HNHacker News
TopNewBestAskShowJobs

ohnoesjmr

180 karma · joined March 13, 2017

submissionscomments
ohnoesjmr··on Ballista: Distributed Compute with Rust, Apache Arrow, and Kubernetes
I congratulate the effort, as I always thought that Spark is great, but the fact it was written in Java hinders it quite badly (GC, tons of memory required for the runtime, jar hell (want to use proto3 in your spark job? Good luck)).

I do however worry that rust has a high bar of entry.

ohnoesjmr··on Ballista: Distributed Compute with Rust, Apache Arrow, and Kubernetes
It's total cost of ownership. Spark is a beast, half the resources is taken up by the platform itself.
ohnoesjmr··on IPFS, Again
Hey, but it's great if you want to piggy-back a botnet on it, with no way to kill c&c: https://www.anomali.com/blog/the-interplanetary-storm-new-ma...
ohnoesjmr··on mTCP: A high-performance user-level TCP stack for multicore systems
Presumably this needs it's own IP sockets, which means this needs root to run?
ohnoesjmr··on Google’s new voice recognition system works instantly and offline (Pixel only)
Can't wait for different language models to be available to download for recognition, so one could have a genuine offline dictation between languages.
ohnoesjmr··on KeyDB: A Multithreaded Redis Fork
Is it the same proxy that is used in redis enterprise today?
ohnoesjmr··on I exploited TLS-SNI-01 issuing Let's Encrypt SSL-certs for any domain (2018)
Why wouldn't it send SNI for the real domain? Also, what's preventing me from claiming some domain I don't actually own, if you are allowed to wedge in any invalid tld and nothing is checked?
ohnoesjmr··on I exploited TLS-SNI-01 issuing Let's Encrypt SSL-certs for any domain (2018)
Not sure I understand how this attack works. You ask for cert for foo.com, LE tells you to provide a self-signed cert subjectAlt=foo.bar.acme.invalid. LE resolves foo.bar to some heroku endpoint as the domain lives on heroku, LE connects via TLS without verification and sends foo.bar.acme.invalid as SNI, which heroku routes to a hijacker who asked heroku to route foo bar.acme.invalid requests?

Why would LE send the SNI in the first place? I thought the purpose was to prove you own the domain, not cohabit an environment where the domain is hosted?

I guess it only allows hijacking certs of domains running on heroku et al envs?

Also, what do host headers have to do with this? Presumably this is just a tls handshake test?

ohnoesjmr··on Ask HN: Recovering an audio disk ripped in an unknown format
Yeah, first few hundred bytes are all zeroes.
ohnoesjmr··on Brexit uncertainty means UK is uninvestable
For the funds that have relations with policits, I think it's mostly getting rid of regulations imposed by the EU.
ohnoesjmr··on Why Sleep Apnea Patients Rely on a CPAP Machine Hacker
I really struggle with this 5 years in... I open my mouth when I sleep, probably because of adenoids (had them removed twice, keep growing back), so I can't use nose pillows/masks, and the full face mask leaks badly as my bottom jaw is smaller than usual when compared to the top one. I though about chin straps, but my damn head is too big for most of them...
ohnoesjmr··on Why Sleep Apnea Patients Rely on a CPAP Machine Hacker
For me, I'd crash straight after work one day a week, I just couldn't last till the evening (I work an office job, so no physical tiredness). Also, I recall driving on a highway was terrible, I'd start nodding off after 10mins.
ohnoesjmr··on PipelineDB 1.0 – High-Performance Time-Series Aggregation for PostgreSQL
You can't really do that with distinct, as if you have 1 billion distint entries, you essentially have to store all of them to dedup.
ohnoesjmr··on Libp2p – A modular network stack
Last time I looked at this, the code in general and code you needed to use it was overly complicated for what it does.
ohnoesjmr··on S3 trickery: using it as a scheduler
This is misleading.

The title should be "Using s3 as storage and some side thingy that runs every minute as a scheduler".

ohnoesjmr··on Show HN: Ghuser.io – Complete GitHub profiles
I am pretty sure I am not, as I received the message that onboarding is disabled.

If you have user requests in the logs, you should queue them up.

ohnoesjmr··on Show HN: Ghuser.io – Complete GitHub profiles
Given you disabled onboarding, is my onboarding request queued somewhere or will I have to comeback and re-request once you got over the hump?
ohnoesjmr··on TLS 1.3 approved
SNI is still in plain text :( They could just hash the SNI and do matching based on hashes.
ohnoesjmr··on Upcoming Go protobuf release
I wonder how this compares with Gogoproto. Nobody in their sane mind uses the standard protobuf package anyway.
ohnoesjmr··on Handling 1M Requests per Minute with Go (2015)
Yeah, I fail to understand the purpose of the dispatcher thingy aswell. This also can run out of memory as he keeps spawning routines indefinately with each request in the dispatcher.
ohnoesjmr··on Is Your English Accent British or American?
It's quite poor. Two attempts as a non-english speaker in my normal voice, and 70% british first, then 70% american.
ohnoesjmr··on Google NetStack: IPv4 and IPv6 userland network stack in Go
I wonder if one could abstract tcp on top of udp using this.
ohnoesjmr··on Implementing Go's defer keyword in C++
The problem with contexts is that can't just innocently enter one in some if branch where the rest of the code would be scoped.

I ended up an OnExit() context that does:

    if conn is not None:
        ctx.call(conn.close)
ohnoesjmr··on Sugar alters hormones and metabolism, sets stage for obesity and diabetes
Had the same, was diagnosed with sleep apnea.
ohnoesjmr··on Paperclips
[spoiler] It unlocks at 10, 50 and 100 factories or something like that, same with drones, 5k, 50k etc. [/spoiler]
ohnoesjmr··on Cloudflare Workers: Run JavaScript Service Workers at the Edge
Sounds very cool, but first thing that hit my head: Sounds like a perfect tool to DDoS someone?
ohnoesjmr··on Running 10M PostgreSQL Indexes in Production
Why not simply full indexes?
ohnoesjmr··on Syncthing Usage Data
Yeah, the only problem is you can never "un-give" a key, which means you either have to rebuild your cluster under a different key (having to re-give key to everyone else apart from that one guy you want to kick out), or deal with the person having access to the data forever.
ohnoesjmr··on Syncthing Usage Data
If you look at the relays page[0], that shows number of users currently using relays, which is 44k atm.

[0] http://relays.syncthing.net/

← PreviousPage 3 of 3