<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: kelleyk</title><link>https://news.ycombinator.com/user?id=kelleyk</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Sat, 13 Jun 2026 13:57:29 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=kelleyk" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by kelleyk in "Do YC after you graduate: Early decision for students"]]></title><description><![CDATA[
<p>I made this mistake.  I love where I've wound up, but I would have gotten there much more quickly and with a lot less heartache if I'd worked as part of an existing company before starting my own.</p>
]]></description><pubDate>Wed, 24 Sep 2025 23:48:37 +0000</pubDate><link>https://news.ycombinator.com/item?id=45367385</link><dc:creator>kelleyk</dc:creator><comments>https://news.ycombinator.com/item?id=45367385</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45367385</guid></item><item><title><![CDATA[New comment by kelleyk in "Google Pixel 9 Pro"]]></title><description><![CDATA[
<p>It is!  If you also need service, Google Fi has had a promotion for a while that gives you the $500 purchase price back over 24 monthly bills.<p>In fact, they also have a promotion right now where you can get $800 back on either the Pixel 9 or 9 Pro, spread over 24 months; that makes the 9 free and the 9 Pro only $200.</p>
]]></description><pubDate>Tue, 13 Aug 2024 18:43:47 +0000</pubDate><link>https://news.ycombinator.com/item?id=41238278</link><dc:creator>kelleyk</dc:creator><comments>https://news.ycombinator.com/item?id=41238278</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=41238278</guid></item><item><title><![CDATA[New comment by kelleyk in "Show HN: Symbolica – Try our symbolic code executor in the browser"]]></title><description><![CDATA[
<p>There are three "example programs" available on your website, but none of them are very interesting.<p>I'd love to see better examples of subtle problems that your tool <i>can</i> detect: the kind of thing where an engineer says "oof, yes, that's obvious now that you've pointed it out" but wouldn't have noticed it right away on their own.</p>
]]></description><pubDate>Thu, 09 Sep 2021 03:33:01 +0000</pubDate><link>https://news.ycombinator.com/item?id=28465897</link><dc:creator>kelleyk</dc:creator><comments>https://news.ycombinator.com/item?id=28465897</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=28465897</guid></item><item><title><![CDATA[New comment by kelleyk in "Samsung Ads – Demand-Side Platform"]]></title><description><![CDATA[
<p>You can absolutely ignore it, even without switching inputs; it appears above the menu/input bar at the bottom and isn't modal.<p>However, it reappears every time the TV is turned on.  At some point, a houseguest (assuming those are a thing at some point in the future) is going to hit "okay", or I'm going to do so accidentally while fumbling with the remote, and that isn't the same thing as actual/deliberate consent from me, the owner of the device.</p>
]]></description><pubDate>Fri, 02 Oct 2020 20:44:07 +0000</pubDate><link>https://news.ycombinator.com/item?id=24666830</link><dc:creator>kelleyk</dc:creator><comments>https://news.ycombinator.com/item?id=24666830</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=24666830</guid></item><item><title><![CDATA[New comment by kelleyk in "Samsung Ads – Demand-Side Platform"]]></title><description><![CDATA[
<p>_Can_ you reject Samsung's EULA?  My Q90T prompts me to accept it every time it's turned on, but the only option appears to be to accept it.  I can't find a "no/reject" option.<p>I do what you suggest in step (3), and never connect it the TV to a network, but it's still concerning.</p>
]]></description><pubDate>Fri, 02 Oct 2020 19:34:31 +0000</pubDate><link>https://news.ycombinator.com/item?id=24666267</link><dc:creator>kelleyk</dc:creator><comments>https://news.ycombinator.com/item?id=24666267</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=24666267</guid></item><item><title><![CDATA[New comment by kelleyk in "Exploiting Intel’s Management Engine"]]></title><description><![CDATA[
<p>Also, if you need to interact with a Supermicro BMC that doesn't support the HTML5 console (for example, because it's running older firmware), I reverse-engineered the proprietary "iKVM" protocol (along with a lot of other parts of the BMC) and implemented support for it on a branch of noVNC, which you can find here: <a href="https://github.com/kelleyk/noVNC" rel="nofollow">https://github.com/kelleyk/noVNC</a></p>
]]></description><pubDate>Fri, 15 Nov 2019 21:09:52 +0000</pubDate><link>https://news.ycombinator.com/item?id=21548793</link><dc:creator>kelleyk</dc:creator><comments>https://news.ycombinator.com/item?id=21548793</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=21548793</guid></item><item><title><![CDATA[New comment by kelleyk in "Unauthorized access to Docker Hub database"]]></title><description><![CDATA[
<p>I haven't seen anyone mention that Docker Hub's automatic build integration requires either "Owner"-level permissions on your organization or "Admin"-level permissions on the individual repository.  Based on the GitHub-side audit log, Docker Hub seems to be using this access to add deploy keys to your repository, but this isn't mentioned in the documentation (which is why we had to go spelunking in the audit log), and if you try to take a least-privilege approach and grant only the read-only access that Docker Hub should require, your GitHub repository will simply not appear in the list of available repositories when you try to configure an automatic build.<p>Lots of people may have exposed credentials to Docker Hub that can do much more than disclose proprietary source code.</p>
]]></description><pubDate>Mon, 29 Apr 2019 11:00:47 +0000</pubDate><link>https://news.ycombinator.com/item?id=19777284</link><dc:creator>kelleyk</dc:creator><comments>https://news.ycombinator.com/item?id=19777284</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=19777284</guid></item><item><title><![CDATA[New comment by kelleyk in "How we spent two weeks hunting an NFS bug in the Linux kernel"]]></title><description><![CDATA[
<p>Out of curiosity, what do you do that you get to do that?  Sounds fascinating---I've had lots of fun with dtrace (and, more recently, bcc).</p>
]]></description><pubDate>Thu, 29 Nov 2018 02:00:18 +0000</pubDate><link>https://news.ycombinator.com/item?id=18557476</link><dc:creator>kelleyk</dc:creator><comments>https://news.ycombinator.com/item?id=18557476</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=18557476</guid></item><item><title><![CDATA[New comment by kelleyk in "$200 retail whole genome sequencing now available"]]></title><description><![CDATA[
<p>There may be nice things to say about Veritas, but they charge an extra $99 for VCF files, and the actual raw data (FASTQ/BAM) is not available at any price (to you; Veritas has it).  This is after you've paid $1,000 for sequencing.</p>
]]></description><pubDate>Fri, 23 Nov 2018 09:41:17 +0000</pubDate><link>https://news.ycombinator.com/item?id=18515426</link><dc:creator>kelleyk</dc:creator><comments>https://news.ycombinator.com/item?id=18515426</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=18515426</guid></item><item><title><![CDATA[New comment by kelleyk in "A Peek Inside a 400G Cisco Network Chip"]]></title><description><![CDATA[
<p>That's not because it's slower; that's because it's the low-end (non-programmable) member of its family.  It was designed by a company called Fulcrum, which produced the FocalPoint FM2000/FM3000/FM4000 (1/10G) and FM5000/FM6000 (10G/40G) switching ASICs before being acquired by Intel.<p>I think that a comparison to the FM4000, which is the programmable series of parts in the "Monaco" family, would be more fair.  Here's their datasheet: 
 <a href="https://www.intel.com/content/dam/www/public/us/en/documents/datasheets/ethernet-switch-fm4000-datasheet.pdf" rel="nofollow">https://www.intel.com/content/dam/www/public/us/en/documents...</a><p>The FocalPoint ASICs were, as far as I know, some of the first to support (a demo-quality implementation of) OpenFlow in hardware.  When Intel bought them, they released the datasheets, which is neat.<p>As a real-world example, these ASICs were used in Arista's 7100 series (c. 2008) switches.  They published a two-part "Technical Evaluation Guide" for those switches which are, among other things, an interesting glance at how switches are constructed out of ASICs.  Part 1 (<a href="https://local.com.ua/forum/index.php?app=core&module=attach&section=attach&attach_id=6518" rel="nofollow">https://local.com.ua/forum/index.php?app=core&module=attach&...</a>) shows the topology of each switch (starting on page 13).<p>The 7124 is a single 24-port FM4224 with all 24 ports connected to front-panel ports.  The 7148S has three FM4224 ASICs; each is connected to 16 front-panel ports and uses 4 ports (40 Gb/s) to connect to each of the other two ASICs in a ring.  Intuitively, this means that it's possible that those inter-ASIC connections could cause bottlenecks (if e.g. all 16 ports connected to the first ASIC try to send 160 Gbit/s of traffic to the 16 connected to the second ASIC, they'll saturate the 40 Gbit/s of connectivity between the ASICs).  Therefore, Arista also offered the 7148SX, which is non-blocking but needs six (!) FM4224s to make it happen!</p>
]]></description><pubDate>Fri, 15 Sep 2017 04:18:44 +0000</pubDate><link>https://news.ycombinator.com/item?id=15254607</link><dc:creator>kelleyk</dc:creator><comments>https://news.ycombinator.com/item?id=15254607</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=15254607</guid></item><item><title><![CDATA[New comment by kelleyk in "Monitoring and Tuning the Linux Networking Stack: Receiving Data"]]></title><description><![CDATA[
<p>A nice overview; thanks for sharing it!<p>I don't think that your claim that GRO is "a software implementation of a hardware optimization that is known as Large Receive Offloading (LRO)" is correct, though.  GRO effectively replaces LRO [1]; it has fewer limitations (it works with non-TCP traffic and with bridging [2], for example).  Drivers need to support it, but they are free to take advantage of hardware offloading/acceleration, and many do (including e.g. the ixgbe driver [3]).<p>----<p>[1] In terms of function, and in the sense that LRO could be removed if the drivers that were using LRO were updated to use GRO instead.<p>[2] Relevant bug: <a href="https://bugzilla.redhat.com/show_bug.cgi?id=772317" rel="nofollow">https://bugzilla.redhat.com/show_bug.cgi?id=772317</a><p>[3] Which actually supports both LRO and GRO; if I recall, in older versions, bad things(tm) would sometimes happen if you had both enabled at the same time (whereas now the LRO setting is ignored if GRO is enabled).</p>
]]></description><pubDate>Thu, 23 Jun 2016 14:58:04 +0000</pubDate><link>https://news.ycombinator.com/item?id=11961402</link><dc:creator>kelleyk</dc:creator><comments>https://news.ycombinator.com/item?id=11961402</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=11961402</guid></item><item><title><![CDATA[New comment by kelleyk in "1Password Leaks Your Data"]]></title><description><![CDATA[
<p>This is actually not the whole story.  WinZip archives can be encrypted like you describe, but they can also be created with both the data and the list of contents encrypted.</p>
]]></description><pubDate>Mon, 19 Oct 2015 06:35:24 +0000</pubDate><link>https://news.ycombinator.com/item?id=10411452</link><dc:creator>kelleyk</dc:creator><comments>https://news.ycombinator.com/item?id=10411452</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=10411452</guid></item><item><title><![CDATA[New comment by kelleyk in "Porting Linux to a new processor architecture, Part 1"]]></title><description><![CDATA[
<p>Have you heard of Device Tree?  Linux supports it on the x86, ARM, and PPC architectures, among others.<p>(<a href="http://events.linuxfoundation.org/sites/events/files/slides/petazzoni-device-tree-dummies.pdf" rel="nofollow">http://events.linuxfoundation.org/sites/events/files/slides/...</a>, <a href="http://www.devicetree.org/Main_Page" rel="nofollow">http://www.devicetree.org/Main_Page</a>, <a href="https://en.wikipedia.org/wiki/Device_tree" rel="nofollow">https://en.wikipedia.org/wiki/Device_tree</a>, <a href="http://elinux.org/Device_Tree" rel="nofollow">http://elinux.org/Device_Tree</a>)</p>
]]></description><pubDate>Thu, 03 Sep 2015 16:45:47 +0000</pubDate><link>https://news.ycombinator.com/item?id=10165952</link><dc:creator>kelleyk</dc:creator><comments>https://news.ycombinator.com/item?id=10165952</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=10165952</guid></item><item><title><![CDATA[New comment by kelleyk in "AWS EC2 Container Service"]]></title><description><![CDATA[
<p>Linode's is the same.  I agree that it's annoying and that the terminology is slightly deceptive.<p>Any of these "datacenter LANs", though, tend to be fast and free (in terms of bandwidth).  We just use a VPN overlay and call it a day.</p>
]]></description><pubDate>Fri, 14 Nov 2014 00:40:23 +0000</pubDate><link>https://news.ycombinator.com/item?id=8605151</link><dc:creator>kelleyk</dc:creator><comments>https://news.ycombinator.com/item?id=8605151</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=8605151</guid></item><item><title><![CDATA[New comment by kelleyk in "AWS EC2 Container Service"]]></title><description><![CDATA[
<p>I haven't had a chance to play with it, but I ran across this project the other day: <a href="https://github.com/cloudius-systems/osv" rel="nofollow">https://github.com/cloudius-systems/osv</a><p>"OSv was designed from the ground up to execute a single application on top of a hypervisor... OSv... runs unmodified Linux applications (most of Linux's ABI is supported) and in particular can run an unmodified JVM, and applications built on top of one."</p>
]]></description><pubDate>Fri, 14 Nov 2014 00:26:30 +0000</pubDate><link>https://news.ycombinator.com/item?id=8605103</link><dc:creator>kelleyk</dc:creator><comments>https://news.ycombinator.com/item?id=8605103</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=8605103</guid></item><item><title><![CDATA[New comment by kelleyk in "Fred Wilson is wrong about “Free”"]]></title><description><![CDATA[
<p>It seemed like an aside, but the issue of being at the mercy of the people who provide platforms and other foundational technology really resonates with me.<p>("Building on top of a platform is a foundational risk, and if your platform decided one day that it doesn’t like what you are doing, or likes what you are doing so much they want to compete with you, it’s Very Bad. Your platform partner can easily damage your quality of service, or simply shut you down. If that happens, your business is dead.")<p>Have I missed an explanation from Dalton or the App.net crew  about how what they're envisioning will be different?  What protects a developer from being at their mercy for uptime, timely bugfixes, continued development, and so on?<p>Actually, on a more general level... what <i>can</i> platform/tech providers do to provide those reassurances?  I can't seem to think of anyone who's done a really stellar job of it.</p>
]]></description><pubDate>Thu, 19 Jul 2012 21:08:41 +0000</pubDate><link>https://news.ycombinator.com/item?id=4268070</link><dc:creator>kelleyk</dc:creator><comments>https://news.ycombinator.com/item?id=4268070</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=4268070</guid></item><item><title><![CDATA[New comment by kelleyk in "Parallel Universe (YC S12) Developing Spatial Databases For Matrix-Style Games"]]></title><description><![CDATA[
<p>I'd be curious to hear more about what they're actually doing (technically speaking).  Is this a wrapper around kd-trees, R-trees, and their friends and relatives?  Is it something fancier?</p>
]]></description><pubDate>Tue, 10 Jul 2012 03:13:05 +0000</pubDate><link>https://news.ycombinator.com/item?id=4221892</link><dc:creator>kelleyk</dc:creator><comments>https://news.ycombinator.com/item?id=4221892</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=4221892</guid></item><item><title><![CDATA[New comment by kelleyk in " Ask HN: Freelancer? Seeking freelancer? (February 2012)"]]></title><description><![CDATA[
<p>I'd love to chat, but you don't list a contact email and don't seem to be particularly Googleable.  Shame!</p>
]]></description><pubDate>Sun, 12 Feb 2012 22:23:21 +0000</pubDate><link>https://news.ycombinator.com/item?id=3583229</link><dc:creator>kelleyk</dc:creator><comments>https://news.ycombinator.com/item?id=3583229</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=3583229</guid></item><item><title><![CDATA[New comment by kelleyk in "Pre-sales of ‘disappointing’ iPhone 4S fail to disappoint"]]></title><description><![CDATA[
<p>That's a bug, not a feature.  I leave my phone on vibrate all the time, and when I had an iPhone, the hardware switch would cause it to constantly go back to ringing as I took it in and out of my pocket.</p>
]]></description><pubDate>Sat, 08 Oct 2011 20:24:09 +0000</pubDate><link>https://news.ycombinator.com/item?id=3088817</link><dc:creator>kelleyk</dc:creator><comments>https://news.ycombinator.com/item?id=3088817</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=3088817</guid></item><item><title><![CDATA[New comment by kelleyk in "Amazon Route 53 Reduces Hosted Zone Pricing"]]></title><description><![CDATA[
<p>I've been using the wonderful cli53 (available on GitHub here: <a href="https://github.com/barnybug/cli53" rel="nofollow">https://github.com/barnybug/cli53</a>).<p>All I have to type is "cli53 import example.com --file example.bind --replace --wait" and it'll replace all of the records for example.com with what's in the BIND file, and the --wait makes it poll Amazon until the "pending changes" go through.</p>
]]></description><pubDate>Tue, 27 Sep 2011 12:28:50 +0000</pubDate><link>https://news.ycombinator.com/item?id=3042937</link><dc:creator>kelleyk</dc:creator><comments>https://news.ycombinator.com/item?id=3042937</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=3042937</guid></item></channel></rss>