HNHacker News
TopNewBestAskShowJobs

p_l

10,129 karma · joined July 2, 2011

[ my public key: https://keybase.io/pawel_lasek; my proof: https://keybase.io/pawel_lasek/sigs/pq37gK20v7ngSJ9wYjGNZ9K7DjPDz-X-zkaE9hUuUtc ]
submissionscomments
p_l··on Gemini 4 Carbon
The point of the lower pricing is to move compute (and sysadmin) capacity around
p_l··on Gemini 4 Carbon
Nah, Elon is well reported to have been crazy about "X.com" since ~2000 and thus it makes sense it got incorporated into SpaceX name
p_l··on Gemini 4 Carbon
AFAIK they are all (Barium, Argon, Carbon) different checkpoints of the same (ongoing) training run
p_l··on Code-execution flaw in UEFI firmware threatens most servers on planet Earth
Arguably it's trivial to fix for most netbooting environments, the one iffy case would be corporate laptops configured to boot from net for management purposes because there "attacker controls the network and timing" suddenly can become easy
p_l··on Code-execution flaw in UEFI firmware threatens most servers on planet Earth
"Think" (thinkpad, thinkcentre, etc.) series have AFAIK completely different R&D team plus the whole aspect of building on top of what was done for earlier models, and on those the UEFI Capsule mechanism (which allows passing firmware updates from booted OS to firmware) works just fine - it's also used to ship firmware upgrade as part of Windows Update.
p_l··on Code-execution flaw in UEFI firmware threatens most servers on planet Earth
UEFI provides a way to update in OS agnostic way, unfortunately motherboard vendors do not necessarily provide archives that can be uploaded this way (assuming they updated to new enough version to support the interface in the first place).

Unfortunately we're suffering from "eh, it boots windows, ship it" mentality of many hardware manufacturers, whether back in horrible era of BIOS emulating faux IBM PC 5150, or with modern UEFI

p_l··on Tailscale SSH: Investigation and remediation update
No, by DPI. SSH has recognizable signature as does web sockets etc.

Takes flipping one switch for 443 to be made HTTPS + HTTP2 + websocket only by egress firewall if you paid for one with DPI

p_l··on Tailscale SSH: Investigation and remediation update
Have you seen the slopreport for the vulnerability?

I fully understand being carefully worded when you need serious brain power just to figure out every claim in the logorrhea

p_l··on Show HN: Encarta 95 Web
and includes AoE 2 :D
p_l··on Tailworm – Tailscale Vulnerabilities
Reserving any judgement on the actual vulnerability or disclosure process - It was still very hard to read, and not because the topic was hard - the writing just sucked.
p_l··on Tailworm – Tailscale Vulnerabilities
The following are from my own adventures in heavily customizing headscale and interacting with tailscale client:

Nodes get "NetMap" streamed to them from control plane, which contains information about nodes accessible to them. Without a node showing up in netmap, you can't start discovery to connect to that node - discovery protocol follows once you get information for given node, and allows continued connection in case NetMap gets stale (but if ACLs are changed and reach the other node, it's going to filter you out, and you're not going to know about it without initial info from NetMap)

p_l··on Tailworm – Tailscale Vulnerabilities
Pretty sure only accessible nodes are present in netmap given to a node from headscale.

... Because I had triggered more than one alarm recently messing with a headscale upgrade and permissions involved :D

p_l··on Canadians are running out of time to oppose Bill C-22
FATCA shows how promised reciprocity works (spoiler: it does not)
p_l··on OpenSSL 4.1.0
Honestly more HPPA gear to test against than Itanium
p_l··on The same AI request emits 8.5 times more CO2 in Texas than in Sweden
Perhaps they are mistaking Sweden with Norway (whose nearly 100% hydropower system is constrained)
p_l··on A skeptic's first contact with Kubernetes (2024)
A good term for it is that every bigger system is going to be at best metastable
p_l··on A skeptic's first contact with Kubernetes (2024)
It's why, except for upstream charts, I use exclusively jsonnet (through kubecfg) when I can.

String interpolation is a pox on the ecosystem, especially given how YAML was only originally a debug helper...

p_l··on Butlerian Jihad
And which is better explained as two eugenics programs at clashing into each other, both working on dominating the general populace (Bene Gesserit arguably on larger scale than Komos' single-system thing), and Bene Gesserit using their long-worked socio-religious manipulation for revenge that gets out of hand
p_l··on Butlerian Jihad
His target was removal of prescience - which would have allowed that, AI or no AI.

In fact he also explicitly prepared a renewal of computing and thinking machines in order to break free from spacing guild

p_l··on Butlerian Jihad
Yes, but it never goes into what actually happened - it's just the belief of the time.

And curiously a critical part of Golden Path became a reversal of major Butlerian Jihad effects, allowing humans to be free from feudal system

p_l··on Butlerian Jihad
The Dune Encyclopedia is essentially two eugenics programs clashing together, with one of them triggering a holy war in revenge that turned into self-destructive orgy of wholesale murder
p_l··on Gemini 4 Argon
Both for gemini app / website, antigravity only for Ultra (because let's be honest, that's the way to put a lot more load on it)
p_l··on A plea not to use uv-build
It is still a problem where there are no binaries for platforms otherwise supported by the distro, and in fact supported by the package being built - because uv-build is the only part that does not run on given platform and can't be reliably built for it
p_l··on A plea not to use uv-build
It also made it nice base for both ChromeOS and its descendants like COS and Flatpak (continuation of original CoreOS)
p_l··on A plea not to use uv-build
My somewhat ignorant experience is full of dealing with combinatorial expansion of python build backends and needing to husband them in nixos including all sorts of overrides to deal with, iirc, weird circularities in deps.
p_l··on A plea not to use uv-build
Well, it did force me to work on better build caching and the like, but at the same time, it accelerated my wish to remove python where possible
p_l··on Worlds more habitable than Earth?
Time experienced will be slowed down for the person in spaceship as you near lightspeed
p_l··on A plea not to use uv-build
The problem is packages that use the build backends, and Gentoo is generally not in the business of maintaining that kind of patch.

Admittedly rustification like that is a problem not only for gentoo, I have commercially deployed systems where one of the most annoyings elements of updating is presence of rust in python deps...

p_l··on Solar panels that plug into your wall
Depending on country, you still need to hit the right phase if you want the power to go to your appliance (metaphorically)
p_l··on I'm in a Meeting
It's normal in many places for the only video to be shared screen
← PreviousPage 3 of 34Next →