HNHacker News
TopNewBestAskShowJobs

jsty

1,960 karma · joined October 1, 2015

JMS
submissionscomments
jsty··on Security expert warned SolarWinds in 2019 that anyone could access server
Ah, it was the butler - in the server room - with the ethernet cable.

(Come to think of it, security Cluedo would be quite fun ...)

jsty··on CentOS dropped because it “was not [..] providing [..] usefulness to Red Hat”
> Hopefully, the "extend" and "extinguish" are not on the agenda.

There are certain organisations whose prior behaviour precludes "hope" from a reasonable set of expectations. Whether or not Oracle is included is left as an exercise to the reader.

jsty··on U.S. Treasury, Commerce Depts. Hacked Through SolarWinds Compromise
Whilst not being a "cloud is someone else's computer" adherent, the notion SaaS products can't be misconfigured into opening up security holes not present / so serious in some on-prem environments doesn't hold water - see the last decade's stories of accidentally open S3 buckets, plaintext secrets pushed to public GitHub repos, and all manner of other "minor misconfigurations"
jsty··on Google illegally spied on workers before firing them, US labor board alleges
I didn’t know HN implemented RFC 2549
jsty··on Launch HN: Deepnote (YC S19) – A better data science notebook
Quick FYI - clicking the NavBar's "pricing" link on the "about" page links to "/about#pricing" rather than "/#pricing"
jsty··on That company whose name used to contain HTML script tags Ltd
Nice to see Bobby Tables is all grown up.

Relevant discussion on the Companies House Developer Forum:

https://forum.aws.chdev.org/t/cross-site-scripting-xss-softw...

jsty··on Names and Identities Change – You Should Design for That
> With the same sort of issues that SSN has

Only if knowledge of one's "GUID" was regarded as sufficient to authenticate as them surely?

jsty··on Missing Covid-19 test data was caused by the ill-thought-out use of Excel
> Is there anything in Excel itself that behaves like that?

I'd imagine the default error-handling behaviour of 9/10 Excel macros is to throw away data

jsty··on Firefox usage is down despite Mozilla's top exec pay going up
Their news operations are subsidised to the tune of ~£30m/yr by the charitable trust that owns them. Not in and of itself problematic, but accumulating a sizeable enough endowment to sufficiently fund operations isn't an option for most orgs.

https://www.theguardian.com/media/2019/aug/07/guardian-broke...

jsty··on Saving money on international payments as a remote freelancer
It may also be worth looking into whether you can open a Foreign Currency account with a bank where you're incorporated which is probably a lot simpler than opening one cross-border.

E.g. in the UK, Barclays offer these for a range of currencies:

https://www.barclays.co.uk/business-banking/business-abroad/...

jsty··on Attack Matrix for Kubernetes
> the MITRE ATT&CK framework

This looks incredibly useful, thanks for pointing it out

For anyone else who's curious: https://attack.mitre.org/

jsty··on Rhode Island searching for New Yorkers fleeing the virus
You can use outline to read it:

https://outline.com/xmDFJS

jsty··on This project posts one new startup idea every day for a year
Twist or premium plan feature? ;)
jsty··on The boss who put everyone on 70K
I think they mean that if the headline is taken as written it implies everyone in the company being moved onto 70k - even if their salary was originally higher, not that the article actually states that this happened.
jsty··on X-Force Command Cyber Tactical Operations Center
> The IBM® X-Force® Command Cyber Tactical Operations Center (C-TOC) provides the industry’s first mobile cyber range and watch floor, with 23 tons of cyber capabilities on wheels, wherever they are needed.

Nice to see good cyber-security is now so commodified we can sell it by the tonne </sarcasm>

jsty··on IBM's Lost Decade
Whilst I harbour significant doubt that simply shorting companies with newly appointed female CEOs would be an effective way of exploiting it, the glass cliff effect [0] is a known phenomena whereby female leaders are more likely to be appointed in times of crisis.

[0] https://en.wikipedia.org/wiki/Glass_cliff

jsty··on I’m on Medicare, but I still got stuck with a $25k hospital bill
> I suppose there's probably an equivalent scenario if a non-EU visitor falls ill in the UK.

The NHS charges at 150% of their standard charges for non-EU nationals. For most people this is a moot point since short-term visitors are required to have insurance anyway, and long-term visitors pay a surcharge which covers them for all NHS services.

https://www.nhs.uk/using-the-nhs/nhs-services/visiting-or-mo...

jsty··on A lot of complex “scalable” systems can be done with a simple, single C++ server
Out of curiosity - what's the source on that? Most figures I've seen put datacenter usage an order of magnitude lower:

e.g. https://www.iea.org/reports/tracking-buildings/data-centres-...

"Global data centre electricity demand in 2018 was an estimated 198 TWh, or almost 1% of global final demand for electricity (Masanet et al., 2018)."

jsty··on A lot of complex “scalable” systems can be done with a simple, single C++ server
He's had a look:

https://www.reddit.com/r/rust/comments/ap2047/john_carmack_w...

jsty··on Binary Authorization for Borg
Whilst it would be nice if everyone had the time and resources to code review and build their entire source dependency tree, is this ever going to be a reality for the long tail of enterprises who struggle with even resourcing / recruiting for their current workload? I think the vast majority are going to continue outsourcing this responsibility onto enterprise distros / vendors for a long time to come.
jsty··on Ask HN: What's the current sentiment on JWT for stateless auth tokens?
Where did you see that? I've skimmed their limits page [0] and there doesn't seem to be any request limits for paid plans.

[0] - https://developers.cloudflare.com/workers/about/limits/

jsty··on Mind your Logs: How a build log from a Jenkins leaked everything
> Block everything incoming except your VPN tunnel should you need remote access

With the slight caveat that you should have at least a second out-of-band access method for when you bork your VPN config :)

jsty··on Police conducted search in the Nginx office due to a copyright claim
If they're angling for a ruling that they've always had the copyright to the code (or at least core / original parts), then presumably any licenses (FOSS or otherwise) granted by anyone who isn't Rambler would be null and void.
jsty··on Introducing E2, new cost-optimized general purpose VMs for Google Compute Engine
https://cloud.google.com/compute/all-pricing#e2_machine-type...
jsty··on AI Dungeon 2 costing over $10k/day to run on GCS/Colab
No, the models are running in Colab - but in the end-user's account - so each 'run' costs the lab 6GB of internet egress when the model is downloaded from GCS to the Colab VM.
jsty··on Amazon Braket – Get Started with Quantum Computing
That pattern reminds me quite strikingly of aboriginal art
jsty··on My experience being a solo maintainer of open-source software in academia
Given the quote "I don't have time to review any outside code contributions or GitHub pull requests. Feel free to fork the code." I'd hazard a guess he's fine with people building atop his work, just doesn't want the time-sink of reviewing + merging those contributions into his tree and maintaining them.

As he states others have indeed done so and built research projects atop it, it would seem to be worth keeping open source.

jsty··on Maryland company files with FDA drug that cures AIDS
If you still want to read, outline works fine:

https://outline.com/KA3LDn

jsty··on New chips for machine intelligence
I think they were referring to the fact that those are all bought in from outside vendors, rather than having their own custom accelerator chips produced like e.g. Google's TPUs.
jsty··on Brains are the last frontier of privacy
A fair few phones now can be set to have the virtual assistant listen for the wake-word in the same way as an Alexa / Google Home / ...
← PreviousPage 5 of 13Next →