<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: bcrl</title><link>https://news.ycombinator.com/user?id=bcrl</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Thu, 27 Aug 2026 23:23:25 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=bcrl" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by bcrl in "Stop Making TUIs"]]></title><description><![CDATA[
<p>Muscle memory and awful connectivity in remote places (well, not even that remote for me) is what so many GUI apps undervalue, and I don't think the author of the article has ever thought of or encountered this.  I loved TUIs back in the '80s and '90s when convention was so consistent across applications that muscle memory transferred seamlessly.  Plus one could use a mouse to select menu options or the keyboard (like the many Microsoft programming environments like QuickBASIC, QuickC, Microsoft C as well as competitor products like Turbo Pascal and many others).<p>The low bandwidth / high latency lossy link problem is still a major issue.  Cell phone service is sufficiently shitty in the area I live in that I have to use mosh to get a usable remote connection many times a year.  Mosh is also quite useful while travelling!  Got a crappy connection on a train or airplane?  No problem.  I have so much muscle memory with the mutt email client that nothing else has ever come close.  Where's the equivalent of mutt's limit command in Thunderbird?<p>Try getting a usable VNC session when your cell phone hot spot is hitting 2-30 second ping times (yes -- thirty seconds) with only a handful of packets getting through.<p>Version 2 of the Amiga's operating system did a great thing in version 2 of AmigaOS which explicitly spelled out what conventions to apply (see Amiga User Interface Style Guide at <a href="https://archive.org/details/amiga-user-interface-style-guide" rel="nofollow">https://archive.org/details/amiga-user-interface-style-guide</a>).  Modern GUIs that have weird meaningless buttons are infuriating.  Even moreso when they lack obvious keyboard shortcuts.</p>
]]></description><pubDate>Sat, 22 Aug 2026 12:48:31 +0000</pubDate><link>https://news.ycombinator.com/item?id=49399207</link><dc:creator>bcrl</dc:creator><comments>https://news.ycombinator.com/item?id=49399207</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49399207</guid></item><item><title><![CDATA[New comment by bcrl in "AI didn't erase the junior engineer's value, it increased it it"]]></title><description><![CDATA[
<p>Every additional level of abstraction in computers has resulted in bloat that makes software less efficient and more bloated.  AI is merely continuing to accelerate the tread.<p>The real issue at hand is that humans need to decide to start resource constraining AI before it consumes the entire world.</p>
]]></description><pubDate>Fri, 21 Aug 2026 00:57:00 +0000</pubDate><link>https://news.ycombinator.com/item?id=49382360</link><dc:creator>bcrl</dc:creator><comments>https://news.ycombinator.com/item?id=49382360</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49382360</guid></item><item><title><![CDATA[New comment by bcrl in "Amazon backs power plant that may become top source of US climate pollution"]]></title><description><![CDATA[
<p>Deaths per terawatt-hour of nuclear is still lower than any fossil fuel per <a href="https://ourworldindata.org/grapher/death-rates-from-energy-production-per-twh" rel="nofollow">https://ourworldindata.org/grapher/death-rates-from-energy-p...</a></p>
]]></description><pubDate>Mon, 10 Aug 2026 22:23:04 +0000</pubDate><link>https://news.ycombinator.com/item?id=49250677</link><dc:creator>bcrl</dc:creator><comments>https://news.ycombinator.com/item?id=49250677</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49250677</guid></item><item><title><![CDATA[New comment by bcrl in "Designing an Ethernet Switch ASIC"]]></title><description><![CDATA[
<p>ECC tends to be too expensive to be used widely in hardware data paths.  Most of the time hardware will use a parity bit as checking it is far less costly (both in terms of gates and power).  Parity bits are usually sufficient, as the purpose is really limited to identifying hardware failure.  The CRC should prevent delivery of a corrupted packet provided the hardware doesn't cheat and blindly recompute it.</p>
]]></description><pubDate>Tue, 28 Jul 2026 19:14:26 +0000</pubDate><link>https://news.ycombinator.com/item?id=49088551</link><dc:creator>bcrl</dc:creator><comments>https://news.ycombinator.com/item?id=49088551</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49088551</guid></item><item><title><![CDATA[New comment by bcrl in "DMARC has been public since 2012 but most company domains still don't enforce it"]]></title><description><![CDATA[
<p>Exactly this.  Spammers have the technical competence to overcome any technical hurdle, so using evidence of technical competence achieves nothing.<p>If it were possible to charge $0.25/email for delivery, I'd be more than happy .  However, I'm sure large tech firms will need to say that is "too hard to implement at scale".</p>
]]></description><pubDate>Tue, 28 Jul 2026 19:06:49 +0000</pubDate><link>https://news.ycombinator.com/item?id=49088462</link><dc:creator>bcrl</dc:creator><comments>https://news.ycombinator.com/item?id=49088462</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49088462</guid></item><item><title><![CDATA[New comment by bcrl in "DMARC has been public since 2012 but most company domains still don't enforce it"]]></title><description><![CDATA[
<p>It works at small scale when you self-select for technical competency.  It does not work at larger scale when that self selection is no longer possible.<p>My scale is that I ran an ISP for ~500 users before the network was disassembled last month.  At that scale, you will encounter people that make mistakes with their email setups.  When the people who make mistakes are customers which DMARC prevents delivery of emails, it is an issue as those are exactly the people for which <i>I</i> want to see the emails from.<p>I get more spam with valid SPF and DKIM via Google's own mail servers than DMARC blocks.<p>It says something when even gmail doesn't use DMARC as a signal that an email is valid, as gmail regularly blocks legitimate mailing list emails with completely valid signatures and non-spam content from a reputationaly sound IP.<p>The problem DMARC was supposed to solve (impersonation to reduce spam) isn't solved by DMARC.</p>
]]></description><pubDate>Tue, 28 Jul 2026 19:00:08 +0000</pubDate><link>https://news.ycombinator.com/item?id=49088366</link><dc:creator>bcrl</dc:creator><comments>https://news.ycombinator.com/item?id=49088366</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49088366</guid></item><item><title><![CDATA[New comment by bcrl in "DMARC has been public since 2012 but most company domains still don't enforce it"]]></title><description><![CDATA[
<p>Then you don't deal with email in the real world.  DMARC prevents legitimate emails from people in the real world from being delivered because people make mistakes with their email systems.  Passing DMARC is not a signal that the email isn't legitimate; it's merely a sign that someone correctly set up their mail server to modern standards.  The email might be an impersonation, or not.  There's no way to know.<p>DMARC does absolutely nothing to prevent the kind of impersonation that occurs in the real world.  It doesn't block homoglyphs or or typo-squatting or all the other forms impersonation that matter.  It has failed at preventing impersonation.<p>Just a few days ago I had a phishing email from an elderly woman I had previously done some work for.  The message passed DMARC and everything else, and the domain it was sent from was valid.  But it was not legitimate; it was an impersonation of her which became obvious once the content was read.<p>DMARC is noise, not signal.  It has to be ignored in the real world as it provides virtually no value beyond blocking emails pretty randomly because someone made a mistake when rotating their DKIM keys or one of a million other mistakes that do happen.</p>
]]></description><pubDate>Tue, 28 Jul 2026 18:50:48 +0000</pubDate><link>https://news.ycombinator.com/item?id=49088254</link><dc:creator>bcrl</dc:creator><comments>https://news.ycombinator.com/item?id=49088254</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49088254</guid></item><item><title><![CDATA[New comment by bcrl in "DMARC has been public since 2012 but most company domains still don't enforce it"]]></title><description><![CDATA[
<p>Sadly the article doesn't really touch on whether or not DMARC accomplishes anything truly useful.  When I enabled DMARC for ingress email on one of my own mail servers, it ultimately ended up regularly blocking a handful emails from customers, yet virtually all the spam coming in had valid SPF / DKIM / DMARC, as do most of the phishing attacks.<p>The core problem is that the real need of email end users need is a way of determining whether or not to trust a given sender.  Signatures are purely a technical measure which provides no information on the trustworthiness of the sender.  The end result is that email scoring still has to be content based, and the signature check technologies are pure noise with no useful signal for the purpose of determining if an email should actually show up in my inbox.<p>The tech industry has a bad habit of providing solutions to problems adjacent to problems the user actually needs solved while leaving the user's actual problem unresolved.</p>
]]></description><pubDate>Tue, 28 Jul 2026 14:09:29 +0000</pubDate><link>https://news.ycombinator.com/item?id=49084140</link><dc:creator>bcrl</dc:creator><comments>https://news.ycombinator.com/item?id=49084140</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49084140</guid></item><item><title><![CDATA[New comment by bcrl in "Designing an Ethernet Switch ASIC"]]></title><description><![CDATA[
<p>It's easy enough to write a bit of Verilog to perform partial updates on the CRC to only compensate for what has changed.  I did so for an FPGA project I implemented a number of years ago when processing VLAN tags and doing IP forwarding.<p>That said, there are lazy hardware designers that just slap on a block to recompute the CRC and replace the old one with the new.  An experience I had years ago at Red Hat taught me that the hard way as a shiny new Cisco ethernet switch IT deployed ended up costing us weeks of frustration and delayed a release when it caused bit flips in NFS packets during stress testing.  The switch was so awesomely advanced that it recomputed the CRC on the bit flipped packets causing kernel builds to fail.  <sigh></p>
]]></description><pubDate>Sat, 25 Jul 2026 14:01:36 +0000</pubDate><link>https://news.ycombinator.com/item?id=49047649</link><dc:creator>bcrl</dc:creator><comments>https://news.ycombinator.com/item?id=49047649</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49047649</guid></item><item><title><![CDATA[New comment by bcrl in "OpenWrt One – Open Hardware Router"]]></title><description><![CDATA[
<p>The U7 Lite only does 2x2 MIMO.  Compared to 4x4 MIMO in the U6 LR, the U7 Lite therefore does a much poorer job at beamforming (directing the energy of the signal towards the device).<p>Personally, I find it better to have multiple low end access points (like the TP-Link Archer C80 which has 3x3 MIMO on 5 GHz) deployed to achieve excellent coverage in a house.  Sadly, the U7 line is a bit too expensive for that.  Plus, I'm loathe to deal with UniFi deployments now that I am well versed in the glass jaws in the platform.<p>There really is space in the market for a product line that is basically what UniFi is, but done "right".  Ie: can be debugged or you can fix it without an internet connection or recover the system when the owner forgets the password and lost access to the email account used for 2FA.  UniFi is an absolute nightmare the moment anything goes even slightly wrong.</p>
]]></description><pubDate>Tue, 07 Jul 2026 16:34:11 +0000</pubDate><link>https://news.ycombinator.com/item?id=48820165</link><dc:creator>bcrl</dc:creator><comments>https://news.ycombinator.com/item?id=48820165</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48820165</guid></item><item><title><![CDATA[New comment by bcrl in "SpaceX to buy Cursor for $60B"]]></title><description><![CDATA[
<p>What precisely is the moat surrounding AI that SpaceX is using to justify this kind of spending spree?  I don't how SpaceX and other AI companies will be able to keep the weights of their AI models private in the face of interest by virtually everyone in the world.  It would be absolutely trivial for a nation state to walk into a data center using a state issued security certificate to seize a few of the physical servers running the cloud services of OpenAI / Grok / Claude.  Copying the weights is trivial.  Infiltrating a company with spies as new hire coders to gain access to source code is also trivial.<p>This is really starting to feel like the pets.com era again.</p>
]]></description><pubDate>Tue, 16 Jun 2026 13:07:26 +0000</pubDate><link>https://news.ycombinator.com/item?id=48554720</link><dc:creator>bcrl</dc:creator><comments>https://news.ycombinator.com/item?id=48554720</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48554720</guid></item><item><title><![CDATA[New comment by bcrl in "Canada Is Acting Increasingly Like the EU's 28th Member State"]]></title><description><![CDATA[
<p>The US' ongoing hostility towards Canada is decimating the relationship.  The auto sector chaos inflicted by the US has destroyed decades of cross-border integration that benefited both countries, and it is now resulting in the cancellation of major projects (like the Honda $15 billion dollar Ontario EV project being scrapped).  The trust Canada had shared with the US as relationship that benefited both countries is gone.<p>The sad thing is that the relationship probably cannot be rebuilt anytime soon.  It will take decades to restore trust that was damaged in a few short years.  Canada is forced to diversify and build closer relationships with less volatile nations across the world.  This is probably good for Canada in the long term.</p>
]]></description><pubDate>Sat, 16 May 2026 00:26:35 +0000</pubDate><link>https://news.ycombinator.com/item?id=48155628</link><dc:creator>bcrl</dc:creator><comments>https://news.ycombinator.com/item?id=48155628</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48155628</guid></item><item><title><![CDATA[New comment by bcrl in "Dead.Letter (CVE-2026-45185) – How XBOW found an unauthenticated RCE on Exim"]]></title><description><![CDATA[
<p>Postfix has a far better security track record.  Exim has a steady stream of CVEs.</p>
]]></description><pubDate>Sat, 16 May 2026 00:19:16 +0000</pubDate><link>https://news.ycombinator.com/item?id=48155575</link><dc:creator>bcrl</dc:creator><comments>https://news.ycombinator.com/item?id=48155575</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48155575</guid></item><item><title><![CDATA[New comment by bcrl in "A Caddy Cert Expired Because Systemd-Resolved Was Selectively Broken"]]></title><description><![CDATA[
