HNHacker News
TopNewBestAskShowJobs

llarsson

1,762 karma · joined May 20, 2016

PhD

Senior Cloud Architect and DevOps Expert Engineer at Elastisys

https://www.linkedin.com/in/llarsson

https://elastisys.com/

submissionscomments
llarsson··on Ask HN: What do you do for online privacy?
In this case, I would recommend that you get an employer-specific GitHub account, so you can compartmentalize it that way. A bit of a hassle, yes, but then, you're definitely not tying yourself in git history to that employer for your entire career.
llarsson··on Beacown (Linux WiFi Exploit)
It seems to me that Android version and kernel version are not linked in any meaningful way.

My phone is Android 12 and the kernel is 4.19.x, which initially came out in 2018 (but is an LTS one, so it's fine).

llarsson··on I disabled WiFi on the new Samsung fridge
I am secretly convinced they have "eco" programs just to get the A+++ rating on energy efficiency, but that you're not really meant to use those modes.
llarsson··on Bluetooth relay attacks allow Tesla Model 3 / Y to be unlocked and driven away
In fairness, it also used to be the case that simply some of the cores were broken on a "dual core" processor. Because it was actually manufactured to be a quad core processor, but testing revealed that only 2 or 3 actually worked, so then it got sold as a dual core. :D

But the thing now with "pay to unlock more cores" is... interesting.

They'd probably love to turn that into a subscription, too.

llarsson··on Don't write just in plain text (longevity vs. authenticity)
That "some" proprietary formats from the 80's and 90's are still readable is already causing real problems: because not *all* are. So text, possibly with Markdown or similar hints regarding emphasis and structure, is still vastly better than any alternative I can think of.
llarsson··on Russian forces invade Ukraine after Putin orders attack
Disable Javascript to circumvent the paywall if you want to read this.
llarsson··on Principles for Designing and Deploying Scalable Applications on Kubernetes
Original author here.

I am happy to answer any and all questions you may have, and would love your feedback, too! :)

llarsson··on U.S. surgeons transplant pig heart into human patient
Humans and pigs famously share approximately 98% DNA, so we are very similar. Aside from weight and size.

Non-scientific:

- https://thednatests.com/how-much-dna-do-humans-share-with-ot...

Scientific:

- https://pubmed.ncbi.nlm.nih.gov/25689318/

- https://aces.illinois.edu/news/human-pig-genome-comparison-c...

llarsson··on Ask HN: Why does Cloudflare/hCaptcha care so much about buses, boats and trains?
It's somewhat worrying that "prove you are not a computer" consists of the very same tasks we expect computers to excel at if we are to get self-driving vehicles.
llarsson··on AWS Support able to access any S3 object due to permission change
> SSE-C (where AWS don't store your keys, you send them in every bucket API request)

Since this is symmetrical encryption we're talking about, let's just be completely aware that the technical possibility to also store the encryption key definitely exists. It would violate the terms of service, of course.

For those who don't know how SSE-C works, it's that you send both the unencrypted data and a key in a request. AWS will encrypt the data with the key, and store it encrypted. To get your data back, you supply the same key in your subsequent request. AWS will decrypt the data using the key, and send the unencrypted data back to you.

During both those times when you gave AWS your key, you entirely trust that they will not also happen to store it for their own use.

llarsson··on Microsoft Teams: 1 feature, 4 vulnerabilities
Probably to auto-update? I can't think of any other even remotely valid reason.
llarsson··on Microsoft Teams: 1 feature, 4 vulnerabilities
A response of "WONTFIX" is still a response, sure, but not the one most would want for a security-related issue.
llarsson··on Tech-savvy audiences block Google Analytics
No, we really did not have private browsing since the nineties. It's a new thing, for sure.

What we had in the nineties was that we could configure our browsers to ask for every single cookie that a site wanted to place on our computers. That got old really fast when internet advertising became a thing, and tracking cookies were all over the place.

llarsson··on Automatic Multi-Cluster Deployments and Services in Kubernetes
My colleague Mulugeta Ayalew Tamiru has done research on a much cooler federated Kubernetes setup than what KubeFed gives you. It scales horizontally (Pods and Clusters), it does cross-cluster networking, and has network latency-aware scheduling. Simply amazing stuff. :)
llarsson··on Bash PS1 Generator
Lovely idea!

Now please add some examples, so it's easier to get started with something to modify. :)

llarsson··on Evaluation of Cloud Native Message Queues (Kafka, NATS Streaming, RabbitMQ)
This is a truly comprehensive blog post from Kian Nassiri, a Master thesis student, who wrote his thesis on this topic. It is very detailed, and well-presented. It's been a joy to read, and I wanted to share it with the HN community, because I know that data-intensive investigations are typically highly valued here.
llarsson··on Ford Wants Billboards to Beam Distracting Ads to Screens Inside Your Car
There is intent of you hit the "navigate me there" button.
llarsson··on Facebook Should Halt Instagram Kids Plan, Attorneys General Say
Maybe show ads to the parents based on what the kids have been talking about?

Not displaying ads to the kids does not mean the data just gets thrown away, after all.

llarsson··on Privacy activist Max Schrems says Microsoft's EU data move won't block NSA
Of course it won't!

This is the first paragraph from the official summary of the CLOUD Act:

> This bill amends the federal criminal code to specify that an electronic communication service (ECS) or remote computing service (RCS) provider must comply with existing requirements to preserve, backup, or disclose the contents of an electronic communication or noncontent records or information pertaining to a customer or subscriber, regardless of whether the communication or record is located within or outside the United States.

https://www.congress.gov/bill/115th-congress/house-bill/4943

Note the last part: "regardless of whether the communication or record is located within or outside the United States."

The problem is not, and never was, where the data happened to be stored (in a data center on EU or US soil). The problem is the legal implication that is directly tied to where the cloud provider is incorporated and therefore under what rule of law they are under.

llarsson··on "To our surprise"
That sounds like a good indication that the math you are thinking of was written to impress, rather than enlighten, you as a reader. I've seen far too much of that stuff in computer science papers, where dense math seems to be used defensively, rather than to bring clarity.
llarsson··on Playlist for iOS
This is like NewPipe, just more convenient. And you can't find that in the Play Store, right?

Plus, it needs almost weekly updates to function because Google (my guess!) intentionally breaks some API slightly, just to make this sort of thing more difficult.

llarsson··on [dead]
Is this just taking images from the popular subreddit with the same rehosting them for clicks and views? And removing the original source of them all?

If so, not very cool.

llarsson··on The Slander Industry
This is truly despicable.

Using SEO tactics to launch an automated slander campaign against common people, who likely have very little other web presence so that the slanderous material som be among the top hits, and then charging them money to have it removed.

Horrible, considering how many recruiters will lazily just Google a candidate's name and blindly trust the results.

llarsson··on [dead]
It is perfectly within the bounds of what JavaScript can (and indeed should be able to) do these days, to support e.g. single page applications and smart navigation within them. Therefore, I don't fault Firefox for this, at all.
llarsson··on [dead]
Did this site seriously hijack my browser's back button, so that after trying to read the article, it made me go "back" to their front page?

That's some really shady BS.

llarsson··on The luxury fashion industry is roaring back everywhere but in Europe
The article says that before the pandemic, european sales were much dependant on tourists making their purchases in Europe. So it was Chinese and American people buying these items before as well. But before the pandemic, they bought them during a trip to Europe, and now via the web, closer to home.
llarsson··on Some useful regular expressions for programmers
Alternatively, do it on save. :)

gg=G in vim is fast enough to type for me, though.

llarsson··on Ask HN: What was the biggest leadership challenge of your career?
Whether you see a trait as a positive or a negative does not mean it is useful to anyone to ascribe gendered terms to it.

A female software engineer who does not strive for beauty in code, is she less feminine? A male software engineer who strives for code beauty more feminine than the female one?

It is a useless argument to get into, when the actual way to describe the type of code would be a choice of "beautiful, sorted, structured, consistent" instead.

Gender, as such, has nothing to do with it.

llarsson··on Proposal: Treat FLoC as a security concern
The ones in marketing will rather immediately request that it is turned on instead.
llarsson··on Terraform 0.15 General Availability
No, that's pretty much it.

Some core components that most will include as remote state, and you can discover and use as remote state stuff from other teams, too.

Quite basic, but something tells me this could very well be intentional, so that the enterprise offering has a clearly increased value.

← PreviousPage 2 of 12Next →