HNHacker News
TopNewBestAskShowJobs

yardstick

2,199 karma · joined July 13, 2016

submissionscomments
yardstick··on AWS multiple services outage in us-east-1
It’s the Thundering Herd Problem.

See https://en.wikipedia.org/wiki/Thundering_herd_problem

In short, if it’s all at the same schedule you’ll end up with surges of requests followed by lulls. You want that evened out to reduce stress on the server end.

yardstick··on GOG has had to hire private investigators to track down IP rights holders
Special shout out to the No One Lives Forever (NOLF) series of Spy-parody FPS. Stuck in rights purgatory for 25 years now.

https://www.thegamer.com/no-one-lives-forever-the-operative-...

yardstick··on Does our “need for speed” make our wi-fi suck?
> many consumer devices suck wrt to wifi. For example, there seem to me ZERO soundbars with wired subwoofers. They all incorporate wifi.

Sonos has its issues, but I do need to point out that their subs (and the rest) all have Ethernet ports in addition to WiFi.

yardstick··on A story about bypassing air Canada's in-flight network restrictions
It’s been years but I’ve likely used NAT to redirect ICMP pings so the local firewall responds rather than whatever boat they were trying to reach.

Systems change - a server that once used to respond to pings may no longer do so, but client software may not be updated to stop doing pings before connecting to the actual service on the server. In an ideal world the client code would be updated, in practice: hello firewall.

yardstick··on A story about bypassing air Canada's in-flight network restrictions
I am sure someone will find a way to exfiltrate data using any ICMP type. How good are firewalls at validating the packets are legit?
yardstick··on Fernflower Java Decompiler
Why would one choose this over the original?
yardstick··on Grapevine canes can be converted into plastic-like material that will decompose
What about paper bags? In the UK retailers have to charge for single use plastic bags. Clothes retailers hand out strong paper bags for free, and charge for plastic.

Supermarkets charge for plastic bags. Paper bags for fruit and veg work well. They also provide quality reusable bags that cost a small amount (£1 or so), and people actually reuse them.

yardstick··on Cat Aquariums
Can’t the cat just sit directly beside the fish tank and watch?
yardstick··on RIP pthread_cancel
It’s been decades, why doesn’t getaddrinfo have a standardised way to specify a timeout? Set a timeout to 10 seconds and life becomes a lot easier.

Yes I know in Linux you can set the timeout in a config file.

But really the dns setting should be configurable by the calling code. Some code requires fast lookups and doesn’t mind failing which, while others won’t mind waiting longer. It’s not a one size fits all thing.

yardstick··on New Mexico is first state in US to offer universal child care
You can have a strong parent-child relationship while still using daycare.

Also people work due to other reasons unrelated to providing for their family. Individuals are allowed to have lives outside their kids.

yardstick··on New Mexico is first state in US to offer universal child care
Kids are social and like playing and learning from other kids. Daycare lets them do just that. It’s a great thing and every toddler I’ve met who wasn’t in daycare was behind in something. Especially verbal skills.

Plus daycare allows women to continue their career progression. It’s soo important. Not every woman wants to end their career as a mother to a young kid. Daycare enables successful women to thrive and still have families.

yardstick··on We should have the ability to run any code we want on hardware we own
Sounds like they are outliers. None of my banks are like this. Multiple countries and continents.
yardstick··on We should have the ability to run any code we want on hardware we own
Can’t you do banking on the web via your phone? Same as desktop users?
yardstick··on We should have the ability to run any code we want on hardware we own
Kill, not murder. If the country ends your life they are doing it under their authority, not outside their authority.
yardstick··on We should have the ability to run any code we want on hardware we own
I’m fairly sure the modem firmware on the Pixels was never open. There’s some hardware that will never have open firmware to it. Especially when that firmware deals with regulated airwaves like cell signals.
yardstick··on Beginning 1 September, we will need to geoblock Mississippi IPs
Seems like the solution is to bus in new residents if such a trial was needed.
yardstick··on NIST Finalizes 'Lightweight Cryptography' Standard to Protect Small Devices
CCTV doesn’t need rights management. Nor do advertising billboards.
yardstick··on NIST Finalizes 'Lightweight Cryptography' Standard to Protect Small Devices
The device doing the decryption may not be the same device that does the decompression.

Eg a small edge gateway could be doing the VPN, while the end device is decoding the video.

yardstick··on NIST Finalizes 'Lightweight Cryptography' Standard to Protect Small Devices
Security standards can move extremely slowly when the security of the incumbent algorithm hasn’t been sufficiently compromised, despite better (faster, smaller) alternatives.

Tech Politics comes into it.

yardstick··on Pentagon Pizza Index
Sounds about right.

Plus when it’s time to go Mutually Assured Destruction, ie to those capable of attacking the US mainland, I’m going to assume they would be doing all this from whatever the successor to Mt Weather is.

yardstick··on BGP.Tools: Browse the Internet Ecosystem
The pain of merging acquired company networks cannot be overstated!

IPv6 can help, but in my experience there's just soo much old IPv4 tech that no one is prepared to migrate to IPv6.

yardstick··on Use Your Type System
In my experience, the top level exception handler will catch all incl Throwable, and then inspect the exception class and any nested exception classes for things like SQL error or MyPermissionsException etc and return the politically correct error to the end user. And if the exception isn’t in a whitelist of ones we don’t need to log, we log it to our application log.
yardstick··on BGP.Tools: Browse the Internet Ecosystem
240/4 can be hijacked/used as private IP space currently by a lot of devices. I think Windows might be the hold out. But for internal routing and IoT it’s very useful. Can never be used as publicly routable space.

I’d like to see it added to the official list of private space alongside RFC1918.

yardstick··on Preliminary report into Air India crash released
The reasoning I’ve heard is: it didn’t matter anymore, the damage was already done and there was no way any attempts at recovering from it would have been successful.
yardstick··on Why SSL was renamed to TLS in late 90s (2014)
Would adoption of the new name been easier if the version started at TLS 3.0/matched the SSL version it originated from?
yardstick··on Frequent reauth doesn't make you more secure
It’s always interesting to hear other people’s approaches- Thanks for the insights!
yardstick··on Frequent reauth doesn't make you more secure
Presumably at some point in your environment you are doing MFA? Just not at every step?

Ie If someone broke into your office, opened computer, inserted the hardware security key, would they get in? Or is there something else non-physical going on? Like the initial login is password + security key, and you can demonstrate the ssh keys never leave the secured PCs etc.

yardstick··on Frequent reauth doesn't make you more secure
Not if they ask for the current password at the same time.

https://news.ycombinator.com/item?id=44265372

yardstick··on Frequent reauth doesn't make you more secure
PCI requires multi-factor auth these days, so you’ll likely find now the ssh password will be your password plus a OTP at the end.
yardstick··on World fertility rates in 'unprecedented decline', UN says
Yeah your original post didn’t state citizens.

It’s common for residents to receive free primary education for their children in most countries. Eg UK, AU, NZ, Canada all do. Work visa or permanent resident visa.

← PreviousPage 3 of 33Next →