<p>Personally, I find the predictable network names feature infuriating 100% of the time.  Changing the name of network interfaces made nothing better, and actively made things worse for systems with a single NIC (virtually none of the systems I use with a single nic use the same name).  Network interface configurations could already be bound to MAC addresses rather than names, and that had been implemented even before the enpXXX style names came into being.<p>Persistent ethX names were far better to me, and we had those before enpXXX via udev.  At least then when I logged into a random system with a single NIC it was called eth0.  With 2 NICs they were eth0 and eth1.  Simple to predict, no thinking required (unless the system already had bound those names to other MAC addresses).<p>Usability dies by a thousand cuts.  Forcing needlessly complex behaviour onto people with simple use-cases is not an improvement.</p>
]]></description><pubDate>Tue, 12 May 2026 13:06:39 +0000</pubDate><link>https://news.ycombinator.com/item?id=48107704</link><dc:creator>bcrl</dc:creator><comments>https://news.ycombinator.com/item?id=48107704</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48107704</guid></item><item><title><![CDATA[New comment by bcrl in "How Wake-On-LAN works (2020)"]]></title><description><![CDATA[
<p>All you need are NAND gates.</p>
]]></description><pubDate>Thu, 16 Apr 2026 01:45:51 +0000</pubDate><link>https://news.ycombinator.com/item?id=47787685</link><dc:creator>bcrl</dc:creator><comments>https://news.ycombinator.com/item?id=47787685</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47787685</guid></item><item><title><![CDATA[New comment by bcrl in "The buns in McDonald's Japan's burger photos are all slightly askew"]]></title><description><![CDATA[
<p>McDonalds actually seems to have learned to take latency seriously.  When their touch screen ordering systems were first deployed, the delay between tapping on an item or button was quite noticeable.  These days the systems respond nearly instantaneously.  I'm very glad there are people inside such a large organization that pay attention to that aspect of usability.<p>Now if only every other website on the internet would learn that latency matters...</p>
]]></description><pubDate>Wed, 15 Apr 2026 23:32:05 +0000</pubDate><link>https://news.ycombinator.com/item?id=47786748</link><dc:creator>bcrl</dc:creator><comments>https://news.ycombinator.com/item?id=47786748</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47786748</guid></item><item><title><![CDATA[New comment by bcrl in "We've raised $17M to build what comes after Git"]]></title><description><![CDATA[
<p>BitKeeper tried to do that.  Git was built because the commercial license of BitKeeper became unworkable for the Linux kernel community.<p>"Those who cannot remember the past are condemned to repeat it".</p>
]]></description><pubDate>Sat, 11 Apr 2026 01:46:48 +0000</pubDate><link>https://news.ycombinator.com/item?id=47726422</link><dc:creator>bcrl</dc:creator><comments>https://news.ycombinator.com/item?id=47726422</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47726422</guid></item><item><title><![CDATA[New comment by bcrl in "If you thought code writing speed was your problem you have bigger problems"]]></title><description><![CDATA[
<p>There were more ~26+ years ago.  gcc and egcs had some subtle register allocator bugs that would get tripped up under heavy register pressure on i386 that were the bane of my existence as a kernel developer at the time.</p>
]]></description><pubDate>Tue, 17 Mar 2026 21:13:34 +0000</pubDate><link>https://news.ycombinator.com/item?id=47418410</link><dc:creator>bcrl</dc:creator><comments>https://news.ycombinator.com/item?id=47418410</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47418410</guid></item><item><title><![CDATA[New comment by bcrl in "Please do not A/B test my workflow"]]></title><description><![CDATA[
<p>Please name a computer science program that has an ethics component.<p>Yes, I wish software developers were more like actual engineers in this regard.</p>
]]></description><pubDate>Sat, 14 Mar 2026 17:35:53 +0000</pubDate><link>https://news.ycombinator.com/item?id=47379028</link><dc:creator>bcrl</dc:creator><comments>https://news.ycombinator.com/item?id=47379028</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47379028</guid></item><item><title><![CDATA[New comment by bcrl in "PC processors entered the Gigahertz era today in the year 2000 with AMD's Athlon"]]></title><description><![CDATA[
<p>Software was already far down the bloat path by the time the Core 2 Duo came out, so the upgrade didn't make all that much of a difference in feel given how much latency was caused by software performing random reads off a disk.  That's why SSDs made such a huge difference.<p>Back in the MS-DOS days, the amount of data needed to be read off a disk while the OS booted was negligible, so a second or two on a fast 486 felt amazing compared to the incredibly slow grind of watching code execute on an 8086 or slow 80286.  Software was still in the space of having to run tolerably on an 8086, so the added resources of a newer faster machine actually did improve the feel of the system.</p>
]]></description><pubDate>Sun, 08 Mar 2026 04:49:33 +0000</pubDate><link>https://news.ycombinator.com/item?id=47294496</link><dc:creator>bcrl</dc:creator><comments>https://news.ycombinator.com/item?id=47294496</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47294496</guid></item></channel></rss>