Hacker News new | past | comments | ask | show | jobs | submit | more the_angry_angel's comments login

It's using the precursor to AppLocker - Software Restriction Policies (https://docs.microsoft.com/en-us/windows-server/identity/sof...).

They were deprecated in 1803.


>They were deprecated in 1803.

For a few moments I thought you were being sarcastic about the fact that Software Restriction was deprecated ages ago by mentioning a date two hundred years in the past.

Then I realised it's a Windows 10 version number.

Edit: For reference, 1803 was released in 2018 https://en.wikipedia.org/wiki/Windows_10_version_history#Ver...


Oh wow I'd totally forgotten about SRP. I wonder if they'll decide to maintain AppLocker and SRP implementations concurrently.


> I doubt most medium to large companies I see implementing Kubernetes could be considered a good fit for Kubernetes. If you want to run on-prem / colo you are probably better of with something simpler like Nomad.

Our path has been Ansible -> Ansible+Docker -> Docker Swarm -> k8s. We absolutely don't need k8s, but the other options all had downsides.

1. Nomad was on our list and probably would've been better, but there were no managed Nomad solutions at the time and it was not as widely used as other solutions

2. Our time on Swarm was /ok/, but it was more and more obvious that being on the lesser walked path was a problem, and it's future made us run away from it

3. k8s gave us a nice declarative deployment mechanism

4. We can switch to a managed solution down the road with less friction


Routing domains, or VRFs, are probably easiest to think of like VLANs, but one layer up.

The two typical scenarios are;

1. You want to use the same IP space multiple times across different networks (i.e. multi-tenant)

2. You have a bunch of different networks that you really never want to ever be able to talk to each other (you can allow it through routes, etc. but by default this does not happen). Although you can achieve this with VLANs and ACLs, on a single routing table, rules can become a real pain in the ass to manage very quickly

You could use this for stuff like guest or IoT networks.


Thanks for the great intro. I do segregate my network using vlans now to isolate things like my printer which I don't trust and also my guest network. I also isolate my wife's devices as I don't generally trust Windows being behind my firewall either.

I'm currently wrangling with a good solution for selectively routing certain traffic via one of multiple VPN connections I have on my router.

I'll look into rdomains to see if this may help my situation if not only to make it more simple.


I used to do this with pfsense to route all traffic from a specific internal IP over a VPN. If I remember rightly I set up multiple VPN connections (across multiple geographic locations) and set up a way to link them all together as a logical interface (I think it was called a gateway). I then pushed out that gateways IP to the server over DHCP. I guess routing tables would have also worked. I assume all of this is possible with just pf.

These days, I have removed this functionality from my router and moved it directly onto the server. I run the container haugene/transmission-openvpn which creates and maintains a VPN for transmission, but also has a proxy I can direct other containers to use. This has the benefit of keeping more of the prerequisites of these servers managed in the same docker compose file. It bakes in most of the popular public VPN configs, so you can enable them with a few ENV vars.


> and I’ve just ordered a moderately large e-paper display which is destined to be mounted with a zero inside a picture frame and hung from the wall like a photo

Which display, if you don’t mind me asking? I’ve had a similar idea for a while, but haven’t seen a display that felt reasonably sized or priced for a hobby project


I ordered this one:

https://www.waveshare.com/product/raspberry-pi/displays/e-pa...

It’s the same size as the screen on most Kindle devices; 12cm by 9cm.

So it’s not large except in comparison to most e-paper displays out there, which seem to most often come in at 6cm by 3cm or smaller. And it’s not exactly cheap by any stretch of the imagination, but for me it was at the ‘sweet spot’ between size and cost, as stuff bigger than this gets expensive fast.

Note that I haven’t actually received the display yet and can’t vouch for its quality or usability. But for what it’s worth, that’s the one I ordered.


How do you plan to power this one, if it's hung on the wall?


Initially, I’m going to try to use a power cable in a color that matches the wall. The spot I have in mind is above some knee-high shelves, so I’d probably only need to run the cable for half a meter before it vanishes behind them. Hopefully it shouldn’t be too jarringly visible! As I’m renting the apartment, I can’t really poke holes in the walls to hide cables (sadly).

Alternately, there are some other shelves of a more normal height that I could just set it on top of; the power cable would be much less visible that way.

But I do like the idea of having it on a wall. As you say, the trick is going to be working out how to camouflage the cable.


> I can’t really poke holes in the walls to hide cables (sadly).

I don't know if you've tried and hated it or not, but spackling is surprisingly easy, and most landlords will provide you with matching paint (either free or at cost, depending on your landlord and probably the amount you need). You can patch probably a dozen holes in an hour (only counting active time, not time spent drying) including painting.

It's not fun, but I've resorted to it because spackling nail holes is extremely easy compared to fixing the carnage left behind when one of those "won't mess up your wall" patches doesn't come off cleanly.

It's also worth checking whether "normal wear and tear" is the tenant's responsibility or the landlord's responsibility in your jurisdiction. When I was in SF and looked, it seemed to be largely on the landlord, so they were not allowed to charge for repairing holes considered "normal wear and tear" (which hanging pictures and the like generally was). My readings said the only time you were responsible for them is if there were an excessive number (though excessive wasn't quantified).


Maybe something like these would do (flat adhesive "speaker" cables):

https://www.cableorganizer.com/p/taperwire-flat-speaker-cabl...


You could try tacking some appropriate matching poster board over the wall under it.


This!

We need super-long-life batteries. One day ...


If you don't refresh it too often you could run the display for about a week from a 10000mAh powerbank. Of course then you would need to run it from a microcontroller instead of the rather power-hungry Pi.

It's doable today, just not convenient.


Actually yes - I have a small display that I haven't used for a couple of months and the image is still there. I was thinking about how it would be with a daily refresh.


neovim and coc.nvim might be close to what you're looking for, if you can live with vim style motions, etc.

CoC basically takes VSCode addons and modifies them just enough to get them working in conjunction with neovim.


Thanks to you also! I can learn vim (better), that's not a huge problem (and it has some really useful shortcuts for stuff that take ages to do in a visual editor). I'm just not looking forward to figuring it all out if you know what I mean. Not trying to be critical but it does sound like a lot less accessible.

Just to give some background: I'm not someone that spends hours in an IDE every day. I'd just like something to easily install and that I can just jump into, and that makes less frequently used features easy to find with a menu or something.

Basically VS Code but then ideally in a terminal so that I can run it inside tmux, and so it will work fine over a slower connection.

VS Code, while suboptimal IMO with its Electron implementation, does show the way for an accessible IDE with great support for plugins. Even someone who doesn't use it daily can figure it out. But it's GUI only :(


I switched to a XPS-15 9570 from a MBP of roughly equiv spec, but previous gen, after the last round of laptop shuffles at work - I went from MacOS to Windows at the same time in order to feel the pain of our environment under Windows.

I'm not saying that it's a bad laptop. But there are just so many little annoying things about it after coming from the MBP and MacOS;

* Trackpad is subjectively worse, but I can't tell you why beyond its just smaller - but I am objectively much less accurate with it and trigger tap-clicks when I don't mean to. The trackpad positioning is also slightly uncomfortable to use.

* Fan noise - the fan curve has it ramping up earlier than a MBP

* Windows was hosed out of the box (fine, fixable, but it wasn't a good start)

* The "soft" covering results in so many fingerprints

* Webcam on the bottom bezel is an awful angle

Pros;

* Great screen, touch is a nice add-on but found I rarely use it now

* Keyboard isn't terrible

* Power adapter isn't a brick

Would I do it again. Honestly, not sure. My daily driver isn't the laptop and I just deal. If I had to use the laptop daily, I'd probably reconsider.


> But humans rarely use notepad these days. They use code editors like Coda or VSCode at the very least which have all kinds of advanced features. Surely, those can include support for ASCII separators?

I do a fair amount of work with companies that do "EDI" over CSV (or worse CSV-like - think 2 CSVs jammed together with different formats, no headers, no support for escaping or quoting) and fixed width documents. I can absolutely assure you that humans do open these files in notepad far more often than I'd like.

Often one of the main reasons they don't use things like X12, ASCII separators, etc. is because a "human needs to open it at some point" was a prevailing business decision some number of years ago (think "what happens if the IT system fails? how can we still ship stuff even in a complete emergency") and now it's baked into their documented process so deeply its like shouting into the wind to alter things. Third party warehouses are the worst at this.


I switched some years ago to KDE from Gnome. The only thing I wish I had from Gnome is the quality of text rendering.

Maybe it’s subjective, maybe it’s a measurable thing. I’ve not looked, but I feel KDEs text rendering is worse on my daily driver.


Linux apps pretty much universally do font rendering via FreeType. Have you tried switching to Cantarell? I for one fell in love with Inter UI back when I used Plasma.


I haven't, I'll give it a go :) Thank you!


FWIW if anyone else comes back to this I spent a little time last night and I've addressed my font rendering issues by;

* Removing an errant font-config lcdfilter configuration entry (this was a left over from when I was running "infinality" and should have been removed)

* Switching font from Noto Sans to Ubuntu

Its not perfect, but its a lot better. I'll probably play with oversampling (rendering X at a higher resolution and scaling down like OSX) at some point to see if I get the quality I want.


> You can launch HA kubernetes clusters with cluster API. vSphere, openstack and even bare metal pxe all have providers

I've been looking for a decent solution for pxe and cluster-api. I've not pushed the button on any as I feel like they're all a little immature. Admittedly I've not had time to set up any in a test env yet. Any recommendations?


I’m only on the start of my k8s journey but I’m finding typhoon a nice option for on prem currently.


Join us for AI Startup School this June 16-17 in San Francisco!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: