HNHacker News
TopNewBestAskShowJobs

trelliscoded

397 karma · joined October 3, 2016

I do stuff with computers, networks, and security. I'm the laziest admin you'll meet. Clicking for hours in management interfaces is for suckers, I'd rather run a script. I'd rather all my coworkers run a script, too. Scripts for everyone!

I also do programming, especially embedded programming. Now it's called the "Internet of Things." Fortunately, the standards for security and reliability haven't changed that much relative to the history of embedded programming.

I am concerned that some customers are attaching things to the Internet of Things which should not be on the Internet of Things. Like cows. "Why can I not ping my cow?", one farm asks me. "Why did you put a cow on the Internet?!", I reply. They do not know, but Compliance says "because compliance," so now there's a cow on the Internet.

I am also concerned that NB-IoT is also going to be a thing in the near future. It's so cheap! It's so cheap, you can put cellular radios on all the things! Please do not do this. All the things do not need to run LTE stacks on energy harvesting SoCs forever and ever.

submissionscomments
trelliscoded··on Tell HN: UC Berkeley's CS61A/B/C are the best courses to learn CS and coding
CS61A in particular is important for understanding the nuts and bolts of how programming works. The people who tended to do well in the course had little prior exposure to specific programming languages outside the prerequisite class. I think that all the abstraction that other programming languages do get in the way of understanding why the languages made some of those design choices, which is why throwing all the abstraction out the window is important to understand what's really going on.

I'm reminded of an experiment I was told to do when I was learning how to be a better cook, and I complained that I didn't understand what bay leaf was adding to a dish. Someone suggested cooking some plain white rice with some bay leaf, and I could finally taste the peppery notes it added. Sometimes you need a neutral substrate to see the details of the thing you're trying to learn.

trelliscoded··on Ask HN: Who wants to be hired? (August 2023)
SEEKING WORK | REMOTE or HYBRID (Cupertino, Singapore) | DevOps Engineer | Rate: SEA Digital Nomad rates for ongoing customers

  Location: San Jose, CA
  Remote: Yes.  I travel around the Singapore area for an ongoing project, but I'm based in Silicon Valley and can do on-site or hybrid work in either region.
  Willing to relocate: For the right price.
  Technologies: {AWS, GCP, Azure} plumber. IaaC {Windows Server, Linux, NFV} administration. Bash, zsh, C, modern C++, JavaScript/node, Linux, Darwin, Win32/64, Python, Ruby, a bunch of other scripting and frontend languages.  Ansible, Terraform, CloudFormation, Jenkins.  SQL and Mongo, onprem, hybrid, and cloud.
  Résumé/CV: email if needed.
  Email: mackeycam25@gmail.com.
trelliscoded··on Ask HN: Freelancer? Seeking freelancer? (July 2023)
SEEKING WORK | REMOTE or HYBRID (Cupertino, Singapore) | DevOps Engineer | Rate: SEA Digital Nomad rates for ongoing customers

  Location: San Jose, CA
  Remote: Yes.  I travel around the Singapore area for an ongoing project, but I'm based in Silicon Valley and can do on-site or hybrid work in either region.
  Willing to relocate: For the right price.
  Technologies: {AWS, GCP, Azure} plumber. IaaC {Windows Server, Linux, NFV} administration. Bash, zsh, C, modern C++, JavaScript/node, Linux, Darwin, Win32/64, Python, Ruby, a bunch of other scripting and frontend languages.  Ansible, Terraform, CloudFormation, Jenkins.  SQL and Mongo, onprem, hybrid, and cloud.
  Résumé/CV: email if needed.
  Email: mackeycam25@gmail.com.
I'm an ideal DevOps, SRE, DPO, or compliance engineer, with a focus on automation to close the cloud-developer feedback loop for release reliability, compliance, security, and cost management. I know how the CI/CD system's deployment buttons work, and can add value to them. I build pipelines like a regular SWE uses if statements. I'm paranoid about security.

I've been doing DevOps since way before anyone called it that.

trelliscoded··on Ask HN: Who wants to be hired? (July 2023)

  Location: San Jose, CA
  Remote: Done it before, can do it again.
  Willing to relocate: For the right price.
  Technologies: {AWS, GCP, Azure} plumber. IaaC {Windows Server, Linux, NFV} administration. Bash, zsh, C, modern C++, JavaScript/node, Linux, Darwin, Win32/64, Python, Ruby, a bunch of other scripting and frontend languages.  Ansible, Terraform, CloudFormation, Jenkins.  SQL and Mongo, onprem, hybrid, and cloud.
  Résumé/CV: email if needed.
  Email: mackeycam25@gmail.com.
I'm an ideal DevOps, SRE, DPO, or compliance engineer, with a focus on automation to close the cloud-developer feedback loop for release reliability, compliance, security, and cost management. I know how the CI/CD system's deployment buttons work, and can add value to them. I build pipelines like a regular SWE uses if statements. I'm paranoid about security.

