Hacker News new | past | comments | ask | show | jobs | submit | rrdharan's comments login

What is c9k short for?


I guess it's "clusterfuck" :)


A c9k problem is much worse than a y2k problem (yuck).


It’s really not harder for the folks with this skill set, and plenty of these vulnerabilities have been found in VMware too over the years.

https://www.blackhat.com/presentations/bh-usa-09/KORTCHINSKY...

https://www.darkreading.com/vulnerabilities-threats/vmware-z...

https://cloud.google.com/blog/topics/threat-intelligence/vmw...


It is always harder, because it always take more time. We don't know the ratio (how many bugs more would have been found if VMware would be open source)


We can agree to disagree. I just don’t think it’s the high order bit in determining the rate of vulnerability discovery - in my opinion the commercial utility (white / black / grey) of the exploits is a more important factor in determining how quickly they are found.


Kind of odd that the blog states that "The architect for ZFS at Apple had left" and links to the LinkedIn profile of someone who doesn't have any Apple work experience listed on their resume. I assume the author linked to the wrong profile?


Ex-Apple File System engineer here who shared an office with the other ZFS lead at the time. Can confirm they link to the wrong profile for Don Brady.

This is the correct person: https://github.com/don-brady

Also can confirm Don is one of the kindest, nicest principal engineer level people I’ve worked with in my career. Always had time to mentor and assist.


Not sure how I fat-fingered Don's LinkedIn, but I'm updating that 9-year-old typo. Agreed that Don is a delight. In the years after this article I got to collaborate more with him, but left Delphix before he joined to work on ZFS.


Given your expertise, any chance you can comment on the risk of data corruption on APFS given that it only checksums metadata?


I moved out of the kernel in 2008 and never went back, so don’t have a wise opinion here which would be current.


I don't quite understand what happened to SPICE. I know Red Hat deprecated it, and I can't tell if it was ever fully opensourced or not?

https://www.spice-space.org/developers.html


My theory is Wayland happened. As SPICE doesn't work that well through it. I would assume it's another case of a "niche" the Wayland protocol didn't account for, however.


Wayland. Move slow and break everything.


Interesting theory. Any idea on why SPICE wouldn't work well through it? I don't have recall running into any issues with it.

A more Wayland-oriented remote desktop protocol would probably make for an even better VNC alternative, but I don't really know why SPICE never got the uptake it deserved.


Wasn't aware SPICE was deprecated. However, I think it addresses a different use-case than RDP: SPICE is primarily designed for accessing virtual machines by connecting to their hypervisor. Thus it's designed to operate without VM guest awareness nor cooperation, going purely from a framebuffer.

This approach is fundamentally limited in terms of performance/responsiveness, as you're ultimately just trying to "guess" what's happening and apply best-effort techniques to speed things up, falling back to just using a video stream.

A proper remote desktop solution like RDP on Windows works in cooperation with the OS's GUI subsystem in a way that makes the RDP server aware of the GUI events, so it doesn't have to guess, and can offload compositing and some 2D operations directly to the client, rather than sending rendered bitmaps.

Thus it didn't catch on because it focuses on a narrow use-case nobody should be using except in emergency/break-glass situations (you should instead be remoting into the VM directly, for reasons explained above), and even for such situations, it didn't offer anything substantial over VNC, except everyone and their dog has a VNC client by now, but good luck finding a functional SPICE client for anything but Linux.


That was 2023; more recently Microsoft is losing ground to Google (in 2024).


I disagree, most podcast episodes and ads mention a few popular options plus “or wherever you get your podcasts” and the proprietary gated stuff hasn’t been doing that well!


All the native storage systems at Google do it at every level (block, file, database); I would assume the same is true at AWS and Microsoft.


Yes that’s one of the sites they bailed on:

https://www.cnbc.com/2023/11/02/google-ends-agreement-with-l...



Try not worrying about as much stuff?

100 years ago well before the invention of so-called surveillance capitalism, people were making soft drinks out of radium, and inhaling asbestos.

Many things are better since then. Some new things are probably worse, but every reasonable measure of human welfare suggests we are better off than we were previously.

Something some subset of us are worried about right now, whether it’s WiFi or 5G or Covid vaccines, will turn out to have had horrible consequences and you can’t really fault the rest of us that we didn’t listen to the crazies.

Just embrace panglossian optimism because the alternative is to just be angry and exhausted and indignant all the time and then you’re no fun at parties.


When you go across a long enough timeline variations occur. Nothing over time in human history is a constant linear improvement. We may be better off than we were in 1924 in terms of health and safety, but we're definitely not better off than we were in 1994. Legislation hasn't kept up with chemical science and social engineering, and enforcement has been tentative as fights between executive power and judiciary power create years long arguments that get in the way of preventing harm. For example Red 40 is a dye that's well known to cause cancer with a high degree of certainty (not probability, certainty), while the artificial sweetener sucralose is genotoxic. You go drink a can of Faygo Cherry and it's got both. The FDA hasn't been able to regulate either because they haven't been legislated the power to do so, are now even more crippled thanks to the overturning of Chevron, and companies keep funding "alternative studies" that they can present to lobbyists.

It's hard not to be angry and exhausted when you have to be a chemical engineer just to know what's even safe to eat.


People like you are part of the problem.



That’s a very different thing. These are basically sponsored placements in App Store search results based on keywords and not targeted ads based on tracking or cookies.

(That’s also why they are often very bad and not relevant, a common complaint from app developers)


Consider applying for YC's Fall 2025 batch! Applications are open till Aug 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: