HNHacker News
TopNewBestAskShowJobs

mike_d

10,712 karma · joined September 6, 2019

Email: m d @ m - d . n e t

[ my public key: https://keybase.io/miked; my proof: https://keybase.io/miked/sigs/NDka9SDMYHUI-gYuU6qG7FGLznGEAAZU0I15VdBAjAc ]

submissionscomments
mike_d··on AWS European Sovereign Cloud
I would love to see a US specific version of this as well. Something similar to GovCloud with the same security controls and employee vetting but accessible to commercial customers.
mike_d··on Ask HN: Weird archive.today behavior?
It is using the ?s= parameter which causes WordPress to initiate a search for a random string. This can result in high CPU usage, which I believe is one of the DoS vectors that works on hosted WordPress.
mike_d··on Polymarket refuses to pay bets that US would 'invade' Venezuela
> Some Venezulean sources claim US troops on a helicopter initially tried to capture a beach to turn it into a beachhead

With a myoptic view of the battlefield it is easy to convince yourself that the distractions launched to keep the military busy were the primary objectives.

mike_d··on Show HN: Offline tiles and routing and geocoding in one Docker Compose stack
> Why not create a "builder" repo, where people could generate their own local datasets by a bounding box?

If you read the bottom of the page they plan to sell it. Not sure how that works when all the software/data is open.

mike_d··on Microsoft kills official way to activate Windows 11/10 without internet
Microsoft managed to make every other release of Windows good.

95 good, NT 4 bad, 98 good, 98 SE bad, 2000 good, Me bad, XP good, Vista bad, 7 good...

The plan with Windows 10 was to light their desktop market share on fire in the hopes they could see iPads in the distance and try to chase them. Windows 11 was codenamed "give your toxic ex a second chance."

mike_d··on IPv6 just turned 30 and still hasn't taken over the world
> such a yawning chasm of gaps in knowledge ... in a forum whose users are generally known to be more technically savvy

There is a heck of a Dunning–Kruger joke to be made here.

mike_d··on I spent a week without IPv4 (2023)
I am glad you brought this up, that is another big issue with IPv6. A lot of the problems it was trying to solve literally don't exist anymore.

Header processing and alignment were an issue in the 90s when routers repurposed generic components. Now we have modern custom ASICs that can handle IPv4 inside of a GRE tunnel on a VLAN over MPLS at line rate. I have switches in my house that do 780 Gbps.

mike_d··on I spent a week without IPv4 (2023)
This is a lot of basically sharpshooting, but I will address your last point:

> There was no way to move from 32-bits to >32-bits without every network stack of every device element (host, gateway, firewall, application, etc) getting new code. Anything that changed the type and size of sockaddr->sa_family (plus things like new DNS resource record types: A is 32-bit only; see addrinfo->ai_family) would require new code.

That is simply not true. We had one bit left (the reserved/"evil" bit) in IPv4 headers that could have been used to flag that the first N bytes of the payload were an additional IPv4.1 header indicating additional routing information. Packets would continue to transit existing networks and "4.1" capable boxes at edges could read the additional information to make further routing decisions inside of a network. It would have effectively used IPv4 as the core transport network and each connected network (think ASN) having a handful of routed /32s.

Overlay networks are widely deployed and have very minor technical issues.

But that would have only addressed the numbering exhaustion issues. Engineers often get caught in the "well if I am changing this code anyway" trap.

mike_d··on I spent a week without IPv4 (2023)
IPv4 isn't perfect, but it was designed to solve a specific set of problems.

IPv6 was designed by political process. Go around the room to each engineer and solve for their pet peeve to in turn rally enough support to move the proposal forward. As a bunch of computer people realized how hard politics were they swore never to do it again and made the address size so laughably large that it was "solved" once and for all.

I firmly believe that if they had adopted any other strategy where addresses could be meaningfully understood and worked with by the least skilled network operators, we would have had "IPv6" adoption 10 years ago.

My personal preference would have been to open up class E space (240-255.*) and claw back the 6 /8s Amazon is hoarding, be smarter about allocations going forward, and make fees logarithmic based on the number of addresses you hold.

mike_d··on GNU recutils: Plain text database
Have a look at cdb. The more you read about its simplistic design the more you realize it is damn near the perfect solution for static and semi-static datasets. Fetches are either 1 or 2 disk reads depending on if the key exists.

https://cdb.cr.yp.to/

mike_d··on Epic celebrates "the end of the Apple Tax" after court win in iOS payments case
Simon and GGP combined do own an overwhelming percentage of all retail square footage in the US, but lets at least consider the rest of the argument here.

Apple's "shelf space" is not free. There are constant R&D expenses involved in introducing new sensors and screens that make the underlying apps better. They take on the support load of on-boarding users, managing the relationship, and dealing with any problems. Advertising, carrier validation, third party hardware ecosystem, etc.

Epic wants to sidestep all of the costs of building a platform, and offload support costs onto Apple.

mike_d··on Epic celebrates "the end of the Apple Tax" after court win in iOS payments case
There’s a Best Buy a few miles from my house. Why aren't I allowed to put my own products on their shelves, or set up a little folding table next to the phone accessories to sell my own cases?

It is not fair to me as a merchant that everyone who wants to buy a phone case goes to Best Buy. That's where all the foot traffic is. It's clearly anti-competitive that they expect me to pay for shelf space I benefit from.

And now they want to charge me to verify that the USB-C cables I'm selling actually work? How is that remotely reasonable? Just because most of my cables are faulty and customers will inevitably go complain to their customer service desk, why should I bear that cost?

Consumers deserve the right to choose accessories from multiple independent merchants inside Best Buy. Suggesting otherwise is anti-consumer, anti-choice, and proof that you hate open and accessible ecosystems.

mike_d··on Average DRAM price in USD over last 18 months
I can see how it can be confusing.

If you know demand will go up because Microsoft announced that each new Xbox will have 2TB of RAM, that is perfectly fine. Or if OpenAI issues a press release that they intend to buy half the worlds RAM.

If you know demand will go up because you learn the volume your customer intends to purchase from your competitor during confidential negotiations, that is not ok.

mike_d··on Average DRAM price in USD over last 18 months
What?? Replace DRAM with peaches or table legs and you have the exact example they give you during management training to explain implicit collusion.
mike_d··on Average DRAM price in USD over last 18 months
This actually points the opposite direction, to doubling down on commercial GPUs.

NVIDIA recently told their board partners that they will need to source their own RAM and will not be bundling it with chips anymore.

If there is a supply crunch on DRAM, commercial GPU production lines will start having idle downtime. That is literally the worst possible thing that can happen to a company that has invested heavily in tooling and they will negotiate at or below cost production runs to fill the gaps if a customer can bring their own DRAM to the table.

mike_d··on Decreasing Certificate Lifetimes to 45 Days
I understand all of the benefits with regards to compromise and pushing automation, but I really hope they don't push the maximum lower.

It is already getting dangerously close to the duration of holiday freeze windows, compliance/audit enforced windows, etc.

Not to mention the undue bloat of CT logs.

mike_d··on Pocketbase – open-source realtime back end in 1 file
90% of people aren't using "SQL" anyway. They are just doing basic CRUD operations on a data store with SQL syntax, usually abstracted through an ORM. The only reason they want a SQL database in the first place is for ACID.

If you find yourself caring about data types or actually writing a query, you should probably setup an actual database server.

mike_d··on ZoomInfo CEO blocks researcher after documenting pre-consent biometric tracking
User opens DevTools and loads pretty much any website on the internet, film at 11.
mike_d··on LAPD helicopter tracker with real-time operating costs
You literally just made the case for helicopters.

I don't believe you are very familiar with LA airspace, but it will be one of the last places drones ever make sense.

mike_d··on LAPD helicopter tracker with real-time operating costs
Just LA city police service an area about half the size of Rhode Island. If you count all the surrounding areas LA has mutual aid agreements with, it would be the 6th largest state by population.

LA Sheriffs are responsible for an area larger than Delaware and Rhode Island combined.

They also assist in rescue operations, transporting SWAT and crisis negotiators to scenes, flying snake venom antidotes from the airport to the hospital, and dozens of other things.

