zzyzxd (u/zzyzxd) - Readit News

zzyzxd commented on SMS phishers pivot to points, taxes, fake retailers krebsonsecurity.com/2025/... · Posted by u/todsacerdoti

adriand · 14 days ago

I’m super cautious with these messages like I’m sure we all are but on Monday I ordered a printer from Amazon. They said it would arrive on Wednesday. On Wednesday I was working from home and I got a text from “Purolator” saying they’d tried to deliver my package and failed. Shit! I’d been listening to beats too loud to hear the knock on the door! I ran outside to see if the delivery guy was still on my street. No one was around…and then I realized, damn, they got me (to dash outside, anyway).

These things can fail 99.99% of the time but when they land on someone at just the right moment, it’s so easy to just go on autopilot and do the dumb thing.

zzyzxd · 14 days ago

Exactly. Once I was connecting to my VPN in AWS and was totally prepared for 90% of the websites to throw human verification at me. Then a faked cloudflare one almost got me. It was 3AM and my brain was barely functioning. (it didn't work, only because it instructed me to run a PowerShell command and I was on macOS).

zzyzxd commented on MinIO is now in maintenance-mode github.com/minio/minio/co... · Posted by u/hajtom

mcpherrinm · 15 days ago

Versity Gateway looks like a reasonable option here. I haven't personally used it, but I know some folks who say it performs pretty great as a "ZFS-backed S3" alternative.

https://github.com/versity/versitygw

Unlike other options like Garage or Minio, it doesn't have any clustering, replication, erasure coding, ...

Your S3 objects are just files on disk, and Versity exposes it. I gather it exists to provide an S3 interface on top of their other project (ScoutFS), but it seems like it should work on any old filesystem.

zzyzxd · 15 days ago

Garage also decide to not implement erasure coding.

zzyzxd commented on Nearly all UK drivers say headlights are too bright bbc.com/news/articles/c1j... · Posted by u/YeGoblynQueenne

njarboe · a month ago

One of the main reasons people want/need brighter headlights is that there is much more light inside the car from screens. These don't let your eyes adjust to the dark properly. Older cars had dim green lighting for the gauges and even had a knob to adjust the brightness up and down. You could create a very dim interior instead of the huge amount of white light you get with modern cars and the multiple screens.

I'm happy my Tesla does a decent job of having the screen be quite dark at night but the headlights are quite bad with the horizontal cutoff style that only lights the first few feet of horizontal ahead of the car. I need to see those deer and elk on the side of the road, damn it.

zzyzxd · a month ago

Teslas are the worst offenders in my area. I don't own one but I looked up online out of curiosity, and saw many owners complained because they got flashed a lot. Turned out the factory settings for the headlight angle was too high. They went to the menu and adjust the angle down by "2-3 clicks" and they reported never got flashed again.

zzyzxd commented on Kubernetes Ingress Nginx is retiring kubernetes.dev/blog/2025/... · Posted by u/TheApplicant

3ln00b · a month ago

How do you people even keep up with this? I'm going back to cybersecurity after trying DevOps for a year, it's not for me. I miss my sysadmin days, things were simple back then and worked. Maybe I'm just getting old and my cognitive abilities are declining. It seems to me that the current tech scene doesn't reward simple.

zzyzxd · a month ago

If your infrastructure can justify the complexity of Kubernetes, keeping up with Kubernetes native software is extremely easy comparing to anything else I have dealt with. I had some horror story managing nginx instances on 3 servers with ansible. To me that's much harder than working with ingress controllers in Kubernetes.

Replacing an ingress controller in Kubernetes is also a well documented practice, with minimum or even zero downtime if you want to.

Generally, if your engineering team can reasonably keep things simple, it's good. However, business needs to grow and infrastructure needs to scale out. Sometimes trying too hard to be simple is, in my experience, how things become unmanageably complex.

I find well-engineered complexity to be much more pleasant to work with.

zzyzxd commented on Samsung Family Hub for 2025 Update Elevates the Smart Home Ecosystem news.samsung.com/us/samsu... · Posted by u/janandonly

prmoustache · a month ago

How long until they ship with embedded 5G modem? Would you wrap your Samsung devices with alu foil?

zzyzxd · a month ago

This idea has been around since at least a decade ago. The truth is, only a fraction of customers care about ads or privacy, and only a fraction of technical people in that group are capable of doing network filtering (VLAN, MITM, DNS blocklist, whatever). The absolute numbers are so small, as long as manufacturers can extract enough value from the remaining 99% of customers, they just don't care.

I have had a lot of friends amazed by the fact that when they connect to my home Wi-Fi they stop seeing ads. Zero of them interested in implementing something similar in their home.

zzyzxd commented on Free software scares normal people danieldelaney.net/normal/... · Posted by u/cryptophreak

zzyzxd · 2 months ago

Abstraction needs to happen on a different layer. Because your power users are already dealing with complicated stuff and you don't want to make their lives even harder.

I know about 10 people in real life that uses Handbrake. And 10 of them use it to rip Blu-ray discs and store media files on their NAS. It will piss them off if you hide all the codec settings and replace the main screen with a giant "convert to Facebook compatible video" button.

Instead, do it like how iina[1] packages mpv[2].

1. https://github.com/iina/iina

2. https://github.com/mpv-player/mpv

zzyzxd commented on Show HN: Companies use AI to take your calls. I built AI to make them for you pipervoice.com/... · Posted by u/michaelphi

zzyzxd · 5 months ago

Earlier this year I found a leak in the house and called a local plumbing business. It was after hours, and a dreaded robot voice answered my call. I was fully prepared to spend the next 10 minutes rewording my issue over and over, hoping to hit the magic key word it actually understand (and also spell out my weird custom email domain). Surprisingly, this robot understood every single sentence I said, and repeated back in a slightly different, more professional way for me to confirm. It also captured my email address accurately in one try, without questioning my weird domain name. That's the moment I realized it's a LLM. It asked a few more smart follow-ups, then ended the call. The next morning, the owner called me and jumped straight into solutions, pricing, and his availability, without any more question or BS, because the LLM already told him everything he needed to know.

That's the most pleasant customer service call I have ever experienced. I wish more business could adopt similar approach. I don't mind talking to AI. In fact, instead of a live agent, I actually prefer to talk to your LLM, so my issue can be quickly triaged to the right human who actually understand my situation.

zzyzxd commented on Ask HN: What's the 2025 stack for a self-hosted photo library with local AI? · Posted by u/jamesxv7

akho · 6 months ago

The Ente self-hosting proposition seems strange. Why would I want to e2e encrypt my photos that I self-host? Sounds like it will only make life more difficult.

zzyzxd · 6 months ago

e2ee makes it easier to sell their hosted version, and there's probably not enough incentive to justify the additional overhead of having an unencrypted option.

Also, my house is less secure than commercial data centers, so e2ee gives me greater peace of mind about data safety.

zzyzxd commented on Behind the scenes: Redpanda Cloud's response to the GCP outage redpanda.com/blog/gcp-out... · Posted by u/eatonphil

zzyzxd · 6 months ago

The article is unnecessarily long only to brag about "a service we didn't use went down so it didn't affect us". If I want to be picky, their architecture is also not perfect:

- Their alerts were not durable. The outage took out the alert system so humans were just eyeballing dashboards during the outage. What if your critical system went down along with that alert system, in the middle of night?

- The cloud marketplace service was affected by cloudflare outage and there's nothiing they could do.

- Tiered stroage was down, disk usage went above normal level. But there's no anomaly detection and no alerts. It survived because t0 storage was massively over provisioned.

- They took pride in using industry well-known designs like cell-based architecture, redundancy, multi-az...ChatGPT would be able to give me a better list

And I don't get whey they had to roast Crowdstrike at the end. I mean, the Crowdstrike incident was really amateur stuff, like, the absolute lowest bar I can think of.