Hacker Newsnew | past | comments | ask | show | jobs | submit | more techcode's commentslogin

And while kids often end up with just headache and slight fever that goes away after a day - adults end with at least proper flu (e.g. higher fever, joints/muscle pain ...) for a week or two.


So Romania does not have politicians living in homes, or driving around in cars owned/financed by their political supporters?

And what about assets owned - not by particular individual, but by their friends or family.

BTW - sorry if that's a bit Too Balkan ;)


Are you sure frustration is from you needing more time (ramp up to understand, go deeper ...etc.) or something else?

Perhaps you really dislike (micro)management and need more autonomy/ownership/control (or just input/participation from your end) over your time/approach/order-of-tasks?

And think/elaborate more on where this "wasted a day investigating something for nothing" is coming from.

Perhaps you're not understanding (or not even getting to hear/see) the whole picture on why "business thinks investigating that is worth one day of your salary"? Or maybe you know and disagree?

Or is it happening so much that it's basically constantly being bumped between such tasks?

Anyway - I wouldn't necessarily listen to the "you're still getting paid so who cares" advice crowd...

I believe such stuff is like cilantro/coriander.

For some of us that don't have specific genes mutations - that stuff actually smells/tastes like dish soap.

And while some people can just clock in and collect the paycheck - others are wired differently.

So really spend more time on zeroing in on what exactly is (de) motivating for you.


Meanwhile there's not that much posted/discussed about good (so not 10x, just 1x instead of 0.5x or negative) engineering/product managers.

In my experience where I've worn both IC and TL/manager hats -even just going from "adequate" to "OK" team/engineering/product manager leads to impact/output that's bigger than having the best (so that mythical 10x) engineer.


AFAIK very few "Serbo-Croatian" words got adopted by Turkish/Ottoman - I only know of "kraljica".

On the other hand - during ~500 years (within last ~625 years) that Ottomans occupied most of Balkans - many words stuck around to this day.

For example: Jok, Jorgan, Džezva, Mašala ...etc


The ones that susprised me were more common things: kutija, čelik, sat, čoban, boja, budala, sanduk, pare...

Hah, of course wiki has a pretty good list with even more: https://en.wikipedia.org/wiki/List_of_Serbo-Croatian_words_o...


> budala

:-)


Simply being connected to mobile (or wifi) network is enough to get your location - sometimes with pretty good precision.

So if you're worried about NSA or the like - you better not have a mobile phone/device (or a car - because new cars sold in EU all have eSIM for builtin emergency calls) at all.

And for particular first hand example - Xplora smart watch/phone got super confused when my kids school physically moved.

New building has indoor sports/gym (I think it's basketball court size) on the top floor - and all the reinforced concrete means mobile reception can be hit and miss (even on 3/4G).

Despite phone/watch never connecting to school (staff only) wifi. After move to new building - watch and parent app would regularly think/bounce location between old and new school buildings.

When even 3rd party companies have a mapping between wifi/ssid and approximate geo location, you can imagine state sponsored actors have at least next order of magnitude.


There's public databases of SSID geolocation, e.g. https://wigle.net/


If your wifi client device can't find an access point, it goes around emitting every saved wifi network you've got. You can learn an awful lot from that.


Probably the school moved all of their Wi-Fi access points with it? These are often used for indoor positioning, even without any device connecting to them.


We had the same experience with the Xplora watches: we moved 6km away and took the internet contract with us. Whenever the watch was inside the house, it would show it as being at the old address. Outside of he house and away from wifi, it showed the location correctly. I imagine this is an edge case


Those daily long lunches were time/place where on rare occasion ad-hoc discussions would lead to a new way of doing something, a new (micro)service ...

Basically the type of synergy/innovation that is typically thought by business that it happens by the water-cooler.

On the other hand, in my experience and observations - just one or two of 2-3 days hackathons (so total of <=6 work days) produced almost an order of magnitude more synergy/innovation than those daily (long) lunches during the rest ~5 years of workdays.

Though sure - some things like initial employee onboarding (or even internal move to different unit/team), trainings/workshops, (semi)annual or quarterly plannings...etc are usually better in person.

Yet I've basically never had any of those at office desk. It was either bigger conference room (or dedicated auditorium/presentation/workshop room), or a meeting/lunch with manager or a (more) senior person with one or two of "newbies".

After initial onboarding (which is usually a week or two of "newbie" not being at desk with the rest of their new team).

All of those things add up to 1-2 days in office per month (including giving talks/training/workshop to "newbies").

Add 1 day for interviewing candidates F2F, and we're up to 2-3 days per month.

Even if you have a hackathon each month ... And the most I've seen was 2-3 days once a quarter, though usually it was 2-3 days per half a year - so nothing close to mythical Google 20% of the time ... We're still talking about at most 4-5 days in office per month.


A while ago I read somewhere that it was because for a long time (American) trucks were technically nit cars. And manufacturers could save money on a bunch of safety things.

Which resulted in more money for marketing.


Modern take would be to simply not open anything to the outside world - except WireGuard (TailScale or such).

From there everything is either considered "localhost" or a local network.

You can setup one or two central boxes (actual home lab "server" where you already have HTTP based services, and a raspberry pi zero 2 for backup) with TailScale.

With remote devices (including phones) in same tailscale network - you can access anything in home network as if you're physically home (but also have ACLs for kids/friends/etc).

On the other (professional) end - well then NginX and SSH are not even on the same network interface. And you run NginX LB/ReverseProxy on separate boxes compared to where actual apps/websites are ...etc.


This setup is the most secure, but it's also the most limiting - it's feasible only if you're hosting services for yourself or a couple of people.


Wouldn't that violate the concept of zero trust?


Which "zero trust" are you thinking off?

In case of "zero trust network" the answer is no it doesn't violate.

With WireGuard or TailScale/CloudFlare/etc you still know/verify identity of every person/device that has access to the (virtual and through it real) network.


I'm using similar approach but with ZeroTier.


Instead of rate limiting, more than a decade ago I started simply changing SSH port from 22 to something else.

In case I needed to proxy through home, or access something like web ui for home heating system - I simply used ssh tunnel (socks localhost etc)...

Of course now all that is simply done via WireGuard/Tailscale/etc.


I'd even go one step further and say portknocking would do a lot of good too, in addition to changing the default SSH port.


If anyone actually does this - please have a backup for the time when either Fail2Ban or/and PortKnocking (so both) fail or lock you out.


I've never had knockd fail me, can you fill me in on what pitfall got yours to go down? Just in case.


Besides dummy stuff like wrong config of knockd itself - which hopefully gets ironed out during initial (local/on-prem setup).

Every now and then particular knock ports might be blocked (DROP) by cliënt side ISP/wifi/etc you happen to be using at the moment.

Or your fiber optic connection package gets a speed boost, along with being moved behind CGNAT.

OK in my case switching from cable to fiber already included ending up behind a CGNAT, but people already on that ISP actually got that 2in1 surprise.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: