jburwell (u/jburwell)

jburwell commented on Migrating from Docker to Podman marcusnoble.co.uk/2021-09... · Posted by u/FreeHugs

jburwell · 5 years ago

Lima[0] also looks like a promising replacement on macOS. It manages provisioning a VM with nerdctl[1] installed, networking, and shared storage. The project has a support path for ARM Macs with a patch QEMU.

[0]: https://github.com/lima-vm/lima [1]: https://github.com/containerd/nerdctl

jburwell commented on Congress should invest in open-source software brookings.edu/techstream/... · Posted by u/gilad

alexgmcm · 5 years ago

If it's paid for by the people, it should belong to the people.

Open-source meets this requirement, proprietary software doesn't.

jburwell · 5 years ago

Unless the software is classified, the source code is available via a Freedom of Information Act (FOIA) request.

jburwell commented on How can I improve the quality of my sleep? · Posted by u/wfme

jburwell · 6 years ago

One thing to check is sleep apnea. It has become relatively straightforward to diagnose with the advent of at home sleep tests — you put on a special watch and sleep in your bed. If you have it, sleeping with a CPAP machine will be a revelation. A pulmonologist can examine and diagnose you. Highly suggest getting checked for it.

jburwell commented on Ask HN: What's some “one sentence” wisdom you've learned or created? · Posted by u/keanebean86

jburwell · 6 years ago

Bad news does not age well.

jburwell commented on Behind Amazon’s HQ2 fiasco bloomberg.com/news/articl... · Posted by u/pdog

dx87 · 6 years ago

It may have been a fiasco for the local governments bidding on it.

jburwell · 6 years ago

I live 1.5 miles from the Crystal City HQ2 site in Alexandria, VA. Are there affordable housing, transportation, and public safety issues we have to address? Of course. Will we benefit from addressing these problems to add 25,000-35,000 jobs? Far more than the cost/difficulty of solving these problems.

We are thrilled to have them. We would much rather contend with growth problems than a loss of tax revenues, reduced property values, list employment, or low quality jobs. We have subsidize part of their expansion, but the growth will pay back that investment in 5-7 years. We can live that ROI.

EDIT: cleanup/clarification

jburwell commented on Microsoft Wins Pentagon’s $10B Contract nytimes.com/2019/10/25/te... · Posted by u/aaronbrethorst

bilbo0s · 6 years ago

But they don't care about any political battle invisible to the market.

That's the point.

It's the shitstorms that generate the tweetstorms that impact their larger bottom line.

jburwell · 6 years ago

Of course they care about those battles. Not only could they impact their renewal and/or trigger large penalties, but they can (and often do with large contracts) percolate up to Congressional oversight committees. Unless you have experienced intensity of political battles within the IC, it is impossible to understand their stakes (in terms of both money and reputation) for $100 million+ programs of record.

jburwell commented on Microsoft Wins Pentagon’s $10B Contract nytimes.com/2019/10/25/te... · Posted by u/aaronbrethorst

darktimesahead · 6 years ago

Real-time surveillance of the world. Who said what when where to whom. Was that a threat. What were the consequences. Feeds for video, sound, https streams from billions of Internet devices. ML to extract salient features, at multiple levels of resolution. $10B is a drop in the bucket. This is heading into trillions territory. I wouldn't be surprised that in 10 years half the Pentagon budget will be spent on the cloud.

We can glimpse a world-wide stack-ranking system: "Echelon [0], who are the 1000 individuals most threatening to our strategic position and what will be their whereabouts today?". "Matrix [1], please dispose of these individuals at these locations". Let's pray there will still be some humans between step 0 and step 1. Worse, by the logic of MAD, it is possible we are going to end up with 2 such systems, one for USA and one for China, caught in a new cold war. Think distributed Vietnam.

[0] https://en.wikipedia.org/wiki/ECHELON

[1] https://en.wikipedia.org/wiki/Disposition_Matrix

jburwell · 6 years ago

The intelligence community (IC) [1] is not part of the JEDI contract [2]. While many IC components are part of DoD, the IC spans a wider swath of government (e.g. parts are distributed across DOJ, DOE, Homeland Security, State, etc). In addition to different mission sets, they are also governed under a different set of laws. Therefore, DoD (like DOJ, DOE, Homeland, etc) systems connect to IC systems to share information, but there are distinct infrastructures whereby neither has full visibility into the other.

[1]: https://www.intelligence.gov/ [2]: https://www.fedscoop.com/cia-confirms-multi-cloud-procuremen...

jburwell commented on Microsoft Wins Pentagon’s $10B Contract nytimes.com/2019/10/25/te... · Posted by u/aaronbrethorst

empath75 · 6 years ago

They made a lot of noise about building a new hq in Arlington. I can’t imagine they’re going to build it out at any scale now.

jburwell · 6 years ago

I live about 2 miles away. I can tell you that not only have they been building it out at a prodigious pace (they had people were working in Crystal City by the end of 1Q2019). They have signed construction contracts, leases, extended offers to employees, etc. They are committed to it now.

Also, Amazon has a tremendous footprint here already. Their largest region is located in Ashburn (~25 miles east), CIA is roughly 5 miles for Crystal City, Herndon and Ballston have large AWS sales/engineering offices, and Richmond (roughly 1.5 hours south) hosts one of their largest distribution centers on the east coast. In short, they were committed to this area long before HQ2, let alone JEDI. They cannot be happy about losing the contract award, but it was only one of many things Amazon/AWS are going in NoVA.

jburwell commented on Microsoft Wins Pentagon’s $10B Contract nytimes.com/2019/10/25/te... · Posted by u/aaronbrethorst

bilbo0s · 6 years ago

The CIA is not politics though. Politics require highlighting. You'd be surprised how little the CIA highlights of what it's doing, and what that costs. Contrasted against the military, which tends to highlight almost everything of what it's doing, and what that costs.

And 10 billion over 10 years is what? Maybe 3 to 5% of Amazon's yearly revenue? You really want to be at the epicenter of the shitstorm that will happen if the project goes over budget and you still haven't delivered anything anyone in the DoD actually uses? (Maybe I shouldn't have said "if the project goes over" but "when"?) Especially being a big tech firm nowadays?

And you're gonna step into all that unnecessary drama for access to a 10 year / 10 billion project?

I don't think so. Not for a billion a year in revenue when you're already sitting at over 230 billion a year in revenue. (Or even just the over 30 billion a year that AWS alone is sitting at.)

Admit it man, politics being what they are these days, particularly for big tech firms, it's just not worth it.

jburwell · 6 years ago

You must contend with politics working for USG at any level for any department/agency. There are plenty of very nasty, bitter politics within each of the intelligence agencies, as well as, across the larger intelligence community (IC). These are massive organizations with very large budgets. Because these battles occur in classified settings, they are not visible to the public. I highly doubt that AWS hasn't had to content with a myriad of political battles within CIA, not the least of which being, groups within the CIA who remain skeptical about "cloud" and trusting a third-party with their data.

jburwell commented on Winter Is Coming for Java Updates azul.com/winter-is-coming... · Posted by u/javinpaul

pron · 7 years ago

You are. The community asked for those changes, but some don't understand them and are confused because they apply old terms to new concepts.

First, Oracle has completely open sourced the JDK, for the first time ever. Instead of a JDK with a complex license, mixing both free and commercial features and containing field-of-use restrictions, Oracle now provides the JDK under a 100% free and open source license, or under a commercial license for those who wish to purchase a support subscription (and fund the development of OpenJDK).

Second, there are no longer major releases, and the new feature releases are similar to the old six-monthly "limited update". JDK 10, 11 and 12 are roughly the same size as 7u2 and 7u4, which also didn't get free security patches after six months. What's changed is the name given to those releases, and to make the updates cheaper and easier, they have been made more gradual, by allowing spec changes in feature releases. Not only do you get security fixes for free forever, but there are no more major upgrades.

So the main point of confusion is that some confuse the new feature releases with the old major releases, when, in fact, they are much closer to the old "limited update" releases. People see a new version number, see that that number is not freely supported beyond six months and panic, when, in fact, the old releases that were similar to the new feature releases were also not supported beyond six months. They themselves were considered "updates" to some major release, but major releases no longer exist, and the "updates" now get a new version number. See here [1] for a more complete explanation.

In addition, there's another new model, that allows organizations that for some reason need a much less gradual upgrade process than the new one -- and even less gradual than the old one -- and that is something that Oracle charges for. But because the JDK is now completely open source, other OpenJDK members have committed to backporting the fixes to provided a similar step-wise upgrade path for free.

(I work on OpenJDK at Oracle, but speak only for myself)

[1]: https://www.reddit.com/r/java/comments/bav1sy/winter_is_comi...

jburwell · 7 years ago

One of the primary drivers for JDK support is security. As far as I can tell, Oracle remains the only member of the OpenJDK community participating in the vulnerability pre-disclosure process. They are also not releasing source for JDKs after 6 months. Therefore, users of non-Oracle supported JDKs will be exposed to a zero day attack between the time of Oracle's CVE disclosure/patch release and the time that their OpenJDK distribution creates, tests, and releases a patch. I would love to see these communities thrive, but the reality is that Oracle is strangling them in the crib by taking control of the most important support functions.