HNHacker News
TopNewBestAskShowJobs

ymse

1 karma · joined December 26, 2022

submissionscomments
ymse··on Samsung ships the world's highest capacity SSD, with 15TB of storage
It takes 8 hours 20 minutes to write 15TB over 500MBps. Why would you want to stick one of these in a RAID though?

..it would be more like Redundant Array of Prohibitively Expensive Drives.

(I'll show myself out)

ymse··on Show HN: Sensible Bash: An attempt at saner Bash defaults
Minor nitpick: why is the session history larger than the maximum file size?

It always annoyed me that HISTTIMEFORMAT is not set by default. Without it, log entries are simply not timestamped at all.

The readline tweaks were news to me, thanks.

ymse··on Hacker News CSRF Vulnerability
Would this still work with 3rd party cookies disabled?

In the years I've used uMatrix[0] I can't remember a single case where sending a cookie with a 3rd party request was needed. Why do browsers do this still?

0: https://github.com/gorhill/uMatrix

ymse··on XtreemFS – Fault Tolerant Distributed File System
How does Quobyte compare to Ceph?

Edit: From the product page the main advantage seems to be end-to-end checksums and an adaptive placement engine.

Architecture and performance comparisons would be very interesting, though I understand if you can't disclose that yet.

ymse··on Insecure by design: protocols for encrypted phone calls
> If I'm reading this right then they basically have access to all 3G/4G data and they do so in a way that cannot be detected.

How did you reach that conclusion? While probably true, this article merely (poorly) describes how GCHQ "improved" on another backdoored encryption standard by making snooping impossible to detect.

This is only a thing because GCHQ has started certifying software and supporting the MIKEY-SAKKE protocol is a hard requirement.

ymse··on What future for BT and the UK's broadband?
I recently changed ISP and told them the copper line was part of the broadband package with my previous ISP (for an extra £10/month) and was assured everything was fine.

One month after the transfer, Openreach ceases the PSTN line and the reaction from my new ISP was "well it's your responsibility to keep up your BT subscription" (never had BT).

Two weeks later, the PSTN line is still dark, and I'm waiting for Openreach to install a new MPF line provided by my current ISP (for an extra £10/month of course).

Apparently the reason for doing this rather than re-start the PSTN line is part of a process called "Local-loop unbundling".

https://en.wikipedia.org/wiki/Local-loop_unbundling

ymse··on Asus lawsuit puts entire industry on notice over shoddy router security
Shibbys builds are still going strong (though two months since last update).

http://tomato.groov.pl

I used Tomato (various flavours, including this one) for a long time until finally succumbing to OpenWRT.

The web interface is lacking compared to Tomato, but in return you get a recent LTS kernel built with the latest GNU toolchain and a superb package manager + collection.

OpenWRTs CLI config system is very slick, the web interface just doesn't yet hook into all possible settings (which may vary between devices).

ymse··on Apple Is Said to Be Working on an iPhone Even It Can’t Hack
That brings to mind this classic..

Today, we celebrate the first glorious anniversary of the Information Purification Directives. We have created, for the first time in all history, a garden of pure ideology—where each worker may bloom, secure from the pests purveying contradictory truths. Our Unification of Thoughts is more powerful a weapon than any fleet or army on earth. We are one people, with one will, one resolve, one cause. Our enemies shall talk themselves to death, and we will bury them with their own confusion. We shall prevail!

https://www.youtube.com/watch?v=R706isyDrqI

They should re-run this commercial for iPhone 7. "On September 24th, Apple Computer will introduce iPhone 7. And you'll see why 2017 won't be like 1984."

ymse··on Linux kernel bug delivers corrupt TCP/IP data
This reminds me of a similar problem observed in a distributed file system. Eventually it was tracked down to a single bad network card. Why do you think it was a kernel issue? Hardware has "bugs" too.
ymse··on AWS and Zombies
Openstack effectively has become a "zombie" project. Four years on, it's (still) an overly complex mess that keeps breaking in inexplicable ways.

The board of directors[0] consists of people that all work for companies that sell turnkey cloud solutions that are very different from the open source Openstack. Up until recently even a VMware (later EMC) employee was there for whatever reason. Yeah, no conflict of interest there.

Openstack on its own is practically unusable unless you have an army of sysadmins ready to challenge the myriad of bugs and complex interaction of components. The only successful open-source deployments I know of is CERN (and possibly NASA) who are tailoring it for their specific use cases through a large engineering effort. If you're a small IT shop or otherwise low on resources, it's not worth the investment, and probably never will be.

Meanwhile companies like Mirantis, HP and Redhat keeps hailing Openstack as a true open source project in the hope that people will install it and come crying to them when it (guaranteed) breaks in multiple, mysterious ways.

Oh, and you have a broken hypervisor? Have fun looping through the MySQL (cluster edition!!) tables and migrate each VM one-by-one with the "nova" command. The "evacuate" button in the (terrible) default web interface does not do what you might expect (if you've ever used a proper virtualization solution).

The combined length of the Nova, Glance, Cinder and Neutron config files are 9451 lines (actually python code). Not including the various ini and JSON files, neutron plugins, and the settings stored in the database.

Source: worked with Openstack for a year, fought dozens of production-breaking bugs and race conditions and still don't have a stable product. About 30% of VMs will just fail during creation in various ways. CERN allegedly just keep retrying until it succeeds..

As many of the other poor souls who threaded the Openstack waters, we are actively exploring alternative solutions. Sadly we already have people using it, so we are forced to support it while figuring out what to do instead.

0: https://www.openstack.org/foundation/board-of-directors/

ymse··on Show HN: I've been writing daily TILs for a year
Lots of good stuff here. I would appreciate a wiki-style site with short answers like these instead of searching {Google,DDG} and trawling the [stackoverflow] results.

Not all of them are necessarily good practice though. This made me chuckle:

What Is The Current [Git] Branch?

    git rev-parse --abbrev-ref HEAD
(if you're reading this jbranchaud, try `git branch` :p)
ymse··on January 28th Incident Report
I'm going to guess that these are Dell R730xd boxes with PERC H730 Mini controllers (LSI MegaRAID SAS-3 3108).

A failed/failing drive present during cold boot could cause the controller to believe there were no drives present. To add insult to injury, on early BIOS versions this made the UEFI interface inaccessible. The only way to recover from this state was to re-seat the RAID controller.

There were also two bizarre cases where the operating system SSD RAID1 would be wiped and replaced with a NTFS partition after upgrading the controller firmware (and more) on an affected system (hanging/flapping drives). Attempts to enter UEFI caused a fatal crash, but reinstall (over PXE) worked fine. BIOS upgrade from within fresh install restored it.

From the changelog:

    Fixes: 
    - Decreased latency impact for passthrough commands on SATA disks
    - Improved error handling for iDRAC / CEM storage functions
    - Usability improvements for CTRL-R and HII utilities
    - Resolved several cases where foreign drives could not be imported
    - Resolved several issues where the presence of failed drives could lead to controller hangs
    - Resolved issues with managing controllers in HBA mode from iDRAC / CEM
    - Resolved issues with displayed Virtual Disk and Non-RAID Drive counts in BIOS boot mode
    - Corrected issue with tape media on H330 where tape was not being treated as sequential device
    - resolved an issue where Inserted hard drives might not get detected properly.
ymse··on Ask HN: Who is hiring? (February 2016)
Oops, sorry, thanks for catching that! That website is terrible. Apparently the actual listing was stored in my cookie when I was trying to shorten this abhorrent URL: https://atsv7.wcn.co.uk/search_engine/jobs.cgi?amNvZGU9MTUzM...
ymse··on Ask HN: Who is hiring? (February 2016)
Birmingham, UK | ONSITE | Full time | System administration/devops/SRE

CLIMB (http://climb.ac.uk) aims to build a leading cloud platform for microbial bioinformatics. You will be a core part of our small development team and able to shape the project from its humble beginnings.

The project is a collaboration between Birmingham, Swansea, Cardiff and Warwick universities and this position is based in Birmingham. Our current platform includes Openstack, Ceph, GPFS, Vyatta, Salt and xCAT, but we are also looking at other technologies such as Docker/rkt, Nix/Guix and Ganeti.

Experience with managing a large Linux infrastructure and a strong understanding of networking is essential. This is a research project in its early stages, so your participation will have a big impact on its future.

For more information and application form: https://atsv7.wcn.co.uk/search_engine/jobs.cgi?jcode=1531527...

ymse··on Decentraleyes: A Firefox addon to prevent tracking via free CDN providers
uMatrix offers more granularity. You can choose exactly what each third-party site can do in terms of cookies, CSS, images, plugins, javascript, XHR(!), frames and media (audio, video, pdf, etc).

After years of using uMatrix (formerly HTTP Switchboard), many sites "just works" wrt Youtube, Vimeo and similar even without first-party javascript enabled.

I've considered sharing parts of my global ruleset so others can just copy-paste the sections/sites they want to whitelist without having to discover what's required themselves.

ymse··on Get HTTPS for free
3 months expiry time was a deliberate choice to force users to automate the process. Ideally you would have a central store with a letsencrypt client, and all your actual web servers periodically fetch their certs from there.
ymse··on Why use www?
It only matters if you intend (or require) to CNAME your main site off to some other DNS name. If you're serving your entire site from S3 for example, you can't just alias yoursite.com to your-bucket.s3.amazonaws.com, but you can CNAME www.yoursite.com and have a small server sitting on yoursite.com sending a 301 redirect for every request.

Github and Twitter are large enough to not care. And if you're using something like Cloudflare, they can just take over your IP address with BGP, no DNS trickery needed.

I've worked a sysadmin for more than 10 years now, and never realized that it's not possible to CNAME the domain root. It's good to keep in mind, but in most cases there are other workarounds.

This is also why "naked domains" set up a whole other domain for static files rather than "static.yoursite.com", to avoid the "top-level" cookie (megacookie?) being sent with every request.

ymse··on Update on 1/28 service outage
> I used to also use append-only storage for changes in potentially buggy or malicious services. Sounds like that might be a good idea, too, to prevent some issues.

In a certain sense, git is "append-only". If you change a commit in history, every ancestor commit will have its SHA hash changed. Naturally this will conflict with other copies of the repository.

For backups you should do a "git clone --bare" which checks out the internal git structure with data and history, but not the actual files.

ymse··on Whatever you set the URL to, that HTTP code will be returned
This is my go-to resource for looking up status codes: https://http.cat/

Examples: https://http.cat/418 - https://http.cat/451

ymse··on Dear open-source maintainers, a letter from GitLab
What about having a single product, and charging for a proprietary license + support? This may work better with GPL as many large orgs are allergic to it.

With MIT license, many sites probably just implement the branding changes etc in the CE product on their own.

ymse··on Google recommends inlining small CSS
FTA: Note that the web platform will soon support loading stylesheets in a non-render-blocking manner, without having to resort to using JavaScript, using HTML Imports.

https://w3c.github.io/webcomponents/spec/imports/#link-type-...

All is not lost, it seems.

ymse··on Peter Naur has died
Speaking of prominent Danish programmers... :)
ymse··on Pymux: a tmux clone in pure Python
You could say the same about screen vs tmux (or endless other software clones). Projects like these help drive innovation on both sides. Competition, if you like.

Besides, Pymux is Python while tmux is C. I'm sure you can appreciate that adding a Python API to tmux would be non-trivial, both code-wise and politically.

ymse··on Pay Google to stop seeing ads
Given that Google Ads are mostly used on third-party sites, does this mean they will be sharing some of that revenue with the sites that now loses their ads?

If not, why should we give Google money to take potential income from smaller companies?

ymse··on TLDR pages
There have been discussions in the past about "standardizing" on an Examples section. It is usually what I miss the most in any manual.
ymse··on Mint 17.3 may be the best Linux desktop distro yet
These concerns are exactly why I don't install or recommend Mint to others. Terrifying that they haven't fixed it after all those years. It seems more of an attitude rather than technical issue.

> There is still room for an easy-to-use Debian for end users

Does it have to be Debian? I'm looking forward to the inevitable "non-free" Guix fork that my grandmother can use. That will surely be the year of the Linux desktop.

ymse··on Crows caught on camera making tools in the wild
Here's a video (from Japan) about this phenomenon:

https://www.youtube.com/watch?v=BGPGknpq3e0

I wonder whether it was discovered independently, or if it has been communicated somehow. Or maybe they've "always" done this, except with horses before cars.

ymse··on GoshawkDB: A distributed, transactional, fault-tolerant object store
Why should I choose this over Ceph RADOS? [0][1]

0: Reliable Autonomic Distributed Object Store

1: http://docs.ceph.com/docs/master/rados/api/librados-intro/

ymse··on TSA can now force you to go through body scanners [pdf]
It's called security theater because it only gives the illusion of security: there are many examples where people have successfully brought knives, guns, explosives and what have you through these full-body scanners.

Further, it's theatric because the many of the "dangerous" items have no obvious malicious use, and the rules are totally arbitrary. I can't bring knitting gear on an airplane, but my small pocket knife is totally fine (according to official rules, though some airport security agents will disagree).

Finally, any attempt at plane hijacking nowadays will cause passengers to fight for their life to prevent it. Prior to 9/11 people would just sit still and wait to land in Cuba or whatever, but now people associate hijacking with flying into a building and will act thereafter.

It could actually be safer to allow knives and similar "weapons" that can't penetrate the plane body, so people have a chance to defend themselves when some terrorist inevitably smuggles aboard a handgun and starts shooting.

ymse··on TSA can now force you to go through body scanners [pdf]
That's both hilarious and sad. Meanwhile, people are successfully bringing guns and explosives through the full-body scanners. http://www.wired.com/2014/08/study-shows-how-easily-weapons-...
← PreviousPage 6 of 7Next →