My background is unusual because I started as an embedded engineer, had network and system administration duties added, and finally learned how to do security by winning awards at some high visibility contests. There are lots of stories of me troubleshooting weird cloud problems across unrelated layers, because I've built every part of a product stack in my career, hardware and software.

I've been doing DevOps since way before anyone called it that.

trelliscoded··on Ask HN: Best search engine alternatives to Google?
you.com, drops you directly into a LLM response to your question, with search results on the right side.
trelliscoded··on Improved audio rendering with an optimised version of memcpy (2013)
Yes.
trelliscoded··on Improved audio rendering with an optimised version of memcpy (2013)
I know these products sound stupid, but Ethernet can insert a DC bias and repeat AC-coupled noise from other sources. This includes its own PSU. There are industrial Ethernet products that specifically address both these problems, because in a factory environment, both phenomenon can have practical consequences when there's motors and power electronics throwing around big magnetic fields. I imagine being near speakers with big drivers can also cause some of the same problems that would never be found in a typical desktop or datacenter computing environment.
trelliscoded··on Ask HN: Who wants to be hired? (March 2023)

  Location: San Jose, CA
  Remote: Done it before, can do it again.
  Willing to relocate: For the right price.
  Technologies: {AWS, GCP, Azure} plumber. IaaC {Windows Server, Linux, NFV} administration. Bash, zsh, C, modern C++, JavaScript/node, Linux, Darwin, Win32/64, Python, Ruby, a bunch of other scripting and frontend languages.  Ansible, Terraform, CloudFormation, Jenkins.  SQL and Mongo, onprem, hybrid, and cloud.
  Résumé/CV: email if needed.
  Email: mackeycam25@gmail.com.
I'm an ideal DevOps, SRE, DPO, or compliance engineer, with a focus on automation to close the cloud-developer feedback loop for release reliability, compliance, security, and cost management. I know how the CI/CD system's deployment buttons work, and can add value to them. I build pipelines like a regular SWE uses if statements. I'm paranoid about security.

My background is unusual because I started as an embedded engineer, had network and system administration duties added, and finally learned how to do security by winning awards at some high visibility contests. There are lots of stories of me troubleshooting weird cloud problems across unrelated layers, because I've built every part of a product stack in my career, hardware and software.

I've been doing DevOps since way before anyone called it that.

trelliscoded··on Ask HN: Why is there so little info on the web about IBM mainframe programming?
There's a ton of information on IBM mainframe programming, they're the IBM redbooks. They're all here:

https://www.redbooks.ibm.com/domains/zsystems

IBM's mainframes have some of the best technical documentation for any product line, anywhere, and if you can't find what you're looking for in the redbooks, the expensive support contract that you likely got with your z/Series comes with support that's sometimes described as... aggressive at solving high priority incidents with their internal support databases.

There's also the online manuals that come with z/OS, and you can get a free account via z Xplore: https://www.ibm.com/it-infrastructure/z/education/zxplore

You can also get a Linux LPAR on a s390x machine (LinuxONE, basically a regular mainframe with the processors fused to only run Linux) as part of the free tier on IBM Cloud.

That being said, most real-world deployments have a ton of other stuff running on top of the OS, usually from Broadcom and other close software partners, and dealing with those packages usually requires a support account with those companies as well. The applications themselves are very weird if you're not used to living in a mainframe environment. For example, you can get PKZIP for z/OS, and there is a 437 page PDF describing just the error messages alone.

Generally, learning how to get around in a mainframe environment requires working in a mainframe shop, nearly all of which are very mature and have converged on certain ways of dealing with testing, deployment, upgrades, migrations, etc. These procedures are usually not documented because they're simply well-understood by all the staff, or it would be dangerous for them to be working in the mainframe environment. Learning to use just ISPF, the closest thing z/OS has to a management shell, requires not only learning ISPF, but also all the installation-specific details for a given environment.

trelliscoded··on Ask HN: How do you manage AWS root MFA in a remote work environment?
I try not to handle my root account credentials. Everything on the list that requires root account access is pretty scary:

https://docs.aws.amazon.com/general/latest/gr/root-vs-iam.ht...

At one place, they gave them to outside counsel, and at another place they're in a safe that only the trusted company ops person has access to, and she isn't remote.

Generally, you should be breaking your footprint into different AWS accounts under an org with SCPs if you really need root account access for something, not sharing the credentials for the main account.

trelliscoded··on Show HN: Doxx Me – See how doxxable your phone number is
Holy cow, I added it to my Discover account, and it found all kinds of stuff that was publicly searchable. Thanks.
trelliscoded··on AWS us-east-2 outage
Replicating a huge database between AZs, let alone regions, can be an enormously expensive ongoing operational cost. Not everyone can afford it.
trelliscoded··on Ask HN: Anyone making software for kiosks, infotainments or similar?
In the industrial control world, they call these "HMIs", or human-machine interfaces. There used to be a lot of Windows CE on small SBCs with PC/104 (basically ISA) bus adapters for custom logic. The software was usually a normal GDI based Win32 application, using Windows CE's real time features either in app or in a separate thread/process to meet timing. QNX photon was also popular in applications that weren't cost sensitive (telecom switches, million dollar HVAC, 10 million dollar elevators, etc). The business model was usually a government contract, where we adapted existing in-house HMI libraries to a vendor's SBC mated to our proprietary control boards.

In between the reliability of consumer kiosks and a HMI, there are proprietary systems like Labview and GE Fanuc, which have the ability to create drag-and-drop GUIs for custom applications. I've built or modified a few of these for specialized factory lines, water/wastewater plants, or experiments under contract.

I've also built kiosks using Windows Embedded and Chrome on Raspberry Pi, for conventions as a volunteer, and for mass transit systems under government contract. The Miami International Airport monorail and portions of the BART airport extension both use these kiosks.

I want to emphasize that although web technology allows for extremely fast app prototyping, web browsers were by far the largest risk for all of these projects. Industrial control systems are expected to have 100% uptime, forever, period end of story, and in many cases are disconnected from the Internet and never patched. This is a very realistic expectation when the target system does not include a TCP/IP stack or even networking hardware (controls are done via RS-422 or a similarly deterministic bus), the total image size peaks at a few megabytes, there is no BIOS, and the bootloader is a jump instruction to a XIP image in memory mapped NOR flash.

On the other hand, in situations where a service contract is being pushed on the customer for business reasons, the Chrome+Raspberry Pi option is great because it breaks all the time. SD cards, even high endurance ones (I'm looking at a dead 32G Samsung HE card from a Helium miner right now) break for no reason, Chrome or Raspbian's WM throw up dialogs for irrelevant issues, uboot will sometimes not, and the HDMI transceivers between the Pi and the display will sometimes just refuse to talk. Don't even get me started on the USB touchscreen bits.

Despite what you might think, you don't need a web browser for infotainment or movie playing. All the major embedded frameworks include video, and if you really want to use web technologies there's node bindings for Qt and that kind of thing. Kiosks are fixed DPI, fixed resolution, fixed font systems, and there's no need to involve HTML, CSS, or any other dynamic layout technology.

trelliscoded··on OpenVMS 9.2 for x86 will be released tomorrow (2022-07-14), so exciting
Anyone who's worked with z/OS or OpenVMS's queuing and distributed execution facilities will tell you that there's no comparable open source solution, even if you start installing 3rd party software. The usual solution is to go buy a NetApp Filer to use NFS's distributed locking and storage, but NFS doesn't understand execution queues and there's no easy way to do things like buffer output to local storage temporarily if the cluster splits. Filers are also very expensive, whereas distributed shared storage is built into OpenVMS at the filesystem level.
trelliscoded··on OpenVMS 9.2 for x86 will be released tomorrow (2022-07-14), so exciting
It's an enterprise operating system. Nearly any feature you can think of that you would want in a large business is already built into the operating system. Clustering, applications built out of objects written in different languages, transparent network file support, automatic file versioning, backups, huge data sets, pervasive runtime performance and process introspection features, layered security, disaster recovery file set shadowing across the WAN, built in bdb2 like database, it's all there.

Unlike a typical Linux deployment, these operating system components were designed and tested as a whole, so the system tends to have little if any issues when dealing with unusual circumstances.

Enterprise deployments for things like factories, nuclear reactors, water plants, live cable TV stations, and 911 call centers require a level of stability that you can't get with things like RHEL or Windows.

I don't mean reliability, I mean stability. The Linux kernel is reliable, OpenVMS is reliable, but a typical Linux distribution is made up of a hundred components constantly churning on different release schedules, whereas it's normal to take a 20 year old Alpha binary written in 3 different languages and expect it to run on Itanium or x64 using an OS that's 2 major versions ahead.

