Hacker News Reader

nonaneon Tim Sweeney on Apple and Google

This line of argument is incorrect: It’s not the AppStore that makes secure apps possible: It’s the mandatory sandbox that apps run inside that actually makes the system secure. It’s fairly easy to push malicious code to the AppStore but bypassing the sandbox restrictions is what keeps bad apps at bay.

nonaneon New 13-inch MacBook Pro

MagSafe was flawed - I’m glad it’s gone. It had massive reliability issues due to dust getting in between the connectors - which ending up causing charging problems, excessive heat at the charging port and countless charging adapter replacements.

nonaneon New iPad Pro with LiDAR Scanner and trackpad support

Anyone know more about the new Trackpad APIs the mention in they mentioned in the article?

nonaneon LogMeIn Acquired by Private Equity

Hi. I’m a developer on Jump Desktop. If you’re interested, we have a similar product with no computer limits and it’s very reasonably priced ($9/user/month): https://jumpdesktop.com/#teams .

nonaneon Odyssey: Scalable PostgreSQL Connection Pooler

Thank you!

nonaneon Practices for writing high-performance Go

Try using sync.Pool - it does the same thing: https://golang.org/pkg/sync/

nonaneon Ask HN: Are any remote desktop solutions good enough for full-time use?

Hi,

I work on Jump Desktop. Glad you're using it. If you have any questions / suggestions - please let me know.

nonaneon Marzipan: Porting iOS Apps to the Mac

I’m a developer on Jump Desktop - a Remote Desktop app for iOS which supports 2 specific models of external mice. Along with that it also supports external monitor support with full resolution (not mirroring). Take a look here: https://jumpdesktop.com. If you’re interested in a free copy shoot me an email: support@jumpdesktop.com .

nonaneon New Map Scale Is More Readable by People Who Are Color Blind

I can see the app running - but doesn't change the display when I select a simulator option from the drop down menu. Will play around with it. Thanks!

nonaneon New Map Scale Is More Readable by People Who Are Color Blind

Thank you for the write up - this was good to read. Someone close to me was just diagnosed with color blindness and this was very helpful.

nonaneon New Map Scale Is More Readable by People Who Are Color Blind

Thanks for the link. Is the macOS version working for you? I can't get it to work on High Sierra.

nonaneon AWS Network Load Balancer

I don't think they can add TLS termination because of the way it's implemented. NLB runs on Layer 4 - the transport layer where TCP/UDP run on. TLS technically runs on top of the transport layer.

nonaneon Ask HN: What Go framework for web API are you using in production?

https://github.com/labstack/echo

For building a REST API

nonaneon YC will hold interviews in Vancouver for founders who can’t get US visas

What about the internet there? Isn't it censored and relatively slow and expensive? VPNs are legally banned (1). Last I checked, FaceTime + WhatsApp audio were completely blocked in Dubai. Skype was blocked when on mobile data (but available on PC-to-PC).

1 - http://gulfnews.com/news/uae/crime/using-vpns-what-uae-resid...

nonaneon IPv6 Support for AWS Extended to 15 Regions

Can you point out where specifically in the video they say this?

Edit: 24:30 is around the point he mentions it.

nonaneon IPv6 Support for AWS Extended to 15 Regions

+1 on this. Would appreciate someone from Amazon commenting on this.

Unfortunately it looks like VPC ELBs are still IPv4 only. They have a link in the article from when they introduced IPv6 for non-VPC ELBs back in 2011. Are VPC ELBs being worked on anymore or are we going to have to move to Application Load Balancers for IPv6 support?

nonaneon D3 v4.0.0 released

Any recommendations for doing realtime charts that update a few times per second?

nonaneon Intro to kernel debugging

In another life I worked on Windows Error Reporting (WER) - the part of the stack that was responsible for collecting, analyzing and sending reports to Microsoft and even provide solutions to the user based on the analysis.

For usermode problems WER would do a first level analysis on the client by looking at the crashing thread's exception record (1) or in the case of a user mode hang it would do something much more sophisticated called wait chain traversal (2). It would then generate a signature for the issue and report it to the backend via a single (and cheap) http/https request. The backend would then increment a count for that particular signature and if needed, would ask the client for more information about the issue. Among other things it could ask the client to capture a dump of the crashing process and even a multiprocess dump in the case of hang that involved multiple processes (process A waiting for process B waiting for process C etc). The client would do the necessary collection, prompt the user if necessary (depending on the user's consent settings) and eventually send it off. The 2nd level collection was configurable via a internal web portal - teams could look up their top signatures and request for more information about it. They'd eventually get notified once the extra information was collected - for high frequency issues, the turnaround was very quick.

Kernel mode issues aka bluescreens were treated slightly differently. The client wasn't able to do first-level analysis on kernel mode crashes. Instead it would always send at atleast a minidump of the bluescreen to a backend service where a pool of servers would run the !analyze windbg extension in realtime on the minidump.

(1) https://msdn.microsoft.com/en-us/library/aa260334(v=vs.60).a... (2) https://msdn.microsoft.com/en-us/library/windows/desktop/ms6...

nonaneon TeamViewer denies hack after PCs hijacked, PayPal accounts drained

We've tried to make sure the host and clients don't completely trust our cloud servers. For example the "Jump Desktop Connect" app on the host always requires credentials for a valid local account on the computer before it allows incoming connections through. It won't let accounts with blank passwords through. Also the credential transfer always happens over an end-to-end encrypted connection between the two devices - which means our cloud servers don't get to see or have access to your local computer's creds. This way, if someone gets a hold of your Jump Desktop account, they won't be able to get through unless they also know your local computer's creds.

Another way we protect hosts is by not allowing random hosts and clients to communicate with each other unless you've given explicit permission to each host/client. This means that Bob can't load up the Jump Desktop client and try to randomly brute force Alice's local account password by trying to connect repeatedly. The cloud server will drop Bob's connection requests to Alice unless Alice has explicitly given Bob permission to connect.

The above applies to our zero setup app, Jump Desktop Connect. Jump Desktop is also a full blown RDP and VNC client (with SSH support) - so you don't really have to use the Jump Desktop Connect app if you don't want to. You can use traditional RDP / VNC-over-SSH to establish secure connections as well.

nonaneon TeamViewer denies hack after PCs hijacked, PayPal accounts drained

Check out Jump Desktop: https://jumpdesktop.com. It has a zero setup client that you can install - no need to port forward etc, works across firewalls and easy enough for your parents to install. It's secure - we use WebRTC underneath the covers (connections are encrypted end-to-end). It has iOS, Android, Mac and PC clients. We're also beta testing a free PC to PC+Mac version here: https://support.jumpdesktop.com/entries/109741706-Jump-Deskt...

If you have any questions about security feel free to ask.

nonaneon Show HN: Peer-to-peer secure file transfer using WebRTC

This is incorrect. Once data starts to flow, DTLS is used to encrypt the connection and verify each peer's identity. If the STUN server attempts to MITM, it will be detected.

nonaneon Announcing Graylog v1.0 GA

I just tried this with boot2docker on a OS X machine (Yosemite) and it went very smoothly.

nonaneon Rick Reed – WhatsApp: Half a billion unsuspecting FreeBSD users [video]

Are there more details available about this? What specifically about the Linux TCP/IP stack is weaker than BSD's stack? Where does the weakness lie?

nonaneon Show HN: Black Friday deals for developers

No it doesn't support copy-paste file transfers yet. Supports folder redirection though.

nonaneon Show HN: Black Friday deals for developers

Here are a couple of my apps on sale. I'd be happy to give coupons to HN users - shoot me an email: haseebq _at_ jumpdesktop.com

Jump Desktop RDP & VNC for iOS: $15 -> $10: https://itunes.apple.com/us/app/jump-desktop-remote-desktop/...

Jump Desktop RDP & VNC for Mac: $30 -> $15: https://itunes.apple.com/us/app/jump-desktop-remote-desktop/...

nonaneon Redis latency spikes and the Linux kernel: a few more details

You're probably right but a quick way to test this theory is to check the amount of memory private memory (non-cow) is being consumed by the child fork with and without THP. This should tell you how much data is actually being copied vs shared. Not sure how you get this # from Linux though.

nonaneon Redis latency spikes and the Linux kernel: a few more details

That makes sense. Since jemalloc is using huge pages, even if it's one byte inside a huge page changes, the kernel needs to copy an entire 2mb per modified entry over (worst case localilty). Whereas on a non-hugepage allocation it'll only be 4kb. Thats why you saw movs in the stack trace - the kernel was too busy copying over the entire huge page over. With small pages, it can be more granular about it's copying.

nonaneon Redis latency spikes and the Linux kernel: a few more details

The problem happens when one of the processes (parent or child) tries to modify a page. Modifying the page triggers the copy-on-write mechanism and blocks the process making the modifications - it doesn't matter if it's parent or child. In Redis' case, the BGSAVE process doesn't do any writes - so it's good. It's always the server process that does the writes.

nonaneon What was your best passive income in 2014?

Definitely interested in the details. ~16% ROI is excellent! Does you have management company that takes care of the property?

nonaneon Goodbye Heroku

Who is Deis targeted towards? I'm a regular developer with little real world Ops experience. Will Deis be a good fit for me?

From the docs it looks like Deis reuqires an advanced Ops person to manage a cluster of Deis machines.