<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: stroebs</title><link>https://news.ycombinator.com/user?id=stroebs</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Fri, 08 May 2026 16:48:58 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=stroebs" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by stroebs in "Two Home Affairs officials suspended after AI 'hallucinations' found"]]></title><description><![CDATA[
<p>Add the insult that these two officials have no doubt been suspended on full pay and benefits while the year-long investigation takes place at great expense to the tax payer. After which they are moved to a different government department as “punishment”.</p>
]]></description><pubDate>Fri, 08 May 2026 03:37:33 +0000</pubDate><link>https://news.ycombinator.com/item?id=48058223</link><dc:creator>stroebs</dc:creator><comments>https://news.ycombinator.com/item?id=48058223</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48058223</guid></item><item><title><![CDATA[New comment by stroebs in "When networking doesn't work"]]></title><description><![CDATA[
<p>I came across this very same issue with fika, a community-made mod for Escape from Tarkov. One player would consistently fail to join games and it took ages to figure out the different components that were failing. The code intentionally sent the join message 4 times in quick succession, which triggered the DoS protection on the internet firewall. Ok, disabled that. The next issue was the packets were being interfered with by the ALG on the internet firewall, so disabled that too. Then the last final hurdle was the Rx offloading on the Intel NIC which was the exact same issue with the checksum being set to all 0’s or all F’s.<p>What made it confusing at the time is the join packet would sometimes be accepted and passed through to the game, so it prompted further digging into why.</p>
]]></description><pubDate>Tue, 05 May 2026 05:03:52 +0000</pubDate><link>https://news.ycombinator.com/item?id=48018253</link><dc:creator>stroebs</dc:creator><comments>https://news.ycombinator.com/item?id=48018253</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48018253</guid></item><item><title><![CDATA[138k LOC removed from Linux kernel to defend against LLMs]]></title><description><![CDATA[
<p>Article URL: <a href="https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=64edfa65062dc4509ba75978116b2f6d392346f5">https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=64edfa65062dc4509ba75978116b2f6d392346f5</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=47898593">https://news.ycombinator.com/item?id=47898593</a></p>
<p>Points: 6</p>
<p># Comments: 2</p>
]]></description><pubDate>Sat, 25 Apr 2026 04:17:01 +0000</pubDate><link>https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=64edfa65062dc4509ba75978116b2f6d392346f5</link><dc:creator>stroebs</dc:creator><comments>https://news.ycombinator.com/item?id=47898593</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47898593</guid></item><item><title><![CDATA[New comment by stroebs in "Infrastructure decisions I endorse or regret after 4 years at a startup (2024)"]]></title><description><![CDATA[
<p>The Bottlerocket issues really surprise me - not an experience I've shared even with heavy use. I use EKS with Bottlerocket + managed addons + Karpenter, and our security team is super happy that _nobody_ has access to the underlying nodes. Immutable OS is a key selling point, and Brupop "just works" to keep everything up to date without any input. Patching nodes is something I haven't had to think about in almost a year.</p>
]]></description><pubDate>Fri, 20 Feb 2026 09:23:55 +0000</pubDate><link>https://news.ycombinator.com/item?id=47085625</link><dc:creator>stroebs</dc:creator><comments>https://news.ycombinator.com/item?id=47085625</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47085625</guid></item><item><title><![CDATA[New comment by stroebs in "Show HN: Artifact Keeper – Open-Source Artifactory/Nexus Alternative in Rust"]]></title><description><![CDATA[
<p>I'll carve out some time to add a discussion as I've become quite passionate about artifact storage in the last 18 months as a result of having to look after this behemoth. Air-gapping is also pretty important - JFrog supports granular proxy specification by repo.<p>It's a great start. What I can say is that granularity of CVE's in policies will become important for larger consumers. We have about 4.5mn artifacts so even getting CVSSv3 10's blocked was a challenge, let alone 9.8.</p>
]]></description><pubDate>Fri, 06 Feb 2026 11:16:13 +0000</pubDate><link>https://news.ycombinator.com/item?id=46911513</link><dc:creator>stroebs</dc:creator><comments>https://news.ycombinator.com/item?id=46911513</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46911513</guid></item><item><title><![CDATA[New comment by stroebs in "Show HN: Artifact Keeper – Open-Source Artifactory/Nexus Alternative in Rust"]]></title><description><![CDATA[
<p>I’m a fairly heavy user of the JFrog platform with Enterprise+, Xray, their new Curation license, and my org is spending in excess of $500k/year on Artifact storage. Not including my time babysitting it. I’d love to see the end of it, and I hope you manage to build a community around this.<p>Part of the reason we pay the big license fee is so we have someone to turn to when it inevitably breaks because we’ve used it in a way nobody has before. In Jan last year we were using 30TB of artifact storage in S3. That’s 140TB today.<p>Where do you get your CVE data? Would built artifacts have their CVEs updated after the fact? Do you have blocking policies on artifacts based on CVEs, licenses, artifact age, etc?</p>
]]></description><pubDate>Fri, 06 Feb 2026 06:51:25 +0000</pubDate><link>https://news.ycombinator.com/item?id=46909898</link><dc:creator>stroebs</dc:creator><comments>https://news.ycombinator.com/item?id=46909898</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46909898</guid></item><item><title><![CDATA[New comment by stroebs in "I rebooted my social life"]]></title><description><![CDATA[
<p>This resonated hugely with me, with the grand addition that I moved to a different country a week before COVID lockdown. I’ve since reached a lot of pretty big life milestones (house, career, spouse, kid (soon)) and realised my life was still pretty empty because I’m not the introvert I once thought I was.<p>What I’m personally missing is the social capital. “Just invite people to stuff” doesn’t work, because my prior in-person social network is fragmented over 3 continents and many more countries and time zones. Minting new social capital is difficult - joining social events requires an invite to a social event to meet other people to start the process.</p>
]]></description><pubDate>Fri, 02 Jan 2026 07:38:48 +0000</pubDate><link>https://news.ycombinator.com/item?id=46462390</link><dc:creator>stroebs</dc:creator><comments>https://news.ycombinator.com/item?id=46462390</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46462390</guid></item><item><title><![CDATA[New comment by stroebs in "The Cloudflare outage might be a good thing"]]></title><description><![CDATA[
<p>Yes, literally impossible. The barrier to entry for anyone on the internet to create a proxy or VPN to bypass your geofencing is significantly lower than your cost to prevent them.</p>
]]></description><pubDate>Mon, 24 Nov 2025 05:54:42 +0000</pubDate><link>https://news.ycombinator.com/item?id=46030790</link><dc:creator>stroebs</dc:creator><comments>https://news.ycombinator.com/item?id=46030790</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46030790</guid></item><item><title><![CDATA[New comment by stroebs in "The Cloudflare outage might be a good thing"]]></title><description><![CDATA[
<p>The problem is far more nuanced than the internet simply becoming too centralised.<p>I want to host my gas station network’s air machine infrastructure, and I only want people in the US to be able to access it. That simple task is literally impossible with what we have allowed the internet to become.<p>FWIW I love Cloudflare’s products and make use of a large amount of them, but I can’t advocate for using them in my professional job since we actually require distributed infrastructure that won’t fail globally in random ways we can’t control.</p>
]]></description><pubDate>Mon, 24 Nov 2025 05:06:23 +0000</pubDate><link>https://news.ycombinator.com/item?id=46030577</link><dc:creator>stroebs</dc:creator><comments>https://news.ycombinator.com/item?id=46030577</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46030577</guid></item><item><title><![CDATA[New comment by stroebs in "Do not put your site behind Cloudflare if you don't need to"]]></title><description><![CDATA[
<p>I get your gripe, but the free protection that Cloudflare offers automatically often far exceeds the effort required to thwart some random script kiddie’s attacks on my client’s Wordpress site. Add easy caching, tunnels, automated certificate management, etc. to that and it’s obvious why a lot of sites use them.</p>
]]></description><pubDate>Tue, 18 Nov 2025 15:12:36 +0000</pubDate><link>https://news.ycombinator.com/item?id=45967258</link><dc:creator>stroebs</dc:creator><comments>https://news.ycombinator.com/item?id=45967258</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45967258</guid></item><item><title><![CDATA[New comment by stroebs in "I didn't reverse-engineer the protocol for my blood pressure monitor in 24 hours"]]></title><description><![CDATA[
<p><a href="https://github.com/bottlesdevs/Bottles" rel="nofollow">https://github.com/bottlesdevs/Bottles</a></p>
]]></description><pubDate>Wed, 12 Nov 2025 00:03:32 +0000</pubDate><link>https://news.ycombinator.com/item?id=45894617</link><dc:creator>stroebs</dc:creator><comments>https://news.ycombinator.com/item?id=45894617</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45894617</guid></item><item><title><![CDATA[New comment by stroebs in "Vodafone Germany is changing the open internet, one peering connection at a time"]]></title><description><![CDATA[
<p>I thought Google was _always_ like this. At least going back to 2015 when I left the ISP game, peering with them was notoriously difficult if you didn't have the traffic volumes required. Our network suffered from asynchronous routing to Google and Netflix for years because they refused to allow our routes despite checking all the boxes they require. Customers eventually left because other (larger) ISPs didn't have this issue.<p>I get why the enshittification of IXPs is occurring. Over the years many small and careless ISPs have caused issues for IXPs (and peers) based on what I've seen on mailing lists. It's hard work managing many hundreds or thousands of peers, let alone the equipment cost with multi-100Gbit ports becoming the norm for larger providers.</p>
]]></description><pubDate>Fri, 07 Nov 2025 19:09:56 +0000</pubDate><link>https://news.ycombinator.com/item?id=45849796</link><dc:creator>stroebs</dc:creator><comments>https://news.ycombinator.com/item?id=45849796</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45849796</guid></item><item><title><![CDATA[New comment by stroebs in "South Africa's one million invisible children without birth certificates"]]></title><description><![CDATA[
<p>One of the basic requirements for an ancestry visa.</p>
]]></description><pubDate>Tue, 21 Oct 2025 15:21:58 +0000</pubDate><link>https://news.ycombinator.com/item?id=45656945</link><dc:creator>stroebs</dc:creator><comments>https://news.ycombinator.com/item?id=45656945</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45656945</guid></item><item><title><![CDATA[New comment by stroebs in "South Africa's one million invisible children without birth certificates"]]></title><description><![CDATA[
<p>My father (born in ZA) had to re-register his birth at 65 when emigrating to the UK on a visa. The ZA government had no record of his birth, despite him having a drivers license, passport, tax returns for 40+ years…<p>This is the least bit surprising coming from a country that is in steady decline.</p>
]]></description><pubDate>Tue, 21 Oct 2025 14:12:52 +0000</pubDate><link>https://news.ycombinator.com/item?id=45656069</link><dc:creator>stroebs</dc:creator><comments>https://news.ycombinator.com/item?id=45656069</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45656069</guid></item><item><title><![CDATA[New comment by stroebs in "Seeing like a software company"]]></title><description><![CDATA[
<p>> sanctioned efforts like this are almost always temporary. The majority of the illegible work that occurs in large organizations is still unsanctioned.<p>The title “DevOps Engineer” often fits a permanent role of sanctioned illegibility in large organisations. One cannot explain exactly what a “DevOps Engineer” does, because (a) you cannot _engineer_ a culture, and (b) largely these engineers do urgent and important work that cannot be planned, estimated, put into sprints, etc.<p>I’ve had this title through several of my roles at orgs over the years and I detest it, but nonetheless understand why it exists.</p>
]]></description><pubDate>Wed, 08 Oct 2025 05:44:51 +0000</pubDate><link>https://news.ycombinator.com/item?id=45512493</link><dc:creator>stroebs</dc:creator><comments>https://news.ycombinator.com/item?id=45512493</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45512493</guid></item><item><title><![CDATA[New comment by stroebs in "Digital ID – The New Chains of Capitalist Surveillance"]]></title><description><![CDATA[
<p>Having grown up in South Africa, having a physical document to prove who you are, along with an identity number is just so normalised. When I moved to the UK later in life, I found it absolutely bizarre that there’s no mechanism to uniquely identify yourself to the government, or any other entity that deals with your personal/financial/health identity. It’s just a combination of name and address, which anyone can access with ease.<p>Digital identity is on the slightly more controlling side of this, but the article focuses entirely on the cynical perspective without considering the positives.</p>
]]></description><pubDate>Fri, 03 Oct 2025 08:31:43 +0000</pubDate><link>https://news.ycombinator.com/item?id=45460488</link><dc:creator>stroebs</dc:creator><comments>https://news.ycombinator.com/item?id=45460488</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45460488</guid></item><item><title><![CDATA[New comment by stroebs in "Slack has raised our charges by $195k per year"]]></title><description><![CDATA[
<p>Classic Salesforce. The exact same thing happened with our org and Heroku. Zero empathy, just pony up or we trash your company.</p>
]]></description><pubDate>Thu, 18 Sep 2025 06:07:04 +0000</pubDate><link>https://news.ycombinator.com/item?id=45286038</link><dc:creator>stroebs</dc:creator><comments>https://news.ycombinator.com/item?id=45286038</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45286038</guid></item><item><title><![CDATA[New comment by stroebs in "How Not to Buy a SSD"]]></title><description><![CDATA[
<p>I’d also like to point out that those Kingston A400’s are notoriously terrible and had a firmware bug that caused the behaviour you describe if you don’t update it before it happens.<p>I purchased 10 genuine new from a verified vendor and 6 had to be RMA’d within the first year.</p>
]]></description><pubDate>Fri, 22 Aug 2025 06:06:52 +0000</pubDate><link>https://news.ycombinator.com/item?id=44981468</link><dc:creator>stroebs</dc:creator><comments>https://news.ycombinator.com/item?id=44981468</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=44981468</guid></item><item><title><![CDATA[New comment by stroebs in "Show HN: I built an app to block Shorts and Reels"]]></title><description><![CDATA[
<p>This is brilliant. I have dreamed of a way to force companies to build in parental control to block short-form media. For the kids (it's never for the kids).</p>
]]></description><pubDate>Mon, 18 Aug 2025 17:07:57 +0000</pubDate><link>https://news.ycombinator.com/item?id=44942931</link><dc:creator>stroebs</dc:creator><comments>https://news.ycombinator.com/item?id=44942931</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=44942931</guid></item><item><title><![CDATA[New comment by stroebs in "The Enterprise Experience"]]></title><description><![CDATA[
<p>Pretty accurate having worked for startups and $ENTERPRISE alike.<p>I recently switched from startup to $ENTERPRISE and the thing I’m struggling with the most is time zones. My manager is 11 hours ahead and infrastructure/security change approvers are 6 hours behind.<p>Now add the big shift back to on-premises infrastructure and it’ll be impossible to get anything done.</p>
]]></description><pubDate>Mon, 18 Aug 2025 06:35:50 +0000</pubDate><link>https://news.ycombinator.com/item?id=44937982</link><dc:creator>stroebs</dc:creator><comments>https://news.ycombinator.com/item?id=44937982</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=44937982</guid></item></channel></rss>