<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: erincandescent</title><link>https://news.ycombinator.com/user?id=erincandescent</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Mon, 13 Apr 2026 13:45:32 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=erincandescent" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by erincandescent in "20 years on AWS and never not my job"]]></title><description><![CDATA[
<p>Scaleway's equivalent only allows connections from ports <1024. This is cute and means only processes with CAP_NET_BIND_SERVICE can retrieve the tokens.<p>You can do similar with vsock(7) sockets. This also has the advantage that it's harder to trick an application into making a connection to a vsock socket.<p>Both of these have the weakness that it is not entirely atypical to give processes CAP_NET_BIND_SERVICE so they can listen on "privileged" sockets, but they work against anything without that.<p>Even better, you could put bootstrap credentials in DMI data or similar, where it'll end up (on Linux) inside a sysfs directory which can only be read by root.</p>
]]></description><pubDate>Sat, 11 Apr 2026 10:35:48 +0000</pubDate><link>https://news.ycombinator.com/item?id=47729345</link><dc:creator>erincandescent</dc:creator><comments>https://news.ycombinator.com/item?id=47729345</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47729345</guid></item><item><title><![CDATA[New comment by erincandescent in "Filing the corners off my MacBooks"]]></title><description><![CDATA[
<p>You can fix it by switching to one of the grounded charger heads. Unfortunately in most locales those are only available with an integrated extension cable (or as everyone seems to call them, the "gooseneck" cables)<p>It happens with other 2-pin chargers on both MacBooks and other laptops, but it depends upon various factors how strong the leakage is</p>
]]></description><pubDate>Sat, 11 Apr 2026 09:38:06 +0000</pubDate><link>https://news.ycombinator.com/item?id=47729071</link><dc:creator>erincandescent</dc:creator><comments>https://news.ycombinator.com/item?id=47729071</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47729071</guid></item><item><title><![CDATA[New comment by erincandescent in "Jakarta is now the biggest city in the world"]]></title><description><![CDATA[
<p>> Sure some few adults can learn languages as fast as kids, but you completely missed my main points around gatekeeping that language skills always has on adults and less so on kids.<p>Adults in general are actually way faster at learning languages than kids if you control for time actually spent learning the language, but generally adults are required to fit language learning in around a full time job (and are also full of shame/embarrassment)</p>
]]></description><pubDate>Wed, 26 Nov 2025 13:17:21 +0000</pubDate><link>https://news.ycombinator.com/item?id=46057095</link><dc:creator>erincandescent</dc:creator><comments>https://news.ycombinator.com/item?id=46057095</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46057095</guid></item><item><title><![CDATA[New comment by erincandescent in "The 'Toy Story' You Remember"]]></title><description><![CDATA[
<p>On the contrary, an object moving across your field of vision will produce a level of motion blur in your eyes. The same object recorded at 24fps and then projected or displayed in front of your eyes will produce a different level of motion blur, because the object is no longer moving continuously across your vision but instead moving in discrete steps. The exact character of this motion blur can be influenced by controlling what fraction of that 1/24th of a second the image is exposed for (vs. having the screen black)<p>The most natural level of motion blur for a moving picture to exhibit is not that traditionally exhibited by 24fps film, but it is equally not none (unless your motion picture is recorded at such high frame rate that it substantially exceeds the reaction time of your eyes, which is rather infeasible)</p>
]]></description><pubDate>Wed, 12 Nov 2025 15:17:11 +0000</pubDate><link>https://news.ycombinator.com/item?id=45901243</link><dc:creator>erincandescent</dc:creator><comments>https://news.ycombinator.com/item?id=45901243</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45901243</guid></item><item><title><![CDATA[New comment by erincandescent in "The Limits of NTP Accuracy on Linux"]]></title><description><![CDATA[
<p>Chrony can do NTP encapsulated inside PTP packets so as to combine the best parts of both protocols</p>
]]></description><pubDate>Tue, 26 Aug 2025 09:29:13 +0000</pubDate><link>https://news.ycombinator.com/item?id=45024226</link><dc:creator>erincandescent</dc:creator><comments>https://news.ycombinator.com/item?id=45024226</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45024226</guid></item><item><title><![CDATA[New comment by erincandescent in "USB-C hubs and my slow descent into madness (2021)"]]></title><description><![CDATA[
<p>Was it actually repeating packets or was it sending out pause frames?<p>In my experience USB ethernet adapters send out pause frames which shit-tier switches replicate to all ports in direct contravention of the ethernet specifications.</p>
]]></description><pubDate>Fri, 18 Jul 2025 11:06:17 +0000</pubDate><link>https://news.ycombinator.com/item?id=44603327</link><dc:creator>erincandescent</dc:creator><comments>https://news.ycombinator.com/item?id=44603327</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=44603327</guid></item><item><title><![CDATA[New comment by erincandescent in "USB-C hubs and my slow descent into madness (2021)"]]></title><description><![CDATA[
<p>USB A->C cables are supposed to have a Rp pullup on CC1, and leave CC2 disconnected. Huawei made some A->C cables which (incorrectly, and spec-violatingly) have Rp pullups on both CC lines, which is how you signal you're a power sourcing Debug Accessory<p>Your Pixel 4A is entering debug accessory mode (DebugAccessory.SNK state in the USB-C port state machine); other devices probably don't support debug accessory mode and just shrug.</p>
]]></description><pubDate>Fri, 18 Jul 2025 10:41:47 +0000</pubDate><link>https://news.ycombinator.com/item?id=44603171</link><dc:creator>erincandescent</dc:creator><comments>https://news.ycombinator.com/item?id=44603171</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=44603171</guid></item><item><title><![CDATA[New comment by erincandescent in "Debunking HDR [video]"]]></title><description><![CDATA[
<p>> In my tests with assorted 24-bit sRGB monitors, a difference of 1 in a single channel is almost always indistinguishable (and this might be a matter of monitor tuning); even a difference of 1 simultaneously in all three channels is only visible in a few places along the lerps. (Contrast all those common shitty 18-bit monitors. On those, even with temporal dithering, the contrast between adjacent colors is always glaringly distracting.)<p>Now swap the sRGB primaries for the Rec.2020 primaries. This gives you redder reds, greener greens, and slightly bluer blues (sRGB blue is already pretty good)<p>This is why Rec.2020 specifies a minimum of 10-bit per channel colour. It stretches out the chromaticity space and so you need additional precision.<p>This is "just" Wide Colour Gamut, not HDR. But even retaining the sRGB gamma curve, mapping sRGB/Rec.709 content into Rec.2020 without loss of precision requires 10-bit precision.<p>Swap out the gamma curve for PQ or HLG and then you have extended range at the top. Now you can go super bright without "bleeding" the intensity into the other colour channels. In other words: you can have really bright things without them turning white.<p>Defining things in terms of absolute brightness was a bit of a weird decision (probably influenced by how e.g. movie audio is mixed assuming the 0dBFS = 105dB(SPL) reference level that theaters are supposed to be callibrated to) but pushing additional range above the SDR reference levels is reasonable, especially if you expect that range to be used judiciously and/or you do not expect displays to be able to hit their maximum values on that across the whole screen continuously.</p>
]]></description><pubDate>Sun, 15 Jun 2025 11:53:56 +0000</pubDate><link>https://news.ycombinator.com/item?id=44281845</link><dc:creator>erincandescent</dc:creator><comments>https://news.ycombinator.com/item?id=44281845</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=44281845</guid></item><item><title><![CDATA[New comment by erincandescent in "BGP handling bug causes widespread internet routing instability"]]></title><description><![CDATA[
