Hacker Newsnew | past | comments | ask | show | jobs | submit | Postosuchus's commentslogin

This will not work for two reasons:

1. Thanks to the sanctions, it is virtually impossible for RF citizens to purchase anything abroad with Russian credit cards.

2. VPN was design not to obfuscate but to encrypt - that is, the protocol doesn't conceal the fact that VPN channel is being used, you just cannot peek into the content in this channel. Which means that more and more sophisticated tools are being used to block VPN communications.


vpn protocols we use here nowadays are way more advanced than this, they mimic a TLS handshake with a legitimate (non blocked site, like google.com) and looks essentially like regular https traffic to that site

it looks like they are basically impossible to detect, given the failure to block them, outside of timing attacks (seeing if a request crosses Russia's border and comes back quickly after), however that is fully mitigated by just having having the vpn "disconnect" and route traffic directly to Russian unblocked sites, which would otherwise be able to perform such a timing attack detection

pretty interesting stuff, there are several versions of this system, and even the ones that have existed for a while work pretty well


Super interesting stuff, but won't this require multiple (possible untrustworthy / adversarial parties) to abide by your protocol? Like if you don't control all the nodes in the VPN then why can't the Kremlin just enforce a blacklist at said bad node?

you do/can control all the VPN nodes in this setup (most often just a single one) since your traffic doesn't actually go through the website you're masking under

and the nature of the protocol makes it extremely difficult to detect and thus get server IP banned, i got one server banned, but after that i implemented some practices (including directly connecting to websites that are inside Russia) and it's been working fine since then


Oh no! Yet another "difficult but right decision" (tm) to self-fund further investment in AI.


ngl this comment triggered me lol:

their product management must be completely dysfunctional because they keep shoving that stupid rovo ai in every frequently clicked area now and causes accidental rewrites of pages im working on... or page summaries that literally hallucinate meeting notes for meetings that never happened... like do they even care about customers are actually wanting to do or just shove dysfunctional ai that nobody wants


atlassian suite was functionally fine prior to AI, i have noticed nothing but constant downgrades to the UX since. for example, summarizing a Jira ticket with AI achieves nothing useful (seeing as a Jira ticket is in itself a summarization) while burning compute, clogging the visual spectrum, and slowing down rendering. has anyone actually benefitted from AI being thrown everywhere in this service?


No. No it wasn't. It has been despised at least 10 years

2017: Trello, “Jira Sucks”, and Tool Dysfunction https://cutle.fish/blog/trello-jira-sucks-and-tool-dysfuncti...

2019: Over 16 reasons why Jira and Confluence suck https://jackthenomad.com/15-reasons-why-jira-and-confluence-...

2020: Everyone hates Jira, but no one stops using it https://www.reddit.com/r/ExperiencedDevs/comments/izu5u3/eve...

2020: 7 reasons why use of Jira can be frustrating, part 1 (lol the domain) https://community.atlassian.com/forums/Jira-articles/7-reaso...

2020: jira is bad https://quietlife.net/2020/06/30/jira-is-bad

2021: Why Does Jira Suck and What to Do About It https://chrisdwan.medium.com/why-does-jira-suck-and-what-to-...

2022: I fucking hate Jira https://www.reddit.com/r/programming/comments/vgvt3m/i_fucki...


Funny, how we reliably keep finding the boogeyman - first in computer games, then in "right wing extremists online" then in LLMs, while carefully avoiding the correlation of dysphoria and mental disorders with gender change...


What's interesting is that trans people are statistically less likely to commit violent crime, but 40% of trans people report being a victim of violent crime at least once in their lives: https://www.thecanadianpressnews.ca/national/advocates-exper...

And as it turns out, right wing extremists are committing the most acts of terrorism in the US: https://www.csis.org/analysis/escalating-terrorism-problem-u...

In this specific case, the person was banned from ChatGPT before committing this atrocity, so is there not an imperative to report it to police? I can't even understand how this is actually controversial, but I imagine it would be less to you if this person didn't identify as a gender you don't agree with.


Indeed, they made Level Editor available. In fact, there was even a friggin' book on level design: https://www.amazon.com/dp/0782118690

Blast from the past indeed. Many many moons ago, I came up with a "bright" idea of designing a mod for Duke3D that modeled the office of my then-employer (large fintech company). At least I had enough sense not to boast about it - several months later a crazy guy brought a shotgun to HIS former employer and made national news, I don't think people would have taken my creation as lightly as I did back then. Still, working on it was fun.


Snapdragon X Elite laptops have been out for the last two years, if not more. How much has Qualcomm did over this time to make Linux work on those devices - almost nothing. As of 2 months ago, the best you could do was a special cut of Ubuntu that kinda sorta booted on those machines and required Windows to be present in order to pull some drivers.

So how about you give me a fucking break, Qualcomm? Call back when Snapdragon has first class support in major distros and you are serious about Linux.


This. And speed aside, Gradle embodies everything that is wrong with modern software development. A giant, opaque, idiosyncratic black box. I develop for Android (Java and Flutter) and it has become a sad pattern from Hell: Android Studio update mandates upgraded Gradle, which breaks previously the build in most weird ways, forcing one to trawl StackOverflow looking for proper incantations to do in the myriad of files it has created with the single purpose of building the damn app. Sometimes I wish, creating new build systems was outlawed some time after gmake or cmake...


Pretty interesting. I guess it was way later, when they came up with the SUID semantics and appropriated the first character for symlinks (l) or setuid binaries (s)...


Nope. ¯\_(ツ)_/¯


Second that. Microsoft Money was _amazingly_ practical and useful - head and shoulders above Quicken. It is a real shame, Microsoft didn't find a better solution than to sunset it.


Speaking of crazy applications of Emacs... Long long time ago, my team was tasked with rebuilding an MBS analytics system for one of the leading fintech companies. The original system ran on DEC VAX and was written in VMS Pascal (let's just say, a very unique flavor of Pascal). Rewriting it from scratch was not an option (it would take decades to implement all that complexity and to make sure it worked correctly). Instead, we utilized a combination of tools that first transformed the Pascal code into the form that was closer to more popular Pascal dialects (which included using a Scheme compiler and (drum roll) Emacs in batch mode), applied a set of hand-made patches, translated into C using p2c, and finally built on Linux. As crazy as it sounds, it worked well enough to be used as a foundation for the next gen of mortgage analytics.


Once it's just regular Pascal, why translate it to C? Why not just keep it as is and compile with Free Pascal/Lazarus?


Depending on the time frame, FreePascal/Lazarus might have simply been not available (or unknown) to the team.

I remember how in ~1997 at a science camp we used Turbo Pascal under DOS for most programming labs, and whenever pascal code was run on Linux machines we used p2c translator and compiled the resulting C code.


Free Pascal’s initial release was in 1997. "Long long time ago" may be longer than that.


Sounds like a story that should be submitted to the above linked website!


TIL people were concerned with mortgage quality prior to 2008.


I am slightly disappointed that the solution was not to run a VAX emulator. :)


I don't think VAX emulators were the thing back then. :-) In fact, our target platform was a cluster of commodity DEC Alpha machines running an early version of RedHat Linux for AXP. I know for a fact, that we were the first system that employed Linux clusters in fintech.


They weren't but .. if you were doing it now QEMU and OpenVMS would probably be the natural approach.


This is what Ticketmaster did. Up until a few years ago, and it’s probably still the case, they heart of their reservation system was written for the VAX in the 70’s. When they had to make the hardware/OS switch, rather than port, the went to an emulator.

Edit: spelling


Decades? Seriously?


Yes, absolutely. You will be shocked how complex CMOs might be just to calculate plain cashflow on a tranche (https://www.amazon.com/Handbook-Mortgage-Backed-Securities-7... is a great standard treatise on the topic). Add to this interest rate modeling and prepayment modeling - and we are talking serious logical complexity. And this is the area where people get REALLY pissed when you have bugs.


If the bugs affect your shock preparedness, and liquidity status and mandated holdings/reserves, you might be in a world of hurt: Failing compliance can permit the feds to step in and seize the enterprise, if it's in the regulated space.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: