RossM

Joined 18 years ago

Karma
1,355
Submissions
593
Member since
Aug 29
[ my public key: https://keybase.io/rmasters; my proof: https://keybase.io/rmasters/sigs/KmCzs7LC7r6fFECJb7t5rsG41ErUSgvwu_fMr9A451Q ]
View on Hacker News

Recent submissions

Comment · 1 year ago
It's got to be pure marketing - the British media certainly loves a buzzword, but I suspect that's more to do with their clickbait strategy. ("What is blishing? Have I fallen for it?"). Perhaps it helps some people compartmentalise, but I couldn't find any research that looks into any increased cognitive load.

Our workplace cybersecurity training introduces at least 1 new word each year. This year's was "vishing" which apparently is just social engineering/credential extraction that takes place over the phone. Of course, it's presented to non-technical users as a well-adopted term that is very important to know (for the checkbox quiz in 3 slides time).

Comment · 2 years ago
Comment · 2 years ago
Comment · 3 years ago
I did this for a bit. The main issue was that air intake on my older model was through the keyboard, so clamshell mode was inadvisable - not sure if that’s true of the newer models and M1 should run cooler.

If you’re wiping it and installing Linux it’s like any other server, but if you’re running macOS you’re open to a wider spectrum of vulnerabilities that wouldn’t normally apply (desktop software). Your apps could also have vulnerabilities that expose access to personal credentials, etc (e.g. filesystems, apple id) depending on your setup.

You can insulate yourself a bit with tunnels/proxies to expose specific services (e.g. cloudflare, ngrok).

I had a lot more peace of mind buying an old, cheap computer, raspberry pis, and eventually NUCs.

Comment · 4 years ago
Comment · 5 years ago
Correlates with my experience of late 2013 MBP batteries (it might be the same model actually). My original Apple battery lasted until 2019. Both of the iFixit replacements have lasted a year until not holding original charge, and just last night I noticed a cell starting to swell.

I doubt I'll ever find factory original cells again for the 2013 but if Apple sells them I'd consider buying a MBP again.

Comment · 5 years ago
> Nobody is forced to install the app at all (at least in the UK's case).

Unfortunately, that's not quite right. Citing the latest rules:

> The rules on what you need to do when a group enters your venue have changed. You must ask every customer or visitor to scan the NHS QR code using their NHS COVID-19 app, or provide their name and contact details, not just a lead member of the group. [0]

[0] https://www.gov.uk/guidance/maintaining-records-of-staff-cus...

Delving into the rules, it appears this applies to all sit-in venues, while takeaway customers are exempt. A paper-based system should be available, if you trust the business to handle your data responsibly (or forge fake data if not).

This morning at a cafe I was asked to scan the QR code "or we can't serve you" for a takeaway order. Clearly some misunderstanding, and I didn't press about a paper-based list as I hadn't read the details myself. Hopefully it's an isolated incident, but it wouldn't surprise me if there was some simplified comms (/FUD) about "just get customers to scan the code".

Comment · 5 years ago
This feels like it's just designed to encourage rapid replies, like their chatrooms. I've always admired HN's time-delay on posting replies the deeper you get into a thread - it deliberately reduces engagement but seems effective at stopping things getting too heated.
Comment · 5 years ago
Using Cloudflare with DoH is documented here: https://docs.pi-hole.net/guides/dns-over-https/

You essentially run a little proxy server on your pihole setup, and configure pihole to use it as your upstream dns resolver.

E.g., a proxy server running at 127.0.0.1:5053 which uses the Cloudflare ipv4/ipv6 DNS over HTTPS endpoints. This can also use other DoH endpoints as desired:

    /usr/local/bin/cloudflared proxy-dns \
      --port 5053 \
      --upstream https://1.1.1.1/dns-query \
      --upstream https://1.0.0.1/dns-query \
      --upstream https://2606:4700:4700::1111/dns-query \
      --upstream https://2606:4700:4700::1001/dns-query
Comment · 6 years ago
Not OP, but I never got on with forced stops either. I had some success treating it like a mini-deadline to achieve flow-state - work on something for 25 minutes, and if I don't feel like I want to keep going, take a break and try again.
Comment · 6 years ago
I migrated the company's services from AWS to OCI at the startup I was at. The trade-off is simple, if Oracle can say $product runs on OCI, they'll put you in front of the biggest industry players who are using their POS, database - and since our sales pipeline pivoted around web integrations this was crucial. They also give a bunch of credits (as do the other providers).

We argued against it in the dev team, but it wasn't the worst cloud migration I've done. The console reminds me of early days AWS as it's essentially just VPC+EC2+S3, but it was refreshing to spin up a server without a pages of config being presented to you. We took the opportunity to containerise our older sites and ran everything in their managed k8s cluster. I very rarely had to use the console for anything, which tbh is a bit of a grab-bag of managed services beyond the core cloud offering. Terraform support is there if you need to do anything serious.

Comment · 7 years ago
At the bottom of the page they list availability of third party services used - Fastly has a warning symbol, and I imagine they put that CDN in front of everything.
Comment · 7 years ago
Interesting details; it would be nice to see how those ulimit/networking numbers were arrived at.

The title should have [2015].

Comment · 7 years ago
Comment · 7 years ago
Daftness aside, I think the courts/rights-orgs have just correctly identified registrars as the weak link - see the ease of which a number of right-wing sites had their domains dropped. My experience with registrars doesn’t feel like they’re aiming to provide a quality service (with ancient web UIs for example) - they’re there for the volume recurring revenues. Hopefully domains will have their letsencrypt moment soon.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton