Hacker Newsnew | past | comments | ask | show | jobs | submit | ajd555's commentslogin

Confusing skeptic and sceptic will never not be funny to me (edit: I now live in shame)

Then I think you are the confused one, as they mean the same thing but one is US and one is UK+NZ+etc.: https://en.wiktionary.org/wiki/sceptic#English

I think you’re reading “sceptic” as “septic”. They are not the same word.

Damn it - well, I'll never live this one down, I'll learn to shut up next time

Nah, as long as you're good a sport about it, it's all good. In fact, it's refreshing to have someone make a mistake like that so confidently, and then own up to it immediately.

Author here. I think this was my favourite (and favorite) thread. I chuckled. I'm also pretty sure I could find ways to weave "septic" into a post about AI.

It shows good character to own your mistakes.

About as funny as “confusing” color and colour. Which is to say: not very.

Skeptic and sceptic are pronounced identically, because they are just different spelling of the same word.


Sure, live in shame, but don't let go of the humor in it all :)

I did get quite a laugh when the comments made me realize what an asshat I was

Sceptic is the UK spelling of skeptic.

Maybe you've confused it with septic?


How do you mean? Guy was born and raised in New Zealand and is using British spelling. There is nothing confused or confusing about this.

Is it common in these Launch HNs to have a "Live on Hacker News" on the website banner. What does that mean? The link doesn't even point to this thread, but only the main page. Perhaps this is common, but I just don't get it


"It is not our part to master all the tides of the world, but to do what is in us for the succour of those years wherein we are set, uprooting the evil in the fields that we know, so that those who live after may have clean earth to till."


2nd link doesn't work. That would be a neat tool, to find the original article and see how many levels of AI summary it has gone through, a game of AI telephone!


I had thought about creating something like that for finding comments for articles. For a given article, display links to comments for HN, lobsters, reddit, etc. However, I feel I already waste too much time reading comments. I shouldn't make it easier and more tempting.


A news aggregator like HN but specifically for freight: https://news.freight.nyc

The idea is mostly to build a community for the sector I work in, since there isn't any (aside from Reddit...)


> It is identifiable by the dark splotches that cover its surface. These are ancient lava flows from a time early in the Moon’s history when it was volcanically active.


So, if this does help reduce the cost of tokens, why not go even further and shorten the syntax with specific keywords, symbols and patterns, to reduce the noise and only keep information, almost like...a programming language?


I built this very simple tool, inspired by Hacker News' simple yet convenient UI, to create a community around the latest freight developments (I run a last-mile delivery fleet in NYC). I'm mostly posting about NYC freight news, but would love to get other freight enthusiasts/professionals/insiders to join and share their insights and thoughts, not just in NYC or even the US. The tool is simple, with almost no JS and all SSR, to keep things simple. It's still running on my dev server at home, so uptime is not guaranteed. Open to any feedback on this.


I'm currently working on building a local delivery service using electric cargo bikes in NYC: https://hudsonshipping.co. We are planning to launch our first pilot in early 2026 with our first customers in Brooklyn. We've built all of the tech in-house to manage the fleet, deliveries and optimize our routes. If you know of anyone that would like to be a part of the pilot program, feel free to reach out to me!


If a ping to a specific IP times out, I wouldn't say the IP is blocked. It could be that ICMP specifically is blocked, following some network rules on the firewall. This is pretty common in entreprise networks to not allow endpoint discovery. I could be missing something and happy to be corrected here, but I was surprised to read that.


I find it's important to remember, too, that a failed PING tells you nothing other than your echo request did not receive a response. If the remote host received your request, and if it responded, are both things a failed PING can't tell you, because both of those things could be true but you still end up with a failed PING.

I've seen technicians get tripped up in troubleshooting thinking that a failed PING tells them more than it does. When the possibility of asymmetric return paths is involved it's always important to remember how little a failed PING actually tells you.


And that can be a lot more subtle than you might think. I've had a persistent very hard to debug false alarm triggered on pings sometimes not making it and most of the time they did. But very rarely that would happen three times in a row and that was the threshold for raising an alarm. We spent days on this. Finally, the root cause was tracked down to a BNC 'T' connector at the back of a media adapter that filtered out the header of some percentage of ICMP packets. It is one of the weirdest IT problems I've ever encountered and it makes me wonder how much of what we rely on is actually marginal.


> It is one of the weirdest IT problems I've ever encountered and it makes me wonder how much of what we rely on is actually marginal.

Vernor Vinge had a character who was a "Programmer-Archeologist" on a relativistic starship. Feels more and more prescient as time goes on.


I work at a company that invented an internal syntax to compile into C++ code, that still relies on c-shell and conventions taken when OS/2 was in use there, and with a web of Jenkins instances and homemade wrappers and DBs to build that stuff.

I can safely say that title exists already. And I value my current experience as a humbling example of what is to come as software becomes an older industry, and not just a world of startups and their freshest languages/frameworks/tools.


The way you describe this system is exactly how I'd describe a system I worked on in the early 90s at PW (before it was PWC).


jenkins did not exist though


I thought that too up until this GenAI moment, and now I wonder if needing to be an archaeologist will be so valuable if one can get your needs met by a quickly GenAI-written script/program.


> I thought that too up until this GenAI moment, and now I wonder if needing to be an archaeologist will be so valuable if one can get your needs met by a quickly GenAI-written script/program.

I never have actually read those books (though I read some summaries about them, interesting concepts). My understanding is the "programmer-archeologists" basically had an archive of massive quantities of very high-quality software that did pretty much anything you'd want software to do. So it made more sense to find the software you need and glue it together than write from scratch.

And given GenAI doesn't write high quality software (at least not yet, and hopefully never), I don't think that "GenAI-written script/program" would be a good replacement (though an AI archeologist might make more sense, with such an archive).


The world in question is ours but later, with direct lineage from Unix systems indicated. So I see these archaeologists as a glorified priesthood of shell scripters, grep still having bugs, and the glue being programs themselves. Not too different than many roles today.

Beyond that, it is an odd hope on your part for GenAI to never be able to write high quality software.

Zooming out, my bigger point was that this was a sci-fi book written by the person who coined the term and concept ‘Singularity’ and the series includes a malevolent murderous sentient AI virus (IIRC) and it included some reference to how programming was accomplished and yet still, given all that, there was no anticipation of even our nascent current GenAI coding capabilities.


I've yet to have my needs met by a GenAI-written script/program. Archaeologists tend to be a lot more precise in their statements, especially about what is speculation and what is not.


I mean, if you're willing to accept AI slop, that's fine. But if you're willing to accept AI slop, you'd probably be willing to accept human slop (at least if it claims to be AI) too, and then the job gets a lot easier.


We’re talking about a sci-fi scenario that presupposed a lot of things but not anything that wrote code for you to the extent that society found value in dedicated code librarians. The state of AI today has nothing to do with re-inspecting that future world in light of the last 3 years of GenAI progress.


I work on regular web stuff and people already call themselves archeologists when doing routine tasks on our 15 year old codebase.


I feel like an archaeologist working on code I wrote myself 20+ years ago. I can imagine the feeling is stronger when it's somebody else's code.


I'm a SRE and encountered this recently. To prevent DDoS, there is a buffer setting on the kernel that will limit the number of pings (a few settings actually). So if you have a group of machines that all ping a single destination at once, it's very possible to have some that fail to get a reply.


It's for reasons like this that ping is one of the worst protocols to use for aliveness.

Even worse is I've had completely dead Linux boxes that will gladly respond to ping and nothing else.


Oh, that's nasty. How long did it take you to troubleshoot that?


Relatively speaking, it wasn't that bad. It took a few weeks of getting trouble tickets with no root cause, and a bit of googling. But management wasn't okay with fixing the root cause, instead they just increased the timeout/retry window.


Wow. That's a classic. We were quite motivated because we were the ones that got the automated alerts. I still see them in my nightmares: "chopper is down". The machine was called chopper, I'll never forget, it's been close to 30 years. My buddy Jasper and me spent multiple nights trying to track it and when we finally found it we still couldn't believe that that was it. But a simple swap was proof.


Did someone yell for you to "Get to the choppa! Do it! Now!!"?? Please say that's not been wasted!


I think we were past the point of humor during that particular episode but there was a reason it was named like it was.


if it wasn't an Arnie reference, could it have been a Stand By Me reference, "Chopper, sick balls"? or Eric Bana's Chopper: "if you keep stabbing me, I'm gonna die"?

clearly, i'm the type where everything is a movie reference, or it's a missed opportunity


whose chopper is this?


It's Zed's


I've always assumed that in situations like this, a traceroute is better. You can get more information simply by reaching the next stage in the trace, even if you're given zero information beyond "I'm now at the next server".


Nothing says the Time Exceeded packets elicited by your traceroute have to follow the same path back to you that you initiating packets followed out. It's a convenient fiction to think about IP networks acting like circuit-switched networks and in most LAN and small WAN applications they do. Mostly you can get away with thinking that way in more complex networks, too. When you end up in a situation where path asymmetry is causing you grief, thought, it's nice to have the understanding that each datagram can have a unique routing destiny.


Traceroute uses ICMP and can encounter the same problem ping does.

This has come in handy instead -- https://linux.die.net/man/1/tcptraceroute

Disclaimer: not a network engineer but dependent on packets going from A to B.


I had an experience recently setting up a third-party VPN where the echo responses were being delivered to the correct (host,interface) but with the wrong destination address (not the same as made the request)


I’ve had to explain this over and over throughout my career. The only way to know if something is accessible is to try the exact endpoint and protocol. Even application-aware firewalls will mess with things at times.


Yes, you need to test the exact protocol you want to use. This means tcping/curl, TLS with proper certificates and SNI domains, etc.

However, just as you make sure that the power supply actually supplies power before dismantling something that refuses to work down to the last washer, repairing network problems should start with the basics. Simple test that does not work, or shows something nonsensical, is a great hint that you forgot something, or should start digging elsewhere.


Yeah, ICMP tunnelling is also a common bypass method for captive networks, so simply blocking all ICMP seems logical.


Every time I've had to fight with path MTU discovery not working I've cursed the people who block all ICMP, though. If ICMP echo / echo-reply is the problem just block that. At the very least, allow destination unreachable / fragmentation needed thru (type 3, code 4).


I am sure someone will find a way to exfiltrate data using any ICMP type. How good are firewalls at validating the packets are legit?


Most of the people blocking ICMP have no clue that ICMP codes/types even exist.


In my old company it was the oposite. Ping worked allways, even when you where blocked on to a specific VLAN.


I've worked in gigs that wanted that. They were all about segmentation, but wanted ICMP echo / response available throughout.

Edit: I wonder if any "enterprise" firewalls do ICMP echo proxying. Having the firewall replace the payload would remove some of the tunneling capability (thought I assume you could still finagle a side channel by just timing the packets) but would also eliminate some of the utility (since being able to craft the payload provides a way to test for specific bit patterns in packets causing problems).


It’s been years but I’ve likely used NAT to redirect ICMP pings so the local firewall responds rather than whatever boat they were trying to reach.

Systems change - a server that once used to respond to pings may no longer do so, but client software may not be updated to stop doing pings before connecting to the actual service on the server. In an ideal world the client code would be updated, in practice: hello firewall.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: