HNHacker News
TopNewBestAskShowJobs

sairamkunala

786 karma · joined September 8, 2011

[ my public key: https://keybase.io/sairam; my proof: https://keybase.io/sairam/sigs/nsjrdZS14i0U50Mp54YimDsaXeryzdpi_3_yNzuZuRg ]
submissionscomments
sairamkunala··on Distributed Systems 4th Edition
received almost immediately.
sairamkunala··on Bug, $50K+ in bounties: how Zendesk left a backdoor in companies
(as a devops/security minded engineer) ...and companies wonder how supply chain attacks are possible
sairamkunala··on Ask HN: What happens to ".io" TLD after UK gives back the Chagos Islands?
I recall there was an outage 6 years ago. And many companies migrated to dot com over night.

https://hackernoon.com/stop-using-io-domain-names-for-produc...

sairamkunala··on Ask HN: How to handle user file uploads?
My previous company used Cloudinary for the purpose and amazingly lot of time was saved.
sairamkunala··on Companies embracing SMS for account logins should be blamed for SIM-swap attacks
Most Indian Banking services, Payment endpoints, OTT platforms have adapted phone numbers as identity.

Your phone number is your identity. You can receive or send money only through your phone if the SIM is installed and validated by sending an SMS.

Getting a replacement SIM card requires physical verification using Aadhar (Identity service) with One Time Password validation (Email/SMS). Once the new SIM is active, you will not receive any SMS for the first 24 hours after getting a replacement SIM card. This is to reduce the attack surface of SIM Swap attacks.

sairamkunala··on AWS: IPv4 addresses cost too much, so you’re going to pay
AWS and their billions in IPv4 addresses - https://news.ycombinator.com/item?id=24839887

https://gist.github.com/atoonk/b749305012ae5b86bacba9b01160d...

AWS adds an extra 5.5M IPv4 addresses(https://github.com/seligman/aws-ip-ranges) - https://news.ycombinator.com/item?id=28177807

sairamkunala··on SEC asked Coinbase to halt trading in everything except bitcoin, CEO says
Wait! Why not bitcoin?
sairamkunala··on Tell HN: GitHub is partially blocked in India
Pointing to cloudflare dns circumvents the issue for now.

move away from ISP DNS to 1.1.1.1 to temporarily solve the issue.

sairamkunala··on Cloud Pricing Comparison: AWS vs. Azure vs. Google Cloud Platform in 2022
Standard marketing page for improving SEO.

Short answer: it depends

sairamkunala··on I’m Disappointed with 1Password
Subscriptions lock you in on various levels. It’s very similar to renting a house. You can get kicked out by the owner.

Subscriptions for individuals is different from subscriptions for companies. Companies want to optimise time, individuals may want to optimise cost

personally, I am inclined to pay for IDEs as I spend more than 50% of the time on it, but not so much similar amounts when I use tools no more than 5-10 times a day.

sairamkunala··on I’m Disappointed with 1Password
I let my subscription expire about 3 months ago. (CC handling changes in India, you know)

I have only updated about 3-4 passwords out of 100s of items I store. This has been a realisation for me.

1pass, leaves the account in read only mode since it comes from your local storage anyway.

I need to get familiarised with the Bitwarden UI, its not very similar to 1pass, so there is a adoption curve. Hosted Bitwarden with the rust variant option is an option to consider.

sairamkunala··on The hardest thing about engineering is requirements
Yes agreed. Assuming software engineering context here, not civil or mechanical or other mature industries which usually require millions to create, validate, test and release a new product.

Negotiation of requirements is a problem based on limitations like recources (money, people), known knows and known unknowns.

sairamkunala··on The hardest thing about engineering is requirements
Requirements is a communication and expectation problem. Not an engineering problem.

Software or hardware engineering is a solution. You can solve the same with a pen and paper if you know what the user needs.

Agile is a way to iteratively validate expectations and revisit and update things with minimal wastage

sairamkunala··on Show HN: Open-source real-time transcription playground (React, Python, GCP)
Voice to Text via https://speechtyping.com/voice-to-text-english

I have bookmarked this a while ago. May not be open source, and does not use the internet to convert. Would work for many use cases, but wont be as good as Google's AI.

works with just the browser with help of webkitSpeechRecognition built into the browser. Works on both Chrome and Safari (not Firefox).

sairamkunala··on Ask HN: What are you working on?
previously present as Friendfeed (till it was shutdown) - https://en.wikipedia.org/wiki/FriendFeed
sairamkunala··on Ask HN: Where to get cheap VPS with big storage?
bandwidth through Cloudflare or the alliance they formed is free.
sairamkunala··on My million dollar domain hobby
.app names list by some other seller - https://offbyonenames.com/
sairamkunala··on Everything You Know About MongoDB Is Wrong
i will leave this here for anyone to validate the original article - http://jepsen.io/analyses/mongodb-4.2.6
sairamkunala··on AWS Outage – 25Nov2020
> This issue has also affected our ability to post updates to the Service Health Dashboard.

looks like a circular dependency to be fixed.

sairamkunala··on M1 Mac Mini Teardown
google cache link: http://webcache.googleusercontent.com/search?source=hp&ei=cD...
sairamkunala··on Open-source photo gallery with cloud backup and end-to-end encryption
Mobile Apps are open source, this is not an self hosted solution.
sairamkunala··on Facebook says it may quit Europe over ban on sharing data with US
wait, don't they have a legal entity registered in Ireland?
sairamkunala··on Apple announces Apple One subscription bundle for Music, TV Plus, and more
Interesting to see they have cheaper pricing in India - $5/month for a family subscription - https://www.apple.com/in/apple-one/

Usually, the hardware usually costs 30-40% more in India than the advertised price in the US.

sairamkunala··on Apple One
Only $5/month for a family subscription in India - https://www.apple.com/in/apple-one/
sairamkunala··on Raspberry Pi as a local server for self hosting applications
and there is inlets too https://github.com/inlets/inletsctl
sairamkunala··on Who owns software vulnerabilities? The hacker or the company who owns the code?
Intel (the chipmaker) uses the linux kernel to fix flaws found in the hardware. see if you can identify who would want the ownership around that.

https://www.kernel.org/doc/html/latest/x86/microcode.html

Look at the specification. If something does not behave as expected, that entity is the owner. In case of Intel processor vulnerabilities and other ones, the hardware is the fault as per my understanding.

Since you are asking about software vulnerabilities and since a vulnerability is supposed to be fixed, the onus is on the provider to fix it, but the IP could be owned by the hacker. Its a vulnerability if its known the company. If not, its an exploit the hacker can use.

sairamkunala··on Ask HN: How does Superhuman Mail tracks every recipient independently?
> And it's the same pixel that is sent to all the recepients since the email is a carbon copy so impossible to distinguish between the recipients by name.

Without going into the technical details - whenever you send a carbon copy email, its not a single email when you send an email to say 3 people, email providers charge you per recipient. That means they send 1 separate email per receipient.

if you want to consider the tech details, the email protocol opens a connection per user mailbox and sends over the body of the email to them. (that's the reason you get spam in gmail even though your email is not present in either the to or cc addresses).

if you have email aliases, try this, user+1@gmail.com and user+2@gmail.com, the reciepient should see 2 emails if sent from outside the gmail network, but would be 1 if from within gmail (since email server may de-dupe)

What you are saying will be true if you are sending to an email list. (like google groups or opensource discussion groups)

sairamkunala··on GitHub was down
(copied over from other thread - https://news.ycombinator.com/item?id=23817794)

Github started doing availability reports. Last month's details in the blog post below with summary of the issue.

Stay tuned till next month for the current outage.

https://github.blog/2020-07-08-introducing-the-github-availa...

sairamkunala··on GitHub was down
They started doing availability reports. Las months details in the blog post below with summary of the issue.

Stay tuned till next month for the current outage.

https://github.blog/2020-07-08-introducing-the-github-availa...

sairamkunala··on Tell HN: Google drops blogspot.in, breaking hundreds of thousands of permalinks
source: https://support.google.com/blogger/answer/2402711?hl=en

but other country specific URLs current redirect to .com

Page 1 of 4Next →