Hacker News Reader

SysArchitecton Why Tim Cook Is Steve Ballmer and Why He Still Has His Job at Apple

Double clicking brings up Apple Pay. Clicking once with a finger that doesn't have TouchID brings up the PIN entry screen.

SysArchitecton Why Tim Cook Is Steve Ballmer and Why He Still Has His Job at Apple

What keyboard has the arrow buttons you are talking about?

When I place the wrong finger on my touchID and press the home button once, it shows me the pin entry to get into the phone. No multiple presses, nothing. First bad read, shows the pin entry.

SysArchitecton Why Tim Cook Is Steve Ballmer and Why He Still Has His Job at Apple

Part of the problem is that Intel has been having issues with delivering new CPU's on time. Intel used to be much better about following their tick-tock model and delivering new CPU's regularly, but over the past couple of years things have been really more miss than hit.

The only thing that Apple could have done is bump the CPU, which would have not gained anything in terms of power savings or any other changes, and means now you have one more model you have to stock replacement parts for.

This has been an issue not just for laptops, but also for their Xeon line-up in servers. Due to manufacturing delays the v4 for the Xeon line-up was released earlier this year, and didn't really get started shipping until April.

SysArchitecton Poll on macOS 10.12 is broken

Bryan Cantrill's lightning talk: https://youtu.be/bg6-LVCHmGM?t=3521

SysArchitecton New storage classes for Google Cloud Storage

What makes Ceph complicated? The underlying idea and how Ceph works is fairly simple.

SysArchitecton “Most serious” Linux privilege-escalation bug ever is under active exploit

Found the lightning talk: https://youtu.be/bg6-LVCHmGM?t=3521

SysArchitecton How Apple Scaled Back Its Titanic Plan to Take on Detroit

What app causes you issues with scrolling through multiple seasons?

A lot of apps let you select the season from some sort of "drop down" or display a list of seasons vertically and let you scroll through individual episodes horizontally within that season...

SysArchitecton Remediation Plan for WoSign and StartCom

I had over 100+ domains with StartSSL's free service. They worked for my needs. Revocation cost a lot of money for something that was not my fault.

SysArchitecton Remediation Plan for WoSign and StartCom

They wouldn't let you renew them either unless you revoked first...

Revocation cost $59 at the time. Was painful.

SysArchitecton Remediation Plan for WoSign and StartCom

A 1 year ban is a long time for a company that sells certs. It might be the end of Wosign.

SysArchitecton Remediation Plan for WoSign and StartCom

What does it take to build a Certificate Transparency log? Is this something that we could allow someone like the EFF/Let's Encrypt run?

SysArchitecton Certificate Revocation Issue

Nope :-(

Ouch that sucks.

SysArchitecton Doubt cast on Dash developer's defense against Apple's claim of review fraud

So they should only close the account that is doing the bad stuff, and give that user another account to continue doing the same thing?

SysArchitecton Certificate Revocation Issue

That removes all caches for OCSP. That seems a little heavy handed IMHO.

but if it works.

SysArchitecton Certificate Revocation Issue

I am on macOS Sierra...

SysArchitecton Certificate Revocation Issue

This worked for me on OS X:

  sqlite3 ~/Library/Keychains/*/ocspcache.sqlite3 'DELETE FROM ocsp WHERE hex(serialNum) IN ("040000000001444EF03E20", "040000000001444EF04247");'

What a pain in the behind :/

SysArchitecton Systemd programming, 30 months later

That's ignoring the systemd problem entirely and pushing it down further...

SysArchitecton Systemd programming, 30 months later

It does nothing of the sort. The amount of issues I've had with systemd and not booting due to non-deterministic ordering in CentOS 7 is absolutely insane.

My CentOS 7 OSD nodes will sometimes not complete booting because it's hung somewhere in the boot process. There is no way to tell systemd to continue, Ctrl + C doesn't do anything and there is no way to get into the system because sshd is still not running.

Booting it in debug mode to try and get more information makes the whole thing work.

Also, when a unit file gets stuck, it goes into this waiting loop, which is a giant pain in the behind... I want to try and fix it, not wait 10+ minutes for the unit files to time out.

Ctrl + C should immediately stop what it is trying to do and dump me into some sort of login shell so that I can then go and fix the issue...

I've also had issues on Ubuntu 16.04 because of third party software that doesn't correctly set up it's Requires/Wants/Before/After's and then systemd will happily hang the whole boot process. Worst thing is that these issues become more and more apparent on systems with more cores/CPU's... so the 44 core, 88 thread systems we have show the issue way more than the 4 thread desktop that developers are using...

SysArchitecton Samsung acquires Viv, a next-gen AI assistant built by creators of Apple’s Siri

Google could request permission to access my contacts, which would give them access to my contact card, which has that information...

Instead they want me to sign into Google and it wants that info to then be stored on Google's servers.

SysArchitecton Samsung acquires Viv, a next-gen AI assistant built by creators of Apple’s Siri

Thank fuck.

Open some app: Would you like me to be the default for X? Me: no thanks.

Next day:

open some app: Would you like me to be the default for X? Me: ahhh, NOT AGAIN.

Or have we forgotten how annoying it is that browsers all seem to do that all the damn time.

SysArchitecton Introducing Google Container-VM Image

Anyway to download the image for use in a private cloud?

SysArchitecton PulseAudio is now required in Firefox Nightly

How is sound handled on FreeBSD? Or is FreeBSD going to be required to port and ship PulseAudio?

SysArchitecton Teleport – Modern SSH server for clusters and teams

SaltStack has an agent that communicates with a master on a different server. The agents on the clients don't need an open port (other than egress).

This allows me to have one central server that is well secured and protected that allows ingress from the remote hosts, and then all the clients reach out to the master to get their tasks.

SysArchitecton Teleport – Modern SSH server for clusters and teams

OpenStack + cloud-init + SaltStack

SysArchitecton How to Crash Systemd in One Command

I have no idea either. Race condition somewhere? It was mentioned here: https://github.com/systemd/systemd/issues/4234

SysArchitecton How to Crash Systemd in One Command

The issue has a bug report on the systemd repo on Github: https://github.com/systemd/systemd/issues/4234

SysArchitecton How to Crash Systemd in One Command

  while true; do NOTIFY_SOCKET=/run/systemd/notify systemd-notify ""; done

Try this. As soon as you loop it, the bug is hit pretty quickly.

SysArchitecton Let 'localhost' be localhost

DNS rebinding means you shouldn't allow untrusted domains to resolve to a localhost IP address...

SysArchitecton Let 'localhost' be localhost

https://www.iana.org/domains/root/db/drive.html

It's a valid TLD...

https://www.icann.org/news/announcement-2-2014-08-01-en

shows why drive. was set to return 127.0.53.53.

Same thing happened with prod. and other TLD's. These are all names that were/are being used internally and now are valid TLD's that are going to cause issues for people :/

SysArchitecton Let 'localhost' be localhost

Thankfully IPv6 defined a single "localhost" or loopback IP: ::1/128

There is none of this 127/8 mess.