HNHacker News
TopNewBestAskShowJobs

treffer

944 karma · joined December 5, 2010

submissionscomments
treffer··on Breaking BIOS: enabling VT-x virtualization support on Acer Aspire One netbook
oh well, I thought the same, but got curious because the framework laptop would be way nicer with an open UEFI...

Vendors burn a key into the system which prevents loading an unsigned BIOS. This is a one-time-programmable fuse (OTP fuse) and part of Intel BootGuard protections.

You get a laptop with _fused burned_ to prevent loading other firmware to your device. Booting won't work if you load a replacement SPI chip with anything but a vendor-signed firmware.

treffer··on Finding an SBC
I like geizhals.eu for these things.

Ethernet ports >= 0,1,2,...

10Base-T ports >= ....

You end up with quite a few filters, but it gives full flexibility to search for e.g 5 1GBit ports with 1 10Gbit sfp+ port.

treffer··on Crypto exchange AAX suspends withdrawals
Well, run a full bitcoin node. I am doing thwt.

It's close to just running your own email / fileserver etc. IMHO.

So while possible it's also annoying and not worth it for most people, and I get that.

treffer··on Block web scanners with ipset and iptables
That is actually cool, it is a tarpit for these bots!

On a well configured site the LB timeouts should be short enough anyway.

But it is a risk, especially on classic DOS attacks.

treffer··on Meta lays off 11,000 people
At least the last sentence reminds me of "The hard thing about hard things".
treffer··on Containers are chroot with a Marketing Budget
> So git is to github as (chroot/cgroups/unionfs) is to docker et all?

You could do docker-alike runtime things with lxc and e.g. squashfs filesystems. That is IMHO a good signal to say it's not the tech.

I see it more as developer workflows. Github looked at git and LKML working model and put that into a centralized UI. The revolution was individual contribution (not teams) and personal repositories. (Does anyone remember the other scm hosting tools before? I remember running some open source sorceforge alike thing)

Docker took all the pieces before you could run a container and made those easy to achieve (building, sharing, pulling, ...).

That's developer workflows.

treffer··on Will Twitter outlast this lettuce?
I think there is more to it.... They will probably require a non-anonymous credit card and if things line up you are verified.

So it is probably +$8/month -75% of the cost of that feature.

"Pull out your credit card and pay" is a nice anti-spam feature and verification is a bank duty anyway. So it is pretty likely that any abuse can be pushed down to the person doing the impersonation.

Plus it is most valuable to brands (even personal brands), so $8/month isn't much.

treffer··on UK Government scans all web servers hosted in the UK for vulnerabilities
Scanning only needs to know the potential ips, not the active ones.

And you might be interested in the ip space of all UK entities.

If you put it this way then the problem becomes way easier. Just check public ip databases for AS and technical contact.

treffer··on Rakuten Mobile is replacing Red Hat as its Linux OS supplier
Which are in large parts RH/IBM open source projects, too
treffer··on GNU Make 4.4 released
The GNU make manual is well written and worth a read: > https://www.gnu.org/software/make/manual/make.html

My last workplace was very Makefile heavy and I used that as an excuse to read it. 10/10, would recommend/do it again.

treffer··on Ask HN: What piece of code/codebase blew your mind when you saw it?
For codenbases... Objectweb ASM blew my mind.

It's a library to read/write java class files. The core at that time would fit into 2 java files.

It was a reader and a writer built around a visitor pattern. At that time apache bcel was also big, a library to build in-memory class file representations which you would then manipulate. ASM allowed you to do many transformation without ever holding the whole file in memory.

ASM also had an in-memory representation as an add-on. It was all nicely layered and the core was just a marvelous small piece of code, with incredible low memory consumption.

treffer··on Electric scooter ban increased congestion by 10% in Atlanta
As you say it is technically the solution.

It is also not like car infrastructure would turn into non-existance. It most cases all that happens is reuse. Playing fields. Pedestrian areas. Bike lanes. Bus lanes. Bike areas.

The only common thing is they all cist car infrastructure space. This is the common ground. The reallocation of that infrastructure and space is a different story.

I have yet to see a case where it didn't pass people off no matter what the future use was. So even if technically the other framing should be different I have not seen a case where it makes a difference. All while seeing that even pure car infrastructure blockage makes a difference.

treffer··on How I make a living working on SerenityOS
Germany, IANAL but was curious because I've seen it differently here: "donations" that are clearly not tax deductible, the only real test for that wird in some sense.

Lawyer Google tells me donations are just money gifts. Some organizations that are approved can hand you a recipe that allows you to tax deduct it. And I think those organizations also don't need to pay taxes on it.

TIL. Not sure how well that resonates in Sweden though.

treffer··on Oracle Contributing GraalVM Community Edition Java Code to OpenJDK
There was a java implementation of a JVM, jikes rvm.

I haven't looked at it for ages and looking at Wikipedia it seems dead, so curious if there is any newer attempts....

treffer··on ProjectM: LGPL Reimplementation of Ryan Geiss' Milkdrop from Winamp/Kodi
Have you ever thought about bringing that to life?

I had looked into an older version of projectM and the logic is pretty simple overall: use the current frame as a texture and render it to a slightly distorted grid. Then render a new wave on top.

The grid distortion causes all the motion. But the distortion is static over the lifetime of the animation.

A bit more is needed to make it look decent but this was the main loop iirc. A few hundred lines of OpenGL code.

Geiss looks nice, I think it needs more variation on the frame projection and wave drawing.

treffer··on Ask HN: What Is the New PC?
IOT/SOC/SBCs.

No matter how you turn it. Apple? SOC/SBC. VR? The hardware is agin that. Phones. Laptops. Watches. Game consoles.

I would expect most electronics to move from microcontroller level to some sort of computer. The question is more where it sticks and provides value.

The toolchain is getting better by the day, even for hobby stuff. I am now used to send kicad stuff off for manufacturing. 2 weeks and I get a PCB back. Platformio removed the tool chain madnesses.

My son now wants to build a game console now. I might do that with him, for the joy of it.

I think the future will need peopke who can make physical digital things again. At a way bigger scale.

That and the new ML waves, but I don't think this will work well for kids.

treffer··on Eierlegende Wollmilchsau (2011)
That would,imply outcomes on all dimensions....
treffer··on Knuth's Art of Computer Programming, V 4B, has gone into print
TAOCP is the encyclopedia of algorithms. It is usually not something you read front to back.

I have so far found 1-2 references that I could otherwise not decode, plus wanted to know about n-way sorting.

And that's how I would recommend to use it. I have it on my shelf to pull it out if I have to. Which is rare but it does happen. And as such it proved value to me, on the job, as I know how to get into these things as needed. But it has a similar insane price to usefulness ratio as an encyclopedia.

What I've done so far? Everything from Sysadmin to DevOps to Engineer (data heavy) to SRE to Data Engineer.

If you want to learn DSA then you should probably start with something that goes less deep, is less complete but covers useful algorithms from many areas.

treffer··on Google Adsense/Admob blocks you for life if you use it before you're 18
Got banned from Amazon on my first purchase. For some reason the payment bounced even though everything should have been fine (correct payment details, enough money in the account etc).

Complained and got unbanned.

AWS has even a notary(!) based process to recover accounts.

It is pretty normal to recover bad things on non-Google sites by getting a human into the loop, especially if money is involved.

treffer··on We reduced our server costs by moving away from AWS
This is my favorite joke.

Is the issue big data or small machine?

Memory size of the largest AWS/GCP/... instances is a good indicator for small machine.

It doesn't mean I would go for the large machine. It just means I won't subscribe to "big data" as a reason to do X.

And it forces me to recalibrate this boundary regularly. Looks like double digit TB is currently the memory boundary for renting. I was still on the single digit TB train.

treffer··on Okta Exposes Passwords in Clear Text for Possible Theft
I have been administering things when I started my career.

I would have loved to not sync passwords this way, but there is often no support for that, and okta is really not at fault here.

SSO is an enterprise feature, if available at all. And most of the time we are left with some sort of password sync. It's horrible. And this is why I sympathize with okta here: what should they do? Not support shitty usecase X?

Sure, enabling this should probably have a 24h cooldown and several safety nets. But I think this is not on okta in this case.

treffer··on The Framework Laptop Chromebook Edition
I have a 11th gen frame.work.

1. Could I swap mainboards to upgrade the 11th gen framework to the chromebook version? 2. Is the coreboot chip flashable with custom firmware? / Is the boot process locked?

This might well be the mainboard I've been waiting for. Congratulations on shipping this!

treffer··on An X11 apologist tries Wayland
Huh, I am on Ubuntu 22.10 (current dev) and changed the track pad speed yesterday. I think it was part of the regular mouse settings in gnome.
treffer··on Ask HN: Do you still buy physical tech books like “Learn Rust” or “Learn Go”?
I still buy non fiction books like this but mostly for others.

I usually read the ebook. Once done I put the hardcopy on my bookshelf.

Then whenever someone might need one of these I lend it out.

The books I know have helped others: Venture Deals, Crucial Conversations, The hard thing about hard things, The GO programming language, Seeking SRE, Site Reliability Engineering and many many more.

I am also always happy when a book returns and you can see some wear. It makes me smile.

treffer··on Serving a high-performance blog solely from memory, using Rust
Website title: My Blog is Hilariously Overengineered to the Point People Think it's a Static Site

Seeing the initial comments here I think it would be better to go with the original title.

treffer··on Why A4? – The Mathematical Beauty of Paper Size
From the article: A0 is designed to be as close to 1m² as you can get with whole mm side lengths.

As such A1 is 1/2 m², A2 is 1/4 m², A3 1/8 m², A4 is 1/16 m².

I would call this tied to the metrics system. It never occurred to me that I could approximate odd 1m² areas with 16 sheets of A4... I found this enlightening from the original article. TIL.

treffer··on Weezer's Lead Singer is still strong coding
Well, intel ships a tool that tells the OEM that this is a misconfiguration from a secure boot configuration POV.

Linux fwupdmgr can be used to verify the secure boot status and you will fail HS2 if this is not fused.

Also.... would be happy to know who doesn't fuse it on newer machines. And even coreboot does not mean you can flash your own. You can have a lockdown where you can only load the OEMs coreboot.

treffer··on Weezer's Lead Singer is still strong coding
Well, I thought so. But then I looked at the 11th gen that I have.

The BIOS is signed by a key, and the hash of the key is fused into the HW.

Anything 11th gen or newer locks libreboot or coreboot out.

Search for FPF OTP FUSE. It is an interesting topic. I want to drop intel ASAP due to this.

treffer··on Ask HN: Is there a developer laptop that does not suck and is not a Mac in 2022?
As far as I understand that's an Intel thing. They deprecated it and it is not allowed for high security devices.... (I thibk HS3 profiles?)

I have one of those DELLs for work. Don't.

treffer··on AWS switch from gzip to zstd – about 30% reduction in compressed S3 storage
Ah, I thought you meant that it is a waste to do it, but yeah, most of the time a heuristic makes sure you don't waste anything
← PreviousPage 5 of 8Next →