HNHacker News
TopNewBestAskShowJobs

nathankleyn

197 karma · joined April 1, 2013

[ my public key: https://keybase.io/nathankleyn; my proof: https://keybase.io/nathankleyn/sigs/00n65O3Jew1SwXNq3zKSYlg5iiFhOXQZDbBSsk9M_fg ]
submissionscomments
nathankleyn··on GCP Europe-West2 Outage
It's finally been updated: https://status.cloud.google.com/incidents/Xs2XTHzAVC9YnafnPy...

Way too slow for the scale of the outage.

nathankleyn··on Google Cloud networking is down in various regions
Confirm we have Cloud Run and Managed Airflow services down in ew-2 and unable to start since ~7:06 BST. We saw a momentary blip in Cloud SQL but that seemed to fix itself almost immediately for us, we got lucky I suppose based on other comments here.

Another HN thread mentioned their Google rep said the cause is a power outage [1] which is being resolved.

[1]: https://news.ycombinator.com/item?id=50162855

nathankleyn··on You are not required to close your <p>, <li>, <img>, or <br> tags in HTML
Personally I think Markdown got _really_ popular not because it is easier to write but because it is easier to read.

It’s kind of a huge deal that I can give a Markdown file of plain text content to somebody non-technical and they aren’t overwhelmed by it in raw form.

HTML fails that same test.

nathankleyn··on Bun’s New Crash Reporter
We had the same reticence about Dependabot missing before we made the switch, but realised Renovate works with Bun and is a good enough stand in for now until support arrives.

Absolutely zero regrets, the cumulative savings across everything that is faster and the massive step up in DX is worthy of the hype.

nathankleyn··on Incident with Actions and Codespaces
Actions and Codespaces are listed as having "degraded performance" now too - seeing a lot of action builds disappear into the ether and never get added to the queue to run.
nathankleyn··on Paris suspends electric bus fleet after two fires
Thanks to the ULEZ (ultra-low emission zone) in London, this is very much already happening — anecdotally (because I can't find any easy numbers right now, everything I can find is from 2020) a huge number of the private and public taxis in London are now hybrid or full electric.

Apparently there are already 5k TX electric taxis out there, which is a good start:

https://levc.com/levc-celebrates-sale-of-5000th-tx-electric-...

https://levc.com/tx-taxi/overview/

nathankleyn··on Chrome is faster in M91
It's what they call the releases of Chrome — M91 is version 91.
nathankleyn··on ABI Mistakes
Propagating "noalias" metadata for LLVM has actually finally been enabled again recently in nightly [0]. However it has already caused some regressions so it is not clear whether we may go through another revert/fix in llvm/reenable cycle [1]. This has happened several times already sadly [2] as, exactly as you say, basically nobody else has forged through these paths in LLVM before.

[0]: https://github.com/rust-lang/rust/pull/82834

[1]: https://github.com/rust-lang/rust/issues/84958

[2]: https://stackoverflow.com/a/57259339

nathankleyn··on Just Delete Me – A directory of direct links to delete your account
GDPR applies to any company that handles the data of EU citizens, regardless of whether that company is located in the EU or not.
nathankleyn··on Milkman: An Extensible Alternative to Postman in JavaFX
Sadly Nashorn, the JS engine that was built into the JVM, has been deprecated as of Java 11: https://openjdk.java.net/jeps/335

It had so many compatibility issues with real JS that it was kind of untenable to use it with scripts designed for other JS environments: https://jaxenter.com/nashorn-javascript-engine-deprecated-14...

The only real way to deal with JS now is Rhino (which still exists!), or some custom binding to V8 or something via JNI (yikes).

Our work uses Nashorn a lot for scripting and this is a big blocker for us to move to newer Java versions.

nathankleyn··on Show HN: Anon – A Unix Command to Anonymise Data
Hey! I'm one of the co-maintainers of the project here. I've posted a very similar reply to a very similar comment below at [1], but to replay the main points:

We absolutely agree this tool only solves the easiest part of anonymising data, and internally we rely on our team of data scientists to do the difficult parts. This tool is absolutely not up to the task of anonymising a dataset in such a way as to make it able to be made public. For us, it's about risk management vs effort: from a security perspective there are scenarios where we can use samples of data that have gone through this process and decrease the risk of holding data internally in multiple places substantially without significant effort. If we were to go onto to make any of these datasets ultimately public, we'd be looking for a better suited tool (eg. ARX [2]).

Regarding one part of your comment:

> My concern is that helping the user with the easiest part of anonymizing data stands to encourage the user to go full steam ahead without slowing down to stop and think very carefully about what they're doing.

We're going to try to add something to the README addressing this exact question from both of you as it's one I anticipate we're going to get asked a lot - or one that carries risk if it's not made obvious form the outset - so thanks for the constructive line of questioning as it really will ultimately help us and people who choose to use this tool make a decision that's right for them and their use-cases.

[1]: https://news.ycombinator.com/item?id=17144702

[2]: https://arx.deidentifier.org

nathankleyn··on Show HN: Anon – A Unix Command to Anonymise Data
Hey! I'm one of the co-maintainers of the project here.

What you see today in this project is really a means to scratch an itch we had - mainly to quickly and easily sample/obfuscate some delimited data in a way that is "good enough" for use for demonstrating a visualisation tool without using the original dataset. It's important to note that that we intend to use this data still within a secure environment.

This tool is absolutely not up to the task of anonymising a dataset in such a way as to make it able to be made public. For us, it's about risk management vs effort: from a security perspective there are scenarios where we can use samples of data that have gone through this process and decrease the risk of holding data in mutliplate places substantially without significant effort. If we were to go onto to make any of these datasets ultimately public, we'd be looking for a better suited tool.

As a result, tools like ARX are not something we really want to compete with - they're aiming for a complete solution whereby the results are good enough to potentially make public. It goes perhaps without saying really that the reality of this goal is debatable given the research you linked, but some people might be comfortable with those risks.

One thing we've done to try and bridge the gap a bit is to make it really easy to add new functions as we need them, and I think we can get to a point whereby for a good portion of use-cases this tool is good enough (for example, making datasets you can use in a development environment that are representative, but a manageable size and anonymised to a reasonable degree).

We'll also try to add something to the README addressing this exact question from you as it's one I anticipate we're going to get asked a lot - so thanks for the constructive line of questioning as it really will ultimately help us and people who choose to use this tool make a decision that's right for them and their use-cases.

nathankleyn··on Walmart threatens to cut ties with truckers that also haul for Amazon
I think it was less that Amazon wouldn't provide support for Chromecast with their services and more that they refused to stock and sell Chromecast devices at all.

I suppose the difference between this and Walmart's move is that we are not entitled to buy the things we want from every shop, whereas these drivers are probably entitled to employment without discrimination in regards to other customers they provide services to?

nathankleyn··on Sony plans to make vinyl records again
I could not agree more

As a vinyl collector myself, another thing that interests me is the feeling of quality you get when you buy vinyl. I love looking through the lyric booklets in 10/12" format, beautifully printed and often a piece of art in its own right. I actually feel like I _want_ to sit there and listen through a whole album when you have all that to gaze through at the same time.

nathankleyn··on About the security content of iOS 10.3
It's extremely impressive how many of these bugs were found by Google's Project Zero team.
nathankleyn··on A proof-of-concept of a vulnerability in custom shell prompt scripts
I've confirmed fisherman is safe on my machine.
nathankleyn··on Type-Safe Unions in C++ and Rust
Compared to Rust enumerations, they are one and the same. In fact, looking at the documentation for Swift Enumerations yields this little nugget:

You can define Swift enumerations to store associated values of any given type, and the value types can be different for each case of the enumeration if needed. Enumerations similar to these are known as discriminated unions, tagged unions, or variants in other programming languages. [1]

Haskell and other ML family languages also have similar constructs, although these are usually modelled using "Algebraic Data Types", or "sum types". [2] [3]

[1]: https://developer.apple.com/library/content/documentation/Sw...

[2]: https://wiki.haskell.org/Algebraic_data_type

[3]: https://www.schoolofhaskell.com/school/to-infinity-and-beyon...

nathankleyn··on The GitHub Load Balancer
They mention in the post that they will be open-sourcing this code over the coming weeks.
nathankleyn··on Pokémon Go loses its luster, sheds more than 10M users
It's particularly aggravating playing it in a large city (for us London) where, without the maps as a guide, you're stuck wasting balls on common Pokémon incessantly because that's the only thing around.

Add to that the fact that they made it, with a recent update, insanely likely for anything half-decent to simply run or be impossible to catch, and you have a recipe for declining interest in playing and paying to be bored.

nathankleyn··on GitHub Security Update: Reused Password Attack
This is true only if you use SMS for 2FA.

For either method, you can audit the activity of your account on the GitHub security page: https://github.com/settings/security. For example, upon having deliberately got my 2FA token wrong, "user.two_factor_requested" and "user.failed_login" events were logged for me.

nathankleyn··on More code review tools
Some similar option for enabling patience diffing as well would be amazing. Those two options in combination would certainly make a not insignificant amount of PRs much more readable.
nathankleyn··on Making Elm faster and friendlier in 0.16
Some of these errors remind me of Rust and the attempts in that community to give every error an exhaustive description [1].

This looks fantastic, and shows a true commitment to reducing friction with the language - a goal which often goes too long without attention.

[1]: https://github.com/rust-lang/rust/issues/24407

nathankleyn··on Coding Math
The site appears to be struggling, but you can view the Coding Math videos on YouTube [1].

These are really useful. Whether we like it or not, mathematics underpins most of computer science and often beginners don't even know what to search for to get started. A resource like this is an excellent way to get somebody going.

[1]: https://www.youtube.com/user/codingmath/videos

nathankleyn··on Telegram bans public ISIS channels
These are Telegram channels, which is a private individual broadcasting messages to others publicly (as opposed to 1-1 private messaging, which is encrypted end-to-end).

It seems perfectly reasonable that they can and will moderate channels, but not conversations.

nathankleyn··on Support for 100MB APKs on Google Play
I suspect it uses the Expansion Files [1] feature.

[1]: https://developer.android.com/google/play/expansion-files.ht...

nathankleyn··on Nomad, a cluster manager and scheduler
Hashicorp themselves have published comparisons to Kubernetes, Mesos, et al on the Nomad site[1]. They look well written and generally not too biased.

[1]: https://www.nomadproject.io/intro/vs/

nathankleyn··on A New Face for Pebble
It's worth noting that this device, unlike any of the previous Pebble devices, is not waterproof. I was smitten until I noticed this - not having to worry about getting it soaked while cycling or swimming is a rather nice feature of my Pebble Time and it looks like I'll be sticking with it for that (even if I do love the new design).
nathankleyn··on The HTTP TTY
The cookie and auth management alone makes this worth using. Really fantastic program, will definitely displace my usage of various Chrome extensions to get the job done.
nathankleyn··on Ask HN: Do you think we'll see any Twitter/Facebook real-competitor?
I wonder if we'll see a fresh approach here with the new Alphabet organisational structure. Perhaps Google's finally structured in such a way to let such a company be separate from the rest of the products.
nathankleyn··on Writ – Opinionated, classless styles for semantic HTML
I agree. The more worrying thing is that with proposals like CSS Modules, we're going even deeper down the rabbit hole with classes everywhere for everything.
Page 1 of 2Next →