Readit News logoReadit News
prirun commented on Borg – Deduplicating archiver with compression and encryption   borgbackup.org/... · Posted by u/rubyn00bie
ddtaylor · a month ago
I think the failure mode that is happening for users/devs here is bit rot. It's not that the device won't report back the same bytes, even if you disable whatever caching is happening, it's that after T amount of time it will report the wrong bytes. Some file systems have "scrubs" and stuff they do to automatically find these and sometimes attempt to repair them (ZFS can do this).
prirun · a month ago
I'm the author of HashBackup. IMO, silent bitrot is not really a thing. I say this because every disk sector written has an extensive ECC recorded with it, so the idea that a bit can flip in a sector and you get bad data without an I/O error seems extremely unlikely. Yes, you could have buggy OS disk drivers, drive controllers, or user-level programs that ignore disk errors. And yes, you could have a bit flip on magnetic media causing an I/O error because the data doesn't match the ECC.

I believe that that using non-ECC RAM is a potential cause of silent disk errors. If you read a sector without error, then a cosmic ray flips a bit in RAM containing that sector, you now have a bad copy of the sector with no error indication. Even if the backup software does a hash of the bad data and records it with the data, it's too late: the hash is of bad data. If you are lucky and the hash is created before the RAM bit flip, at least the hash won't match the bad data, so if you try to restore the file, you'll get an error at restore time. It's impossible to recover the correct data, but at least you'll know that.

The good news is that if you backup the bad data again, it will be read correctly, and be different from the previous backup. The bad news is, most backup software skips files based on metadata such as ctime and mtime, so until the file changes, it won't be re-saved.

We are so dependent on computers these days, it's a real shame that all computers don't come standard with ECC RAM. The real reason for that is that server menufacturers want to charge higher prices to data centers for "real" servers with ECC.

prirun commented on Selling your old laptop or phone? You might be handing over your data too   theconversation.com/selli... · Posted by u/devonnull
prirun · 5 months ago
I boot Finnix and use dd if=/dev/zero of=/dev/sdx to wipe out drives. Most drives can be wiped out overnight. That fable about needing multiple passes is not true:

https://datarecovery.com/rd/why-does-it-take-multiple-passes...

If a drive contained state secrets, I might use /dev/urandom instead of /dev/zero, but those kinds of drives are probably just shredded.

prirun commented on US Judge invalidates blood glucose sensor patent, opens door for Apple Watch   patentlyapple.com/2025/02... · Posted by u/walterbell
ac29 · 6 months ago
I think the point was that it is easier said than done.

Losing weight is simple in theory, you can just eat less. In practice, eating less is very hard for some people. Having real time glucose information isn't going to help those people.

prirun · 6 months ago
Just as one data point, I have a diabetic friend on insulin and under a doctor's care who was put on a CGM and told by the doctor "if the meter reads 150 or higher, don't eat". Sometimes this meant not eating for a day. He lost 70 lbs in about a year and hugely reduce his insulin use.
prirun commented on JesseSort: A novel sorting algorithm that is faster than Python's default sort.   github.com/lewj85/jesseso... · Posted by u/amichail
prirun · 6 months ago
"We find that for smaller n≲ 262144, JesseSort is slower than Python’s default sort."
prirun commented on From Pegasus to Predator – The evolution of commercial spyware on iOS [video]   media.ccc.de/v/38c3-from-... · Posted by u/cookiengineer
saagarjha · 8 months ago
Yes, absolutely (though Apple does not actually ship anything overnight). In fact when I worked on Android one of the frustrations I ran into was the slow pace to roll out security improvements. While Pixel phones get fixes quickly enough the majority of the world is not actually on Pixel devices, so if you want to ship changes you need to get OEMs on board, and then also have users on devices that are still being supported. A lot of the people we covered would simply not get any improvements until they literally bought a new device, in areas of the world with some of the longest lifecycles for those devices.
prirun · 8 months ago
I switched from Android to iOS because Google forced updates to my phone somehow, even though I had internet access disabled. I only used it as a phone: no email, web browsing, etc. My phone (Blu R2) was a few years old, and after the update, all kinds of stuff was broken. For example, zooming a picture would cause the messaging app to crash. So once that update was installed, I had to enable updates continuously to try to get back to a working phone. But instead, things just kept getting worse. I gave up and bought an iPhone XR on eBay for half retail price.

Most HN folks think diversity is a good thing, and I'm not saying it isn't, but it does have its disadvantages. In my case, I could probably buy new Android phones at least 3x more often than iPhones based on cost, but a lot of people (me) don't want to be fiddling with new phones every year or 2. It was apparent to me that Android updates are not tested thoroughly on older phones. I understand that would be hard because there is a huge variety of hardware, but it's a significant downside of Android IMO.

prirun commented on Stopping by Woods on a Snowy Evening (1923)   poets.org/poem/stopping-w... · Posted by u/keepamovin
prirun · 8 months ago
This poem was set to music by Randall Thompson as part of Frostiana, a collection of Frost poems:

https://www.youtube.com/watch?v=E3bUzZmoIRA

prirun commented on How we centralized and structured error handling in Golang   olivernguyen.io/w/namespa... · Posted by u/thunderbong
ceving · 8 months ago
Exceptions are easier for the programmer. The programmer has to write less and they clutter the code less. But exceptions require stack traces. An exception without a stack trace is useless. The problem with stack traces is: they are hard to read for non-programmers.

On the other side Go's errors are more work for the programmer and they clutter the code. But if you consequently wrap errors in Go, you do not need stack traces any more. And the advantage of wrapped errors with descriptive error messages is: they are much easier to read for non-programmers.

If you want to please the dev-team: use exceptions and stack traces. If you want to please the op-team: use wrapped errors with descriptive messages.

prirun · 8 months ago
I tend to use "catch and re-raise with context" in Python so that unexpected errors can be wrapped with a context message for debugging and for users, then passed to higher levels to generate a stack trace with context.

For situations where an unexpected error is retried, eg, accessing some network service, unexpected errors have a compressed stack trace string included with the context error message. The compressed stack trace has the program commit id, Python source file names (not pathnames) and line numbers strung together, and a context error message, like:

[#3271 a 25 b 75 c 14] Error accessing server xyz; http status 525

Then the user gets an idea of what went wrong, doesn't get overwhelmed with a lot of irrelevant (to them) debugging info, and if the error is reported, it's easy to tell what version of the program is running and exactly where and usually why the error occurred.

One of the big reasons I haven't switched from Python to Go for HashBackup (I'm the author) is that while I'd love to have a code speed-up, I can't stomach the work involved to add 'if err return err("blah")' after most lines of existing code. It would hugely (IMO) bloat the existing codebase.

prirun commented on OpenAI whistleblower found dead in San Francisco apartment   mercurynews.com/2024/12/1... · Posted by u/mmorearty
jongjong · 8 months ago
TBH, I'm kind of paranoid about CIA and FBI. Last time I travelled to the US on holiday, I was worried somebody would attempt to neutralize me because of my involvement in crypto.

I don't think I have delusions of grandeur, I worry that the cost of exterminating people algorithmically could become so low that they could decide to start taking out small fries in batches.

A lot of narratives which would have sounded insane 5 years ago actually seem plausible nowadays... Yet the stigma still exists. It's still taboo to speculate on the evils that modern tech could facilitate and the plausible deniability it could provide.

prirun · 8 months ago
> I worry that the cost of exterminating people algorithmically could become so low that they could decide to start taking out small fries in batches.

My guess is that the cost of taking out a small fry today is already extremely low, and a desperate low-life could be hired for less than $1000 to kill a random person that doesn't have a security detail.

prirun commented on Taxpayers spend 22% more per patient to support Medicare Advantage   theconversation.com/taxpa... · Posted by u/paulpauper
prirun · 9 months ago
The ACA lets people get healthcare insurance who are not otherwise eligible for it, for example: part-time workers, independent contractors, employees of companies with fewer than 50 employees, temporarily unemployeed (fired, laid off, switching careers or jobs), people who have lost coverage because their spouse lost coverage. That's a pretty broad swath of people!

Some people qualify for a tax subsidy that can be anywhere from $0 to the entire cost of a plan, depending on their income. A unique feature is that the subsidy is based on your expected income for the upcoming year, but if you make less than that (are laid off for example) or more (independent contract gets an unexpected contract), the subsidy is adjusted when you file your taxes.

Currently the ACA does not accept anyone who has a policy through work. IMO, every should have the option of getting ACA healthcare coverage. If their work coverage is better or cheaper, they can stick with that, but if their work coverage is worse or more expensive, employees should be allowed to get ACA coverage, with the employer paying part or all of the subsidy (what they would have paid to a private insurance company for the employee) instead of just the government.

prirun commented on Sensible SQLite Defaults   briandouglas.ie/sqlite-de... · Posted by u/thunderbong
nemothekid · 9 months ago
A lot of these aren’t defaults because of backwards compatibility. IMO there is no reason to not use WAL mode, but it’s not default because it came later
prirun · 9 months ago
There is a list of 6 disadvantages of WAL mode on the SQLite site:

https://www.sqlite.org/wal.html

u/prirun

KarmaCake day2541August 17, 2010
About
Jim Wilcoxson, developer of HashBackup backup program. Say Hi! jim@hashbackup.com
View Original