HNHacker News
TopNewBestAskShowJobs

TheOperator

1,061 karma · joined January 11, 2019

submissionscomments
TheOperator··on Linux Hardening Guide
My first mistake as a green "jack of all trades" admin was getting scared and feeling like I had to apply a "Hardening guide". Wasted so much time and energy because I didn't know how to determine what was a priority, both when it came to business needs and security. Guides like this presume you have generous amounts of time to put into a Linux hardening project with a questionable ROI when the person looking at it might be a solo overwhelmed admin in a security insensitive line of work.

Fact of the matter is that you can't take a broad checklist approach to security because you can't secure everything, you have to have an idea of where your biggest risks are and focus on those. If the computers in question aren't dealing with PII which one has some moral duty to protect, security risks can be outweighed by other business risks, and going on a security crusade can INCREASE business risk. Sometimes things that might be security risks are mitigated by other aspects of IT security or non-IT controls making them very low priority. Sometimes hardening certain things will have an especially adverse not worth it effect on certain users/applications (which is why these hardening settings aren't defaults).

Maybe worry about phishing attacks, that your authentication strategy makes sense, that your firewall is intact before worrying about arcane aspects of Linux Hardening. A guide like this is fairly useless in the real world without some discussion of the risk/benefits of hardening something and some mechanism to prioritize. To me this guide serves as an interesting starting point to constructing a practical hardening strategy, but I would advise against following it blindly. If you don't know what you're doing I would trust that Linux has fairly sane defaults and focus elsewhere to start with. Configuring your systems in non-standard ways is a Pandora's box of headaches.

TheOperator··on University of Helsinki free MOOC on the Ethics of AI
Political Ethics are a kind of ethics.
TheOperator··on University of Helsinki free MOOC on the Ethics of AI
>You're essentially trying to fix reality by altering datasets which is a completely erroneous way of solving the problem.

I would argue this is a decidingly effective way to solve the problem.

TheOperator··on How Americans Came to Distrust Science
I have absolutely seen recent research on the efficacy of masks. Scroll down to "Human Studies" [1]. I was sceptical on masks from the start (although I still wore them when you weren't supposed to) but new evidence came in about a novel coronavirus. People then did spread this information via yes, propaganda, for the efforts of disease control.

I do think how "science" at once proclaimed that masks don't work so don't wear them we need them for hospitals made me fairly incredulous at the obvious contradiction. So I defied science. Worked out.

[1] https://www.cdc.gov/coronavirus/2019-ncov/more/masking-scien...

TheOperator··on How Americans Came to Distrust Science
I almost see an attitude now that what truly proves your commitment to science is the fact that you don't question it
TheOperator··on Tillis Releases Text of Bipartisan Legislation to Fight Illegal Streaming
Intellectual property has become grotesque and simultaneously punishes the consumers AND the authors, notably in the scientific publishing industry where you pay to publish and also pay to read while getting no real value add in the process. Criminal penalties over a plainly civil matter.
TheOperator··on Analyzing the compromised DLL file that started the Solorigate attack
I feel this is tongue in cheek but at the same time I've personally benefited from 2/3 of these already. I find that very interesting that I'm benefiting from the shit stirring that Russia is doing.
TheOperator··on Analyzing the compromised DLL file that started the Solorigate attack
NTFS was a file system built from the ground up for security compliance. Microsoft since about Windows XP SP2 has been taking security increasingly seriously, and they were willing to break a lot of software to enforce UAC in the Vista days and got nothing but hate for it.

Still regarding this specific hack the exploit was hidden in Orion's telemetry, showing that Microsoft's new love of telemetry isn't just privacy invading it's security degrading.

TheOperator··on Tech Preview of Docker Desktop for M1
I was looking for a laptop capable of running 3x4k displays and there is currently a 186 page thread on macrumours about the 16" being too hot with external displays.

https://forums.macrumors.com/threads/16-is-hot-noisy-with-an...

I can't remember where I saw the benchmarks but I saw a HUGE difference in performance for the CPU depending on if you were running an eGPU or not simply because you're not stressing the internal GPU. Closing the lid reportedly also makes a huge difference. We may be using different definitions of "overheating" but generally what I saw was a laptop which advertised it could handle FOUR 4k displays but it could only do that while being loud and slow. Looking at updated reviews it seems like it's only certain configurations that lead to this problem. Nevertheless I saw reviews, they looked bad, and I held onto my money, and bought a solution with better cooling.

I have strong hopes the m1x will just support a ton of displays out of the box and just work in a compact package. If they released a 14" that could support more than 2 displays I'd freaking faint and wake up weeping with joy that my dream computer had arrived.

TheOperator··on Tech Preview of Docker Desktop for M1
T480 and T480s are not the same laptop. Add an s to that URL

https://psref.lenovo.com/syspool/Sys/PDF/datasheet/ThinkPad_...

Bezels are rather bad on the T series back then but weight was fantastic, xps13 was slightly better in terms of bezels and weight. The T-series having the nipple also helped you use it in tighter spaces closer to your body without sticking your elbows out which helps in tight seated spaces (which is the big reason I care about body size vs screen size), but those tall bezels were dreadful. Still I was just stunned by Apples seeming lack of competitiveness in the 13-14" space, and their 15" laptops weren't good until the 16" came out which was a fine laptop compared to the competition but the thermals really disappointed me and it felt like some of the hardware they put in it went to waste. The 16" was the first laptop since 2015 I would honestly say was arguably the best on the market of that type, before that the laptops were just crap.

>Look, it’s obvious you have a bias against Apple

I have a bias against bad products like the 2016-2019 era macbooks which were dreadful. When Apple was making good laptops before then, I was a fan. After they started making good laptops again, I was a fan. When Apple was in the dark ages, I went to the store and gave their laptops an honest shot but I just couldn't bring myself to buy such garbage even though I was a fan of MacOS. Do I have to believe Apple has made the best laptops from a hardware perspective every single year to not be bias against them with no regard to what their competition is doing? There is not a single product in their lineup I do not consider arguably the best on the market these days, I've been in rooms where I was on of two mac users in a room of 30, my god I'm SO biased against Apple because I hate heavy slow computers with defective keyboards and dubious pricing.

TheOperator··on Twitch bans words “simp” and “virgin”
There is a direct financial incentive for twitch to encourage simping. No surprise that they're banning the word.
TheOperator··on Tech Preview of Docker Desktop for M1
The 16" slipped my mind, that varient to me was the first "good" laptop apple released in years but they were pushing a dated 15" model not so long ago. This laptop had quite a bit of overheating issues to the point you can't even drive all the monitors it says it supports on the spec sheet off the iGPU anywhere close to comfortably.

The 13" models which I'm more interested in are more dated and more behind in terms of weight although the performance makes up for that. What truly stunned me a few years back was comparing a 13" MBA to a T480s and seeing Macs just get tied or crushed in pretty much any area that wasn't related to speaker quality or the trackpad. This laptop had an extra inch of screen space and an extra 2 cores and better input overall and higher memory support and way more ports and about the same battery life and the same weight and all this for substantially less money especially if you bought memory aftermarket. It was nothing short of a humiliation - and this wasn't even Lenovo's top product - Apple wasn't even competing with second rate products. I seriously wondered how Apple had fallen so far from the heyday of the MBPr and if it was just going to let the MacBooks decay into irrelevance.

I also would compare Apple to the X1 line, not the cheaper XPS line with a 32gb memory limit just because it's popular. I could compare Apple to Inspiron which is even more popular and Apple would be even further ahead. Hopefully Dell can make some good laptops one day.

TheOperator··on I assume I’m below average (2010)
I don't see it as unfairness, college mostly gatekeeper business and academia and raw brainpower isn't what you should be selecting for. At least not in isolation.

I do agree the 90% claim seems dubious especially unsourced.

TheOperator··on Tech Preview of Docker Desktop for M1
Developers for the most part have or can look forward enough to enough income to make a tool like a mac relatively inexpensive. My biggest problem with buying them has been how absurdly bad the hardware has been for years other than the trackpad. The screensize/weight ratio, the screensize/body size ratio, the keyboards, and the performance were all well behind the competition. MacOS only running natively on bad hardware was a great reason not to use it, the fact they charged a $500+ premium on their software was really just another nail in the coffin. You had to need or fucking love MacOS to justify buying a mac.

How things change in a year or two. Pretty much only the weight/size relative to the screen size remains substandard and I expect them to improve on those fronts.

TheOperator··on The first person in the UK to have air pollution listed as a cause of death
I see the anti-side as more arguing that they're middle class. People wealthy enough to afford to not bicycle or take the bus, but of modest enough means that taxes can mean putting car ownership out of reach. The "Liberal elite" is putting a very manageable burden on the rich, actively promoting means of transit that help the poor, and is expecting the middle class to just suffer through the requisite sacrifices. It's a compelling narrative so long as you don't expect to live another 50 years in which case it's a rather dense one becuase you will actually have to pay the interest on your choices today.

What truly baffles me is people who are anti-immigrarion, anti-migrant, and anti-refugee but also against any form of regulation on carbon emissions. As if they don't quite grasp that if your goal is to reduce migration than environmental policy matters more than even immigration policy.

TheOperator··on City of Paris Fined Nearly $110k for Appointing Too Many Women
It's sexist and spitting in the face of gender equality. It's feminism not egalitarianism.
TheOperator··on Twitch Bans ‘Simp’
Banning the word "virgin" but only in certain contexts seems rediculous to me.
TheOperator··on City of Paris Fined Nearly $110k for Appointing Too Many Women
Good
TheOperator··on I assume I’m below average (2010)
I've been routinely graded WORSE than the average student and believe this rather confidently. An impression I get from having had teachers yell at me in the hallway about wasted potential and other students cracking jokes about how my friends had "ruined me" after my grades fell off a cliff after making some new ones. Grading doesn't prevent inflated delusions of intellectual superiority if people believe grades are a matter of hard work rather than intelligence.

What drove a sense of inferiority for me was somebody getting better grades with seemingly less effort.

TheOperator··on Undocumented immigrants far less likely to commit crimes in U.S. than citizens
Being an immigrant without legal status is not technically in itself a crime. It's a civil matter not a criminal one. A child smuggled into the United States when they were 2 years old wouldn't be definitionally a criminal.
TheOperator··on Undocumented immigrants far less likely to commit crimes in U.S. than citizens
Looking at one of the studies mentioned, the study period was 1990-2014 [1].

Secure communities was piloted in 2008, and by 2011 appearantly still wasn't in effect in most communities [2]. Thus it seems that the low crime rate found in these studies PREDATES the secure communities program. Which would make it a tough on crime program targeting a low crime population, which would make it arbitrary and inefficient.

[1] https://news.wisc.edu/study-shows-undocumented-immigration-d...

[2] https://en.wikipedia.org/wiki/Secure_Communities#History

TheOperator··on Undocumented immigrants far less likely to commit crimes in U.S. than citizens
>there could be more police near a group of people who commit the same number of crimes but because there are more police resources, there would be more arrests.

There are indeed many factors which would cause the arrest rate to not track the crime rate. Which is why treating the arrest rate as being equivalent to the crime rate is specious.

TheOperator··on Undocumented immigrants far less likely to commit crimes in U.S. than citizens
This data shows undocumented immigrants are less likely to get arrested, saying they're less likely to commit crimes is a speculative inference. If we're being consistent we would have to assume that any group with a high arrest rate must be a group that commits many crimes, which is not something the type of people who use the phrase "undocumented immigrants" are likely to accept as valid.

In general being in a country without valid papers gives one a strong incentive to avoid getting arrested.

TheOperator··on Am I Disabled?
Disabled isn't a label I decided to start call myself it was more something imposed on me which was used as a sometimes successful pretext to exclude me from school, work, youth groups, etc. My disability is simply considered a matter of medical fact, if I ever found myself in a custody battle I couldn't argue I wasn't disabled. I went though my childhood actively angry and embarassed every time somebody was told about my disability and wished for it to stop. Disabled people don't nessecarily have a choice in being portrayed as a victim that choice is thrust upon them my the medical establishment and if you don't want to be treated as a victim you have to jump through hoops to mask your victim status. It's not like all disabled people in the first world were on Tumblr and went "You know what - I feel kind of bipolar" and that was their identity from then on.

I hate this question BECAUSE it pressures me into admitting I have a disability, that I'm a "victim", when I would rather not do that. Victimhood doesn't get you ahead in the first world either - that's why so many disabled people react negatively to this question - because it makes others see you as either a victim (if you say yes) or a liar (if you say no). Just listen to how you perceive disabled people in the first world - in my situation wouldn't I have every incentive to hide my diagnosis from you to hide that fact from somebody like you so you didn't see me as a whiner taking advantage of sympathy for disabled people to seem cool?

P.S. The first world is seeing self-reported depression and suicide rising simultaneously. Certainly some people think it's cool to be depressed, but maybe more is going on than westerners becoming image obsessed given people are killing themselves more and more.

TheOperator··on Am I Disabled?
I don't see a form like this and think "This hurts my feelings :(". I see this form and go "Oh shit, so do I say I'm disabled and get discriminated against now, or do I say I'm not disabled and then get retaliated against for dishonesty later?". I've been rejected from jobs before for being disabled and being disabled is expensive.

Here is how "chill" the situation is in India by the way: https://www.theguardian.com/global-development/2014/feb/27/i...

TheOperator··on Am I Disabled?
You can be diagnosed from childhood and people will still question an Autism diagnosis if you can hold down a job. Which is why the correct answer to this question is always no unless accommodations are absolutely nessecary.
TheOperator··on Cydia, the original app store, sues Apple on antitrust grounds
MacOS on iPads won't happen anytime soon. Not so long as Apple can sell you two devices instead of one.
TheOperator··on Notion API
What good is many features if they're all slow? You just end up doing everything badly. Notion is for the most part following a bottom-up strategy so they can't simply dazzle some IT purchasers with a feature sheet and ignore user experience.

If things don't get better soon I'll probably jump ship before they get worse.

TheOperator··on AirPods Max
When you price out the TCO of staying in the Apple ecosystem... It's quite a bit more in yearly spend than other companies. Feels simply not worth it even with moderate earning power. Maybe I'd do it if I was making some of the wages I see around here :).
TheOperator··on Agents raid home of fired Florida data scientist who built Covid-19 dashboard
>There's an important detail missing from your abbreviated account and that is the individual refused to open the door for the warrant and apparently used the time to 'alter' her situation.

Proof? This sounds an awful lot like something a police department who refused to publish video evidence themselves would make up out of thin air to save face.

← PreviousPage 2 of 15Next →