HNHacker News
TopNewBestAskShowJobs

pid-1

2,224 karma · joined September 17, 2021

submissionscomments
pid-1··on We have lift-off Element X, Call and Server Suite are ready
Why would any enterprise use e2e encryption?

In most juridictions and industries you must be able to audit internal and b2b communication.

pid-1··on Twitter/X migrated to Cloudflare, bypassing Brazilian block
Then Twitter can migrate to AWS CloudFront.
pid-1··on Why Haskell?
Sorry, I could not grok the difference, even after reading a few Rust examples.

def foo(int | None = None) ...

... just means the variable's default value is None in a function definition. But it could be either in an actual function call.

pid-1··on Learning to Reason with LLMs
Why can't medical doctors be automated?
pid-1··on Why Haskell?
Python has sum types

optional_int: int | None = None

pid-1··on Rust for the small things? but what about Python?
IMO it's far worse than Ruby. Since Python is meant to be a glue language, scripts can have every type of esoteric dependency, including binaries, os libs, java programs, etc...
pid-1··on Firewall rules: not as secure as you think
Just to be pendantic, a malicious user could write a script / program that implements tunneling but doesn't use the OS provided certificates.

But yeah that's definitely a best practice.

pid-1··on Firewall rules: not as secure as you think
Most security controls used in your average business can be bypassed by knowledgeable users with enough time.

The aim is to make things as hard as reasonably possible so you can tell your boss and regulators that you did your part.

pid-1··on .INTERNAL is now reserved for private-use applications
> leading Amazon's strategy for cloud-native AWS usage internally

I've been on the other end of the business scale for the past decade, mostly working for SMBs like hedge funds.

That made me a huge private DNS hater. So much trouble for so little security gain.

Still, it seems common knowledge is to use private DNS for internal apps, AD and such, LAN hostnames and likes.

I've been using public DNS exclusively everywhere I've worked and I always feel like it's one of the best arch decisions I'm bringing to the table.

pid-1··on CrowdStrike Update: Windows Bluescreen and Boot Loops
Yeah I don't get where this "Linux is more secure" thing comes from.

Basically any userspace program can read your .aws, .ssh, .kube, etc... The user based security model desktops have is the real issue.

Compare that with Android and iOS for instance. No one needs anti-virus bloatware, just because apps are curated and isolated by default.

pid-1··on Libadwaita: Splitting GTK and Design Language
What's cosmic?
pid-1··on Making EC2 boot time faster
Can you have warm pools of spot instances?
pid-1··on CamelCase vs underscores: Scientific showdown (2011)
What if you are creating a new language? Which one would you use?
pid-1··on OpenAI Dissolves High-Profile Safety Team After Chief Scientist Sutskever's Exit
I wonder if Adobe Photoshop has a safety team
pid-1··on Pg_lakehouse: Query Any Data Lake from Postgres
Moreover, even when extensions are supported by RDS, they often make upgrading database versions a PITA.
pid-1··on Novel attack against virtually all VPN apps neuters their entire purpose
If one is working from a non trusted network (idk, a coffee shop), isn't that true?
pid-1··on A Mathematical Theory of Communication [pdf]
As an undergrad I struggled to understand why log was used to measure information. Could not find a reason in any textbook.

Took a deep breath and decided to download and read this paper. Surprise, surprise: it's super approachable and the reasoning for using log is explained on the first page.

pid-1··on Ask HN: Best stack for building a desktop app?
In general for a great experience on the desktop you want to use the native stack of each platform, so C# / Windows SDK in Windows, GTK in most Linux distros and whatever Mac officially recommends.

You could use electron and build cross platform apps using web technologies, but I'm yet to use an electron based app that doesn't feel like crap.

pid-1··on Pyinfra: Automate Infrastructure Using Python
> Obviously python isn't

Obviously you can create declarative idioms in Python

pid-1··on How an empty S3 bucket can make your AWS bill explode
Press F12 to screw competition
pid-1··on HCL: Toolkit for Structured Configuration Languages
My opinion on hcl: better than yaml / json, worse than Python / Typescript / most real languages.

In fact I will use a real programming language for IaC over pretty much anything, as long as the language has an expressive type system and allows declarative idioms.

pid-1··on Gitlab Duo
For most companies maximizing shareholder value and making customers happy are highly correlated. No amount of AI features will save their stock performance if their customer base stalls.

Broadcom-like companies (monopoly) and Google-like companies (you are the product bla bla bla) are exeptions though.

pid-1··on Gitlab Duo
~5 years ago GitLab had many features that distinguished itself from competition, chiefly their CI/CD stuff. It was leagues above of what everyone offered.

They've spent the last years building stuff I don't care while not improving the stuff I care. During this period, GitHub built Actions.

Nowadays GitLab is more expensive than GitHub (GitLab Premium vs GitHub Enterprise) while also not having any particular feature that makes me want to use it over GitHub. If I was starting a software team today, there is no reason I'd be using GitLab.

In the long term their strategy of having too many half assed features might bite back instead of generating revenue streams.

pid-1··on Financial market applications of LLMs
Same experience here.
pid-1··on Understanding AWS End of Service Life Is a Key FinOps Responsibility
As K8s matures it's likely we will get some kind of LTS versioning scheme.

Having new realeases so often for such a core infrastructure component is kinda insane unless it was explicitly architected to allow seeamless upgrades.

pid-1··on Stable Diffusion 3 API Now Available
CTO in a financial institution here.

I don't talk to sales.

pid-1··on When Will the GenAI Bubble Burst?
AI Winter was related to neural networks existing but computers not being fast enough to handle the amount of data needed to train them + massive datasets themselves not existing.

So far, I'd say no? New models are still being developed and getting better in very short time frames vs what folks did historically.

The finance bubble thesis is more related to: "are companies going to generate revenues to justify the massive investments being done?"

pid-1··on Microsoft to separate Teams and Office globally amid antitrust scrutiny
Teams was included in M365 way before lockdowns.
pid-1··on Microsoft to separate Teams and Office globally amid antitrust scrutiny
Sysadmin here.

Teams audio / video calls are really good.

Chat is full of intermittent bugs that makes you question your own sanity.

pid-1··on Microsoft Launches Surface Laptop 6 for Business and Surface Pro 10
Office and Active Directory (and related stuff)
← PreviousPage 2 of 23Next →