Hacker Newsnew | past | comments | ask | show | jobs | submit | more rob-olmos's commentslogin

I'm thinking the same.. if I've fallen off a cliff or crashed my bike and broken my leg, possibly in shock too, I want something rugged & simple to activate like a PLB


Dunno why you're being downvoted, you're correct that it's only "or".


Post on ACIDRain as an example of the ecomm time-gap issue back in the day: https://news.ycombinator.com/item?id=20027532


Another example is API Platform's docker setup:

Volume config: https://github.com/api-platform/api-platform/blob/main/docke...

Caddy config: https://github.com/api-platform/api-platform/blob/main/api/d...

php-fpm config: https://github.com/api-platform/api-platform/blob/main/api/d...

I'm also curious on the performance differences between containers.


Tweeted Sep 21, 2010, might still be true for EC2 VMs though.


There's the 't' series of instances that offer burstable CPU. AFAIK still 1:1 on memory though, and there's models that allow you to pay to stay un-throttled when using t family instances vs. getting throttled when out of burst credits.


Do you have a blog post or writeup on how you discovered that? Thanks!


This all happened less than 2 hours ago, but a quick summary is that my Certificate Transparency monitor, Cert Spotter (https://sslmate.com/certspotter) performs various sanity checks on every certificate that it observes. At 15:41 UTC today, I started getting alerts that certificates from Let's Encrypt were failing one particular check. I quickly emailed Let's Encrypt's problem reporting address, and Let's Encrypt promptly suspended issuance so they could investigate. I've lost count of how many CAs I've detected having this particular problem, so perhaps it is time to blog about it (https://www.agwa.name/blog if you're interested).


That's awesome!! I wonder if let's encrypt runs sanity checks before/after issuing certs too?


They "lint" certificates before issuance, as do most CAs. However, I don't think any linters check for this problem, as it requires access to more than just the certificate (the linter would need access to either the precertificate or a database of Certificate Transparency log keys).


We will add a lint to Boulder for precertificate and certificate correspondence to ensure this class of problem never happens again.

It would be nice to add this to Zlint, but we'd need a new interface that could be given both a precertificate and certificate to co-lint. Other than this one correspondence check, I'm not sure if there's any other lints that would fit that pattern.


Are these linters open source?


Yup, the two most popular are:

https://github.com/zmap/zlint

https://github.com/certlint/certlint

They each have their strengths and weaknesses, so CAs are advised to use both.


this is why i will always love hacker news. thank you


Curious people contributing to the ongoing functioning of critical systems at scale. Thank you for your effort!

https://xkcd.com/2347/


I would love to read a blog of yours with more information.


This iso so awesome. Thank you for sharing. I hope you do write about that problem. I'd love to learn something new.


I will also throw out a quick vote that I'd be interested in reading a blog post about it.


3M is also in another lawsuit for defective earplugs supplied to the US military: https://www.forbes.com/advisor/legal/product-liability/3m-ea...

Additional info: https://www.millerandzois.com/products-liability/3m-combat-a...


3M acquired that company and then was on the hook. A few bad decisions at the wrong level can sink a company.


The difference in harm between these two transgressions is a few orders of magnitude at least.


I think the idea is suggesting a problem at the corporate culture level.


Yeah I mean maybe mussolini liked to kick puppies too but I don't really need it as evidence of his character you know what I'm saying? The pfas stuff is so heinous it downplays it to even mention this other thing in the same context.


It would be nice for web apps to have a setting users (not only the developers) can enable that will allow closing the app's window without quitting the app, like a lot of native desktop apps behave (eg, Safari).


WS = WebSocket? I think integrating with the Discord API would've been one use case until they added the slash commands & webhooks.

But looks like Discord Gateway blocks CF Workers: https://github.com/discord/discord-api-docs/issues/6145#issu...


Maybe just me but the cloud desktops pricing still isn't all that attractive for some businesses to make a big shift to using them, but also not terrible for some businesses that could use the extra security or cloud environment benefits:

8hrs per workday for a 4 vCPU and 16 GB RAM = $217.36 per month[1]

1: https://cloud.google.com/workstations/pricing#pricing-exampl...


The 4 vCPU 16 GB RAM range from 0.32-0.39 $/hour With 8 hours per day and 22 workdays per month its at most 68.64$.

Your price includes the "workstation cluster fee", whatever that includes. Anyways this fee is fixed and does not increase for more workstations.

1 Dev => 68.64 + 144

100 Devs => 100 * 68.64 + 144

I guess $70, or even $140 with better hardware, might be worth it in some szenarios.

Personally, I'd never want to work with a company that doesn't trust me with a regular notebook.


> I'd never want to work with a company that doesn't trust me with a regular notebook.

The value proposition has nothing to do with trust.


Not trusting someone with a regular laptop is common practice in enterprise consulting.

Either a VM accessible via citrix, RDP, X Windows, Bastille,.... or a throw away laptop locked down to the project.


The use case for this would be a cheap device that’s thin and light and has excellent battery life hooked up to a cloud machine that is very powerful.

It could also be used to do wfh without having to bring your company laptop or mix your personal data.


Also, that isn't exactly a powerful machine at 4 cores and 16GB of ram. Probably have to double it or what is the point? Security, maybe?


Aren't vCPUs only hyperthreads? So this is actually similar to a dualcore processor?


Cloud desktops move the numbers game from CapEx to OpEx.

“CFOs love this one cool trick!”


You can buy a better specced laptop in a year.


How many big corps in the US (I live in the US so that’s my reference) are doing engineering hardware rotation at sub-2 years? Most are likely to be 3.


The “frugal” FAANG is four…


"Most" companies in the USA are on a 5-year laptop replacement cycle because that's what the IRS set the MACRS depreciation schedule to for "consumer electronics" (really, category 00.12 in Table B-1 of Publication 946). Each year following the purchase they can write off the following on their taxes:

Year 1: 20%

Year 2: 32%

Year 3: 19.20%

Year 4: 11.52%

Year 5: 11.52%

Year 6: 5.76%

Why accountants are actually in charge of the rate at which laptops get purchased, instead of just the paperwork for the tax deductions caused by the rate of laptop purchases....I truly do not understand.


Yeah, but hardly companies want to do that for contractors working on delivery, for non software focused industries.


$217/month is absolutely nothing for any company of any size. It’s a rounding error.


Duh, but you wouldn't rent one instance, but one for every employee.

That's not chump change considering the measly specs.


And $217 per employee is still nothing once you consider the fully allocated expense of an employee.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: