Hacker News: gbrayut

New comment by gbrayut in "Mass phishing emails pretending to be Y Combinator right now"

gbrayut — Wed, 24 Sep 2025 00:54:23 +0000

Worth reporting the phishing domain(s) so they can potentially be red-banned https://safebrowsing.google.com/safebrowsing/report_phish/

Yubikey Security Advisory YSA-2024-03 Infineon Ecdsa Private Key Recovery

gbrayut — Tue, 03 Sep 2024 16:47:04 +0000

Article URL: https://www.yubico.com/support/security-advisories/ysa-2024-03/

Comments URL: https://news.ycombinator.com/item?id=41436698

Points: 24

# Comments: 5

New comment by gbrayut in "A Two-Stroke Engine Made from Scratch Using Basic Hardware Store Parts"

gbrayut — Thu, 08 Aug 2024 00:43:59 +0000

I follow like 80% of the channels listed in this thread so far, so here are some more that I enjoy

https://youtube.com/@cuttingedgeengineering

https://youtube.com/@snowballengineering

https://youtube.com/@noengineerhere (but probably too much comedy for your taste)

https://youtube.com/@matthiaswandel

https://youtube.com/@agingwheels

https://youtube.com/@breakingtaps

https://youtube.com/@saveitforparts

New comment by gbrayut in "SAPwned: SAP AI vulnerabilities expose customers' cloud environments and privat"

gbrayut — Thu, 18 Jul 2024 17:31:29 +0000

There are a lot of other ways to bypass the Istio sidecar proxy, which is not designed to be a general egress boundary/firewall. See https://blog.howardjohn.info/posts/bypass-egress/

New comment by gbrayut in "Ask HN: What have you built with ESPHome, ESP8266 or similar hardware"

gbrayut — Sat, 27 Apr 2024 22:42:33 +0000

I connected an ESP8266 via serial protocol to the extra programming pins on a QMK based keypad (https://www.crowdsupply.com/anavi-technology/anavi-macro-pad...) so that it can have layers that directly trigger actions via Home Assistant API.

Also use the Bee Motion ESP32-S3 (https://www.crowdsupply.com/smart-bee-designs/bee-motion-s3) for their PIR motion sensing and running other sensors around the house.

And I have an old Wemos D1 mini connected to my Arduino based smart garage door that helps automate things like lock/unlocking the front door or triggering other presence based actions.

The future of async in the Component Model (WASM I/O, Luke Wagner, 41min)[video]

gbrayut — Thu, 28 Mar 2024 21:47:24 +0000

Article URL: https://www.youtube.com/watch?v=y3x4-nQeXxc

Comments URL: https://news.ycombinator.com/item?id=39857748

Points: 4

# Comments: 0

New comment by gbrayut in "Ask HN: What other news feeds do you read besides Hacker News?"

gbrayut — Sat, 03 Jun 2023 17:01:18 +0000

I highly recommend the https://dailytechnewsshow.com/ podcast by Tom Merritt which usually runs 30 minutes episodes, or their 5 minute Daily Tech Headlines version.

Zoom app dock: Congratulations, your app has apps in it now

gbrayut — Tue, 10 Jan 2023 22:21:47 +0000

Article URL: https://newsletter.danhon.com/archive/s14e06-congratulations-your-app-has-apps-in-it-now/

Comments URL: https://news.ycombinator.com/item?id=34332375

Points: 68

# Comments: 62

New comment by gbrayut in "Linode Managed Databases"

gbrayut — Wed, 25 May 2022 01:56:53 +0000

https://aiven.io/postgresql

New comment by gbrayut in "Gloo GraphQL Beta: Envoy Based GraphQL Server in Gloo Edge"

gbrayut — Thu, 17 Mar 2022 22:29:08 +0000

Also more details in a solocon video (28 minutes) https://www.youtube.com/watch?v=jefxqvCWU6E&list=PLBOtlFtGzn...

Gloo GraphQL Beta: Envoy Based GraphQL Server in Gloo Edge

gbrayut — Thu, 17 Mar 2022 22:28:16 +0000

Article URL: https://www.solo.io/blog/announcing-graphql-for-gloo-edge-in-beta-now/

Comments URL: https://news.ycombinator.com/item?id=30716590

Points: 1

# Comments: 1

New comment by gbrayut in "AWS Support able to access any S3 object due to permission change"

gbrayut — Thu, 23 Dec 2021 15:16:52 +0000

Curious on your thoughts about the "Sovereign Cloud" features discussed at https://cloud.google.com/blog/products/identity-security/new...