I'd say 17 helicopters and 90 employees is pretty lean given that they have a crew ready to go within 5 minutes 24/7.

mike_d··on LAPD helicopter tracker with real-time operating costs
Helicopters avoid car chases by allowing them to follow the car until it gets to a destination or runs out of gas.

Even if they "usually" start from a minor traffic violation (which they do not), the majority of individuals who run have outstanding felony warrants or are engaged in committing another crime.

mike_d··on The privacy nightmare of browser fingerprinting
JA3/JA4 are useless now.

At best they identify the family of browser, and spoofing it is table stakes for bad actors. https://github.com/lwthiker/curl-impersonate

mike_d··on The privacy nightmare of browser fingerprinting
The article rants about how turning off JavaScript is actually harmful because it makes you more fingerprintable, then in the same breath recommend switching to an obscure browser nobody else uses?

If you want to avoid being uniquely identifiable stick to Chrome, signed into a Google account, running on a PC from Best Buy.

mike_d··on LAPD helicopter tracker with real-time operating costs
The report is wrong. If you bother to watch LA news you'll see they are used a few times a night to track vehicles from the air. This frees up ground units and avoids high speed chases which saves lives.

It's fun to call this a waste of taxpayer dollars until you watch a carjacked vehicle recovered with kids inside.

mike_d··on Oracle is underwater on its $300B OpenAI deal
> there will always be someone willing to pay them for GPU compute capacity.

There is an hourglass shape to emerging technologies. Everyone uses commodity hardware and duct tape to try to win the race to the bottleneck, where everyone save 2 companies goes bankrupt. As it narrows companies have learned enough about the problem to start developing purpose built solutions. Once you pass the bottleneck enough of your engineers go to other companies that the custom solution becomes mainstream and competition grows again.

Google was working on custom chips for AI before we knew it was AI. They are going to survive either as the dominant player in AI or as the underlying platform everyone else builds on.

That leaves one other spot for everyone else racing to the eye of the needle. Anyone betting on Oracle to win on technology is silly, betting on Oracle with a bunch of generic GPUs that anyone can get is down right dumb.

mike_d··on iPhone Pocket
Lets be honest, Hangouts (which of the three versions) was a crappy chat app that they wanted to boost the usage of. It wasn't intended to be a functional SMS replacement.
mike_d··on iPhone Pocket
Yes because Google offered nothing of value in return. Like in my example, nothing stops Toyota from offering enough money to license BMW's laser headlights.
mike_d··on iPhone Pocket
Apple developed iMessage to work around the problems with SMS and MMS, as well as decrease load on carrier networks. There is no closed ecosystem, you can still receive messages and videos from iPhone users, just at the quality your hardware and software can support.

Google later decided to come up with a completely different implementation called RCS to deal with the same problems. Rather than work with Apple on bringing an iMessage app to Android or licensing it, they instead tried to pressure Apple with a public advertising campaign to adopt what is frankly an inferior solution that doesn't even have reliable end-to-end encryption.

Your complaint is basically that you bought a Toyota and it does not have BMW's laser headlights that adjust brightness and angle automatically. You still have headlights, you just didn't spend the money to get the good ones.

mike_d··on DNS Provider Quad9 Sees Piracy Blocking Orders as "Existential Threat"
> can anyone weigh in on the costs/complexity of a public DNS resolver implementing geo-fencing

I was a small part of the original team that built OpenDNS. I also operate a less well known public resolver now.

DNS is extremely latency sensitive. You have basically a 20ms budget to work with, which includes the time the request and response traverse the internet. It is also extremely high volume, a large public service like Quad9 could easily see single digit millions of requests per second.

There is nothing that technically prevents you from doing geofencing. Cisco has the money to absorb the costs of the additional overhead - but I could not. My first stab at the problem would be to simply shut down my servers in France to try to get out of the legal jurisdiction. I don't know if that would be sufficient without paying for a lawyer.

Quad9 absolutely has a valid argument here and it pushes more of our public infrastructure into the centralized hands of a small number of players because people like me can't afford to just run free shit on the internet anymore.

mike_d··on OpenAI signs $38B cloud computing deal with Amazon
I was simply addressing the implication that WeWork was just buying up office space for fun and not paying for it.
← PreviousPage 3 of 34Next →