HNHacker News
TopNewBestAskShowJobs

elchief

3,634 karma · joined October 2, 2011

submissionscomments
elchief··on Alice Hamilton waged a one-woman campaign to get the lead out of everything
and yet

One in Four US Households Likely Exceed New Soil Lead Guidance Levels

https://agupubs.onlinelibrary.wiley.com/doi/10.1029/2024GH00...

elchief··on Understanding the trade-offs of using Tailwind CSS
I respect what tailwind has done

But, here's an issue for me: it makes your (cacheable/compressible) CSS smaller and your (uncacheble/uncompressible) HTML larger

Of course, you can cache and compress HTML. Unless you're using TLS, then you should not compress HTML (see BREACH). And unless you have any dynamic data on your page, then you won't be using caching...

And Tailwind makes HTML responses quite a bit larger

elchief··on Setting up a trusted, self-signed SSL/TLS certificate authority in Linux
i use mkcert and /etc/hosts for local dev website building
elchief··on Moving on from React, a year later
Went all in on the BALL stack (bootstrap, alpine.js, laravel livewire) and couldn't be happier
elchief··on When Is Insurance Worth It?
nice!

the calculator at https://xkqr.org/insurance/ would be more useful if the numeric input for probability's step was 0.1 or 0.05, then you can use the up/down arrow keys to change the value. see https://developer.mozilla.org/en-US/docs/Web/HTML/Attributes... . and incr step of "cost" to say 100

Also, if there was a link to a big "probability of x" life events, like getting in a car accident, or your sink overflowing

elchief··on Sensible SQLite Defaults
why is cache size negative?
elchief··on Three hundred words you can spell on a calculator [pdf]
My phone won't open the link but I hope 80087322 is on there
elchief··on Malcolm Gladwell Holds His Ideas Loosely. He Thinks You Should, Too
Mr. Igon Value himself

https://rationalwiki.org/wiki/Igon_Value_Problem

elchief··on Cooking items in your home are linked to cancer-causing chemicals
the stainless steel utensils at ikea are quite reasonably priced and last for decades
elchief··on Global EV Charging Points with Open Charge Map
nice job

needs an easy Type I/Type II ... filter. easier than a kw slider

elchief··on Debian Packaging from First Principles
this one's pretty easy to start: https://www.internalpointers.com/post/build-binary-deb-packa...
elchief··on Debian Packaging from First Principles
weird timing! made my first .deb tonight...

I appreciate first principles, but i just used dkpg-deb --build

elchief··on SQL Tips and Tricks
use sqlfluff linter and do what it says
elchief··on Support for IPv6
Hoping AWS and my ISP implement IPv6 before I retire...

(AWS has partially implemented IPv6, but it's still not usable in my mind)

elchief··on Does anyone integrate with their customers' DB directly?
I like metabase
elchief··on A $557B Drop in Office Values Eclipses a Revival of Cities
Spend the money to turn them into hotels and apartments
elchief··on Netboot.xyz: your favorite operating systems in one place
the list of available operating systems is here:

https://netboot.xyz/docs/faq/#operating-systems

looks like you can use it on aws / ec2:

https://ipxe.org/howto/ec2

elchief··on Moments in Chromecast's history
the only reason i kept using Chrome was because of Chromecast...

what are some good alternatives to Chromecast? (can cast from phone or desktop browser)

elchief··on Ngtop – Request analytics from the Nginx access logs
ssh is the simplest

for exporting nginx logs elsewhere, vector.dev is nice. can send to dozens of places. can parse user agent string, and do ip geocoding too

elchief··on Why doesn't advice work?
I only take advice from people that are successful in that domain (sometimes people that suck at something still give advice on it), and are similar to me (I don't want exercise advice from my grandmother)

Even when I'm giving advice on a domain that I'm successful in, to a person that's similar to me, they rarely take it, so I've stopped giving it

elchief··on The Unix Pipe Card Game
$19 shipping (Canada) is a little outrageous

anybody in Greater Vancouver wanna do a bulk order w me?

elchief··on CrowdStrike Update: Windows Bluescreen and Boot Loops
maybe this was just an enormous distraction while Spetssvyaz did a bunch of fun stuff
elchief··on Quartz: A Deterministic Time Testing Library for Go
not a great name considering Quartz schedular for java...
elchief··on For the Colonel, It Was Finger-Lickin’ Bad (1976)
KFC has been garbage for decades, at least in Canada. I hope Popeye's eats their lunch
elchief··on Leaked admin access token to Python, PyPI, and PSF GitHub repos
The JFrog Security Research team has recently discovered and reported a leaked access token with administrator access to Python’s, PyPI’s and Python Software Foundation’s GitHub repositories, which was leaked in a public Docker container hosted on Docker Hub.

As a community service, the JFrog Security Research team continuously scans public repositories such as Docker Hub, NPM, and PyPI to identify malicious packages and leaked secrets. The team reports any findings to the relevant maintainers before attackers can take advantage of them. Although we encounter many secrets that are leaked in the same manner, this case was exceptional because it is difficult to overestimate the potential consequences if it had fallen into the wrong hands – one could supposedly inject malicious code into PyPI packages (imagine replacing all Python packages with malicious ones), and even to the Python language itself!

The JFrog Security Research team identified the leaked secret and immediately reported it to PyPI’s security team, who revoked the token within a mere 17 minutes!

This post will explain how we found a GitHub PAT that provided access to the entire Python infrastructure and prevented a supply chain disaster. Using this case, we will discuss the importance of (also) shifting right in secrets detection – searching for secrets in binaries and production artifacts, not just on source code.

elchief··on Binance built a 100PB log service with Quickwit
maybe drop the log level from debug to info...
elchief··on Rogers networks reliability and resiliency assessment after 2022-07-08 outage
> Rogers staff relied on the company’s own mobile and Internet services for connectivity to communicate among themselves. When both the wireless and wireline networks failed, Rogers staff, especially critical incident management staff, were not able to communicate effectively during the early hours of the outage. Rogers had to send Subscriber Identity Module (SIM) cards from other mobile network operators to its remote sites to enable its staff with wireless connectivity to communicate with each other

ooops. that's actually quite funny

in case you didn't know, Rogers is one of canada's "big 3" telecom providers. The outage in 2022 basically crippled our economy for a couple days (most ATMs / interac didn't work)

elchief··on Ontario Science Centre to close immediately due to risk of roof collapse
this is probably more due to cronyism by the Ford government than anything. I highly doubt they just discovered this problem.
elchief··on Inventions that came from Waterloo
and PHP indirectly (where Lerdorf studied)
elchief··on Htmx 2.0.0 has been released
bottom of this page: https://htmx.org/migration-guide-htmx-1/
← PreviousPage 2 of 34Next →