Hacker News: nmjohn

New comment by nmjohn in "Upcoming Changes to Let's Encrypt Certificates"

nmjohn — Tue, 16 Dec 2025 00:15:39 +0000

> and paid for with your privacy (and probably your website user's privacy too)?

That's not really how ssl certs work - google isn't getting any information they wouldn't have otherwise had by issuing the ssl cert.

New comment by nmjohn in "YouTube increases FreeBASIC performance (2019)"

nmjohn — Tue, 02 Dec 2025 21:49:24 +0000

It may also be interesting for people that browsers have a large list of domains they enable or disable certain behavior for a variety of reasons: https://github.com/WebKit/WebKit/blob/main/Source/WebCore/pa...

New comment by nmjohn in "FTC Bans Location Data Company That Powers the Surveillance Ecosystem"

nmjohn — Wed, 04 Dec 2024 20:49:51 +0000

One of the standard link bypasses seems to work here[0] though. Is that not a reliable workaround here?

[0]: https://archive.is/BYCjp

New comment by nmjohn in "FTC Bans Location Data Company That Powers the Surveillance Ecosystem"

nmjohn — Tue, 03 Dec 2024 21:27:38 +0000

Why are other news sources which also have paywalls not banned? (nytimes, wsj, bloomberg, financial times, etc)

New comment by nmjohn in "Freenginx: Core Nginx developer announces fork"

nmjohn — Wed, 14 Feb 2024 19:52:55 +0000

Why did he not want CVE's assigned?

New comment by nmjohn in "Ruby's exceptional creatures"

nmjohn — Mon, 29 Jan 2024 04:41:10 +0000

> And please don’t reply.

Respectfully, if you don't want discussion, why comment in the first place?

Commenting telling someone not to comment and then ending in telling them not to bother replying is confusing behavior to me for a discussion forum.

New comment by nmjohn in "Show HN: Rem: Remember Everything (open source)"

nmjohn — Wed, 27 Dec 2023 23:33:28 +0000

> Note: Relies on Apple Silicon, and configured to only produce Apple Silicon builds.

Just curious, what is relying on apple silicon?

New comment by nmjohn in "Apple to halt Apple Watch Series 9 and Ultra 2 sales in the US this week"

nmjohn — Tue, 19 Dec 2023 04:30:09 +0000

> I have no doubt we will see them attempting to aggressively exercise these in future years to shut down alternatives to Vision Pro in the future.

Do you have examples where apple has aggressively used patents offensively like this?

New comment by nmjohn in "Andreessen Horowitz Invests in Civitai, Which Profits from Nonconsensual AI Porn"

nmjohn — Tue, 14 Nov 2023 17:16:39 +0000

> because it implies that it should be necessary

Who gets to decide what should or should not be necessary? Do you think your opinion about this is the majority view by people?

New comment by nmjohn in "Starship will attempt a launch this Friday"

nmjohn — Tue, 14 Nov 2023 04:06:55 +0000

> it’s borderline treason and should be prosecuted that way.

Have words lost all meaning? This is the most absurd thing I've read all day.

(And I promise I'm not even remotely defending the absurd situations you're referring to.)

New comment by nmjohn in "Raspberry Pi 5 has no hardware video encoding and only HEVC decoding"

nmjohn — Mon, 30 Oct 2023 16:34:11 +0000

While that certainly has been true for the majority of the last two years - rpi's in pretty much all skus have been back in stock for a few months now - to the point that even digikey has many of the skus in bulk stock

See: https://rpilocator.com/

As for Zero W 2s: In stock right now: https://chicagodist.com/products/raspberry-pi-zero-2

New comment by nmjohn in "Why cloud bandwidth is so obscenely expensive and what you can do about that"

nmjohn — Thu, 26 Oct 2023 20:45:07 +0000

What would your hypothetical egress arbitrage look like? Keep in mind we are specifically talking about cloudfront bandwidth - so being able to route to an upstream without that upstream also paying for bandwidth likely is not possible.

New comment by nmjohn in "Why cloud bandwidth is so obscenely expensive and what you can do about that"

nmjohn — Thu, 26 Oct 2023 20:36:49 +0000

In my experience pricing can go far lower than that. The sibling commenter saying $0.001/GB on an 18PB /year commit seems reasonable to me.

New comment by nmjohn in "Why cloud bandwidth is so obscenely expensive and what you can do about that"

nmjohn — Thu, 26 Oct 2023 16:10:33 +0000

If you can sign a yearly bandwidth commit (not sure what the minimum bandwidth requirement is, but 1PB / year may be in the ballpark) - you will get prices that are extremely competitive (maybe like 90%+ off base list pricing?)

New comment by nmjohn in "Cloudflare API, dashboard, tunnels down"

nmjohn — Wed, 25 Oct 2023 18:41:34 +0000

> was only 27 minutes...

I was affected by the tunnel outage. It was down for closer to 3 hours, not 27 minutes. (Their status page does accurately reflect this time)

New comment by nmjohn in "YouTube now blocking ad block"

nmjohn — Mon, 23 Oct 2023 19:17:41 +0000

Not sure if ublock updated their blocking rules to bypass the block or youtube stopped the experiment - but starting yesterday, I'm no longer seeing any adblock warning which previously had started blocking me (as opposed to originally just nagging me to disable) from watching youtube videos.

I do wonder if the actual outcome of the experiment was increased rates of adblocking though - since every time it makes it into the news, more people are exposed to the idea it's even possible.

Aside, (cmd+l, cmd+c, cmd+shit+n, cmd+v, enter) is a pretty useful sequence to have muscle memory for to open the same page in incognito, which easily bypasses the block as well.

New comment by nmjohn in "Encrypted traffic interception on Hetzner and Linode targeting Jabber service"

nmjohn — Fri, 20 Oct 2023 16:20:07 +0000

The attacker effectively controlled the IP the domain was pointed to. If you have this, getting a cert issued from any CA is trivial - you've proved to them you control the domain in question.

New comment by nmjohn in "The database servers powering Let's Encrypt (2021)"

nmjohn — Wed, 20 Sep 2023 00:31:46 +0000

Yes, I was pointing out that many of their products have explicit limits.

But more importantly, the second link I posted shows how that despite being "unlimited" - it's not uncommon for hetzner to throttle / close your account if you go over unstated traffic limits.

New comment by nmjohn in "The database servers powering Let's Encrypt (2021)"

nmjohn — Mon, 18 Sep 2023 01:07:48 +0000

Your random blog post is the outdated one.

Their actual docs: https://docs.hetzner.com/robot/general/traffic/

And reports of throttling once you actually hit certain limits: https://lowendtalk.com/discussion/180504/hetzner-traffic-use...

New comment by nmjohn in "The database servers powering Let's Encrypt (2021)"

nmjohn — Sat, 16 Sep 2023 20:58:36 +0000

You can not get actual unmetered 1gb/s for anywhere close to that. If you start pushing anywhere close to that much bandwidth, you will be throttled / have your account closed. For example, Hetzner caps your bandwidth at 20TB per month.

Additionally, if you are actually pushing close to that much traffic, you can negotiate guaranteed commit prices w/ AWS that are competitive (especially when you consider the quality of bandwidth. I can only get ~100 mb/s to my hetzner server because of how bad their peering is. I can easily saturate my 1GB connection to anywhere in AWS.)

---

(Having said that, this does only apply to egress via cloudfront. Things like charging for intra A-Z bandwidth within the same region is insane, and for many workloads may be surprisingly expensive.)