Would having a 3rd party host the services in the EU meet your requirements? Or having data residency restrictions with strict key management, EU based support, and access transparency/approvals?

IMO Google is also taking this seriously, but I am genuinely curious if any off the above would meet your requirements.

New comment by gbrayut in "Strange domain names that developers bought"

gbrayut — Thu, 12 Aug 2021 06:18:20 +0000

Many TLDs don't count (letter dash letter) as a premium/reserved domain like they do for other dictionary words or 2-3 character domains. Looks like v-s.space is claimed but for example z-s was just $9.99 a year

I used that trick when .dev was launched and snagged a-z.dev for all my future domain name needs

Forget Mesos and OpenStack, Hashi Stack Is the New Next Platform

gbrayut — Thu, 17 Jun 2021 01:25:58 +0000

Article URL: https://www.nextplatform.com/2021/06/15/forget-mesos-and-openstack-hashi-stack-is-the-new-next-platform/

Comments URL: https://news.ycombinator.com/item?id=27535333

Points: 19

# Comments: 3

RedditEng: The Rollout of Reputation Service

gbrayut — Tue, 08 Jun 2021 04:31:38 +0000

Article URL: https://www.reddit.com/r/RedditEng/comments/nudfv1/the_rollout_of_reputation_service/

Comments URL: https://news.ycombinator.com/item?id=27430654

Points: 1

# Comments: 0

New comment by gbrayut in "A New Architecture for Plaid Link: Server-Driven UI with Directed Graphs"

gbrayut — Wed, 12 May 2021 16:44:51 +0000

Curious how this compares with something like Apache Airflow?

https://airflow.apache.org/docs/apache-airflow/stable/concep...

New comment by gbrayut in "Advice on self-directed IRAs and SAFEs"

gbrayut — Fri, 23 Apr 2021 05:50:32 +0000

Strata was the custodian for LendingClub IRA accounts, but sounds like they have had some sort of falling out recently. Got an email this month about switching to https://www.altoira.com/ and then another from Strata trying to get me to stay. Now Stratas charging $100 fee for any accounts that didn't renew earlier this year.

I've only ever used their site when moving money in or out of the IRA but it's a pretty terrible UI and they don't seem to be very responsive. I've had a withdraw pending for over 4 weeks now trying to move money to another custodian.

You are probably better off finding a different approach.

New comment by gbrayut in "Rockstar thanks GTA Online player who fixed load times, official update coming"

gbrayut — Tue, 16 Mar 2021 00:31:24 +0000

Reminds me of a Windows installer I working on many years ago, that seemed to take a long time using CPU but otherwise not doing any real work. Turned out the SDK we were using tried to update the progress bar every kilobyte or something like that, and our near-gigabyte sized packages filled the message loop with a bunch of pointless updates (30.001% -> 30.002% but both displayed as 30%).

Once the vendor fixed the issue it shaved a few minutes off the install time that had previously just been a UI glitch (processing the large backlog of progress bar update messages).

New comment by gbrayut in "Bazel Removed from Kubernetes"

gbrayut — Tue, 02 Mar 2021 00:26:13 +0000

https://twitter.com/BenTheElder/status/1366478663571529728

"This should not be taken terribly deeply as a judgement of bazel. Our other build (make) is full of issues, it's just impractical for us to continue to maintain both & for our usage & as voiced by our contributors we opted to stick to the build we've been releasing with for ages"

New comment by gbrayut in "Migrating a 40TB SQL Server Database"

gbrayut — Thu, 30 Jul 2020 17:15:11 +0000

Case in point, one of my favorite system architecture/design blog posts:

Providence: Failure Is Always An Option

https://jasonpunyon.com/blog/2015/02/12/providence-failure-i...

Which has one of my favorite quotes about scope creep:

Kevin and I have essentially become allergic to big projects. We attempt to practice “What can get done by Friday?” driven development. Keeping things small precludes a whole class of errors like “We need a new datastore”, ‘cause that ain’t gettin’ done by Friday. It’s hard to sink a week on something you weren’t supposed to be working on when all you have is a week.