Hacker Newsnew | past | comments | ask | show | jobs | submit | Titan2189's commentslogin

The original report says

> The incorrect state persisted for approximately seven days before detection

However you're saying you've reached out "within a few minutes" ?


The "incorrect state" being talked about is the IP prefix being misregistered in ARIN's database.

The "hijacking" happened later, when the IP prefix was announced via BGP by the registrant who it was incorrectly assigned to. Those are two different events.


It was re-allocated to the new/wrong ARIN customer for seven days before they started announcing it, at which point the OP detected the issue. Prior to that their prefix was routing to them just fine, just without RPKI protection.

> Those other countries have much simpler tax codes than we do

All German readers spew out their drink in disbelief - Pardon what?


I think you're vastly under estimating how complicated the us tax code is.


I have no idea about tha US tax code. An explanation would be welcome.


The US tax code is enormous and changes often enough that there is no human alive that has read the entire thing.

It's relatively easy to calculate the maximum someone with only ordinary income needs to pay.

However to pay less you need to understand all of the potential tax deductions, of which there are vastly more than most people realize.


You just aren't appreciating just _how_ majestically bonkers the US tax system is. It is truly a work of art.

For a country which loves complaining about tax, and where half the political campaigning was traditionally about lowering tax, they sure love overcomplicating tax.


The German word for how complicated the tax code is is "die Steuerverfassungskomplexität"


Was Germany one of the listed countries?


Yes.

> United Kingdom, Japan, South Korea, New Zealand, Germany, Italy, Spain, Denmark, Sweden, and the Netherlands, among other countries.


As a Spanish guy living in Japan, I find the Japanese system hugely complicated (or better said, antiquated), so I shudder to think how bad the American system might be...


Probably just forgot the /s at the end


They're back online it seems


Then there's the 3rd option: Neither

Just keep everything in your inbox, find recent things by scrolling down, and anything beyond that is basically inaccessible, since the search is so bad

(I'm in camp archive everything, delete nothing; but see the Neither camp frequently in colleagues)


Your kids collect stones and sticks. You collect emails, and probably browser tabs and desktop icons. When you move to new PC, all your desktop files ends up in a directory called New folder on the new pc’s desktop and the journey to fill the new desktop starts over before you have New folder and New folder 2 on the upcoming pc.


It's beautiful. Thanks to Moore's law, you can always fit all historical data in half your latest disk space. Though I personally tend to call them "Stuff" or "Junk".

But don't do

  Stuff
  Junk
That's a rookie strategy, do

  Stuff /
  Stuff / Stuff
  Stuff / Stuff / Junk / ...

When you need to find something old, just go down the folders until you start finding files from the right decade.


I've been telling myself I'll organise my now 4 layers nested stuff folders for 15 years.

A bit off-topic, but can anyone recommend tools to organise this much random stuff?


You should only organize things as you actually use them. The things you use are then generally organized and you haven’t wasted a bunch of time organizing stuff you never use.

If you do decide to organize a bunch of stuff you never use, that decision is then totally aesthetic, so you should choose a method of doing it that you find aesthetically pleasing.

Source: obsidian user who spent a bunch of time organizing stuff he never uses.


I largely agree, that's why I've still got all of it stored away, but I guess I'd like to keep track of what is it that I'm not using, what can I delete and what can I deduplicate.


Not the answer you're looking for, I know, but I used to have 100+ labels/folders, 4-5 deep, and decade+ old emails, obsessively organized etc.

5 years ago, I dropped down to 20 labels, and started routinely deleting anything over 5 years old except for a specific "keep forever" label.

No regrets. No instances of searching for old items and not finding them, etc.


I moved my old pc into a vm. The vm is the new folder.


I moved my SSD from my old computer into my new one. Because I'm a masochist who manually sets up my partitions with custom labels, it literally worked the first time I booted it. (The only change I did was swapping to the AMD microcode from the Intel microcode because of the processor in my new machine being different). When upgrading SSDs, I just replicated the same partition structure on the new disk and copied everything over with rsync, which also "just worked".

I still can't decide whether these strategies are obvious and intuitive or if they go against literally everything I've learned about what should be feasible. Can't argue with the results though!


I had to leave Windows 7 and start using Windows 11.


If only you could mount a separate home folder that stuck along while you changed roots. One can only dream..


I once had a mac laptop and figured out how to get macos running under proxmox.

I was able to boot macos in a VM and migrate my laptop. It "ascended" into virtuality.


You need to solve the migration strategy from stones and sticks to first desktop.


I'm an unrepentent "neither".

Trash, Archive, Folders in Folders, Tags, forget it!

Where is it? In the Inbox. If it's unread, I need to do something, if it's read, I don't.

Although if my clients start to slow down, I will export and delete the oldest year from my personal email. So I guess I do technically archive. But only in bulk and begrudgingly.


Yup, another inbox only user here. Unread means it's a to-do.

In Gmail you can set it to group all unread at the top.

Sometimes I'll open an email and mark unread again if I need to come back to it.


I’m in the same camp. Unread vs read is all I need. Also it’s funny when I’m with someone from the “inbox zero” camp and they get stressed seeing my 6-figure inbox count.


I was inbox-only since GMail was in beta, and received tons of email notifications and extraneous mail over that 20 year period that didn't get read.

My inbox was at about 100k _unread_ emails with about 280k total.

I am happy to say I am now at inbox-zero (ish).


Impressive. I've also been using gmail since beta. I'm only at 27,980 unread.


> If it's unread, I need to do something, if it's read, I don't.

What if you read an email, and need to do something, but can't do it right now? Do you mark it as unread so you can deal with it later?

I did that for years. Thankfully no longer!


Exactly so. If I'm going to do anything with it later, I'll have to read it again anyway.

It's self-culling with time. I've got unread messages deep down on the list. Things that I wanted to do something about months ago, but never did, and they weren't important enough to come up again. And if they ever do come up again, I can see that I received a message and didn't do anything with it.


And then while checking your email you mindlessly click it and realize its the one you have "snoozed" by marking it unread, so you need to mark it unread again.

Rinse, repeat


Yes - that was Hell.

Now I have a keystroke that will automatically create a TODO with a link to the message. I hit the keystroke and then archive so it no longer shows up in my inbox.

There are lots of poor productivity books/hacks, but the "Do not treat your inbox as a TODO list" has stood the test of time.


Terribly triggered by this


Sorry, but unless I can manage my email with sensible rules, I'm not going to manage it.

I need to be able to have rules that let me move email automatically after it's been read or after it's been in the Inbox for some time. But that's not really possible with most server side rules engines (they only look at mail when it arrives), client side rules engines are dead and I don't use email from a fixed desktop machine anyway, and I'm not going to write an imap based filtering engine (I did it once on company equipment, and it wasn't fun enough to do it again).

So Inbox 40,000 it is.


I've recently started writing an app intended for a raspberry pi that uses IMAP to automate this exact thing.

The goal is for it to apply the rules and followup with actions while still letting me interact with my email from any client I want.


A rules engine is our primary next focus at Marco. What you're describing is exactly the way email should work.

https://marcoapp.io


If you need more inspiration, I used to use Pegasus Mail, and I'd have a small number of filters on Inbox open: there were some lists I was on that didn't need to ever be in the inbox, and most of my filters on Inbox close: move read or timed out mail into folders it belonged; read mail with no other rule would end up in Archive/YYYY-qQ; I found quarterly was the best granularity, monthly archive folders were too fiddly. But modal flow like that isn't very current.

Pegasus Mail was very good when it owned the mail (pop3), and works ok with a competent IMAP server, but work switched to Exchange and it was very slow, and Pegasus didn't work well with a slow IMAP server. That was the start of my slide into inbox 40k :(


Check out our product. I'm also a "leave everything in inbox" kind of user.

I've got 100k+ threads in my inbox and full text search is single digit ms.

IMAP search itself is unusable. SQLite on the other hand...

https://marcoapp.io


That's just Archive with fewer steps


Chaotic neutral here.


I am that person.


If you check the manual you might find that you can hook the single inlet pipe up to the hot water tap.


I feel like it's probably pointless. The dishwasher will be full of water before the hot water starts coming out the pipe. Depending on how far the dishwasher is from the water heater I guess.


In most kitchens I've seen, the dishwasher is pretty close to the sink. In fact the sink and the dishwasher often share a shut-off valve. So if you run the water at the sink until it's hot, then start the dishwasher, it will get hot water.

Problem is, that most dishwashers have a prewash and a main wash. By the time the prewash is finished and the main wash starts, the water in the supply line will have cooled off quite a bit.


Not just the shut off. My dishwasher's drain hose goes up into the sink's drain plumbing much higher than I would have thought.

This almost made a mess when the sink was clogged and the dishwasher tried to pump the water out but had nowhere to go.


You can install airgap for this. In usa building code mandates it on multiple states


Is that the point of the air gap? I can't even get a straight answer from plumbers on what it's for. I don't see how that could possibly help with a clogged drain, just seems like a secondary point for the drain water to come out.


I'm fairly sure the point of air gaps on drainage is to prevent sewerage water from backing up in to appliances if the sewerage line is blocked. It will instead spill on the floor where it will be more easily noticed and cleaned.


That’s exactly what it’s for. If you block the sink drain and fill it with water, you can have water flow down the dishwasher drain hose and into the sump in the dishwasher. If that happens during the rinse cycle you’re rinsing with grey water.


That is exactly why they are required in restaurants. You wouldn’t want the sewage to back up into a sink where food or dishes might be.


Pumped out water has to go somewhere . With the airgap, it will either back out your garbage disposal or pour out your airgap into the sink basin, depending on the location of the blockage.

The airgap causes the pump to be physically incapable of backfeeding the drinking water supply with dishwasher waste


iirc its less about contaminating drinking water (there is a valve and pump to get through. rather tricky) and more about waste getting into dishwasher during cycle and you getting contaminated dishes.

my wife once decided to dump into garbage disposal a bunch of uncooked broccoli at once. it clogged garbage disposal and drain. when i tried to unclog it with plunger it backed into dishwasher (was hooked directly to garbage disposal bypassing airgap). took me hour to get everything out of dishwasher.


Thus the video's advice (also in my dishwasher's manual) is to run the water from a nearby sink until it's hot before starting the dishwasher. Because it helps significantly to get hot water at the input when US dishwashers are limited to 1200W of heating.


You should actually watch the video so that you can see the graphs; it’s not pointless.


When I do the dishes I hand wash those that can't be put in the dishwasher before I start the dishwasher. This ensures that the water that goes into the dishwasher is already hot.


I don't think the dishwasher will be "full of water" as it doesn't actually fill up - rather, it only uses 2 gallons maximum per cycle, about the amount that would be the bottom of basin of the washer.


That's what I meant. The water drawn from the dishwasher is small enough to not even purge the cold water from the line in many houses. So you would just be wasting heat by filling the pipe with hot water while only taking the cold water from it.



This seems like something that only makes sense when water is scarce but electricity is cheap. You’d be constantly losing heat to the poorly insulated pipes.


I have all hot water pipes insulated in my house


And you're fully losing heat if you dump lukewarm water down the drain (instead of cycling it back to the heater) to eventually get hot water.


People who do it more or less don't care about the price of energy (except maybe in the abstract).

It's for comfort and convenience.


“16:12 The importance of purging cold water from the line”


To configure the Vanta Trust Center (a publicly available page listing a client's Certifications and Controls, usually hosted at trust.client.tld), Vanta requires customers to compromise on their DNS CAA configuration.

As their screenshots show, they ask you setup a CNAME from e.g. trust.customer.com to their abc123.cname.vantatrust.com.

However, if you are using CAA [1] on your root domain (to limit which Certificate Authorities are allowed to issue certificates for your domain), they _require_ you to add 4 (FOUR) new CAA records to your root domain. (shown at the bottom of the linked page)

The correct solution would be to simply publish CAA records at the destination that the CNAME is pointing to (abc123.cname.vantatrust.com)

I've brought this up with their support multiple times; but they're refusing to even acknowledge that this is a problem. They're claiming I am the first customer to ever bring this up; and that I should just add the records on my root domain - completely missing that fact that thereby I'm basically undermining what CAA is for.

I would understand it, if this was some random tool, but this specifically is a GRC Tool.

If you are another Vanta customer or have any other idea what I can do to approach this, please let me know. I want to use their tool. It's a good system and helping us out - I'm just refusing to actively downgrade our Security - for our SECURITY TOOL!

1) https://en.wikipedia.org/wiki/DNS_Certification_Authority_Au...


Yup

> We have identified the underlying issue with one of our cloud service providers.


I don't get it. Can you please explain the reference?


It’s a reference to the movie Office Space and the Milton character.

https://en.wikipedia.org/wiki/Office_Space


That's an "Office Space" reference, in which a grumpy employee burns down the IT company building.


Perhaps extra-relevant to a story about data-loss, Milton was an employee who fell through the cracks in a broken corporate bureaucracy.

His was supposedly laid off years ago, but nobody actually stopped his paycheck, so he kept coming in to work assuming he was still employed, getting shuffled into increasingly-abusive working environments by callously indifferent managers who assume he's somebody else's problem.


Surely there must be something that's missing in translation? This feels like it simply can't be right.



I agree. No automated fire suppression system for critical infrastructure with no backup?


That may not be a perfect answer. One issue with fire suppression systems and spinning rust drives is that the pressure change etc. from the system can also ‘suppress’ the glass platters in drives as well.


That's why the top-security DCs that my employer operates have large quantities of Nitrogen stored, and use that slightly lower the O2 saturation of the air in the case of fire.

Yes, it's fucking expensive, that's one of the reason you pay more for a VM (or colocation) than at Hetzner or OVH. But I'm also pretty confident that single fire wouldn't destroy all hard drives in that IT space.


Reminds me of the classic video[1] showing how shouting at the harddrives make them go slower.

[1]: https://www.youtube.com/watch?v=tDacjrSCeq4


I'd be interested in if you can even use dry fire suppression on the 5th floor of a building.


At first you think what an incompetent government would do such things, but even OVH pretty much did the same a few years ago. Destroyed some companies in the progress. A wooden floor in a datacenter with backups in the same building …

https://www.datacenterdynamics.com/en/news/ovhcloud-fire-rep...


Battery fire is impossible to suppress.


That's why in high-quality DCs, battery backup is in a separate room with good fire isolation from the IT space.

Yes, the servers still have some small batteries on their mainboards etc, but it's not too bad.


Much harder, but not impossible.


Lithium ion batteries go into thermal runaway. The flame can be somewhat suppressed by displacing oxygen and/or spraying shit on it to prevent the burning of material. But it's still going thermalnuclear and putting out incredibly hot gasses. The only way to suppress it is by dunking the batteries in water to sap the energy out of them.


Because it was arson, not an accident


Arson? Sounds increasingly like espionage.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: