HNHacker News
TopNewBestAskShowJobs

nmjohn

1,490 karma · joined February 18, 2014

[ my public key: https://keybase.io/njohnson; my proof: https://keybase.io/njohnson/sigs/PEJkqcblsXsrSziMB_Icwhdl9BHXHsj3pODPfhhTxvY ]
submissionscomments
nmjohn··on Upcoming Changes to Let's Encrypt Certificates
> and paid for with your privacy (and probably your website user's privacy too)?

That's not really how ssl certs work - google isn't getting any information they wouldn't have otherwise had by issuing the ssl cert.

nmjohn··on YouTube increases FreeBASIC performance (2019)
It may also be interesting for people that browsers have a large list of domains they enable or disable certain behavior for a variety of reasons: https://github.com/WebKit/WebKit/blob/main/Source/WebCore/pa...
nmjohn··on FTC Bans Location Data Company That Powers the Surveillance Ecosystem
One of the standard link bypasses seems to work here[0] though. Is that not a reliable workaround here?

[0]: https://archive.is/BYCjp

nmjohn··on FTC Bans Location Data Company That Powers the Surveillance Ecosystem
Why are other news sources which also have paywalls not banned? (nytimes, wsj, bloomberg, financial times, etc)
nmjohn··on Freenginx: Core Nginx developer announces fork
Why did he not want CVE's assigned?
nmjohn··on Ruby's exceptional creatures
> And please don’t reply.

Respectfully, if you don't want discussion, why comment in the first place?

Commenting telling someone not to comment and then ending in telling them not to bother replying is confusing behavior to me for a discussion forum.

nmjohn··on Show HN: Rem: Remember Everything (open source)
> Note: Relies on Apple Silicon, and configured to only produce Apple Silicon builds.

Just curious, what is relying on apple silicon?

nmjohn··on Apple to halt Apple Watch Series 9 and Ultra 2 sales in the US this week
> I have no doubt we will see them attempting to aggressively exercise these in future years to shut down alternatives to Vision Pro in the future.

Do you have examples where apple has aggressively used patents offensively like this?

nmjohn··on Andreessen Horowitz Invests in Civitai, Which Profits from Nonconsensual AI Porn
> because it implies that it should be necessary

Who gets to decide what should or should not be necessary? Do you think your opinion about this is the majority view by people?

nmjohn··on Starship will attempt a launch this Friday
> it’s borderline treason and should be prosecuted that way.

Have words lost all meaning? This is the most absurd thing I've read all day.

(And I promise I'm not even remotely defending the absurd situations you're referring to.)

nmjohn··on Raspberry Pi 5 has no hardware video encoding and only HEVC decoding
While that certainly has been true for the majority of the last two years - rpi's in pretty much all skus have been back in stock for a few months now - to the point that even digikey has many of the skus in bulk stock

See: https://rpilocator.com/

As for Zero W 2s: In stock right now: https://chicagodist.com/products/raspberry-pi-zero-2

nmjohn··on Why cloud bandwidth is so obscenely expensive and what you can do about that
What would your hypothetical egress arbitrage look like? Keep in mind we are specifically talking about cloudfront bandwidth - so being able to route to an upstream without that upstream also paying for bandwidth likely is not possible.
nmjohn··on Why cloud bandwidth is so obscenely expensive and what you can do about that
In my experience pricing can go far lower than that. The sibling commenter saying $0.001/GB on an 18PB /year commit seems reasonable to me.
nmjohn··on Why cloud bandwidth is so obscenely expensive and what you can do about that
If you can sign a yearly bandwidth commit (not sure what the minimum bandwidth requirement is, but 1PB / year may be in the ballpark) - you will get prices that are extremely competitive (maybe like 90%+ off base list pricing?)
nmjohn··on Cloudflare API, dashboard, tunnels down
> was only 27 minutes...

I was affected by the tunnel outage. It was down for closer to 3 hours, not 27 minutes. (Their status page does accurately reflect this time)

nmjohn··on YouTube now blocking ad block
Not sure if ublock updated their blocking rules to bypass the block or youtube stopped the experiment - but starting yesterday, I'm no longer seeing any adblock warning which previously had started blocking me (as opposed to originally just nagging me to disable) from watching youtube videos.

