HNHacker News
TopNewBestAskShowJobs

mixologic

1,536 karma · joined October 2, 2013

Multi disciplinary generalist. Fullstack Developer + DevOps + IA + Consultant.

irc:mixologic:irc

submissionscomments
mixologic··on Agents raid home of fired Florida data scientist who built Covid-19 dashboard
(if it is corruption.. as more of the story comes out it sounds somewhat like she may have overstepped some legal boundaries)
mixologic··on Agents raid home of fired Florida data scientist who built Covid-19 dashboard
I sure hope she can get some good legal help. Thats probably the best way to fight this kind of corruption.
mixologic··on Virtual Cybersecurity Escape Room
I think the only other confusing part is the bank email. Given that the premise is that her cybersecurity is weak, I would think that the transactions are actually because she fell it.
mixologic··on Virtual Cybersecurity Escape Room
yeah, seems like theres not enough hint to let on how this should be formatted.
mixologic··on Easily Identify Malicious Servers on the Internet with JARM
seems like its only a matter of time then that malicious servers wrap their TLS libs in a one time randomizer that gives them the appearance of not matching other C&C hosts.
mixologic··on We can do better than DuckDuckGo
How would anybody ever know what the server is running and/or doing with the data you send it, regardless of if it is running open or closed source code?

A service, running on somebody else's machine, is essntially closed.

I think the only way to have an 'open' service is to have it managed like a co-op, where the users all have access to deployment logs or other such transparency.

Even then, it requires implicit trust in whomever has the authorization to access the servers.

mixologic··on Using Matrix to replace proprietary and centralized chat apps
> Matrix is 100% open-source.

It's still astonishing to me that people think that open source somehow has any bearing on the issue of:

> Nobody can say what the server is doing nor what it is harvesting which could be very dangerous.

Thats still true, whether its running open source software or not. You cannot inspect the running code on a server, except, now you have to trust a whole federated mob of servers.

mixologic··on Biden wins White House, vowing new direction for divided U.S.
Twitter didnt hide Trump's tweets because they disagreed, the hid them because they were unsubstantiated falsehoods, that could have a deleterious effect on peoples faith in the process itself. They would have hidden Biden's too, if he did something along those lines.
mixologic··on Biden wins White House, vowing new direction for divided U.S.
If you look at RCP's polling average for Clinton in 2016, she outperformed that average for just about every race.

But, what the pollsters got crazy wrong, was Trumps polling numbers, by wide margins, far outside the margin of error.

I think they got it wrong this time too, and I think it all comes down to their methodology for actually getting a random sample of voters. Many polls are still married to live interviews and also to landline contact, and also tied to live interview polling - I think there is a partisan slant that they are not accounting for that includes a "propensity to answer a polling survey in the first place"

mixologic··on Wikimedia is moving to Gitlab
"This raises the question: if Gerrit has identifiable problems, why can't we solve those problems in Gerrit? Gerrit is open source (Apache licensed) software; modifications are a simple matter of programming."

... And nuclear power is a simple matter of splitting atoms.

mixologic··on First came legal marijuana, now comes magic mushrooms?
"This isn’t a recreational party drug. It’s a therapy for people when no other solution works."

Im all for the decriminalization and legalization of psilocybin mushrooms, but you're not doing that movement any favors saying "It's not a recreational party drug" When they have historically been called Magic mushrooms.

The key thing is to challenge every elected official who claims thing like "This is a bald-faced attempt to just make these very serious, very potent, very dangerous—both short-term and long-term—hallucinogenic drugs broadly available"

What evidence do you have that they are dangerous?

mixologic··on Five Eyes and Japan call for Facebook backdoor to monitor crime
They are already subpoena'ing alexa and Google home recordings, Android and iPhone location data, cell tower pings etc.

I don't think we're far away from court ordered wire taps to compel Google to enable the cameras and microphones.

mixologic··on OPSEC critique of the Michigan Governor kidnap plot
They were planning on kidnapping the Governor of Michigan.
mixologic··on Why I am building permapeople.org
Industrialization of food production has allowed the density and population of cities to grow. If you specialize in something other than food growing, and rely on the food distribution system to provide your food resources, living in an apartment is efficient (from an economic standpoint, not from an ecological one)
mixologic··on BridgeCom Systems SkyBridge Hotspot Review
Could these be installed in a car, i.e. for off grid wilderness trips etc?
mixologic··on Dream Vendor "Canna_Bars" Sentenced to Prison
I was not aware that there were legitimate prescriptions for it. But it sounds to me like you're a casualty of the pharma industry more so than the drug war. The ratio of people that street meth helps to people that it harms is, by my SWAG, a very, very small number.
mixologic··on Dream Vendor "Canna_Bars" Sentenced to Prison
Yeah, weed really shouldnt be a priority, and should be legalized nationwide, but...

```Canna_Bars, on Hansa, advertised pounds of methamphetamine. In the description of the product, Porras had claimed the methamphetamine came “direct from Mexico.”```

So, defintely not legal anywhere, nor is mass distribution of meth really something that is of benefit to anybody but the cartels he bought it from.

mixologic··on Ask HN: What is it like to be old? What advice would you give to younger people?
Your teeth. Pay attention to your dental health.
mixologic··on How Did Software Get So Reliable Without Proof? (1996) [pdf]
OpenSSL is a good example of something that was essential everywhere that had few eyeballs on it for a number of years.
mixologic··on How can Ceasefire be self-supporting?
@Monkyyy is the kind of user you fire.
mixologic··on San Francisco Troubles – 19,000 Highly Paid City Employees Earned $150k
Maybe take every number in this article and divide it by 2.7 Cost of living in San Francisco is roughly 270% of the national average.
mixologic··on A Saudi prince's attempt to silence critics on Twitter
Do rules apply to anybody who is insanely rich anymore?
mixologic··on Death Valley soars to 130 degrees, Earth’s highest temperature since 1931
130 degrees is hot enough to leave a steak outside and let it sous vide in the air.
mixologic··on OpenCore bootloader – open-sourced Apple UEFI drivers, enabling Hackintosh
Tonymacx86's useful information is smothered in a quagmire of utterly useless garbage, outdated, invalid information, and in general a user interface from 2001 where somewhere 65 pages of a single forum thread is the information you seek.

As a learning resource, it is a complete waste of time for trying to build a hackintosh.

mixologic··on Show HN: Dockerfiler: declarative management of images built from Dockerfiles
Sure it seems complex, but we're solving insanely complex problems that didnt even remotely exist during the halcyon days of "beautiful simplicity" of the ol' Unix philosophy. That philosophy was borne out of tools to process text files. It's closest proxy in the ops world might be microservices, but if you compare the amount of labor it used to take to set up a datacenter in even something so recent at the first dotcom era, its insane what we can accomplish with a cloudformation yaml file or a terraform configuration file in a similar amount of time. The reproducability, the change management, all of it is light years better than it used to be. Every one of these 'yaml messes' all evolved out of drastically shittier shellscripts, duct tape, hope, and weekend pagers blowing up.

It might seem complex, and obtuse, but its turtles all the way down, and everything all the way back to to the original von Neumann architecture could definitely be looked at again and redesigned, but otoh, we're still doing weird shit like dividing our day into 24 hours and 60 minutes and 60 seconds for no other reason than 'its always been that way' and if we had a chance to actually design a sensible time system we could eliminate a lot of the complexity that has piled up on top of that system.

But yeah, no way would I ever want to go back to the way things were before all these layers existed.

mixologic··on Hackers take over prominent Twitter accounts in simultaneous attack
start here:, and then catch up to whatever the state of the art is. Humans are the weakest link in the security chain. https://theintercept.com/document/2014/03/20/hunt-sys-admins...
mixologic··on U.S. Supreme Court deems half of Oklahoma a Native American reservation
As an aside.. whats up with that file photo Reuters is using? Is that somebody naked in front of the supreme court wearing just a fanny pack?
mixologic··on Pkg.jl telemetry should be opt-in
Gathering telemetry data is asking the users, and happens to be the most cost effective way to do so. Forum discussions do not scale and only satisfy the needs of the loudocracy, and polls are going to suffer from a similar participation bias.

Disabling telemetry by default ended up harming the users of those distributions by making their usage of ALSA invisible. Again, that choice by the distro maintainers isn't something that Mozilla had any control over. Voluntarily withholding telemetry data is similar to abstaining from an election. You dont get to complain about who got elected if you didn't vote, likewise you dont get to complain about lack of support for your use cases if you don't allow upstream projects to know that you have them.

mixologic··on Pkg.jl telemetry should be opt-in
I feel like many developers fail to understand the difference between the ethos of Free/Libre/Open source software, and the realities of running a networked service.

Services are not free (as in beer) - they always take time, money, and labor to provide. A PkgServer.jl is exactly the kind of thing that has to be sustained somehow.

It's not possible to use a networked service without exchanging some information with that service, which may or may not be useful for the service providers to collect, so that they can provide a better service (Read: make it cost less)

The idea that one should be entitled to use a service, for free, and at the same time ask that the service does not collect any data, or make it opt-in by default, is akin to demanding free beer that people can optionally pay for.

Caveat: My bias is from being a service provider for a packaging endpoint, a security updates endpoint, and a community CI service. Any telemetry data we can get our hands on to help us make informed decisions about what to support, and what to drop support is absolutely invaluable.

mixologic··on A $43,859.00 Refurbished Mac Pro
My takeaway is that somebody, somewhere, had to get a 50k mac replaced and apple has one to refurbish. I suppose it's not that surprising given that used luxury cars are a thing, but a used workstation at this price point is rare.
← PreviousPage 5 of 10Next →