HNHacker News
TopNewBestAskShowJobs

twistedpair

1,959 karma · joined December 5, 2012

Found in Boston proper. Diehard distance runner.

Strict over Duck typing. Funct over Imp coding.

Async over Blocking. KV over ACID.

Keeps BigData humming.

submissionscomments
twistedpair··on AT&T's website raising the price every time I refresh the page
Used to be checkouts for things like hotel wifi passed the price as an unvalidated URL param. All you had to do was change `&price=9.99` to `&price=0.01` and you got cheap wifi.
twistedpair··on Wolfenstein 3D secrets revealed by John Romero in lengthy post-mortem chat
Read "Masters of Doom"

To solve a new problem space, Carmack would buy a bunch of college text books, then check into a rando motel for a few weeks, and just dissect all the topics and books, until he'd come up with the design of, for instances a new ray tracing engine.

Crazy smart, focuses, and talended.

twistedpair··on Hackers claim to have breached Okta systems
Touche... CF SIRT is an a well oiled machine [1]

[1] https://blog.cloudflare.com/cloudflare-investigation-of-the-...

twistedpair··on Updated Okta Statement on Lapsus$
DPL scanners in Slack, anyone? Figured Okta would definitely have those.

We get alerts when folks are sharing tutorial code with fake keys like DEADBEEF in them. It's nice to know DPL works, if you use it.

twistedpair··on Hackers claim to have breached Okta systems
Wildcard domain much?
twistedpair··on Hackers claim to have breached Okta systems
That was a pretty rapid response from CF though, are we sure they didn't know ahead of today? How long did they have to determine "no evidence" before making a public statement about it?
twistedpair··on Hackers claim to have breached Okta systems
Pre-market trading is already -9% (was -14.5% before that tweet).
twistedpair··on Hackers claim to have breached Okta systems
I think there's a fair amount of correlation here, rather than random events. CISA has been warning everyone to gird for attack for months now.
twistedpair··on Hackers claim to have breached Okta systems
Lawyers, especially external council, are about to have a windfall. Sweating? More like they're drooling.
twistedpair··on Please put units in names
If it was a Google product, it's implicitly Pacific Standard Time.
twistedpair··on Updates to Google Cloud’s infrastructure capabilities and pricing
Durability is great, but availability is also crucial, unless your business can tolerate hours or more of availability outages.

Let's say us-central1 is down for some reason (has happened a number of times), but your customer workloads need to keep running uninterrupted, so you fail over to us-west2. Where should your customer files, that need to be read/written for the customer workloads, be written then? If you kept them all in the region that's on the fritz, you've got upset customers, broken SLAs, etc.

twistedpair··on Updates to Google Cloud’s infrastructure capabilities and pricing
> Wanted to add another option to ushakov's comment: KNative (which is actually what CloudRun is built on).

And GCF v2 is running on KNative on Cloud Run... turtles all the way down.

twistedpair··on Updates to Google Cloud’s infrastructure capabilities and pricing
Not sure about your usage model, but if you have a defined retention for customer data (e.g. 1 year), then you can start pushing new data to a different tier/cloud provider, as the old data drops off, and a year later, you're completely "migrated", without having to stage a stop the world migration between services.
twistedpair··on Updates to Google Cloud’s infrastructure capabilities and pricing
Just gunning for the enterprise.

Who cares about DR, and having 3x copies of your data 100mi apart from each other? Small startups, or Enterprises? Enterprises can just push those costs to their DR budget.

twistedpair··on Updates to Google Cloud’s infrastructure capabilities and pricing
To be clear, looks like GCP is disincentivizing:

- Using multi-regional storage (used to be a 30% premium, now much more)

- Making lots of object writes (Class A) vs lots of reads (Class B)

So, if you can:

- Move to regional or dual-region (NAM4) storage

- Snowball your writes into bigger overall objects, <3 immutability

- Keep your data in the same region as access

Then you can reduce the impact here.

They are also closing the Coldline/Nearline loophole, where you could use a bucket lifecycle policy to keep your objects in Standard (cheap access) for a few weeks/months, and then move them to a cheap long term storage tier (Nearline/Coldline), because that move is another Class operation, that just got a lot more expensive. This is inline with two years ago when they quietly moved lifecycle operation pricing from the origin service tier (e.g. cheap Standard storage) to the destination tier (e.g. much more expensive Coldline), cutting down on the savings of tier jockeying.

twistedpair··on Updates to Google Cloud’s infrastructure capabilities and pricing
Much the opposite. GCP's names are painfully transparent and banal. No need to look them up, you can tell what they do from their names (which are proper nouns, so it's clear they're a service name)

- Cloud Logging - stores logs

- Google Compute Engine - VMs, compute

- Cloud Monitoring - stores metrics, monitors stuff

- Cloud Storage - stores stuff

- Google Kubernetes Engine - runs Kubernetes clusters

- BigQuery - runs multi-billion row queries with ease

- Cloud Functions - FaaS run time

Now sure, Cloud Spanner is a DB, without DB in the name, so you'll have to read the docs for a few seconds, but let's compare that to Cognito (brains?), X-ray (medical imaging?), Kinesis (something to do with mitosis?).

twistedpair··on Updates to Google Cloud’s infrastructure capabilities and pricing
As a power GCP user, I see them running UX studies all the time. Having been using GCP for the last decade, the UX updates feel like day and night changes. Frankly I find the AWS console a lot creekier.
twistedpair··on Updates to Google Cloud’s infrastructure capabilities and pricing
It would be nice if most of Google ran off GCP, but alas, few marquee Google properties run on GCP. Ever notice how Google search, GMail, etc are usually just fine during a GCP outage?
twistedpair··on Updates to Google Cloud’s infrastructure capabilities and pricing
> For all other storage classes, Class A operations pricing in multi-regions and dual-regions will increase to be double the Class A operations pricing in regions.

