News for hackers. Stuff that matters.

chtitux

With the (future) shutdown of WorkMail, AWS almost did the full circle.
5 years ago , LLM was "beyond minimal conversation, intelligence isn't happening".

I'm pretty sure in five years, local LLM will be a thing.

Re:I Am Mark Zuckerberg on Sunday November 09, 2025 @07:59AM (#45865264)
I strongly suggest UUIDv7, with our birthdate encoded as time.

Ordering the world population by birthday becomes so easy. Plus no endless discussion on wether or not we should use UUID as primary key.

It could be interesting to understand the actual content of the qrcode. part1 is a static id, so likely linked to the membership.

part2 seems to be a timestamp. Maybe we can try to forge the value to "now - 10 seconds".

And if the implementation has been done right, the "part3" should be a signature of part1 and part2, not a "salt" (so forging part2 should be detected and code rejected).

Re:NASA believes it understands why Ingenuity crashed on Mars on Wednesday December 11, 2024 @09:36PM (#42395622)
Getting the device speed right seems way more difficult without a Global Positioning System.

Hopefully it will eventually be deployed [0]

[0] https://techport.nasa.gov/projects/146938

Re:Google releases smart watch for kids on Thursday May 30, 2024 @05:03AM (#40521586)
Wait until we'll be assigned IPv6 as phone number.
Maybe just use Starlink from the satellites, so we don't rely on a specific ground station.

Starlink Ground Station Network is global, spread in many different countries and look more resilient than a single one.

[1]: a delete command was wrongly issued to all Cassandra servers during a planned maintenance

[2]: a database server had its disk full that lead to a corrupted database

SRE is tough.

Re:Don't Fuck with Paste on Friday March 08, 2024 @06:37AM (#39640130)
Limiting characters can also be a feature, so users can't use emojis in their password (this is so fun), to realize later they can't login, because they don't know how to input emojis from their desktop computer.

Hopefully passwords will be gone soon (at least that's my hope).

Re:Trying to Decode Lev-1 on Saturday February 24, 2024 @12:58PM (#39493618)
The technical investigation is impressive.

I'm wondering if the author contacted the JAXA team. Maybe they would share how the data is encoded?

If the information is secret, it's probably encrypted (SpaceX eventually did that once radio amateurs decoded the video stream), but if it's not, maybe JAXA would be happy to help?

The number of certificates issued/inserted on 25th December, which is almost the same as any other day in December, while being a bank holiday in most Western countries, makes me happy: the industry successfully made certificate renewal fully automatic.

For LetsEncrypt, all renewal requests are done with ACME clients, so this is not a surprise.

I'm curious to know which part of DigiCert and Certigo certificates are actually renewed with an ACME request (both support it).

Re:Pollution in 1/8 on Monday September 18, 2023 @04:29AM (#37553675)
Given the number of people now relying on Clouflare 1.1.1.1 to "get Internet" (ie using 1.1.1.1 as recursive name server), I can't imagine APNIC deciding to stop Clouflare using this range.

It seems "too late" to revert this decision. Otherwise people will experience "Internet stopped working", blaming their ISP.

APNIC may decide to keep a working DNS server on 1.1.1.1, but ethically, routing traffic to someone else than Cloudflare is not great.

> I want 2007 Google back.

The SEO mess was indirectly caused by Google PageRank and other related optimizations.

Maybe we want 2007 Internet instead?

The AI world will inevitably lead to "content optimization", so the Chatbots that will be asked "questions about life" (as of Today, where people usually search on Google "I have fever/depression/a turbulent child/tomatoes in my fridge, what should I do?") will more frequently answer specific products.

Instead of promoting a single website (Current SEO strategy), content producer will be tempted to produce many texts on a great variety of sources, to reinforce the model on a specific subject.

Time will tell if in 2035, we will want 2023 ChatGPT.

