HNHacker News
TopNewBestAskShowJobs

yabones

5,680 karma · joined February 15, 2019

submissionscomments
yabones··on In orbit you have to slow down to speed up
Forwards is up, up is back, back is down, down is forwards.
yabones··on Tell HN: Azure outage
DO has been shockingly reliable for me. I shut down a neglected box almost 900 days uptime the other day. In that time AWS has randomly dropped many of my boxes with no warning requiring a manual stop/start action to recover them... But everybody keeps telling me that DO isn't "as reliable" as the big three are.
yabones··on Avoid 2:00 and 3:00 am cron jobs (2013)
I put a little analog clock on my desk that's set to UTC time. It helps a lot with converting logs to get a quick reference.
yabones··on Summary of the Amazon DynamoDB Service Disruption in US-East-1 Region
Another great lens to see this is "Normal Accidents" theory, where the argument is made that the most dangerous systems are ones where components are very tightly coupled, interactions are complex and uncontrollable, and consequences of failure are serious.

https://en.wikipedia.org/wiki/Normal_Accidents

yabones··on Google flags Immich sites as dangerous
This is another case where it's highly important to "plant your flag" [1] and set up all those services like Search Console, even if you don't plan to use them. Not only can this sort of thing happen, but bad-guys can find crafty ways of hijacking your search console account if you're not super vigilant.

Google Postmaster Console [2] is another one everybody should set up on every domain, even if you don't use gmail. And Google Ads, even if you don't run ads.

I also recommend that people set up Bing search console [3] and some service to monitor DMARC reports.

It's unfortunate that so much of the internet has coalesced around a few private companies, but it's undeniably important to "keep them happy" to make sure your domain's reputation isn't randomly ruined.

[1] https://krebsonsecurity.com/2020/08/why-where-you-should-you...

[2] https://postmaster.google.com/

[3] https://www.bing.com/webmasters/

yabones··on UA 1093
Even a radar reflector would have helped a lot. ADS-B is off-limits for balloons, ultralights, hang-gliders, etc, and it seems like now that radio beacons can be manufactured very cheap & low power all those non-commercial aerial vehicles should be equipped.
yabones··on Ask HN: How to stop an AWS bot sending 2B requests/month?
Return a 200 with the EICAR test string in the body. Nothing like some data poisoning for some vindictive fun

https://en.wikipedia.org/wiki/EICAR_test_file

yabones··on DoorDash and Waymo launch autonomous delivery service in Phoenix
It's not inherently an American thing, it's the result of several mid-century zoning and urban design decisions.

I used to live in a 1920s era "streetcar suburb" neighbourhood. I lived on the third floor, and the ground level was a full (but small) grocery store. I never spent more than ~$50 at a time on groceries because I only bought for a couple days at a time.

The same decisions and laws that created the current system can be changed to take us back to the "norm" in the rest of the world.

yabones··on ASP.NET Security Feature Bypass Vulnerability
Note that this affects ".net core", not ".net framework"

https://msrc.microsoft.com/update-guide/vulnerability/CVE-20...

yabones··on A story about bypassing air Canada's in-flight network restrictions
I'm pretty "curious" when it comes to public networks. I'll scan coffee shops, stadiums, hotels, bus hotspots, anything I can connect to. Some networks are set up well, others not so much.

I would never in a thousand years run a sweep on an airplane network. That's massively risky, to the point you might never be allowed on a jet again. Anything to do with aviation I am on my absolute best behaviour.

yabones··on Cybersecurity training programs don't prevent phishing scams
It's a culture problem. The real solution is to teach people to trust their security department.

If there's trust and respect, they'll reach out without fear of reprisal and inform right away when there's a problem.

If there's a culture of punishment, they'll fear the IT gestapo and try to cover up mistakes that could cost them their job.

It really is that simple.

yabones··on Synology reverses policy banning third-party HDDs
Absolutely agree. I'm a huge fan of co-op type ownership structures for this reason. They might not be moonshots or unicorns, but they always have longevity.
yabones··on Some interesting stuff I found on IX LANs
An IX is the internet, or at least a small part of it. It's sort of a network where each device shares their "routes" with the others, and then propagates those routes back through their own network. They're exchanging their respective pieces of the Internet with each other.

The devices themselves are just routers, though much larger and more complex than what you'd see in a house or office. Instead of one route, "put all the traffic through eth0", they'll have hundreds, thousands, or millions of routes depending on their location relative to the "rest of the internet".

yabones··on How AWS S3 serves 1 petabyte per second on top of slow HDDs
The storage itself is probably (mostly) on HDDs, but I'd imagine metadata, indices, etc are stored on much faster flash storage. At least, that's the common advice for small-ish Ceph cluster MDS servers. Obviously S3 is a few orders of magnitude bigger than that...
yabones··on Privacy Commissioners find TikTok collected sensitive data from children
I hope that this is used to strengthen privacy laws. But I know this will be used as pretext to enforce dubious "age verification" like we've seen in other countries.
yabones··on Permeable materials in homes act as sponges for harmful chemicals: study
I've toured a '60s era Cold War diesel-electric sub that's been a museum for ~20 years, and it still absolutely reeked of diesel. Combine that with the smell of a couple dozen dudes that haven't showered properly in weeks, and your answer would be not good.

The long-term health outcomes are probably significantly worse for people that served in diesel subs than nuclear because of the constant exposure to fossil fuel volatiles. Just being in there for a 20 minute tour made me feel like I just smoked 20 cigarettes.

yabones··on One Token to rule them all – Obtaining Global Admin in every Entra ID tenant
One of the bigger issues is the double-hop problem. It's both an important security boundary, and one of the biggest butt-pains about the protocol.

https://techcommunity.microsoft.com/blog/askds/understanding...