This is the real impactful change. This is for ALL STORAGE CLASSES, not just Coldline. As someone who manages billions of objects in GCP, I know very well that each of those object write is a Class A operation, so 2x in price.

Also keep in mind that anyone storing objects durably (DR, anyone?), e.g. your customer data, is using multi-region, so this is a notable cost impact.

Note that there is a curious inflection point where, the Class A/B operations on an object cost _more_ than the (bytes) storage cost, depending how long you retain the data. That's where this is very impactful.

Annual multi-regional Standard _storage_ cost for a 19MiB object

e.g. 0.026 $/(GiBmo) 12 mo/yr * 19 MiB/yr = 5.95E-06 $/yr/obj

Annual multi-regional Standard storage cost for an object that you 1x write (A), and 2x read (B).

e.g. 0.05/1e4 $/A req + 2 * 0.004/1e4 $/ B req = 5.80E-06 $/yr/object

Here we see that the old annual "storage" carrying cost for this 19MiB object was less than the "request" cost. Now double the cost of the operations and you should consider storing fewer, bigger objects.

twistedpair··on Slack is down for some users
Requiring GitHub to deploy your code to prod... goodness no.

Using, highly available, deterministic artifacts, that can be rapidly deployed or reverted from production is what we do.

twistedpair··on Slack is down for some users
Reminds me why we intentionally avoided tying core biz/dev workflows to Slack. :)
twistedpair··on AWS S3: Sometimes you should press the $100k button
This is where GCP's GCS (Google Cloud Storage) shines.

You don't need to mess with prefixing all your files. They auto level the cluster for you [1].

[1] https://cloud.google.com/storage/docs/request-rate#redistrib...

twistedpair··on AWS S3: Sometimes you should press the $100k button
Honestly this is when most folks move to using their own dashboards, metrics, and tooling. The AWS GUIs were designed for small to moderate use cases.

You don't peer into a bucket with a billion objects and ask for a complete listing, or accounting of bytes. There are tools and APIs for that.

That's what I do with my thousands of buckets and billions of files (dashboards).

twistedpair··on Peloton replaces CEO and lays off 2,800 people
Schwin IC4 spinning bike $700 New Kindle tablet $40 YouTube $0

Has been working like a charm for years now. Feel fancy, just BT to connect the Peloton app to the bike if you want to attend an actual class.

Note, that's a nice bike, you can get no name bikes from Amazon for $150.

twistedpair··on Peloton replaces CEO and lays off 2,800 people
Really handy to dial in when you can (long drive on a Friday afternoon) so you don't break the bank on your mobile data. Unlimited free talk minutes... woo!

Oddly, various VC tools I've used with dial in properly map the caller unique pin code to the calling user.

twistedpair··on Bittersweet Symfony: Devs accidentally turn off CSRF protection in PHP framework
Gotta have those belts and suspenders.

So many PRs people ask, why should we add protective measure X, when we already have protective measure Y? Defense in depth, my friends.

twistedpair··on A pipe operator for JavaScript: introduction and use cases
I <3 Scala a great deal. Wrote it professionally for years and did just as you suggest; set rules about what patterns were acceptable and not. Regardless, the common critique against Scala is that of an impenetrable haven for type astronauts, such as the Admiral Ackbar operator.
twistedpair··on A pipe operator for JavaScript: introduction and use cases
The slippery slope toward Scala's operator madness. Much of the value of a language can be its simplicity and grokability by typical devs. Please find a sensible stasis.

Checkout this list of new JS/Node.js features [0] as an example.

Will a world with the following be an improvement? [1]

• ??=

• ||=

• &&=

And don't forget the strife around the Python "walrus operator" := [2]

[0] https://node.green/

[1] https://github.com/tc39/proposal-logical-assignment/

[2] https://realpython.com/python-walrus-operator/

twistedpair··on A pipe operator for JavaScript: introduction and use cases
The slippery slope toward Scala's operator madness. Please find a sensible stasis.

Checkout this list of new JS/Node.js features [0] as an example.

Will a world with the following be an improvement? [1]

- ??=

- ||=

- &&=

And don't forget the strife around the Python "walrus operator" := [2]

[0] https://node.green/

[1] https://github.com/tc39/proposal-logical-assignment/

[2] https://realpython.com/python-walrus-operator/

twistedpair··on Counter-intuitive results in operations research
I wish the fallacy of induced demands and its knock ons were accepted common knowledge, but alas I'm always disproven. People always complain that "it's so hard to get your section of town" when the visit. We know that. We don't widen the roads, or built new ones, because we know exactly what that will lead.

Relish your steady state.

← PreviousPage 3 of 27Next →