HNHacker News
TopNewBestAskShowJobs

jamescun

2,340 karma · joined July 27, 2011

Twitter: @jamescun Github: https://github.com/jamescun Blog: http://www.jamescun.com/ Email: hackernews [at] jamescun.com

[ my public key: https://keybase.io/jamescun; my proof: https://keybase.io/jamescun/sigs/eg-YzEEaRcyzNwlxW6095oWVjkLanjoACl6O7WSxk0U ]

submissionscomments
jamescun··on Icelandic Prime Minister Resigns After Panama Data Leak
It would probably be a Malcolm Tucker-esque figure (from The Thick Of It, recommended if you enjoyed House of Cards).
jamescun··on U.S. Drops California Case Against Apple After Accessing iPhone
You're right, I perhaps was a little callous with my disregard of the specifics of the case rather than focus on the larger potential precedent.
jamescun··on U.S. Drops California Case Against Apple After Accessing iPhone
This is possibly the worst outcome. The tide of public opinion was turning towards Apple and privacy, and away from the FBI; for it to enter the court under this pretence there was a strong argument to be made against the latter. With this announcement, for the many, this matter will now be "resolved". When it inevitably rears its ugly head again, the same pretence may no longer be true.
jamescun··on DNS Outage at DigitalOcean
I would be interested in the post-mortem from this. While DigitalOcean operate their own DNS, it is only made publicly available though CloudFlares DNS proxying service.
jamescun··on Integrating a VT220 into my life
I was discussing an identical project with a coworker a while back, and have been stalking ebay for VT2X0s occasionally since. However they seem to be incredibly rare in the UK, and all the listings shown require shipping from the US with monstrous fees.

Although my idea was not necessarily integration in to my work flow, more a dashboard of network/server stats etc.

jamescun··on Cross-platform Rust rewrite of the GNU coreutils
Could be useful given the choice of MIT license rather than a GPL variant.
jamescun··on GoDaddy launches AWS-style servers and apps
We used them as a domain registrar long ago. Somebody was able to contact support, have them unlock the domain, and transfer it.

And I am supposed to trust them now with my infrastructure? No thank you.

jamescun··on 10M Concurrent Websockets
This benchmark feels a little lazy. While I am in no doubt that Go could match the 2M concurrent websockets of Elixir's Phoenix framework, a benchmark should aim to implement the same functionality to be considered useful.

The only interesting thing here is that with that 10M connections figure, each connection handler goroutine contained at least 2 channels (sub and t), and they seemed to scale (no mention of latency though).

jamescun··on DIY Meteor-like Realtime Functionality Using Socket.io and RethinkDB Changefeeds
Possibly Internet Explorer support. Even Edge doesn't support them yet[1].

With deployments of HTTP/2 increasing, I think we'll see greater adoption of server sent events. At the time of writing, HTTP/2 and WebSockets are two incompatible standards. For non-latency sensitive applications (i.e. not games) it is very easy to implement a WebSocket like interface over HTTP/2 using SSE (server -> client) and POST requests (client -> server) with very little overhead (thanks to HTTP/2's multiplexing).

[1] http://caniuse.com/eventsource

jamescun··on Ask HN: What are some examples of beautiful software?
Say what you like about Rails (or Ruby for that matter), but go and look at its source. It is well laid out, the commenting is extensive and descriptive, and it follows a natural flow.

The same can be said of the PostgreSQL source.

jamescun··on Ask HN: Must you have no life, at least early on, to run a successful startup?
I was co-founder of a (YC-backed) startup for 4 years until we were forced to close, so I don't know if you can define us as "successful".

Anecdotally speaking, I started off working with no life. There is a lot to be said for time periods where you shut out all else and just focus on your business, in fact the YC programme gave good impetus to only "write code, speak to customers or exercise". However doing this for extended periods is a great way to burn out.

Initially any time I took off I felt incredibly guilty about. I however came to the realisation that stepping away, even just for an evening to see friends, allowed me to recharge my batteries and I was able to recoup the lost time and then some.

A company is only really the sum of its people, and if those people aren't firing on all cylinders then it will become apparent. In short, lead a balanced life.

jamescun··on FTP Must die the technical explanation
Is FTP that heavily used in 2016? The only use I can see for it now that hasn't been replaced by either a better protocol (i.e. BitTorrent) or a service (i.e. Dropbox) is shared web hosting, even then many now support SFTP (and git).
jamescun··on SSHKeyDistribut0r: A tool to make SSH key distribution easier for sysop teams
If you are managing enough servers to justify automating the deployment SSH keys, you probably also have configuration management.

Why would you use this rather than your existing configuration management system? The latter reuses existing infrastructure and is naturally more concurrent and scalable.

I get this is a push mechanism and configuration management is generally pull-based, alternatively tools like Ansible exist which can perform the same task and then some.

jamescun··on Driverless lorries to be trialled in UK
London used to have a similar system for distribution of mail throughout the city, officially known as the London Post Office Railway, or Mail Rail. I heard there were plans to open up some of the stations and tunnels to the public, not sure what they came of them though.

https://en.wikipedia.org/wiki/London_Post_Office_Railway

I used to work in Royal London House in Finsbury Square and the lowest subterranean level was sealed up but Royal Mail branded; given that it was a stones throw away from Mount Pleasant, I always wanted to gain access and see if it had access to Mail Rail or was even a station.

jamescun··on The DROWN Attack
I'm on the fence over the "marketing". On one hand it is easier to communicate terms like DROWN, GHOST and Heartbleed than say CVE-2016-0800; meaning knowledge of the vulnerability gets spreads quicker and sites are patched more readily. Alternatively it could be a distraction from good security management practices, where only the "marketed" vulnerabilities get patched instead of general tracking the security of critical pieces of your infrastructure.
jamescun··on Node 5.7.0 (stable) released
Sadly not. When calling spawn[Sync]() in prior versions the command would be executed directly as a child of the node process. If you wanted to use any features like piping, automatic environment variable interpolation or backgrounding etc; you had to manually wrap your command with a system shell like bash(sh).

This addition when set to true, will do the wrapping for you in a cross-platform manor.

jamescun··on Linkerd: Twitter-Style Operability for Microservices
Do you have any public resources about Google's GSLB? Searching for it results in general articles about GSLB.
jamescun··on Vagga is a containerization tool without daemons
A more extensive look at the code, it requires the host root user to set `kernel.unprivileged_userns_clone=1` after which Vagga can perform privileged operations as a "root" user inside a user namespace.
jamescun··on Vagga is a containerization tool without daemons
I don't understand this point:

  - Fully userspace containers, no need for elevated privileges
The most basic Linux container is constructed with chroot and namespaces, both of which require root privileges (or at least CAP_SYS_CHROOT and CAP_SYS_ADMIN respectively). Additionally managing layers with a union filesystem, unless utilising FUSE, will also require elevated privileges.
jamescun··on Ask HN: What do you use to manage dotfiles?
I see a trend of people maintaining a GitHub repo called `dotfiles` for their public configurations, myself included for zsh/tmux/vim/git. I haven't found a satisfactory way to sync secrets between machines other than via sneakernet.

https://github.com/jamescun/dotfiles

jamescun··on Why the Sun 2 has a message “Love your country, but never trust its government”
With regards to the copy protection aspect, it was a pretty common practice back in the day (perhaps even still is).

In the Macintosh Classic's ROM, there were debug sequences that not only would display pictures of the development team, but write the text "STOLEN FROM APPLE COMPUTER" to the screen. http://appletothecore.me/files/mac_se_easter_egg.php

jamescun··on Netboot
NetBooting from the internet AND over HTTP? Sign me up!

Sarcasm aside, at the very least it would have been nice to see it use iPXE's `imgtrust` and `imgverify` functionality, which I could then audit and load on to a boot medium for netboot use.

jamescun··on Why are Brits so obsessed with buying their own homes?
For me, wanting to buy is not about an investment. I want somewhere secure and stable to live. The "dead money" aspect of rent versus a mortgage is just a bonus.

It must seem alien to most in the west the sheer lack of protection renters have in England (property law is devolved); it is based entirely in private contracts, and what law does exist is rarely if ever enforced. Just last week Parliament rejected an amendment requiring all rented property be "fit for human habitation". Rent rises are not capped and often used to evict tenants, the legal minimum notice for eviction is two weeks (this does not increase with time rented), the landlord is required to carry out repairs but notifying them of such can be grounds for eviction.

These may be the extremes of renting in England; however you can ask any renter about being charged outrageous contract fees, referencing fees and being screwed over on leaving over the deposit and "cleaning fees" (even when the property is left in a professionally cleaned state). There is little-to-no repeat custom in renting so they get away with it.

Little movement has come from either of the two main parties (Labour & Conservatives) to improve this, thus to have stable accommodation you have to look to buying.

jamescun··on Hacking inclusion by customizing a Slack bot
I would say it is an inclusive term, and in my experience, used frequently as such by people of all genders.

There is a lot that can be done in tech to progress towards gender inclusivity, however publicly calling out use of words which historically conveyed exclusivity yet nomoreso detracts from more effective means.

jamescun··on How Hollywood Caught the UK's Most Prolific Movie Pirates
What is bothering me is that supposedly a private organisation (FACT) was able to approach another private organisation (Equifax) with a name and acquire further details including a home address, without warrant or personal authorisation.

Can somebody explain to me how this is not a breech of the Personal Data clauses of the Data Protection Act 1998[1]?

[1] https://en.wikipedia.org/wiki/Data_Protection_Act_1998

jamescun··on Go 1.6 Beta Released
Unless the title has been updated since your comment, it is accurate. The beta is out today, builds available from https://golang.org/dl/#unstable
jamescun··on Docker having its lawyers taking down the Docker font awesome icon
This makes sense from a trademark perspective, you either protect it or lose it.

However I think, particularly for a project that supposedly highly values open source, to go straight to lawyers is a very poor show on Docker Inc's part. An email referring to their guidelines or even chiming in on the project/issue thread on GitHub would probably have sufficed and come across much better from a PR perspective.

I hope this serves as a warning to others regarding exactly what kind of company Docker Inc is.

jamescun··on Flash, HTML5 and Open Web Standards
While it is good to see Adobe listening to customers, but I can't help the niggling feeling this is closing the stable door after the horse has bolted.
jamescun··on You should try FreeBSD (2014)
I recently switched my personal box to FreeBSD. I honestly find it significantly easier to manage than Linux, and have greater trust in its reliability merely from its simplicity.

The single biggest thing which stood out for me was PF (from OpenBSD). Anybody who has ever had the grace of managing IPTables on Linux, give PF a go with /etc/pf.conf (docs: https://www.freebsd.org/doc/handbook/firewalls-pf.html, my config: https://github.com/jamescun/infrastructure/blob/master/roles...).

jamescun··on Web login using SSH
I've had this idea before, nice to see it implemented. The reason I've never pursued it as I'm not quite sure what the actual user experience or benefit over traditional 2FA systems is.
← PreviousPage 4 of 10Next →