It works great within a single organization hierarchy, but becomes pretty painful for anything we'd consider "SaaS"

yabones··on Samsung 870 QVO 4TB SATA SSD-s: how are they doing after 4 years of use?
SSDs are worth it to me because the restore and rebuild times are so much faster. Larger HDDs can take several days to rebuild a damaged array, and other drives have a higher risk of failure when they're being thrashed by IO and running hot. And if it does have subsequent drives fail during the rebuild, it takes even longer to restore from backup. I'm much happier to just run lots of SSDs in a configuration where they can be quickly and easily replaced.
yabones··on Matrix.org – Database Incident
> So: the matrix.org database secondary lost its FS due to a RAID failure earlier today (11:17 UTC). Then, we lost the primary at 17:26. We're trying to restore the primary DB FS (which could be fastish), while also doing a point-in-time backup restore from last night (which takes >10h). We believe the incremental DB traffic since last night is intact however. Apologies for the downtime; folks on their own homeserver are of course not impacted.

The stuff of absolute nightmares...

https://mastodon.matrix.org/@matrix/115136245785561439

yabones··on Matrix.org – Database Incident
Best of luck to the team at Matrix/Element for restoring from a nasty outage.
yabones··on Anthropic raises $13B Series F
You can take decades old fibre, stick some new transceivers on the ends, and have it run at the very latest speeds (unless it's cheap, damaged, etc) without having to pull it out and reinstall it.

H100s will not age this well. It's not like owning old railroad tracks, it's like owning a fleet of 1992 Ford Taurus's. They'll be quickly obsolete and uneconomical in just a few years as semiconductor manufacturing continues to improve.

yabones··on Toronto’s network of pedestrian tunnels
Expanding on the other comment, it's the mixture of snow, slush, salt, and loads of sand/grit that gets churned up by car tires into a brown and sticky slime. It sticks to boots, gets caked on cars behind the wheels, and gets tracked shockingly far into buildings. It's sort of like a "slushee" consistency but made out of nasty brown goo instead of corn syrup.
yabones··on Toronto’s network of pedestrian tunnels
More northern cities like Montreal and Winnipeg also have very interesting indoor pedestrian systems. The one in Winnipeg is particularly useful, since there are approximately 72 hours per year that it's comfortable to be outside between the bone-chilling cold and the biblical swarms of mosquitos and flies in the summer.

https://en.wikipedia.org/wiki/Underground_City,_Montreal

https://en.wikipedia.org/wiki/Winnipeg_Walkway

yabones··on Toyota is recycling old EV batteries to help power Mazda's production line
Mazda punches way above their weight when it comes to "moonshot" innovation over and over again. Few of them really "succeed" commercially (Rotary engine, miller-cycle engine, HCCI) but I respect them for constantly pushing the technology forward.

* https://en.wikipedia.org/wiki/Mazda_Wankel_engine

* https://en.wikipedia.org/wiki/Miller_cycle

* https://en.wikipedia.org/wiki/Skyactiv#Skyactiv-X

* https://en.wikipedia.org/wiki/Homogeneous_charge_compression...

yabones··on Show HN: Smart email filters to unfuck your email
So everybody else's newsletters go to trash except theirs?

https://github.com/stevenirby/unfuckemail/blob/master/filter...

yabones··on Red meat consumption within high-quality diets may support mental health
Surely this is just the link between financial well being (having enough money to spend on high quality food) and mental health? I guess "people with enough money to afford the food they want" isn't as catchy of a headline...
yabones··on It seems like the AI crawlers learned how to solve the Anubis challenges
My understanding is that it just increases the "expense" of mass crawling just enough to put it out of reach. If it costs fractional pennies per page scrape with just a python or go bot, it costs nickels and dimes to run a headless chromium instance to do the same thing. The purpose is economical - make it too expensive to scrape the "open web". Whether it achieves that goal is another thing.
yabones··on GitHub was having issues
The only thing worse than "it's down" is hearing "it's down again"

Godspeed, IR workers...

yabones··on Speedhunters was a car culture juggernaut
Automotive design really peaked between 1995 and 2010. Timeless "regular car" designs like the Panther body, the 4th gen VW's, the E46 BMW's, Astro vans, Ford Rangers, etc. I'm sure my late-millennial nostalgia is making me see the past with rose coloured glasses, but things really are dull today [1]. It was really the confluence of the right regulations, slowly increasing fuel prices making innovation necessary but not highly urgent, and value engineering still being primitive enough that nobody was quite ready to stomach stuff like CVTs.

Nowadays, manufacturers and dealers are taking advantage of emissions regulations to turn everything into a "light truck" or SUV, leading to the most bland and uninspired designs. A body used to be designed by one small team, now every panel has its own focus groups and the cohesive whole is completely lost. And of course, value engineering and simulation is so sophisticated that Nissan and Chrysler can make your engine blow up exactly 1,000 KM past the warranty interval.

[1] https://images-stag.jazelc.com/uploads/theautopian-m2en/whit...

yabones··on UK: Phone networks down: EE, BT, Three, Vodafone, O2 not working in mass outage
I wonder if it will be the same cause as the big Rogers outage in '22, a good old fashioned BGP botch.

https://www.reuters.com/business/media-telecom/rogers-commun...

https://en.wikipedia.org/wiki/2022_Rogers_Communications_out...

← PreviousPage 4 of 20Next →