Just like z/OS or NonStop, it's entirely reasonable to have deployments which never patch the underlying operating system, and even ones that do patch regularly do so on a far less frequent basis, with a well-defined procedure to canary the changes to avoid taking down production.

trelliscoded··on Ask HN: How many of you delibrately wear a watch that isn't a smart watch?
I have a Citizen Skyhawk and an Apple Watch, I frequently wear them both. The Skyhawk is basically indestructible, sets it’s own time via radio, and charges using solar power, so it’s a nice complement to the Apple Watch.
trelliscoded··on Eve Online fans cheer Microsoft Excel features at annual Fanfest
It’s absolutely worth it for the people you’ll meet playing the game. I’m in Iceland right now for the annual player meeting and it’s been a blast. Many alliances have internal tools which interface with the game and external crowdsourced market data, and it’s common knowledge that those tools are better than real world logistics software, so working on them is a great way to learn how to build relevant products.
trelliscoded··on Horrible edge cases when dealing with music
It's pseudomathematical nonsense. The Fji term might be a hint about the image hidden in the track when plotted on a spectrogram, but the rest of it doesn't make much sense. You can see the original title here:

https://i.discogs.com/YC8CLuli-NW3VB5z7eA9mALjnL2Qef4aGyDYH4...

As an example, why would the index of the last term be inverted like that? Maybe it's supposed to mean something phonetically, but I'm not a music person so I can't figure it out.

trelliscoded··on Ask HN: Is it reasonable to ban Windows OS from our workplace?
If you don't need Windows, or can sequester all your Windows stuff on some VDI, then sure. It gets easier every year. I ditched my last daily Windows driver a couple years ago and I don't even miss it for gaming since I can spin up a RTX enabled host on Geforce Now using pretty much everything I own with a processor in it.

However, in very large scale environments, I'm not sure the alternatives to Windows are quite mature enough yet to deal with the less common situations encountered there. M&A, localization, and offline access to files all come to mind.

trelliscoded··on I shaved 187MB off United Airlines' 439MB iOS app
They may be queued up in the jet bridge. I've been stuck inside one after the doors closed while we waited for everyone to get into the plane.
trelliscoded··on Ask HN: I'd like an OS/FileSystem that Never Deletes Anything. Does it exist?
S3FS with versioning enabled on the S3 bucket would be a pretty low friction way to implement this. You'd also have to enable cross-region replication to deal with your "backups" being in the same place as your working copies.

OpenVMS also has a versioning filesystem and a NFS server. The x64 version is available as a private beta, but it's not cheap.

Personally, I just keep most stuff in a Google Drive folder and important stuff gets the keep versions forever bit turned on. Everything else goes in a git tree and have some automation to clone it to a reliable utility server when the OS thinks there's plenty of bandwidth available.

It's worth noting that the Google Drive solution is the only one that I've been able to get to work reliably across Linux, macOS, Windows, Android, and iOS. I've tried OneDrive, Dropbox, and iCloud Files, but they all have various problems with conflict resolution, annoying upselling, or limited file type support for versioning.

trelliscoded··on The Unceasing Cessna Hacienda
There’s some memorabilia and artifacts from the flight, including one of the engine valves, at the flight museum in the pre security area at LAS airport.
trelliscoded··on Apple’s Secureboot private key leaked
I downloaded the package and there's no private keys in here. I have no idea why they're posting the public key as "proof" because private keys in PEM format start with -----BEGIN PRIVATE KEY-----, not -----BEGIN CERTIFICATE-----. The rest of it is firmware dumps for Mac SMC, the SSD controller, and various copies of iBoot.
trelliscoded··on I reverse engineered McDonalds’ internal API
A manager is doing it by hand. Their POS system has the ability to lock out individual items, and this information is available in real time to the server backing the mobile app (GMA).

The machines that I've seen don't have real-time telemetry, and are not networked.

trelliscoded··on Sectigo AddTrust External CA Root Expiring May 30, 2020
I o
trelliscoded··on Ask HN: Is your company sticking to on-premise servers? Why?
Zseries are a huge deal to move to the cloud; it’s just not worth the risk for most organizations.
trelliscoded··on UBSan ␇ Runtime
On the mac it opens a youtube video if you hit over 9000 undefined behaviors...
trelliscoded··on The U.S.'s $13B aircraft carrier has a toilet problem
Guess how much shipping is to the middle of the ocean. Go on, guess.
trelliscoded··on Tesla’s Futuristic Door Handles Blamed for Death in Fiery Wreck
I agree, something here doesn't make sense. I can think of multiple objects a typical patrol officer would have that could break the windshield.

I do think there should be built in fire suppression on high capacity lithium ion battery packs though; jet airliners have had the same technology for quite some time.

trelliscoded··on Ask HN: Is Anyone Using Oracle Linux?
Yes, ksplice plus free licenses in Oracle Cloud. Maybe plan to have heavy abstraction from the OS beforehand.
← PreviousPage 2 of 6Next →