<p>Being that prescriptive is fundamentally unworkable in practice. Propagating unknown attributes is fundamentally what made the deployment of 32-bit AS numbers possible (originally RFC 4893; unaware routers pass the `AS4_PATH` attribute without needing to comprehend it), large communities (RFC 8092), the Only To Customer attribute (RFC 9234) and others.<p>A BGP Update message is mostly just a container of Type-Length-Value attributes. As long as the TLV structure is intact, you should be able to just pass on those TLVs without problems to any peers that the route is destined for.<p>The problem fundamentally is three things:<p>1. The original BGP RFC suggests tearing down the connection upon receiving an erroneous message. This is a terrible idea, especially for transitive attributes: you'll just reconnect and your peer will resend you the same message, flapping over and over, and the attribute is likely to not even be your peer's fault. The modern recommendation is Treat As Withdraw, i.e. remove any matching routes from the same peer from your routing table.<p>2. A lack of fuzz testing and similar by BGP implementers (Arista in this case)<p>3. Even for vendors which have done such testing, a number of have decided (IMO stupidly) to require you to turn on these robustness features explicitly.</p>
]]></description><pubDate>Tue, 27 May 2025 14:22:27 +0000</pubDate><link>https://news.ycombinator.com/item?id=44107301</link><dc:creator>erincandescent</dc:creator><comments>https://news.ycombinator.com/item?id=44107301</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=44107301</guid></item><item><title><![CDATA[New comment by erincandescent in "Remember FastCGI? (2021)"]]></title><description><![CDATA[
<p>The thing (Fast)CGI had, that http proxying doesn't (and lots of web frameworks/libraries a bit too tied to http, like go net/http don't) have is the SCRIPT_NAME (path processed so far) / PATH_INFO (path left to handle) distinction</p>
]]></description><pubDate>Fri, 11 Apr 2025 10:27:55 +0000</pubDate><link>https://news.ycombinator.com/item?id=43652355</link><dc:creator>erincandescent</dc:creator><comments>https://news.ycombinator.com/item?id=43652355</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=43652355</guid></item><item><title><![CDATA[New comment by erincandescent in "Six day and IP address certificate options in 2025"]]></title><description><![CDATA[
<p>Put the ACME challenges in their own DNS zones. Grant the key permission to only that zone. Risk mitigated.</p>
]]></description><pubDate>Fri, 17 Jan 2025 15:45:32 +0000</pubDate><link>https://news.ycombinator.com/item?id=42738869</link><dc:creator>erincandescent</dc:creator><comments>https://news.ycombinator.com/item?id=42738869</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=42738869</guid></item><item><title><![CDATA[New comment by erincandescent in "Google’s OAuth login doesn’t protect against purchasing a failed startup domain"]]></title><description><![CDATA[
<p>> To resolve this issue, Google could implement two immutable identifiers within > its OpenID Connect (OIDC) claims:
> 1. A unique user ID that doesn’t change over time.
> 2. A unique workspace ID tied to the domain.<p>1. is the OIDC `sub` claim! I strongly suspect that in those 0.04% of accounts where the anonymous quoted engineer reports that the `sub` claim changed, what actually happened was some provisioning/onboarding/offboarding system resulted in the account being deleted and recreated.<p>2. is sensible, and is just a versioned version of the `hd` claim.</p>
]]></description><pubDate>Tue, 14 Jan 2025 17:24:53 +0000</pubDate><link>https://news.ycombinator.com/item?id=42700479</link><dc:creator>erincandescent</dc:creator><comments>https://news.ycombinator.com/item?id=42700479</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=42700479</guid></item><item><title><![CDATA[New comment by erincandescent in "AnandTech Farewell"]]></title><description><![CDATA[
<p>SemiAccurate has always been true to its name: occasional scoops but mixed with a lot of hyperbole, bluster, half truths and things that are just flat out wrong.<p>Back when I worked at a semiconductor company, reading any articles about us was always very funny because it always had more things wrong than right.</p>
]]></description><pubDate>Fri, 30 Aug 2024 16:04:50 +0000</pubDate><link>https://news.ycombinator.com/item?id=41401981</link><dc:creator>erincandescent</dc:creator><comments>https://news.ycombinator.com/item?id=41401981</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=41401981</guid></item><item><title><![CDATA[New comment by erincandescent in ""Out of Band" network management is not trivial"]]></title><description><![CDATA[
<p>For transit I would want to know the path I'm taking up to the point the supplier has redundancy<p>From there the worst that can happen generally is that the packets spiral the wrong way around the continent</p>
]]></description><pubDate>Sun, 07 Jul 2024 11:08:28 +0000</pubDate><link>https://news.ycombinator.com/item?id=40896721</link><dc:creator>erincandescent</dc:creator><comments>https://news.ycombinator.com/item?id=40896721</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=40896721</guid></item><item><title><![CDATA[New comment by erincandescent in ""Out of Band" network management is not trivial"]]></title><description><![CDATA[
<p>Because in networking, if you buy two uplinks and don't check the paths they're taking, fate demands that the fiber seeking back hoe just took out that one duct it turns out both of your "redundant" lines go down</p>
]]></description><pubDate>Sun, 07 Jul 2024 08:38:37 +0000</pubDate><link>https://news.ycombinator.com/item?id=40896094</link><dc:creator>erincandescent</dc:creator><comments>https://news.ycombinator.com/item?id=40896094</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=40896094</guid></item><item><title><![CDATA[New comment by erincandescent in "Queer.af Mastodon instance has been shut down by the Taliban"]]></title><description><![CDATA[
<p>I feel like a lot of the comments in here could be answered by this post: <a href="https://akko.erincandescent.net/notice/AeoVF2zhNHj6LrNXto" rel="nofollow">https://akko.erincandescent.net/notice/AeoVF2zhNHj6LrNXto</a><p>To the people who are like “What did you expect to happen when you picked a .af domain, are you idiots?”<p>* Yes, we were aware of the possibility of suspension from the start<p>* Yes, we were aware that political circumstances could change<p>* But thumbing your nose at conservative autocrats as an even minor form of protest is fun<p>* In the end pretty much everyone has migrated out successfully (and I’ll continue to help anyone who remains)<p>* We’ve all gotten a fun story out of this<p>I’ve been signalling the probable demise of queer.af to my followers for the past year. We knew the end was coming; we just anticipated it to take a little longer</p>
]]></description><pubDate>Mon, 12 Feb 2024 18:27:25 +0000</pubDate><link>https://news.ycombinator.com/item?id=39348430</link><dc:creator>erincandescent</dc:creator><comments>https://news.ycombinator.com/item?id=39348430</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=39348430</guid></item><item><title><![CDATA[New comment by erincandescent in "OpenTF announces fork of Terraform"]]></title><description><![CDATA[
<p>The CDDL is an MPLv1 derivative, so similarities should be unsurprising</p>
]]></description><pubDate>Sun, 27 Aug 2023 18:31:14 +0000</pubDate><link>https://news.ycombinator.com/item?id=37285358</link><dc:creator>erincandescent</dc:creator><comments>https://news.ycombinator.com/item?id=37285358</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=37285358</guid></item><item><title><![CDATA[New comment by erincandescent in "Visa and Mastercard agree to lower average credit card interchange fee below 1%"]]></title><description><![CDATA[
<p>The UK didn't scrap the Interchange Fees Regulation; but as a matter of law there became two separate IFRs, one covering the EEA-cards-in-EEA and one covering UK-cards-in-UK<p>(To put it bluntly, a big amendment was automatically applied to most UK laws on exit day replacing EU & EEA with UK; and of course in the EU the definition of both of those words changed)</p>
]]></description><pubDate>Fri, 19 May 2023 08:50:43 +0000</pubDate><link>https://news.ycombinator.com/item?id=35999399</link><dc:creator>erincandescent</dc:creator><comments>https://news.ycombinator.com/item?id=35999399</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=35999399</guid></item><item><title><![CDATA[New comment by erincandescent in "Visa and Mastercard agree to lower average credit card interchange fee below 1%"]]></title><description><![CDATA[
<p>The UK didn't scrap the Interchange Fees Regulation; but as a matter of law there became two separate IFRs, one covering the EEA-cards-in-EEA and one covering UK-cards-in-UK<p>(To put it bluntly, a big amendment was automatically applied to most UK laws on exit day replacing EU & EEA with UK; and of course in the EU the definition of both of those words changed)</p>
]]></description><pubDate>Fri, 19 May 2023 08:49:48 +0000</pubDate><link>https://news.ycombinator.com/item?id=35999390</link><dc:creator>erincandescent</dc:creator><comments>https://news.ycombinator.com/item?id=35999390</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=35999390</guid></item><item><title><![CDATA[New comment by erincandescent in "SVB does not deserve a bailout. They DID NOT hedge interest rate risk at all"]]></title><description><![CDATA[
<p>...portfolio companies <i>which need to make payroll payments to normal people</i></p>
]]></description><pubDate>Sun, 12 Mar 2023 10:26:46 +0000</pubDate><link>https://news.ycombinator.com/item?id=35118503</link><dc:creator>erincandescent</dc:creator><comments>https://news.ycombinator.com/item?id=35118503</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=35118503</guid></item></channel></rss>