I do wonder if the actual outcome of the experiment was increased rates of adblocking though - since every time it makes it into the news, more people are exposed to the idea it's even possible.

Aside, (cmd+l, cmd+c, cmd+shit+n, cmd+v, enter) is a pretty useful sequence to have muscle memory for to open the same page in incognito, which easily bypasses the block as well.

nmjohn··on Encrypted traffic interception on Hetzner and Linode targeting Jabber service
The attacker effectively controlled the IP the domain was pointed to. If you have this, getting a cert issued from any CA is trivial - you've proved to them you control the domain in question.
nmjohn··on The database servers powering Let's Encrypt (2021)
Yes, I was pointing out that many of their products have explicit limits.

But more importantly, the second link I posted shows how that despite being "unlimited" - it's not uncommon for hetzner to throttle / close your account if you go over unstated traffic limits.

nmjohn··on The database servers powering Let's Encrypt (2021)
Your random blog post is the outdated one.

Their actual docs: https://docs.hetzner.com/robot/general/traffic/

And reports of throttling once you actually hit certain limits: https://lowendtalk.com/discussion/180504/hetzner-traffic-use...

nmjohn··on The database servers powering Let's Encrypt (2021)
You can not get actual unmetered 1gb/s for anywhere close to that. If you start pushing anywhere close to that much bandwidth, you will be throttled / have your account closed. For example, Hetzner caps your bandwidth at 20TB per month.

Additionally, if you are actually pushing close to that much traffic, you can negotiate guaranteed commit prices w/ AWS that are competitive (especially when you consider the quality of bandwidth. I can only get ~100 mb/s to my hetzner server because of how bad their peering is. I can easily saturate my 1GB connection to anywhere in AWS.)

---

(Having said that, this does only apply to egress via cloudfront. Things like charging for intra A-Z bandwidth within the same region is insane, and for many workloads may be surprisingly expensive.)

nmjohn··on Ad-hoc polymorphism erodes type-safety
> Also "allow-list" is so gross. Maybe pick something less divisive for future examples.

What is gross or divisive about that?

nmjohn··on Feds probing roughly 5k pilots suspected of withholding major health issues
Do you know what prevents people from doing that? Being able to get help for their problems. Do you know what doesn't? Forcing them to hide their problems so they are able to keep their job.

The discussion isn't really about whether suicidal pilots should be allowed to fly - it's whether the system should allow for pilots with mental health concerns (which would be a large majority of them over the course of an entire career) to seek treatment for it without losing their job.

nmjohn··on Apple Vision Pro developer kit
Which apps have they done that to?
nmjohn··on Shortening the Let's Encrypt chain of trust
Nope - having built out the SSL termination stack for a similar company - they are serving millions of commercial sites on their own custom domains with let's encrypt issued certs.
nmjohn··on Shortening the Let's Encrypt chain of trust
Based on their 2021 (most recent year available) Form 990 (nonprofit public tax filing) [0] they paid Identrust $434,000 for "Internet Services." Not sure if they are getting more than just the cross-sign from Identrust - but it seems likely that may just be what they are paying for the cross-sign.

In that same year, their total expenses were $5.1M - so that expense would make up almost 10% of their budget.

[0]: https://beta.candid.org/profile/9328188?keyword=46-3344200&a...

nmjohn··on Elizabeth Holmes ordered to pay $452M restitution
I've read it numerous times after initial agreeing with you, and I don't think that is the case.

To me it sounds like they are saying if declaring bankruptcy were that easy, nobody would be receiving child support because everyone who owed it would just declare bankruptcy to get out of paying it.

nmjohn··on Magic Pocket: Dropbox’s exabyte-scale blob storage system
Can you provide an example of an alternative service which will give higher than 4 nines for availability that an enterprise customer would pick instead if that < 1hr of downtime per year was too high?
nmjohn··on Elizabeth Holmes ordered to pay $452M restitution
Child support generally can't be removed in bankruptcy
nmjohn··on Apple has just released the first Rapid Security Response for Ventura
This macOS update took < 30 seconds - opposed to most regular macOS updates which at the fastest are still 5+ minute operations
nmjohn··on The least impactful way to spend $300M?
He is worth like $40B - that $100m would be nothing compared to what they'll likely inherit
Page 1 of 12Next →