Re:Docker – October 2022 Pricing Change FAQ on Wednesday October 19, 2022 @05:31AM (#33259632)
With Pro accounts limited to 100 users, I believe this is a good opportunity to recall [0], that lists businesses that overprice SSO

[0] https://sso.tax/

Re:Ask HN: Is anyone using GCP CloudRun in prod? on Sunday September 04, 2022 @11:19AM (#32713977)
I've discovered by default, CloudRun only allocates one core per HTTP request, and exclusively during request execution [0].

So your app runs at 0 CPU when there is no requests ongoing, and can't use more than 1 processes in the same container. It means you can't have a container with nginx+rails, as only nginx will have a core to execute, rails has no core and it leads to a timeout.

Maybe you should ensure your app is not trying to use a second process?

[0] https://cloud.google.com/run/docs/configuring/cpu-allocation

If you want goods imported in containers from China, you have to have empty containers in China.

The ship may be full of empty containers.

Re:Covid-19: stigmatising the unvaccinated is not justified on Sunday November 21, 2021 @10:06AM (#29296620)
At some point of the pandemic, we will discover we should have put more effort in the psychology effects of the words.

Make people panicking is probably not a very good thing to do if we want to expect them to take the best decisions.

Special mention to French president that described March 2020 situation as « This is a war ».

This is what HTTP/2 does with HPACK compression to compress headers and its "static table" [1] for common headers.

There are 61 headers already defined in this table.

[1] https://httpwg.org/specs/rfc7541.html#static.table.definitio...

If all of them suffer from the same issue (let's say memory corruption), you end up with 5 satellites that will fail on the same timeline.

When operating multiple devices to improve reliability, diversity is one point.

Re:WD My Book users wake up to find their data deleted on Friday June 25, 2021 @02:41AM (#27627802)
curl has a very handy --resolve option for that:

curl --resolve 'panel:443:192.168.10.5' -k -X GET https://panel/rest/configuration

Hostname can be set to * in recent versions of curl, it's even more handy:

curl --resolve '*:443:192.168.10.5' -k -X GET https://panel/rest/configuration

Re:Zero downtime Postgres migration, done right on Friday June 11, 2021 @01:33PM (#27476211)
If you can afford a one off 1 second of latency for your SQL queries, then using logical replication with pgbouncer seems way easier :

- setup logical replication between the old and the new server (limitations exist on what is replicated, read the docs)

- PAUSE the pgbouncer (virtual) database. Your app will hang, but not disconnect from pgbouncer

- Copy the sequences from the old to new server. Sequences are not replicated with logical replication

- RESUME the pgbouncer virtual database.

You're done. If everything is automated, your app will see a temporary increase of the SQL latency. But they will keep their TCP connections, so virtually no outage.

So where is the source code of this Perl script ?
A copy of the source code has been stolen.
To be honest, DNS is probably the only piece that can easily take the entire infra down (including the staging one).

It's so easy to rely on DNS names everywhere...

Re:Please do not put IP addresses into DNS MX records on Sunday February 21, 2021 @03:21PM (#26216790)
When using an external service like this one, you have no guarantee:

- this service will last forever

- this service won't be acquired by someone else with evil intention and will never lie

Do not use this service. It has the power to steal your traffic.

Re:OneWeb files for bankruptcy on Saturday March 28, 2020 @08:18AM (#22710679)
Ariane 6 first flight was planned to bring OneWeb satellites in space.

If they can't launch them, I wonder what will be the payload of the first Ariane 6.

Probably because they want to improve the response time with a more precise DNS answer.

With s3.amazonaws.com, they need to have a proxy near you that download the content from the real region. With yourbucket.s3.amazonaws.com, they can give an IP of an edge in the same region as your bucket.

Re:Wildcard Certificates Coming January 2018 on Friday July 07, 2017 @07:10AM (#14717514)
You can't enumerate sub domains via DNS (except if you use DNSSEC with NSEC algorithm, but nobody do that).

It does not prevent people guesssing it tough.

Older »