HNHacker News
TopNewBestAskShowJobs

polack

736 karma · joined March 6, 2013

submissionscomments
polack··on Root shell on Samsung TV
Load the art from a flash stick and never connect it to the internet?
polack··on Google illegally cut down 250K trees in Finland for data center
The trees are part of an ecosystem. Even though they can be planted elsewhere, who knows how many endangered species this will affect.
polack··on Ask HN: How to deal with shipping AI-written code you don't understand?
How many times do you think the average programmer have noticed that their compiler have introduced a bug? And how many times do you think the same developer have found a bug in the code that their AI have implemented?

Stop drinking the cool aid and compare compilers with ai models.

polack··on `123456' password used in Danish CPR data breach
There have been collisions in Sweden, but that was due to lots of immigrants coming from the middle east that did not know when they where born. So many of them picked first of January. They “solved” it by overflowing to the next days.
polack··on Oxide computer 3D rack guided tour
It was not THAT bad, but it really feed my impression that there is an institutional god complex at Oxide.
polack··on Oxide computer 3D rack guided tour
Brian, you need to step off your high horse. Few people can go around saying that they are the best, and you’re not one of them.

It was also embarrassing to listen to the podcast episode where you humiliated that Eastern European guy you had invited. All very off putting and it really tarnish the brand.

polack··on Danish privacy activist Lars Andersen raided by police
I was on a consultant-assignment at a company that got raided by the police in the EU. The police was extremely careful not to scan any data that where stored on US-servers. The company used Google for mail and file storage, so all computers had to be taken offline before they could scan them.

While I don't doubt they have a way of getting permission to access that data, I don't think they will put in the effort unless you're a relally big fish.

polack··on Identity verification on Claude
So I’ll just automate failed verifications for everyone I want to lock out?
polack··on Identity verification on Claude
Yes, it’s the biometrics they’re after.
polack··on Claude: Elevated errors across many models
> No downtime recorded on this day.

Neat. Didn't have a single request go through for 2 hours. Guess they need to improve their metrics before the IPO...

polack··on Hetzner Price Adjustment
> - I can't pay with my credit/debit cards there so I need to get their alipay pay app. There is KYC required to upload my government ID.

It's not so odd that the Chinese choose to use their domestic payment system over a US one. You probably needed a government ID to get your credit/debit card too (at least when you opened your bank account).

I'm not saying the Chinese surveillance system isn't horrible, but the western ones are catching up quickly with the adoption of Flock cameras everywhere and Palantir analyzing every bit of digital footprint you leave. Is there anyone who think there isn't a non-negliable risk that people will walk around with a "jew star" marking in the US in the coming 5-10 years?

polack··on I moved my digital stack to Europe
Yes, Lettermint looks great if you need both transactional and marketing emails. But it's a bit weird that the OP selected Lettermint over Scaleway for just transactional emails when they use lots of other Scaleway services.

https://www.scaleway.com/en/transactional-email-tem/

[EDIT] Found the answer from the OP:

> To be honest I implemented Lettermint before I migrated to Scaleway, so I didn't even look at TEM

polack··on I moved my digital stack to Europe
Same here. I tried different EU providers before I migrated our servers off the US clouds and Hetzner demanded my passport and webcam live verification. Thats a HUGE red flag and we went with Scaleway instead. Happy I found out what a shitty company Hetzner are before I invested more time in them.
polack··on Anthropic bans orgs without warning
In Anthropics defense they make sure that no company can rely on them by being down all the time... And LLMs have become a commodity these days, so you can seamlessly just fail over to another supplier WHEN they go down.
polack··on We do not think Anthropic should be designated as a supply chain risk
Someone should add Sam’s face to the targeting training data as an Easter egg ;)
polack··on Cloudflare CEO on the Italy fines
Surly this post must have the opposite effect of what he intended. Even if you side with Cloudflare on the core issue this post is so cringy my butthole collapsed into itself.

Are Americans not embarrassed by the way these tech bros operate? As a European it’s obvious that the US gone from an allied to an enemy. I would feel like a traitor if I picked US tech these days.

polack··on What to know about a recent Mixpanel security incident
That’s why you should only export anonymous information to external parties. There is no valid reason for OpenAI to export my personal information like this.

