lvh

29 ms·

271.
by lvh 7y ago
I know of NodePort, but last i checked it’s a low-level constrict that doesn’t do anything like, say, authn—so that doesn’t seem like a complete answer.
272.
by lvh 7y ago
Sure, I know general techniques and k8s-specific ones (and have used production SSH-to-programming environment REPLs with twisted). I’m asking partially because my job these days is to secure setups like these :)
273.
by lvh 7y ago
How do you do the forwarding? (That’s an interesting question to me by itself, but I ask because it seems like that feature is just as good outside of k8s too :))
274.
by lvh 7y ago
Yep, I edited it out because it’s really an example of reduced, not increased complexity.
275.
by lvh 7y ago
My favorite one that I usually keep to myself because it makes me sound like a loon since it's so far out of the Overton window (but quite popular with economists): abolish corporate income tax. Corporate income tax is regressive, beca
276.
by lvh 7y ago
Can you think of an argument that would be convincing? The IRS already saying they can do it (when they obviously already do the work internally) as well as other countries with more complex governmental structure pulling it off seems like
277.
by lvh 7y ago
English-language Wikipedia does not have a great article on Belgian taxation complexity, but it has a great article on structural complexity that highlights the weird "almost-entirely-overlaps" structure: https://en.wi
278.
by lvh 7y ago
There are two points worth separating here: tax code complexity and for-profit filing. The two are obviously interrelated, but different: Intuit wants for-profit filing so TurboTax makes money, and Intuit also wants tax code complexity to i
279.
by lvh 7y ago
You're telling me -- I file estimated taxes quarterly in three states plus federally! Anyway: both Switzerland (your example) and Belgium (my example) have multi-layered governments. Belgium's one is particularly complex, with &qu
280.
by lvh 7y ago
That doesn't sound like a terribly convincing reason why a complex tax code made possible only by for-profit services is desirable, unless you only evaluate it from the perspective of an $INTU/$V/$BAC... shareholder. In Belgi
281.
by lvh 7y ago
If you think Sudoku solvers are cool, check out (constraint) logic programming, e.g. https://github.com/clojure/core.logic/wiki/Examples#sudoku You can take that pretty far! I used it to solve Regex Crossword
282.
by lvh 7y ago
Slack's official pricing starts at $6.67 per seat per month, and Clojurians is a very big Slack. Sometimes they comp slacks, but Clojurians is apparently not important enough for that and/or Slack is big enough now they don't
283.
by lvh 7y ago
Huh! I've previously only used fn-fx. Any chance you've used both?
284.
by lvh 7y ago
It's really unfortunate that the Clojurians Slack, being free, lacks good history. So much knowledge is disappearing, or at least becoming inaccessible (I'm sure someone has logs, probably via alternative clients or bots). Hard to
285.
by lvh 7y ago
It'd be neat if there was an easy way to combine progressive JPEG loading with aggressive CSS blur filters, maybe. I think onload fires when the progressive JPEG is done, so perhaps you could have the onload JS disable the blur?
286.
by lvh 7y ago
Sure: is there a specific place where you feel I've done that? I think everyone involved would happily concede that Signal, like almost everything, stood on the shoulders of giants. It seems fine to both acknowledge that and also say t
287.
by lvh 7y ago
Ironically jpegoptim is pretty happy to knock img1.jpg (woman eating donut) down from its original 55kB to 33kB with no perceptible-to-me quality loss though ;)
288.
by lvh 7y ago
I think the biggest difference is in visual effect. A progressive JPEG looks pretty terrible at first, whereas a blurred image may look preferable even though it technically has less information.
289.
by lvh 7y ago
This is a great point! I wonder if it could be made much smaller by instead "vectorizing" the blur. Right now it appears to draw individual pixels, but perhaps it could draw a few large blurred gradiented circles instead? (I also
290.
by lvh 7y ago
Fair! I would not expect the image be saved to a Windows path when displaying a blurred image in the example use cases (mobile apps and web pages). You're thinking Electron, perhaps? Point of order though: I don't think that'
291.
by lvh 7y ago
This /is/ one-way by virtue of throwing information away: you can't rebuild the original image. If you're thinking of preimage resistance (it must be hard to find an input that hashes to a given output) that's a pro
292.
by lvh 7y ago
As I mentioned upthread: none of those are disallowed on common server platforms, but ironically canonical Base64 _will actually_ break, and it'll break rarely enough that you're likely to miss it in testing! (The last character i
293.
by lvh 7y ago
1. Using the hashes as principal indices seems unsafe in general (which includes image upload) anyway: it looks pretty simple to generate collisions. The suggested use case (save the hash in the database next to the original image or a refe
294.
by lvh 7y ago
We’ve written both versions of that argument: PGP and email. This one focuses on problems that a better GPG could not fix. (Discounting my own “pathological examples” from a different thread.)
295.
by lvh 7y ago
Do you have an opinion on why that happened? (I think a lot of useful Signal properties are much harder to do with federation, but that’s a subtle enough problem that it warrants a long form post, not a HN comment. I agree that ceteris pari
296.
by lvh 7y ago
> Stop using that thing that mostly works as intended and is integrated into lots of email clients and systems, and has a number of independent implementations, and has the decentralized properties that match email. I want to be sure I d
297.
by lvh 7y ago
Top practitioners like Zimmerman himself famously replied unencryptedly to encrypted messages. Copy pasting something in a different program seems hard to do by accident. But sure, let’s stipulate we break copy paste :)
298.
by lvh 7y ago
Can you describe how Signal leaks your phone number and what capabilities and adversary needs to get it? (I know the answer, I am asking rhetorically, because I don’t think that someone who knows the answer would make that case.)
299.
by lvh 7y ago
This is a core difference between Signal and eg WhatsApp. The Signal UX clearly shows who’s verified, and the UX clearly earns you when the safety number changes. Additionally, the secondary device model (eg Signal Desktop) goes to great le
300.
by lvh 7y ago
Yep, see signify/minisign and OpenBSD as an example of it being used in practice.

More ›