HNHacker News
TopNewBestAskShowJobs

deadfece

144 karma · joined July 30, 2012

submissionscomments
deadfece··on Cryptographers solve decades-old privacy problem
It used 145 core-seconds of compute, according to the paper. That's not 100% unless they were mostly 1 core servers. However, the search used almost 50MiB of traffic before the query was even sent by the client. I imagine that will add up fast.
deadfece··on Ask HN: What purchase under $1000 has changed your life the most?
Bed stuff. Medcline wedge, Purple Pillow Harmony model.

Outside of that there's a lot of little things I bought in quick succession to make my bed comfortable, and it all really paid off.

deadfece··on Tech layoffs: Google, Amazon, Snap and Zillow announce new job cuts
23 people at Zillow? I don't understand why that made news. But man that sucks for those 23 people.
deadfece··on NewPipe – Lightweight YouTube experience for Android
That sounds very useful on the non-ad improvements, and oddly enough I might try it for these areas. The sponsor mentions don't really bother me and I just skip them if they're not relevant. Sometimes it's kind of neat to see one and think "Oh, this creator got sponsored by <big deal tech product>, that's cool, get paid!", or if they're sponsored by bs snake oil companies, then I may discount the creator's input a great deal on account of them not having any discernment.

It's a small data point about the content, so it can sometimes be helpful if I'm trying to decide who to pick amongst forty different 2hr lectures on the same thing.

deadfece··on NewPipe – Lightweight YouTube experience for Android
Newpipe tip for people studying via YT videos: use the speed adjustment and enable skip silence.
deadfece··on Addressing Changes to PfSense Plus Home+Lab
With regard to bgp, vlans, subinterfaces etc.

Those things work the same way in opnsense. Most of my conversion was just data entry of the particulars.

I try to keep my main fws as simple as I can, for the benefit of the household, but I do get carried away with home automation and IaC/CM to my firewalls.

deadfece··on The Cloud Computer
It seems like they have managed to fit 32 1P servers in a 42U rack. That's pretty impressive, I have to admit. I don't think I've seen that level of density before.
deadfece··on Addressing Changes to PfSense Plus Home+Lab
When switching from pfsense to opnsense, I had to move everything to opnsense manually (and I do mean manually, not just updating terraform). It only took about 20 minutes to put things back on both members and have my tunnels up and going again, even counting my very specific customizations.

It was anti-climactic and worked so well as to be boring, which is the absolute highest compliment that a replacement and cutover can have.

deadfece··on Addressing Changes to PfSense Plus Home+Lab
"Home+Lab has been installed thousands of times in 2023 alone."

This seems to indicate that nearly nobody was using it, even counting the illicit activities of the multiple appliance vendors.

If I have a modest lab automation with solid bracketing of fw release versions on some network scenarios, I could easily account for thousands of on-install telemetry entries per week.

I can imagine Hetzner alone would account for thousands upon thousands of installs.

Just based on their phrasing, I doubt there will be a massive influx to opnSense.

deadfece··on Microsoft now demands to know why you won't use Edge when you download Chrome
also available in winget!

winget install LibreWolf.LibreWolf

deadfece··on Microsoft now demands to know why you won't use Edge when you download Chrome
win+x, open Terminal

winget install mozilla.firefox

Then you don't even have to open Edge!

I usually just do that step with chocolatey as part of an ansible playbook, but winget works even better.

deadfece··on The housing market looks like a bubble, 2008 regulator says
I know I bought more house than I initially considered, partly because I knew that rates at the time were going nowhere but up, and the home prices too. (Though I wasn't buying simply with a rising price in mind.)

Even with that, I generally play it safe (20% DTI), so I can only imagine how extended some people are and how that affects the pricing.

deadfece··on My Lifetime Reading Plan
If.
deadfece··on My Lifetime Reading Plan
How I do wish the site owner would get rid of that newsletter signup modal. It's right up there with slow site speed in terms of reasons I'll leave a page.
deadfece··on Thermal transfer compound comparison (2002)
HW sites always tested immediately following paste applications, which of course was imminently reproducible, but to me it's more important what it's going to perform like in a year, two years, even three. Understandably that's orders of magnitude more expensive to test.
deadfece··on Windmill: Open-source developer platform to turn scripts into workflows and UIs
Is there a comparison of this vs something like Rundeck?
deadfece··on Ask HN: What lesser-known accessories do you use with your computer?
I got a ModMic USB after being pretty unhappy with the samples of mic quality that I heard from headsets. I have received a number of positive comments on my microphone quality after switching.

It also gave me back a hardware mute button, which I missed from prior USB headsets.

I have a preference for just USB wired hardware. A number of laptops and sound card addons have some whack spatial audio stuff they do in their chipsets that you have to go trawling through forums to find out how to disable. Since the USB devices bring their own hardware, they get past this a bit.

deadfece··on Ask HN: What lesser-known accessories do you use with your computer?
I use this Tripp Lite USB 3.0 switch into a powered USB 3.0 hub: https://tripplite.eaton.com/4-port-superspeed-usb-3-peripher...

It's solid, boring, and works perfectly. I've never had a single problem with it, even with my X570 chipset constantly doing the old USB disconnect-a-roo that it's infamous for.

deadfece··on Magic the Gathering content creator pleas YouTube to stop scammer bot deluge
I know in a certain infamous forum, it was something like $10 to make an account. If you got banned, you could just fork out another $10 on a new account. Which certainly limited some behaviors, or at least made them expensive.

Depending on the implementation of a pay-to-comment scenario, it could still be profitable for the scammers to pay. They would definitely be tracking CTR or whatever their equivalent is on scam campaigns.

In this case, the scammers are all using similar profile photos, so that part of the whack-a-mole seems like easy pickins. At least at creation time, they could fuzzy compare the profile photos of the commenter and the channel. And compare among other commenters.

The scammers would definitely move on to something else, but it seems like the scammers are scoring a lot of really easy wins right now.

I hate scammers and I love ruining their day, but this is one of many areas where I can't give more attention to it than the platform can.

deadfece··on Magic the Gathering content creator pleas YouTube to stop scammer bot deluge
This problem is very ubiquitous - not just against YT but also on social media sites like Facebook.

I have given up reporting these. The social media companies usually employ some automated method, whereupon reviewing the post, said automation determines it's just fine.

I also went all the way to finding some prolific scammers in Canada, handing over their details to the FBI and state police... but two years later, their domains are still active in scam campaigns.

The big thing I think I would do in this situation is to find whoever is handling this problem the best and direct that community discussion over there, disabling comments on the video platform. If the video platform is unable to address the scammer bots issue, then that community traffic can just go somewhere else.

I don't know enough about the community discussion platforms/forums to say who's the best, but I've not seen this level of spam on self-hosted forums or even reddit.

This is definitely not the future I had anticipated as a kid on dialup internet in the 90s.

deadfece··on Ask HN: Found a leak of US citizens personal data. Should I report it?
Maybe frame it as a regular bug in a legitimate use context? Lead them to their own discovery of the vulnerability, and they'll think they found it all on their own.

"Oh I used your sample API call but I keep getting out of memory errors." <your code has a bug in it that exposes the vulnerability itself>

deadfece··on Show HN: Gargantuan Takeout Rocket – Google Takeout Transloader to Azure
I do a lot of the migrations you mention, and while this tool in particular won't be used directly, adapting this process to our tools will definitely be helpful. In many circumstances I'd rather ingest an enterprise Google Takeout file than make N# of service connections to GSuite.
deadfece··on Show HN: Gargantuan Takeout Rocket – Google Takeout Transloader to Azure
Nice! I want to use this to migrate some customers. I sent the bug details to some teams at MS.
deadfece··on Infinite-Storage-Glitch – Use YouTube as cloud storage for any files
$100/mo for absolutely unlimited is still an incredible bargain. $20/mo is in the neighborhood of almost free.
deadfece··on Treasure trove of mechanical animations (2015)
For a long time I have loved his work more than anything on TV. I love that he's still making videos all these years later.
deadfece··on LastPass breach gets worse
I love web scraping, maybe I can update this prior idea. With the high proliferation of botting, a lot of sites are now resistant to this type of scripting, but at this low volume of interaction, it may be doable with some effort like Undetected Chromedriver.

https://drewdevault.com/2017/05/11/Rotating-passwords.html

https://github.com/tsudoko/pass-rotate

deadfece··on LastPass breach gets worse
Export from LP and start migrating, starting with changing common social IdPs like Google, Facebook, Twitter, Github, Apple, Microsoft/Live/Xbox/Outlook. Update the password of remote access programs like Parsec, and your cell phone provider's password. Then go through your TOTP generator and start changing everything in your TOTP generator (especially since you might be using LP Authenticator - if you are, then move to a different authenticator at the same time). Next: banking, your work payroll, investment accounts, Tax/IRS, shopping. From here one out start going through the list by the amount of money involved. If you doubt that then go through them ordered by the amount of data involved.

If you get lost and stuff seems too hard, if your replacement product lets you sort by age then just sort by oldest and hit 5 today. Hit 5 more tomorrow. Keep chipping at it. At this point you might as well change one every single day.

deadfece··on Server BMCs can need to be rebooted every so often
I can't remember which direction this went, but I had a Netra T1 hooked to another Sun machine (240R? V440?, don't remember), and resetting one would send a break out on the serial console... which would send the other into the ok> prompt in OBP.

We finally got serial servers out of that one, though!

deadfece··on Server BMCs can need to be rebooted every so often
On a Sun box we had, the system controller would panic the domains every so many days (I think ~700). You could have rebooted the domains in the chassis for regular patches, but if you hadn't restarted the SC, you were in for a surprise.

Restart your management devices!

deadfece··on Watchman: Execute a command when something changes
find's own exec option is usually good enough for most things:

-exec foobar {} +

← PreviousPage 2 of 3Next →