I will report OpenAI to the data protection agency in my country and I encourage others to do the same. They can not blame Mixpanel when they sprinkle others personal information around like this. NOT OK.

polack··on Cloudflare outage on November 18, 2025 post mortem
What is not realistic? To do simple input validation on data that has the potential to break 20% of the internet? To not have a system in place to rollback to the latest known state when things crash?

Cloudflare builds a global scale system, not an iphone app. Please act like it.

polack··on Cloudflare outage on November 18, 2025 post mortem
Yes, it's probably an overreaction.

But at the same time, what value do they add if they:

* Took down the the customers sites due to their bug.

* Never protected against an attack that our infra could not have handled by itself.

* Don't think that they will be able to handle the "next big ddos" attack.

It's just an extra layer of complexity for us. I'm sure there are attacks that could help our customers with, that's why we're using them in the first place. But until the customers are hit with multiple ddos attacks that we can not handle ourself then it's just not worth it.

polack··on Cloudflare outage on November 18, 2025 post mortem
They failed on so many levels here.

How can you write the proxy without handling the config containing more than the maximum features limit you set yourself?

How can the database export query not have a limit set if there is a hard limit on number of features?

Why do they do non-critical changes in production before testing in a stage environment?

Why did they think this was a cyberattack and only after two hours realize it was the config file?

Why are they that afraid of a botnet? Does not leave me confident that they will handle the next Aisuru attack.

I'm migrating my customers off Cloudflare. I don't think they can swallow the next botnet attacks and everyone on Cloudflare go down with the ship, so it will be safer to not be behind Cloudflare when it hits.

polack··on Oncall shift should be Tuesday to Tuesday
We do Thursday to Thursday and then you get Friday off after completed on-call. Being on-call gives you no extra pay by itself, but if you get paged off hours and need to work you get paid 150 to 200% of your normal hourly wage depending on what time of day you need to work.

Best on-call I’ve had.

polack··on Leaked OpenAI documents reveal aggressive tactics toward former employees
> ”we are identifying and reaching out to former employees who signed a standard exit agreement to make it clear that OpenAI has not and will not cancel their vested equity and releases them from nondisparagement obligations”

Looks like they’re doing that.

polack··on Stealing OAuth tokens of Microsoft accounts via open redirect in Harvest App
It's a really simple vulnerability though. It comes of like you're not really on top of things when you cant reproduce or close it.
polack··on Elixir – Why the dot when calling anonymous functions?
The real question is why they do Module.function() and then function.() instead of .function()?

It makes no sense to have the dot at the end of an anonymous named function.

polack··on Microsoft Azure Outage
Then they should have a "?" status that can be triggered by automated systems that acknowledge that it looks to be an issue but that they are manually investigating.

If it's a false positive they just resolve it without it affecting SLA and if it's a real problem then us customers wouldn't have to debug our own stack for 2 hours before Microsoft informs us that they are the problem.

EDIT: Wonder how many man-years of extra debugging work their non-working status page have caused the customers.

polack··on Tell HN: If You Are in Russia
Will the dead Ukrainians get their lives back? No one cares about your Gmail account mate. Have some respect for what’s going on.
polack··on Ask HN: Armour and Helmet Recommendations
Kevlar helmets and ceramic body armor is pretty standard. Go for body armor that can take a hit from 7.62 rounds. Body armor is heavy so most people prefer the ones that don’t have plates on the sides and over the shoulders as an compromise between weight and protection.

Isn’t it better that you give money to the Ukrainian military though, so they can get what they need? How will you even get the equipment into Ukraine now?

polack··on Namecheap: Russia Service Termination
The “but he did it too” spiel rarely works when talking to adults. But you know what, if someone force me to switch dns provider when my government is killing innocent families with my tax money I’ll gladly do it without whining on the internet.
polack··on Namecheap: Russia Service Termination
I’m truly sorry for all honest Russians that don’t support their government and what’s going on. But the world cannot let Putin go on and there is only two ways of doing that; military action that will result in full nuclear war or pushing the Russian population to step up and overthrow your government.
polack··on Namecheap: Russia Service Termination
I don't see the hundred of thosands of people fleeing Russia at the moment. I do see them trying to get out of Ukraine though. Please stop trying to make yourself a victim. You're really not. You're just a troll.
Page 1 of 7Next →