HNHacker News
TopNewBestAskShowJobs

plett

88 karma · joined September 24, 2015

submissionscomments
plett··on The Early Television Foundation and Museum
Take a look at https://nerdydaytrips.org/ and add any places that you know of.

It already has the Early Television Museum: https://nerdydaytrips.org/daytrip/na/us/early-television-mus...

plett··on Replacing tmux in my dev workflow
I view "you might not need tmux" in the same way as "you might not need browser tabs".

Yes, if you only have one or two terminal sessions or open web pages then you can probably live without using them, but anything beyond that leads you into reimplementing features to cope with your desktop's lack of ability to manage dozens of windows.

plett··on Traccar: an open source GPS tracking system
Are the demo servers a good enough example? https://www.traccar.org/demo-server/
plett··on Updates on Grounding of Boeing 737 MAX 9 Aircraft
The whole reason the 737 Max series exists is to avoid having to start over. By maintaining "backwards compatibility" type approval with the regular 737 then the existing massive pool of 737 pilots can jump straight in it and start flying.
plett··on Air quality monitors: paying more does not get you more accuracy
I attached a cheap IKEA Vindriktning PM2.5 sensor to esphome to get air cleanliness data into Home Assistant [1]. That's also very simple to do - solder some wires and write a few lines of yaml and it shows up in the web UI. I bought two of them and they are accurate to each other, so the sensors appear to be acceptable.

[1] https://plett.uk/posts/ikea-air-sensor/

plett··on Insane ways Google has been invading our privacy – Salon.com (2014)
Why turn it off? Google are still going to parse your emails and pull out details about bookings to build a better profile of you, no matter what settings you disable. So why not have them do something useful for you while they are doing it?
plett··on Include diagrams in your Markdown files with Mermaid
It works in Joplin too
plett··on Show HN: Tilemaker – DIY vector tiles from OpenStreetMap data
I'm a mapping noob, but I've got a half-planned project which will need web based maps, and tilemaker looks great.

The GitHub readme lists "You want the entire planet" as a reason not to use tilemaker. Why is that? Presumably it's excessive RAM/CPU usage during pbf conversion, or when serving tiles from the mbtiles sqlite file.

But how excessive are we talking? How big a machine would be needed to process a planet file? What tools work better with huge input files?

plett··on Details of yesterday's Bunny CDN outage
Cloudflare's RFO blog posts are incredibly detailed. Each time I read one, I feel reasonably confident that they have learnt from the mistakes that lead to that outage and that it shouldn't happen again.

https://blog.cloudflare.com/tag/outage/

plett··on GitHub, fuck your name change
In the UK, lots of real estate descriptions side-step the problem completely and use terms like 'Bedroom 1' for the largest bedroom and 'Bedroom 2' etc for the 2nd largest.
plett··on Staying Out of TTL Hell
This is done in the DNS world too. The unbound[1] resolver can pre-fetch a new record half way through the TTL if enough clients have requested it.

That guarantees that the cache remains hot for records that clients are requesting, but lets unused records expire.

1: https://nlnetlabs.nl/projects/unbound/about/

plett··on My Phone Was Spying on Me, So I Tracked Down the Surveillants
Yes. That's what the Open Rights Group are doing, and they want donations to help with it.

https://action.openrightsgroup.org/help-us-protect-your-data...

plett··on Show HN: TinyPilot – Build a KVM over IP using a Raspberry Pi
I've used instructions similar to those to get AMT KVM working with a normal VNC client, it works fine. The only catch is that the AMT seems to intercept all traffic to port 5900 coming in through the NIC, not just that addressed to the IP of the AMT. It's only the "legacy" port 5900 VNC which is affected, the other ports such as 16992 for AMT's web admin are unaffected.
plett··on Terminal Server on a Budget
I've used Startech FTDI based multi-port serial to USB adapters along with a Mikrotik Routerboard to make serial-to-ethernet or serial-to-LTE boxes. The Mikrotik boxes expose the serial port on a TCP port for you to connect to.

https://imgur.com/a/fdMfjdl

plett··on Terminal Server on a Budget
Yep. I've just picked up a few second hand HP EliteDesk 800 G2 desktops with the intention of turning them into a homelab for k8s learning. They have AMT and the web power control, VNC based KVM and SoL work well.

There is no BIOS serial redirection, so SoL is no use until the OS starts booting, and grub has a bug[0][1][2] which means it can't find the AMT SoL when booting in EFI mode. But SoL works fine as soon as the kernel starts, and the KVM VNC works fine during BIOS and GRUB if I have an emergency.

