Hacker News: micah_chatt

New comment by micah_chatt in "Airport Simulator"

micah_chatt — Mon, 20 Jul 2026 22:17:08 +0000

Super fun game! Minor modifications that would be fun: * As you draw a path, at the same rate gradually bold/pulse all other planes' existing drawn paths from their current location forward so I can visually see if two future lines will not just overlap, but overlap at the same time * A slider to control game speed * A clearer arrow over the landing zone. It took me quite a while to realize how to land a plane * A timer over each runway to next takeoff

New comment by micah_chatt in "U.S. Senators Vote to Ban Themselves from Trading on Prediction Markets"

micah_chatt — Thu, 30 Apr 2026 21:05:28 +0000

What about Senate staff?

Why did Apple build Linux Container support?

micah_chatt — Fri, 13 Jun 2025 14:56:58 +0000

Article URL: https://micahhausler.com/posts/why-did-apple-build-linux-container-support/

Comments URL: https://news.ycombinator.com/item?id=44269114

Points: 5

# Comments: 0

New comment by micah_chatt in "Daylight Computer – New 60fps e-paper tablet"

micah_chatt — Fri, 24 May 2024 15:29:17 +0000

First, this looks amazing, congrats! The primary reason I've held off on buying an eink tablet (remarkable/kindle scribe) is because much of the non-leisure reading I do for work requires enterprise-friendly features like MDM and encryption, and even with that plugging into a laptop to sync every document is a major UX hurdle.

Are you thinking about this primarily as a consumer device with, or do you want to go after those business applications sooner than later?

Disclosure: I work at AWS, own a Kindle Oasis, but have nothing to do with Kindle or devices.

LEGO Building Instructions

micah_chatt — Thu, 06 Jul 2023 14:29:49 +0000

Article URL: https://archive.org/details/lego-set-instructions

Comments URL: https://news.ycombinator.com/item?id=36616398

Points: 415

# Comments: 143

Rubber Duck Debugging

micah_chatt — Thu, 24 Mar 2022 17:13:49 +0000

Article URL: https://en.wikipedia.org/wiki/Rubber_duck_debugging

Comments URL: https://news.ycombinator.com/item?id=30792711

Points: 1

# Comments: 0

Ubiquiti hack may have been an inside job

micah_chatt — Sat, 04 Dec 2021 00:22:25 +0000

Article URL: https://www.theverge.com/2021/12/1/22812761/ubiquiti-data-breach-aws-doj-indictment-inside-job

Comments URL: https://news.ycombinator.com/item?id=29437362

Points: 3

# Comments: 0

List of Eponymous Laws

micah_chatt — Wed, 13 Oct 2021 14:31:25 +0000

Article URL: https://en.wikipedia.org/wiki/List_of_eponymous_laws

Comments URL: https://news.ycombinator.com/item?id=28852572

Points: 2

# Comments: 0

New comment by micah_chatt in "AWS federation comes to GitHub Actions"

micah_chatt — Wed, 15 Sep 2021 14:35:34 +0000

I just mean that it was a coincidence that I asked GitHub for the feature and they were already working on it

New comment by micah_chatt in "AWS federation comes to GitHub Actions"

micah_chatt — Wed, 15 Sep 2021 12:51:24 +0000

Nice write up! By pure coincidence I asked GitHub for this feature 2 weeks ago [1] and they confirmed it was in the works.

[1]. https://twitter.com/micahhausler/status/1431350884810821637

New comment by micah_chatt in "Amazon EKS Anywhere"

micah_chatt — Thu, 09 Sep 2021 17:24:07 +0000

EKS Engineer here. This is something we have lots of thoughts about and want to make better in EKS on AWS.

For EKS Anywhere, you can configure your cluster with OIDC auth today, and IAM auth is coming very soon. https://github.com/aws/eks-anywhere/issues/90

New comment by micah_chatt in "Ask HN: Who is hiring? (September 2020)"

micah_chatt — Wed, 02 Sep 2020 01:29:44 +0000

Amazon EKS | Sr Software Engineer | Remote (US/Canada) | Full Time

As a Senior Software Engineer in the Elastic Kubernetes Service (EKS) team you will help us deliver the mission of making AWS the best place to run containers. You will be part of an exceptional team that is moving the needle towards making containers as the next generation compute platform. This is an opportunity to engineer systems on a massive scale, and to gain top-notch experience in distributed systems and cloud computing.

https://www.amazon.jobs/en/jobs/1231608/senior-software-deve...

Also hiring:

* Senior Software Manager https://www.amazon.jobs/en/jobs/1202522/software-development...

* Software Engineer https://www.amazon.jobs/en/jobs/1253531/software-development...

Dark Fiber

micah_chatt — Wed, 20 May 2020 23:58:21 +0000

Article URL: https://en.wikipedia.org/wiki/Dark_fibre

Comments URL: https://news.ycombinator.com/item?id=23253438

Points: 5

# Comments: 1

New comment by micah_chatt in "Monzo: How our security team handle secrets"

micah_chatt — Fri, 11 Oct 2019 22:03:11 +0000

That would by my error, its actually `BoundServiceAccountTokenVolume` and `TokenRequestProjection`

New comment by micah_chatt in "Monzo: How our security team handle secrets"

micah_chatt — Fri, 11 Oct 2019 19:49:15 +0000

(Disclosure: I work on Kubernetes/EKS Security at AWS)

I'm curious why they didn't look into using Kubernetes ProjectedVolumeTokens for authenticating to Vault? The tokens Kubernetes issues are not stored in etcd, and they contain pod-specific metadata so they are invalidated as soon as the pod dies (when using TokenReview). Alternatively, they can be used to directly authenticate with Vault since they're OIDC-valid tokens [1].

The semantics around secrets in Kubernetes aren't nearly as robust as Vault, so I was surprised to not see this more clearly called out (ex: list secrets == get all keys and values). Even if you use KMS/AES encryption (which they reference) that doesn't help with access control.

[1] https://www.vaultproject.io/docs/auth/jwt.html

New comment by micah_chatt in "Be wary of functions which take several parameters of the same type"

micah_chatt — Fri, 27 Sep 2019 00:00:48 +0000

This. It extends to command line tools too. I can _never_ remember what the order is for `ln -s`.

New comment by micah_chatt in "How Far Out Is AWS Fargate?"

micah_chatt — Thu, 15 Aug 2019 18:02:11 +0000

You are correct that the API server is only aware of the VPC network, and not any overlays. One solution to the metrics-server or other webhooks is to use host-networking mode so the API server can have connectivity.

New comment by micah_chatt in "How Far Out Is AWS Fargate?"

micah_chatt — Thu, 15 Aug 2019 15:42:10 +0000

EKS Engineer here.

Calico policy can be used with the AWS VPC CNI, but you can remove the default CNI and install Calico or any other CNI plugin you’d like.

New comment by micah_chatt in "How Far Out Is AWS Fargate?"

micah_chatt — Thu, 15 Aug 2019 15:32:34 +0000

EKS Engineer here, thanks for the feedback.

Service IP configurability is a very common ask, and as you’ve linked, is on our roadmap along with a slew of other control plane configuration options.

You can delete the AWS VPC CNI DaemonSet and install any CNI plugin you’d like.

EKS regularly backs up etcd and has automatic restore in the case of a failure. Manually restoring to an old snapshot would be quite disruptive. What is your use case, and what would be the interface you’d like to see?

New comment by micah_chatt in "Blender 2.80"

micah_chatt — Tue, 30 Jul 2019 19:01:59 +0000

One of the things about blender that was frustrating for me when I last tried it ~3 years ago was the inability to use a different python REPL (ex: iPython) or easily import the blender python libraries in a non-blender python process. Can anyone say if this has gotten better?