HNHacker News
TopNewBestAskShowJobs

genmud

1,784 karma · joined September 18, 2017

Security nerd. Father.
submissionscomments
genmud··on Ask HN: Where do you buy electronic components in the Bay Area except online?
Highly recommend using project boxes, like tackle boxes or craft project boxes to organize stuff. I use a rainbow craft box [1] which has a bunch of smaller compartments and it works well.

1 - https://www.michaels.com/product/rainbow-photo-craft-keeper-...

genmud··on Ask HN: Where do you buy electronic components in the Bay Area except online?
I'm not sure what electronic components you keep needing that are time sensitive?If you are doing analog/radio stuff, I'll be honest... it's pretty bleak.

Personally I just factor in 10 days for my project and have a board made with pcb assembly. JLC is so friggin cheap it isn't worth it to me to bother with doing stuff on perfboard anymore. Last project I made was a UV lamp for curing resin and it was like 8 days from submitting the order to having a finished board in my hand.

Personally, I have some test/dev setups that I know work, either STM32 based or since the chip shortage a few espresif or rp2040 based boards. If I need to output a clock for example, I can just bitbang it and when I need a more permanent circuit I just spin a board.

I find having about 100x 1/10/100/1k/10k and a bunch of electrolytic, ceramic caps (.1/1uf mostly), along with components for some common circuits (like an ldo and buck/boost). I also have a bunch of cheapo premade buck converters that I can use whenever I need voltage conversion.

genmud··on China Travel Advisory
Thats kind of what I was getting at with the Canadians, but Griner is a good example too.
genmud··on China Travel Advisory
Yes, there are many examples if you simply google "china imprisoned business trip".

When the Canadian government arrested a Huawei exec who was ignoring Iranian sanctions and lying to US investigators, the Chinese government arrested 2 Canadians as spies. Authoritarian governments fucking love to arrest people on "espionage" charges, since it is hard to prove and they can pretend to not be able to share because of national security.

genmud··on China Travel Advisory
You realize the vast, vast majority of the electronics industry and many other industries have very little choice in the matter (for the time being at least). That's great you can make that decision, but there are many who don't have that luxury.

If you want or require mass production of electronics or motors, it's fairly difficult to have done in the US for competitive pricing (or in some cases, at all).

genmud··on China Travel Advisory
I don't feel like china is a bustling international tourist destination. I assume most people visiting have family ties or a specific purpose for their visit like business, not going there "just because I can".
genmud··on China to Restrict Exports of Metals Critical to Chip Production
They will if the US threatens them with sanctions or requires export licenses and they see their value in the US market being greater than the CN market.

ASML is a really good example.

genmud··on China Travel Advisory
Increased globalization and US public policies of the 90s and 2000's encouraged this activity. To say it was any specific reason, like corporate greed, is hand waving away the complexity of the problem.

There were many, many reasons factories moved away from the US, one of which was the profit margins on goods, which actually is complex and directly influenced by the way taxes/accounting/finances are done in corporate America.

Don't get me wrong, greed has been a major, if not the major motivator, but there were so many people either asleep at the wheel, or actively driving us towards the outcome we have today.

genmud··on The A-10 is retiring and the Air Force has no close air support replacement
We might be talking about different ranges... I was talking about repositioning/ferry range, which the a10 has about 2500 miles vs the f35s 1500 miles.

Combat ranges are like 250-300 for a10 and maybe 500-700 for the 35. The big reason the 35 outranges the 10 is they calculate intercept missions as the combat profile vs the a10 operating in much more dense air in a CAS role. I would be willing to put money the range increase is negligible once you put it in a similar CAS mission.

genmud··on China Travel Advisory
Not really. I'm not a lover of china, but I don't wish ill on people who go there or think people should have to deal with arbitrary enforcement of laws because you are from a foreign country.
genmud··on China Travel Advisory
Travel advisories are meant to inform travelers of risks... not provide commentary or political discussions on domestic policies.

When I worked at a huge company, I found that most advisories from state department quite accurately portrayed the risks in country. I would often look at state.gov and then talk to my local security people and they were close enough to be valuable to most travelers.

genmud··on China Travel Advisory
I wouldn't be surprised to see this activity ramp up drastically over the next few years. Anti American sentiment has been growing and their state media has been really pushing it as well due to the semiconductor and trade embargos for certain technology.

Ironically this might be the straw that breaks the camels back, when you lock up people on business trips, the companies tend to not look on that very favorably.

genmud··on Ask HN: Leaving company but offered a contract role. How much to charge?
Take your current yearly salary, add 10% for raise.

Take new salary and add business overhead costs of taxes, business insurance, benefits... add this to your salary, this is your yearly loaded costs.

Take your yearly loaded costs and divide by how many weeks you want to work... for example, you want to take 6 weeks off per year, then subtract that from the weeks in a year. This is your weeks worked.

For example(with made up numbers):

Let's say you make 100k/year, want to take 6 weeks off, local business taxes are 25% and insurance is 1k.

  ((yearly_salary * taxes) + fixed_costs) / weeks_worked / days_in_week = minimum_day_rate
genmud··on The A-10 is retiring and the Air Force has no close air support replacement
Uh, an a10 can outrange an f35, it's just slower to get there. It also can carry a heck of a lot more munitions than an f35 at 50% less cost per hour, with a longer service life.

I'm not saying that the 35 isn't an excellent platform, nor am I saying the A10 would be a great asset in a conflict with china, but saying the f35 is a drop in CAS replacement for the A10 is kind of missing the larger picture of what it's used for today.

I am of the opinion that the f35 is a gerber multi tool and while it's super versatile, it doesn't do everything as well as purpose built platforms. The obsession with a one tool fits all is kind of silly. In every category, the f35 is objectively not the winner, there are faster fighters, fighters with greater a2a payloads, CAS with better loiter/payload capacity, bombers with better capacity.

One of the primary goals of CAS should be the ability to stay on station for extended periods of time. Part of the likelihood aircraft are on station is directly related to the cost to maintain and maintenance requirements. F35s have huge costs and require a significant amount of maintenance.

genmud··on The A-10 is retiring and the Air Force has no close air support replacement
It does, but the fact that SU-25s, which are effectively the same vintage, are still flying in Ukraine is pretty amazing to me.

I could see a use of the a10s as a launch platform for 200-500lb loitering munitions to get them in range of frontlines, but using them for anything in the pacific would be suicidal.

genmud··on The A-10 is retiring and the Air Force has no close air support replacement
If they are investing in it, they sure as hell aren't getting a big bang for their buck from what I have seen. Their man portable counter UAS systems are a fucking joke and only work on common stuff that isn't designed for heavily contested EW environments.

Their bigger systems look reasonable on paper, but I doubt they would be up to the task of dealing with high end comms in an actual combat environment. They can barely keep them alive in Ukraine and from what open sources are reporting are either not very effective or deployed in such small quantities to be effectively nonexistent for the majority of areas seeing combat.

Sure, Iran was able to down a stealth drone years ago by messing with the electronic nav systems, but it wasn't like there was actual combat happening, and I don't think they have repeated that since then.

genmud··on The A-10 is retiring and the Air Force has no close air support replacement
The war in Ukraine has shown that highly integrated drone operator's with small UASs can fill that role. In the future, it isn't going to be a USAF or CIA operated drone circling at 40,000 ft, launching a $200,000 missile or dropping a $25,000 bomb... it will be a platoon or battalion level loitering munition operated by the people on the ground that costs $3,000 or $5,000.
genmud··on Illegal Life Pro Tip: Want to ruin your competitor's business?
We also have an issue of enforcement, I'm not sure if you know... but many, if not all of these behaviors could be acted on with existing legislation. Anti-trust at the federal level and a multitude of state laws on paper make it illegal to do this type of behavior.

The problem is that it's really hard to take action on large corporations. As a consumer, if I wanted to seek remedy for say, false advertising of ingress protection on a phone, it would cost hundreds of thousands of dollars in legal fees. Without a significant war chest it's almost impossible to hold most companies to account as an individual, and the agencies supposed to be enforcing these issues either won't or can't enforce the laws on the books.

genmud··on To make more stingers, U.S. needs to revive production technology from scratch
If the US military ever requires manpads to down enemy aircraft, things have gone so incredibly wrong that not being able to supply thousands a year is the least concerning part of the situation.
genmud··on Cheapest Source of x86 Cores?
People don't realize how cheap hardware has become. Most vendors also have the ability to lease stuff for 0% (though that might have started to change), so you end up paying for a 3 or 5 year lease, which allows you to deduct vs. depreciate the asset on taxes. Sure you have to colocate it, but you could get a 48u colo rack for ~1k/month + ~1k/month for 1gbps link.

I used to buy dell outlet servers (which is their refurbed gear) all the time for folks who insist on dell, they end up being about 20-50% of the cost of cloud pricing if you are utilizing it with a full workload. Their stuff also includes a 3 year warranty with next day support, so it isn't very risky buying a refurbished server. There have been times where I found deals where the components could be parted out on ebay for more than the cost of the server. If you don't need support, there are tons of used servers on ebay / craigslist where you can get deals on 1-3 year old hardware that are good enough to purchase multiple spares.