One gotcha which would catch someone out who wasn't expecting it - the onboard video disables itself when no monitor is connected, so the AMT KVM just shows a black screen. This can be solved by DisplayPort or VGA "ghost" dongle in the back of the machine to talk EDID and pretend to be a screen.

I'm a big fan of conserver, and intend to use it in this project to spawn amtterm processes to connect to the SoL ports.

0: https://savannah.gnu.org/bugs/?42026

1: https://community.intel.com/t5/Intel-vPro-Platform/No-AMT-se...

2: https://wiki.networksecuritytoolkit.org/index.php/HowTo_Head...

plett··on Hacking with environment variables
My university let students put procmail files in their home directories to filter their incoming email. I created a .procmailrc file which set a DISPLAY env variable and then spawned an xterm process. That popped up a terminal on the machine I was sitting at with a shell on the mail server which had write access to every student's home directory.
plett··on Running your own secure communication service with Matrix and Jitsi
Yes, I installed Jitsi Meet over the weekend and enabled auth so you need credentials to start a new conference, but anyone with the link (and optionally password too) can join unauthenticated.

I followed these instructions to add the auth https://github.com/jitsi/jicofo#secure-domain

plett··on Ask HN: Why are we so reluctant to use IPv6?
Because dual stack is a hassle. It doubles your operational workload - which is a big deal in a large network. IMHO, we'll only see large scale IPv6 adoption when it becomes possible to deploy an v6 only network and translate to/from v4 at the edge for legacy edge cases.

Facebook already does this - everything is IPv6 only inside their datacentres, and the only dual stack devices are their load balancers at the edge. They had to do this because they were running out of RFC1918 address space to use internally for IPv4, and the traffic was already going through the dual stack load balancers anyway.

On the access side, mobile networks are also going v6 only. EE here in the UK (sometimes) only gives you an IPv6 network and uses 464XLAT to NAT you when you want to reach an IPv4 only address. They can do that because they know what devices all their users are using, and can whitelist recent versions of both Android and iPhone which have CLATs in them which makes 464XLAT possible.

Fixed line residential and business connectivity is much harder - laptops and smartphones will work just fine with IPv6 only, but people expect their games console or old networked print server to work, and frequently they only support IPv4. What's needed there is islands of IPv4 on their LAN and a 464XLAT compatible CLAT inside the customer's router - then the entire ISP network can be v6 only apart from a few NAT64 devices at the edge. I'm sure that will come, but it hasn't happened yet.

It will happen - mass adoption is inevitable IMHO. There are new internet users and services being added every day, and there aren't enough IPv4 addresses for all of them. It's either IPv6 and 464XLAT or IPv4 only with CGNAT. And CGNAT is expensive - keeping state for all those connections makes for expensive boxes with lots of memory.

plett··on Bitwarden: Free, open-source password manager
Don't forget about the Alt-Shift-U keyboard shortcut to open Bitwarden in a Firefox sidebar. Using that, the extension doesn't close when you click elsewhere in the page.
plett··on The privacy trade-offs of cheap Android smartphones
Take a look at https://e.foundation/

It's a LineageOS fork which bundles MicroG and several apps to make a more usable out-of-the-box OS.

They have also re-added frequent builds for many of the phones that Lineage had dropped - including the OnePlus X which I have.

plett··on Pine64 is Working on a Linux Smartphone Running KDE Plasma
Yes. It's an Allwinner A64 chip underneath and they have binary blobs which they haven't ported to anything newer than 3.10
plett··on We Are All Accumulating Mountains of Things
I'm in the same boat as you.

I bought new earpads last week for my 15 year old pair of Sennheiser HD477 rather than buying a new set of headphones, and my primary laptop is an X230 from 2012.

plett··on Slack Is Buying HipChat from Atlassian
thelounge is an web based IRC client with persistence like irccloud, except that thelounge is open source and self-hosted.

https://thelounge.chat/

plett··on Chrome Apps are dead, as Google shuts down the Chrome Web Store section
I'm also very interested in whether Authy will be usable on Linux after Chrome Apps go away, or what viable replacements exist.

I experimented with migrating from Chrome to Firefox 57 when that launched. It's a very capable browser and I could easily use it as my main browser, but Authy was the main thing which stopped me dropping Chrome for work use. There were other things (like Netflix Chromecast support) which were stumbling blocks for home use, but I can always keep Chrome around for those.