News for hackers. Stuff that matters.

mcescalante

Re:Hurl: Run and test HTTP requests with plain text on Friday June 20, 2025 @02:44AM (#44325289)
yep, I've played with Hurl and find it nice but recently have been leaning into the .http stuff more. IntelliJ has it built in, there's the plugin you linked, and then for CLI i've used httpYac. No "vendor lock in", really easy to share with copy & paste or source control.
Re:Bank of England, 1914 war bonds cover-up on Wednesday March 15, 2023 @07:47PM (#35176271)
(2017) should probably be added to the title. Really enjoyed this bit but noticed the published date after I read it.
Re:Starlink adds another 100Gbps connection to the SeattleIX on Thursday February 03, 2022 @12:24AM (#30189015)
I can't speak to how all transactions are conducted, but there are auctions on one marketplace, IPv4 Global auctions, with cost per IP in the $50-60 range https://auctions.ipv4.global/. I also really enjoyed Flyio's blog post about acquiring addresses https://fly.io/blog/32-bit-real-estate/
Re:My self-hosting infrastructure, fully automated on Sunday January 23, 2022 @05:30PM (#30051214)
ZeroTier is certainly another viable alternative, but their self hosted option still relies on the ZeroTier root servers (you can self-host roots, but they don't support removing theirs [1]), and their licensing for the self hosted product is more restrictive than something like netmaker.

[1] https://docs.zerotier.com/self-hosting/introduction/#roots

Re:My self-hosting infrastructure, fully automated on Friday January 21, 2022 @08:07PM (#30032057)
I just stumbled on a self hosted project similar to tailscale: https://github.com/gravitl/netmaker. There is also https://github.com/juanfont/headscale which is an open sourced implementation of the Tailscale coordination server. Tailscale "just works" and makes things incredibly easy for personal use, but it's awesome that there are also similar self-hosted options out there
Here is a screenshot of the issue as of time of posting. Forgive the zoom, the UI has a iframe scroll which isn't very capture friendly. https://i.imgur.com/hS8jBzw.png
Re:Crypto.com accounts had unauthorized withdrawals on Thursday January 20, 2022 @10:35AM (#30010132)
At least one US investment banks I've used require a waiting period before transacting with a newly added account/routing number for wires/ACH. I've even got calls from customer service manually confirming transfers/withdrawals if it's a new account or one that's been unused for a long period of time.

That said, there is no waiting period on me withdrawing from my checking account.

Re:I Miss RSS on Wednesday January 05, 2022 @04:37PM (#29815321)
I use RSS daily with Miniflux. Tiny Tiny RSS is another popular self hosted option and there are a number of freemium platforms like Feedly & Inoreader. I prefer to self host primarily for cost/no ads or tracking/private data. It's true that social media platforms don't support it but that's never been my personal use case - every news site or discussion group I like to keep up with has a feed and it's worked great for me.
We are going through this currently. Have a large new system going in which relies on OAuth and JWTs and our IAM team is now spending a lot of time & energy with the developers on all of the use/edge cases with tokens, expiry, security, and whether the code should be in the client or the server. In the end it'll work out, but I completely agree that grabbing the most popular auth framework for your language will save a lot of headaches in the vast majority of cases.
Agreed, wish they qualified "efficient".

Another example may be that hydroponic growing is typically faster than in soil, for example leafy lettuce such as bibb can be ready nearly twice as fast when grown with hydroponics.

Re:DuckDuckGo Reaches 100M Daily Search Queries on Thursday January 14, 2021 @01:23PM (#25780034)
I have the same experience - my two major issues with DDG are the results for technical searches, and I wish that it showed more basic info for businesses like phone number/address/hours without me having to click around a bunch.
This type of question is called a "Ballot measure." 26/50 states have initiative or veto referendum processes, which means Citizens can collect signatures to place a law on the ballot. A coalition containing unions (i.e. service & tire) and others were able to collect 103,604 signatures in support of this law which was more than the required 80,239 to have the question appear on the Massachusetts ballot. They submitted this all in late 2019 and there was some back and forth with the legislature and they were required to collect some more signatures which they did successfully (skipping some legal stuff). After all the signatures were verified, it was certified for the November 2020 ballot (in MA).

If you are curious for more detail, Ballotpedia has a good overview of information in their "path to the ballot" section: https://ballotpedia.org/Massachusetts_Question_1,_%22Right_t...

Re:Show HN: A fast RSS reader I built with a friend on Tuesday August 11, 2020 @05:26PM (#24126166)
I love RSS. I started using it again late last year and it's a joy once you find the RSS app that fits your needs. Currently very happy with Miniflux, but also gave TT-RSS a try and found that both would work great for me but preferred the resource usage of Miniflux.
Re:Do Not Follow JavaScript Trends on Tuesday June 16, 2020 @11:36AM (#23540407)
> As someone who has used Angular 2 since beta, I can tell you, it's been a bumpy ride nonetheless.

I can second this - I've been working on a variety of Angular apps in an enterprise environment. It's worked fine and the "batteries included" has worked for my org, but it has definitely been a bumpy ride to get from beta to 9 with plenty of changes along the way.

> And here I am using HTML and CSS with tiny sprinkles of JS for most websites, and it's working just fine, and has been for many years.

This has been my favorite setup at work - pick "boring" tech like Django/Flask or Spring Boot and then sprinkle in some Javascript for highly interactive forms/pieces (React or Vue if needed).

Re:The Mainframe Is a Modern Platform on Wednesday May 20, 2020 @01:52PM (#23249752)
You're absolutely correct - we have a healthy mix of traditional server-side web applications and a small number of SPAs only where it makes sense (usually complex forms with lots of feedback/conditionals). I just used Angular as an (admittedly) easy target. These days, I've been trying my best to avoid SPA for enterprise stuff if possible
Re:The Mainframe Is a Modern Platform on Wednesday May 20, 2020 @10:25AM (#23247149)
I have been involved in a slow-rolling project at work to migrate a fair number of administrative screens and their data (written in the late 80s/early 90s) off of the existing zOS mainframe, primarily because of the costs (management doesn't want to pay IBM anymore for the limited set of things it's being used for and finding devs is expensive too). The project has already run way past the original estimate, no major surprise.

Our new APIs and web UIs are nice and all and offer a number of advantages for today's users/admins, but sometimes it feels they take more babysitting and fuss (updating deps, etc.) than the old mainframe code did - I'm not confident that an Angular SPA running for 20+ years would still work the same, so we have tried to take that into consideration while designing replacements.

I'm not complaining about one or the other but rather I feel lucky to have experienced tradeoffs and learned about how some of these problems were solved 20-30 years ago, while I was still in grade school.

Re:It’s Time to Get Back to RSS on Sunday May 17, 2020 @12:39PM (#23213143)
RSS has been really great for me over the last year or so (when I got back into it). I tried Feedly, and then Inoreader. I was not willing to pay for either and ended up trying out the two popular self-hosted options: ttrss (tiny tiny rss) and Miniflux. Stuck with Miniflux for its simplicity. Using the Fever API with Reeder on my Mac and Readably on my Android.
Re:Kanboard – Kanban Project Management Software on Thursday April 16, 2020 @10:34AM (#22889761)
This looks lovely for a self hosted Kanban board. Of course there are _lots_ of paid products out there for this too, but there are a lot of times where my company would prefer something free and self hosted.

Slightly unrelated: It looks like the author is the same as the self-hosted RSS reader Miniflux which I've been using for 4-6 months now and has been fantastic (Miniflux is linked in the footer and the primary committer is the same on both repos).

Re:Tell HN: Toilet paper, hand sanitizer, and now web cams on Wednesday April 08, 2020 @11:07AM (#22813600)
If anyone's curious about this from 3 camels standpoint they made a blog post about this. I was curious what the non-Amazon opinion would be so I went looking: https://camelcamelcamel.com/blog/amazon-eu-covid-19
I have a 2013 Accord with a touch screen (bought it used and it's what came with it) instead of button controls. The latency on the screen is terrible and my father's Acura RDX which does not have a touch panel is much more user-friendly. I would love if more manufacturers started to put more analog controls back into their cars, but kept the non-touch screens for info display/backup cameras.
Re:Announcing the Second Edition of Infrastructure as Code on Wednesday December 18, 2019 @01:16PM (#21827581)
Thanks for mentioning this, my org is in the process of evaluating various options for Infrastructure as code stuff and Terraform is very high up on that list. I don't believe Pulumi has been discussed and looks quite good, always nice to be able to suggest it before adoption.

In some quick searching, Pulumi has a high level (and assumedly biased) comparison between Terraform and itself: https://www.pulumi.com/docs/intro/vs/terraform/

Looks lovely - I'll be testing this out on a few clients websites for simpler stats experience viewing for them.

I do have Google Analytics running on them but GA can be complicated for some users (especially starting out a basic blog), and they love being able to see everything in one place. I've tried a few "display GA stats in WP admin" plugins but they always feel a bit half-baked.

Re:Re-Licensing Sentry on Wednesday November 06, 2019 @04:48PM (#21467798)
I have run the self-hosted version of Sentry for a couple years at my job now and it has worked fantastically, and I also use the SaaS product during freelance. The self-hosted releases take time to appear after launching on SaaS, but this is understandable as it takes time to coordinate things making it downstream to the public repo from internal stuff. And the self-hosted version is rock-solid once running, I never worry about it.

Of course it would be great if everything could remain truly open source, but I can understand the IP concerns as Sentry grows, and I am appreciative of the communication and commitment to offering the same product for self-hosting as your SaaS product. I'll be continuing to use and support Sentry and am interested to see how the BSL model goes here compared to something like open-core.

Re:Detecting Chrome headless, the game goes on on Friday July 19, 2019 @11:47AM (#20479589)
I'm not sure if diving deep into the page will yield results of how it's done. The page's javascript does a POST to a backend with the browser's fingerprint, and the server does all the "magic" where we can't see it. Unless there is new fingerprint info that is being sent to the server that wasn't around before, I'm skeptical about the javascript in the page revealing the full technique.
Re:Detecting Chrome headless, the game goes on on Friday July 19, 2019 @11:43AM (#20479549)
On his actual "test" page, he claims he is not using fpscanner: https://arh.antoinevastel.com/bots/areyouheadless

> It does not use detection any of techniques presented in these blog posts (post 1,post 2) or in the Fp-Scanner library

I am also getting this error, and suspect it is because I’m on 10.12.6. If you do system_profiler SPInstallHistoryDataType |grep -A5 MRTConfigData you should see your latest version. For me, it’s 1.42. Not sure how to get the update yet though. Will update this comment once I figure that out.

Update: According to this macworld article, there is a Zoom patch out that fixes this. https://www.macworld.com/article/3407764/zoom-mac-app-flaw-c...

There are also commands at the bottom to manually kill the zoom localhost and disable it. I have opted to run those commands regardless:

  pkill ZoomOpener;rm -rf ~/.zoomus;touch ~/.zoomus &&chmod 000 ~/.zoomus;

  pkill "RingCentralOpener";rm -rf ~/.ringcentralopener;touch ~/.ringcentralopener &&chmod 000 ~/.ringcentralopener;#
Re:Python in the Windows 10 May update on Friday June 07, 2019 @09:41AM (#20124362)
Yes, I found this very ironic. Apple says this in their deprecations in the release notes for 10.15 beta: https://developer.apple.com/documentation/macos_release_note...
Re:Angular v8.0 on Wednesday May 29, 2019 @10:47AM (#20040808)
I think instead of meaning specific components (http and routing come to mind) that more often people mean by "batteries included" that Angular has an opinionated way to do most everything, and their docs/guides include examples. In my experience, Vue and React allow a higher degree of freedom in choosing how you would like to approach various things, and there are more choices for some core behaviors for them as well
This. I was just reading some messages on the gofundme for his vacation (mentioned in thread) and one of the families on his route said that he remembers every childs names, even after they have left the house, which to me is something you would only expect of a good friend.

It seems like he is just a genuinely good guy who cares about these people and as you said, has the ability to connect with them on a level that most people don't.

Re:Open Distro for Elasticsearch on Monday March 11, 2019 @02:51PM (#19361691)
I recently decided to experiment with ES and prefer to evaluate things with Apache 2.0 licensing if available, even if I may pay for to license it at a later time. Elasticsearch Still maintains -oss suffixed docker images and builds that are true Apache 2.0. You can read more about this here: https://www.elastic.co/products/x-pack/open

I jotted down instructions to run the docker containers based on a few different solutions from different places: https://gist.github.com/mcescalante/6be03751c820677cf0f15c7b...

I'm sharing this because I got the vibe from the linked post in the comments and the overall marketing of "Open Distro for ES" that Elasticsearch was 'not open anymore' and had just discovered the Apache 2.0 builds within the last week.

Older »