News for hackers. Stuff that matters.

krimeo

Re:Statistical analysis on voting pattern irregularities on Wednesday November 11, 2020 @07:06AM (#25057669)
Isn't that wrongthink?
Yeah, you are right. Sorry, I exaggerated there, HN is the best mainstream source for technical stuff honestly.

Still many posts that make it to the top feel like commercial advertisement and I am pretty sure they use (their?) sock puppets to get the first upvotes to cheat the algorithm.

It's easy to create 20 accounts and just switch between them (and IP) when you do your normal HN procrastination to validate them and then get those initial 20 upvotes to go up to the top.

You are correct. Facebook claimed it's a bombshell too close to the elections so they need to verify with 3rd party "fact checkers".
Did they really fix the power management problems? I would be very careful running Linux on Intel laptops these days. Very happy with Ryzen.
The story was suppressed because it materials were allegedly obtained by hackers.
Re:Canonical introduces high-availability Micro-Kubernetes on Friday October 16, 2020 @09:47AM (#24800773)
I really thought it was a merger. Is Red Hat still a seperate legal entity?
Re:Canonical introduces high-availability Micro-Kubernetes on Friday October 16, 2020 @09:46AM (#24800764)
> If you don't need K8S then don't use it. What's the problem? Run your app on your server and ignore everything else.

See the original comment you replied to, he is clearly complaining about the whole infrastructure and solutions getting too complex for very little benefit, I just elaborated on that point because there is some truth to it. It is not the case for your scenario handling billions of requests per day in multiple regions - that's where it makes a lot of sense to use k8s! But very few applications need that.

> It's a container and can be as thin or fat as you want with it's contents.

But you can't rely on the platform, except for the kernel because linux kernel ABI is stable hence why the containers are done in this way. I am not complaining about it, I am exaplning the reasoning. Now imagine if you could rely on and share more services provided by the platform that just the kernel ;).

> I don't care about the ABI and don't see why that's relevant

Fair enough but then I don't understand why you replied to my comment saying the containers are designed in this way because of unstable userpace ABI if you don't care about this.

> "I want my application to reliably and quickly serve my customers and be easy to maintain and debug." >> That's what K8S helps with

For certain solutions, absolutely! For other solutions a simple stateful applications is simpler and easier to maintain and debug (again, that's how I read the first comment in this thread).

> 2) the NYT articles about Trump's tax returns that were obviously obtained illegally weren't given the same treatment.

This, the unbelievably biased treatment of this throughout the media and social media and good old qui bono tells me all I need to know.

Everything else is just technical details.

> Why would you smoke crack when you know the navy would drug test you?

Because you are addicted.

Re:Canonical introduces high-availability Micro-Kubernetes on Thursday October 15, 2020 @08:33PM (#24796081)
I thought there is no Red Hat anymore.
Re:Canonical introduces high-availability Micro-Kubernetes on Thursday October 15, 2020 @08:28PM (#24796045)
> How is that related?

I thought we were talking about running applications reliably. Why is complete linux userspace bundled separately in each container?

> Environments and languages change. Yes.

> That's entirely different to running programs with zero-downtime deployments, load-balancing and traffic management, health monitoring, logging and observability, secret and config management, storage volumes, security roles, and much more.

That's a lot of new requirements in addition to "running applications reliably". Most applications simply do not need that. And I believe this is the point of the original comment you replied to.

- zero-downtime deployments -> not needed for most applications (for example, twitter outages are not a big deal either). Btw how do you do zero-downtime of (websocket) streams with kubernetes? ;)

- load-balancing and traffic management -> in standard k8s you are pushing all traffic through one active LB (nginx) anyway => strip most of the extra layers and you dont even need that LB

- health monitoring, logging etc. -> you can use an existing solution that provides only the functionality you need, most of the work will be in your app anyway (every application needs different metrics ..)

The argument is that most applications do not need to scale at this level (until you need anycast DNS returning per-node IPs or at least geodns, you are not scaling that much anyway) and can be implemented in simpler manner hence easier and cheaper to maintain, audit and secure.

I do not want security roles, storage volumes and config management or observability I want my application to reliably and quickly serve my customers and be easy to maintain and debug.

If you want to discuss how to design architecture for scalable applications which keep all state in distributed databases but based on a platform with stable ABI that would surely be an interesting debate as well.

> Should private companies have any regulation at all?

I can actually get behind no regulation for private companies, twitter can censor who they like as I can drive my favorite tank registered as my company vehicle and don't bother with taxes anymore.

Re:Canonical introduces high-availability Micro-Kubernetes on Thursday October 15, 2020 @06:53PM (#24795250)
And that applies to Ubuntu just as well. All I'm saying IBM is no better than Canonical in this regard.

Not complaining - If you want me to complain about IBM cluster technology that would be a whole different story.

And no I'm not gonna ask about disconnected clusters :).

Re:Canonical introduces high-availability Micro-Kubernetes on Thursday October 15, 2020 @06:05PM (#24794699)
Linux kernel ABI is stable as rock.

To answer your question, I'm talking about Linux userspace ABI - you can't rely on ABI of essential libraries, openssl for example. That's why docker was born back then.

Just like the communists have always been doing.
TDW is the most successful alternative social network at the moment and it got hugely popular very quick despite being blocked.
You didnt read the article, did you?
Re:Canonical introduces high-availability Micro-Kubernetes on Thursday October 15, 2020 @05:16PM (#24794098)
Make the telemetry opt-in to begin with.

The comment I am replying to is complaining about Ubuntu calling home, IBM OpenShift is the same story.

Re:Canonical introduces high-availability Micro-Kubernetes on Thursday October 15, 2020 @05:06PM (#24793940)
> Running applications reliably and efficiently is an ongoing challenge

Is it? I can take a program written for Windows 95 and run it on Windows 7 (maybe even newer) just fine and it will run reliable and efficiently and integrate better than containers.

It is problem only on Linux because user space ABI keeps breaking.

Notice that the containers run on the same linux kernel and not in VMs, why? Because "we do not break userspace!".

Re:Canonical introduces high-availability Micro-Kubernetes on Thursday October 15, 2020 @04:58PM (#24793838)
Same story with IBM OpenShift and their telemetry.
Hopefully the next revolution is rediscovering the wonders of dynamic linking.
> That was the gist of a discussion among four technology and policy experts convened over Zoom

For starters, stop using Zoom and start using open protocols. Thank you.

Re:Ask HN: What are the unaddressed problems in fintech today? on Thursday October 15, 2020 @03:52PM (#24793013)
Oh don't get me started ... just read through the T&C of the "banks for millenals".

- fake crypto (in reality it's CFD but they market it as crypto) (revolut)

- exchange rates worse than MasterCard for non-major currencies (revolut, just read their forums)

- blocking your account and requiring further documents (KYC, AML) if you want to access your money after you deposit more money

- exchange rates not public anymore (today exchange rates are accesible only to customer, not public) (revolut)

- no online banking, android/ios only

- when you start utlizing the cheaper services they actually provide you get harrased by the "compliance team" (because their are losing money so they can compete) (bunq, monese)

- low limits and when you reach your limit your account get be terminated (monese)

- no free API accessible to the customer (just some oauth api you can not use)

- expensive fees (transwap, ofx)

- horrible support

- no airgap security (think german PhotoTan or dutch ING scanner)

- expensive ATM withdrawals

Re:Robinhood estimates hackers infiltrated almost 2000 accounts on Thursday October 15, 2020 @03:42PM (#24792903)
Not your keys ...
Can't wait for the next layer on top of Waypoint which will allow me to build, deploy and release applications everywhere with one click!
No it's not just yet. But expect this to get traction, you know https://news.ycombinator.com/item?id=24782999 ...
Eh, so people are paying for upvotes, sock puppets accounts etc. but it doesn't work ? :o
Re:Dockerfile Security Best Practices on Thursday October 15, 2020 @09:38AM (#24788518)
* becomes root, of course
Re:Dockerfile Security Best Practices on Thursday October 15, 2020 @09:37AM (#24788507)
Kinda my point. The reason docker is popular is simply that most of the devs are lazy, not very knowledgeable in the actual underlying technology and very short-sighted.

And docker marketing has very effectively used that to their advantage.

Older »