For example, you can purchase a 2x 32 core server [1] for ~11k from the outlet store with next day support.

If you are running 24/7, with 64 cores over a 3 year period...

  Server Cost / Years / Days in Year / Hours in Day / Cores = Core per hour cost
  11000 / 3 / 365 / 24 / 64 = $0.0065/hour
If you wanted to go supermicro [2] with somewhat less reliable support, its a similar story. It would be a 1u dual 96 core (192 cores) box w/ 1.5tb memory for around ~30k.

  30000 / 3 / 365 / 24 / 192 = $0.0059/hour
You can recoup your hardware costs within the first year vs. running in AWS if your workloads are high enough to justify the hardware expense.

[1] - https://outlet.us.dell.com/ARBOnlineSales/Online/SecondaryIn...

[2] - https://www.itcreations.com/configurator/model/supermicro-as...

genmud··on Tell HN: 1Password 8.10.8 update corrupted data
Can I just say how disappointing it has been watching 1Password progressively get worse as the years go by? I have been a customer for over a decade and have contemplated moving on.

They used to be the app I would point to for awesome design principals for iOS and Mac. The V8 release has made the UI more cumbersome and it feels like a half baked release.

The one bright spot is they have improved their windows version quite a bit and I admit the team based manager is useful, if expensive.

genmud··on $794K SIM swap hacker PlugwalkJoe sentenced to 5 years
This really highlights the importance of only using SMS as a 2fa option. I have investigated things years back where sim-swappers were paying several major wireless carriers employees thousands of dollars to port out phone numbers.
genmud··on Ask HN: How Do You Stay Comfortable While Working During Travel?
So, what I do is actually work from coffee shop about 1x a week. This gets me used to having a "non-ideal" setup, while also allowing me to interact with people outside my immediate family and close friends. When I work from coffee shop, I tend to get up and stretch my legs more than I would at home, but also use things like use noise cancelling headphones, have my bag in order so that I don't miss things like chargers, cables or components I need.

When I work from vacation, remotely, whatever... since I already have the "non-ideal" setup down pat, I either work from a coffee shop or from the place I am staying, but I don't have such a massive adjustment since I am already trained to be productive in a perfect environment.

genmud··on Red Hat strikes a crushing blow against RHEL downstreams
Man, how stupid and short sighted are the decisions they have been making at RH. Makes you really cautious for rug-pulls on any of the software they maintain
genmud··on Russian intelligence calls for Wagner chief’s arrest
On one hand it feels like a psyop, trying to get people to react, but on the other hand, the amount of incompetence in the Russian military makes me genuinely wonder if this is a legit coup attempt.

It's been like watching a badly written tv show.

genmud··on Putting out the hardware dumpster fire
If you ever need someone to test your stuff when it makes it into the physical world, would love to help :)

I really want to see an open motor control peripheral that could be used in robotics or UAVs, it's amazing how ubiquitous they are, yet rarely are very integrated like other controllers.

genmud··on Putting out the hardware dumpster fire
I mean, sure, for certain x86 things... like 20 years ago, but IIRC their host controllers were not though, and that isn't but a fraction of all CPUs.

Think about how many billions of devices there are where you can't get simple a pinout diagram for the main CPU. I would argue only a tiny, TINY, percentage of any Linux devices actually have CPUs/SOCs/SOMs with sufficient documentation to look at from a hardware design standpoint.

genmud··on Dear Red Hat: Are you dumb?
Incorrect, for the longest time the US government only knew how to support linux via RHEL, that is rapidly changing. So if you sold software or services to the US government that was running on linux, your only viable choice was RH. That has started to change, Ubuntu pro is certified for use in the USG and has STIGs, which are hardening requirements for Ubuntu.

Many places would develop on centos or scientific Linux and then when it went into production use RHEL, since they were effectively 1:1 ports. So yea, I imagine there are quite a few orgs who might switch.

genmud··on LexisNexis is selling personal data to ICE so it can try to predict crimes
No, it's exactly what I'm describing... courts generate data about you, someone (LN as an example) slurps it up. Buy a house, deed gets recorded, data gets generated and someone slurps it up.

Buy a product with a CC. All of the half dozen to dozen vendors involved in the transaction will generate data about you and sell/trade the data to other people.

Sure, LN might have some really good profiles, but there are so, so many companies doing the similar things.

genmud··on LexisNexis is selling personal data to ICE so it can try to predict crimes
If you are giving data to someone, or having data produced about you, it is a good assumption at this point that someone is trading it, selling it or monetizing it.

With no effective data ownership or privacy legislation in the US, it will continue to be that way.

← PreviousPage 8 of 19Next →