the gist (directly taken from the website):

> Governikus provides the online service for authenticating your OpenPGP key on behalf of the German Federal Office for Information Security (BSI). This online service compares the name read from your ID card, your electronic residence permit or eID card for citizens of the European Union with the name specified in your OpenPGP key. If the names match, your public key is electronically signed by Governikus, confirming the match. The Governikus public key can be used to verify the Governikus electronic signature.

So this is apparently useful if somebody wants to send an encrypted email to somebody else and want to ensure that only the desired person can read the email. For that the sender would have to check that the OpenPGP key got signed with the Governikus public key before encrypting and sending the message.

What that doesn't seem to address are multiple people with the same name. So the sender know he's sending an email only John Doe can read, but he still don't know which John Doe it is.

To me that sounds like something which makes only sense for a few limited use cases.

Dunedan··on Databricks acquires serverless Postgres vendor bit.io
It's not as clear as you think, because companies are watering it down. Just have a look what "serverless"-branded services AWS published the past years.

Take "OpenSearch Serverless" for example: They claim "you only pay for the resources consumed by the workload", but even if you have an OpenSearch Serverless collection you don't use, you pay at least ~$690/month (and that's not even accounting for stored data)!

https://aws.amazon.com/opensearch-service/pricing/

Dunedan··on Debian 12 'Bookworm' New Features and Release Date
It's still possible, you just need to provide the additional command line switch "--break-system-packages". When trying to install packages without, pip will even tell you that.
Dunedan··on Getting ready to ship 13th Gen and announcing power saving Expansion Cards
For everybody curious, here is a comparison of the pixel densities:

Framework 13": 200dpi

MacBook Pro 13": 227dpi

MacBook Pro 14": 254dpi

Dunedan··on What happens when you leak AWS credentials and how AWS minimizes the damage
The excellent pre-commit framework (https://pre-commit.com/) has a hook for that in its official hook collection: https://github.com/pre-commit/pre-commit-hooks#detect-aws-cr...
Dunedan··on Ahrefs saved $400m in 3 years by not going to the cloud
Sorry, but if I'm reading the article correctly you didn't save any money, because you weren't using AWS in the first place. All you did was to do some back of the napkin math what it might cost you to run something on AWS.
Dunedan··on AWS Is Asleep at the Lambda Wheel
> If I was an AWS exec I’d say managed runtimes are legacy, with the introduction of containers move to containers for new deploys.

If they do that they remove one of the key benefits of AWS Lambda and that's that customers don't have to care about the underlying operating system and just have to care about their function code.

And I'm sure if they'd would look at the numbers of how many AWS Lambda Functions use zip packages vs. Docker images they'd see that something like >90% use zip packages. Based on that they'd be insane to deprecate the use of zip packages.

Dunedan··on GitHub staff are required to use Teams by Sep 1, 2023
I agree, the user experience of Microsoft Teams is beyond bad. Thankfully I don't have to use Microsoft Teams on a regular basis. However, some times when I had to, it wouldn't show any audio or video devices to select and consequently audio and video didn't work.

Turns out that's the behavior Microsoft Teams exhibits under Linux when it can't add inotify watches for whatever reason.

There is no visible error message of any kind in this case, just an empty list of audio and video devices. How on earth do they expect users to debug and fix that?

Dunedan··on Ask HN: Something you’ve done your whole life that you realized is wrong?
I prefer simpler microwaves with just two knobs: one for amount of power and one for the time. No buttons to press and no ambiguous user interface either. Just turn the knobs to the desired values and you're done. No buttons to press at all.
Dunedan··on Marp: Markdown Presentation Ecosystem
In the past I used reveal.js with its Markdown plugin to create slides for presentations. While that worked somewhat it always felt like working against reveal.js. Also their default of editing the index.html and other files in the source code felt really odd and I never managed to get good looking PDFs out of it (and I tried a lot).

Then I stumbled over Marp and it's been great. Don't get me wrong, it's not perfect, but for my use cases it's much better than using reveal.js with Markdown, as it just gets out of the way. Write your Markdown, maybe sprinkle in a bit of CSS and that's it. Wanna generate standalone HTML pages or a PDF out of it? Just run one command and get beautiful looking results.

← PreviousPage 4 of 20Next →