Souk's Notes - Unofficial Summaries

Unofficial, machine-generated summaries, as of 2026-11-10.

Crosstalk SolutionsDon't Fall For This Email Phishing Attack!
  • The scam email genuinely comes from PayPal, so authentication checks pass. The host's two emails came from service@paypal.com with SPF, DKIM and DMARC all passing, because the scammer sends a real invoice through PayPal's invoicing system; the "View and pay invoice" link and every other link point to real PayPal pages. He guesses the scammer knew from some past leak that he was a Coinbase customer.
  • Logging into PayPal directly is the surest way to expose it. The email claimed a $479 USD payment to Coinbase and warned that cancellation after 48 hours would not be refunded; logging into the account without clicking any link shows no such transaction. The host reads the deadline as pressure to act.
  • The scam pays out through a careless payer or a phone call. The host suspects it hopes someone, such as an accounting department paying invoices without scrutiny, simply pays it, or calls the "help desk" number, where scammers try to take over the caller's computer. He urges sharing the warning with anyone who pays PayPal invoices.
  • The phone numbers were the weakest tell, and both were already dead. One email gave an 888 toll-free number and the other a 213 Los Angeles number, odd for a Silicon Valley company but easy to miss. Calling both from a fresh VoIP number a day after receiving them, the host was hung up on immediately; he infers scammers rotate numbers once one is flagged.
Andrej KarpathyLet's build GPT: from scratch, in code, spelled out.
synopsis

Working in a Google Colab notebook, he builds a decoder-only Transformer from an empty file up to a working character-level Shakespeare generator — the same architecture underlying ChatGPT, minus its fine-tuning stages — training a roughly 10-million-parameter model on the ~1-million-character "tiny Shakespeare" dataset until validation loss falls from an untrained ~4.87 down to 1.48, at which point its output starts to look like recognizable (if nonsensical) Shakespearean-formatted text. The build closely mirrors his own nanoGPT repository, and he closes by mapping every piece back onto GPT-3's actual scale and onto what ChatGPT adds on top.

Data and the simplest possible model. The dataset is tokenized at the character level — a deliberately simple choice, contrasted with GPT's byte-pair or SentencePiece subword tokenizers, which trade a larger vocabulary for shorter sequences. Text becomes a single long tensor of integers, split 90/10 into train and validation sets, and sampled in fixed-length chunks (block size) so the model sees every context length from one token up to the maximum, which matters later during generation. The first working model is a bigram: each token, in isolation, uses an embedding table lookup to directly predict logits for the next token, with no communication between positions. Trained with Adam, this baseline's loss falls from about 4.7 to roughly 2.5 — proof the optimization loop works, but the output is gibberish because each character predicts the next based only on its own identity.

The mathematical trick behind attention. To let earlier tokens influence a later prediction without expensive looping, he shows that multiplying a token sequence by a row-normalized lower-triangular matrix computes a running causal average in one matrix multiplication — averaging in a token's own vector with all preceding ones while never looking ahead. Expressed as a masked softmax (zeroing future positions to negative infinity before normalizing), this same operation becomes the scaffold for self-attention once the uniform triangular weights are replaced by learned, data-dependent ones.

Self-attention itself. Each token emits three vectors via separate linear projections: a query ("what am I looking for"), a key ("what do I contain"), and a value (what actually gets aggregated once another token finds it interesting). Attention weights come from the dot product of every query against every key, masked to block future positions, then softmaxed and used to weight-sum the values — meaning tokens dynamically decide, based on their own content, how much to attend to each earlier token, rather than always averaging uniformly. A critical detail: the raw dot products are divided by the square root of the head size before the softmax, because otherwise their variance grows too large at initialization, driving softmax toward near one-hot outputs that let each token learn from effectively only a single other token. He's careful to frame attention as a general communication mechanism over a directed graph, not something intrinsically tied to language — the causal, future-blind mask is specifically what makes it a decoder rather than the fully-connected encoder used in tasks like sentiment classification, and cross-attention (queries from one source, keys/values from another) is what lets an encoder-decoder system like the original machine-translation Transformer condition generation on a separately-encoded input sequence.

Multi-head attention and computation. Running several smaller attention heads in parallel and concatenating their outputs — analogous to grouped convolutions — lets different heads specialize in different relationships (e.g., a vowel token searching specifically for nearby consonants) rather than forcing one attention pattern to do everything; this dropped validation loss from 2.4 to 2.28. Because attention only lets tokens communicate, without giving them time to "think" about what they gathered, a small per-token feedforward MLP (linear → ReLU → linear) is added after each attention step, further improving loss to 2.24.

Why depth needs residual connections and LayerNorm. Simply stacking multiple communicate-then-compute blocks made the network start to degrade rather than improve, a classic deep-network optimization problem. The fix, borrowed directly from the 2015 ResNet paper, is residual (skip) connections: each block forks off the main pathway, transforms, and adds its output back in, so gradients have an unimpeded "highway" back to the input during backpropagation, with each block's contribution initialized near zero and growing in over training. Paired with LayerNorm (which, unlike BatchNorm, normalizes each token's own feature vector rather than across the batch) applied before rather than after each sub-layer — a deliberate deviation from the original paper's post-norm design, adopted because it works better in practice — this let him stack six full blocks and reach a validation loss of 2.06, with dropout added to control overfitting as the model grew.

Scaling up and comparison to GPT-3. With block size raised to 256, embedding dimension to 384, six attention heads, six layers, and dropout at 0.2 — about 15 minutes of training on an A100 GPU — validation loss reaches 1.48, and generated text starts to visually resemble the structure of the source play. He then sets this ~10-million-parameter model, trained on roughly 300,000 GPT-vocabulary-equivalent tokens, against GPT-3's actual specs: architecturally near-identical hyperparameter choices, but scaled to 175 billion parameters trained on 300 billion tokens — a roughly millionfold increase, requiring thousands of coordinated GPUs rather than one.

Why pretraining alone isn't ChatGPT. A model trained only this way is a "document completer": given a question, it may just continue with more questions or drift into unrelated text, because it has only learned to imitate whatever an internet document containing that text tends to look like. Turning that into an assistant requires a separate, mostly non-public alignment pipeline he did not implement here: supervised fine-tuning on a smaller set of curated question-and-answer-formatted conversations, followed by training a reward model from human rankings of candidate responses, followed by using that reward model to further tune the policy via PPO reinforcement learning — the process OpenAI describes in its ChatGPT blog post, and which nanoGPT itself only covers up through the pretraining stage.

  • A lower-triangular matrix, row-normalized to sum to one, computes a causal running average via a single matrix multiply. He demonstrates this trick concretely — multiplying a triangular matrix of ones (or a softmax over a triangular mask of zeros/negative-infinity) against a value matrix reproduces the same result as an explicit loop averaging each token with only its past — and this is the computational core self-attention builds on.
  • Self-attention makes that averaging data-dependent by having each token emit a query, a key, and a value. Affinities come from the dot product of one token's query against every other token's key, scaled by 1/√(head size) specifically to keep the softmax input from initializing too "peaky" — without that scaling, softmax collapses toward one-hot vectors and each token ends up aggregating information from essentially only one other token.
  • Residual (skip) connections and pre-norm LayerNorm are what make a deep, multi-block Transformer actually trainable. Validation loss on the tiny-Shakespeare data set improved step by step as each piece was added — roughly 2.5 for the bare bigram model, 2.4 with one self-attention head, 2.28 with multi-head attention, 2.24 after adding a per-token feedforward layer, and down to 2.06 once residual connections and LayerNorm let the network stack six blocks without the optimization degrading — reaching 1.48 once the model was scaled up in size and training time.
  • Pretraining alone produces a document completer, not a helpful assistant. He compares his ~10-million-parameter model trained on ~300,000 tokens to GPT-3's architecturally near-identical but far larger 175-billion-parameter model trained on 300 billion tokens, and explains that turning either into something like ChatGPT requires a separate, largely non-public alignment stage — supervised fine-tuning on question/answer-formatted data, then training a reward model from human rankings of candidate responses, then using that reward model to fine-tune the policy with PPO reinforcement learning.
Polis PanditAvatar: The Way of Water Uses Common Tropes but With Important Messages
  • This post includes paid content that is not available publicly. See the original source.
Crosstalk SolutionsOrange Pi 5 - Easy Setup and Overview!
synopsis

The host presents the Orange Pi 5 as an in-stock alternative to the scarce Raspberry Pi, and ends with it booting Ubuntu 22.04 from an M.2 NVMe SSD with no microSD card, benchmarking about ten times faster than SD.

Hardware and trade-offs. The board pairs a Rockchip 8-core CPU, up to 32 GB of RAM and a Mali-G610 GPU with gigabit Ethernet, full-size HDMI and an M.2 slot. Its gaps are no Wi-Fi or Bluetooth, which can only be added by giving up the SSD slot, a single HDMI port, and thin documentation for a board still new.

First boot from microSD. He flashes Orange Pi's Ubuntu Jammy desktop image with balenaEtcher, boots, finds the DHCP address, connects by SSH as root (password "orangepi"), and runs orangepi-config and updates.

Moving to the SSD. The 16 MB SPI flash decides the boot device. If it or the NVMe already holds partitions, they must be deleted with gdisk first, or the bootloader install fails for lack of space. He copies the image across by SCP, installs the bootloader to SPI flash through orangepi-config, and writes the image to the NVMe with dd.

Result. With the card removed it boots in about 10 seconds as a fresh system on a new IP address, so earlier settings must be redone. A reused microSD needs a new UUID or it takes precedence. On pibenchmarks.com the SSD scored 19,924 against roughly 2,000 for SD cards.

  • The Orange Pi 5 is a powerful Raspberry Pi alternative you can actually buy. It has a Rockchip 8-core 64-bit CPU, 4, 8, 16 or 32 GB of RAM, a Mali-G610 GPU rated for 8K at 60 fps, gigabit Ethernet, full-size HDMI and an M.2 slot. The host doubts most buyers need 32 GB on a single-board computer, and would move to an Intel NUC at that point.
  • Its onboard M.2 slot forces a choice between storage and wireless. There is no built-in Wi-Fi or Bluetooth, so adding them means using the M.2 slot for a combo card instead of an NVMe SSD; the Raspberry Pi 4 also keeps dual HDMI. The host found documentation and community answers scarce: the official Orange Pi OS folder was empty, and Armbian added a page only weeks after he got the board.
  • Booting from NVMe works by flashing the bootloader to SPI flash. He boots Orange Pi's Ubuntu 22.04 desktop image from microSD, copies the image over by SCP, installs the bootloader to the 16 MB SPI flash through orangepi-config (System, Install, option 7), then writes the image to the NVMe with dd. Default login is root with password "orangepi"; he says the same process worked for Armbian.
  • A reused SPI flash or microSD card will defeat the M.2 boot. SPI flash that already holds partitions throws a no-space error until they are deleted with gdisk, as must old partitions on the NVMe. The microSD's data volume shares the SSD's UUID and takes precedence if reinserted, so it needs a randomized UUID. The NVMe install is a fresh system with a new DHCP address and settings.
  • The NVMe SSD benchmarked about ten times faster than microSD. On pibenchmarks.com his Kioxia 128 GB NVMe scored 19,924, about sixth among the site's fastest SSD averages (top: 24,307), against roughly 2,000 for SD cards. Cold boot from the SSD took about 10 seconds; the drive cost under $20 on Amazon, and the M.2 needed hot glue for lack of a fitting screw.
Polis PanditAmerican Aid to Ukraine Is Not Free
  • This post includes paid content that is not available publicly. See the original source.
GeoHussarWestern Europe was stupid about its energy policy
  • Western Europe's energy crisis is self-inflicted. The speaker says it declined to drill at home, relied on Russia for more than 40% of its natural gas and on former colonies for other needs, and condemned the US for extracting its own fossil fuels. It is now scrambling to cover oil and gas deficits and complaining about prices.
  • Europe had domestic gas it chose not to develop. The speaker says France has over a hundred years of natural gas deposits and Germany about 40, and that Europe could have built Mediterranean and Atlantic pipelines or invested in Southeastern Europe. The speaker predicts it will take years to recover.
GeoHussarThe US military is $20 trillion ahead in defense spending of everyone else
  • No rival can close America's cumulative military spending lead. The speaker puts total military spending since 1980 at about $1.7 trillion for Russia and $2.1 trillion for China, against $20 trillion for the US from 1980 to 2022, on top of already having the world's best military in 1980. The speaker calls the US $18 trillion ahead, China far behind, and Russia "a pitiful joke in Ukraine".
GeoHussarUS catches up in the hypersonic race
  • The US has caught up with China and Russia on hypersonic missiles. The speaker says the AGM-183A was tested in mid-March of the previous year but kept quiet to avoid escalating with Russia. The speaker puts China's missiles at up to five times the speed of sound and claims the US missile can reach up to 20 times, 15,000 mph; work has moved on to hypersonic jets.
  • US lag reflected priorities, not capability. The speaker says the US shelved hypersonic projects in the 1970s, and once they became a military priority it caught up in one or two years on what took China and Russia almost two decades.
GeoHussarUK vs US troops
  • War-game wins do not make UK troops better than American ones. The speaker concedes the British are better trained in some respects and that Royal Marines beat US Marines in war games the previous year, but cites Afghanistan losses: 2.3% of deployed US troops, 4.7% of UK and 5.4% of Canadian. The speaker says UK troops were 12% more likely to be killed during the War on Terror.
Technology and FriendsEric Lawrence on Web Browser Complexity [TECHNOLOGYANDFRIENDS 733]
synopsis

Lawrence, a Microsoft web-defense program manager who has worked on IE, Fiddler, Chrome and Edge, argues that browsers, now the platform most work runs on, are not a black box: any developer can learn them, and their design makes sense once you see Chromium's layering and the search money behind it.

Why and how to learn browsers. Lawrence says browsers matter to developers and to anyone interested in tech policy. He got in to read source: a "clip of the day" bug led him to the IE team and about six fixes. The code is now open, but he recommends bug trackers, design docs and blogs too, noting that reading C++ is far easier than writing it.

What is changing. The main push of roughly the last decade is making the browser a full app platform. Lawrence says capability and safety must both advance, and cites the EU's challenge to Apple's iOS WebKit requirement.

Complexity and layering. Browsers aim for simplicity but run to about 12 million lines of C++ plus as much test code. IE was weighed down by decades of compatibility hacks, and Lawrence backed re-platforming Edge on Chromium, taking all of its content, Chrome and components layers to ship quickly. Work within a layer stays simple, but one Boolean he carried across the browser touched about 48 files. Giard draws the lesson for any complex application.

Who pays. Lawrence says one point of market share is worth about $100–200 million a year in search revenue, which explains browser staffing and default search engines.

  • Browser internals are learnable, and you need not start with source. Lawrence, who says he has worked on browsers or web technology for about 25 years (IE, Fiddler, Chrome, Edge), points to bug trackers, design docs, blogs and documentation as ways in, and argues that reading C++ is much easier than writing it; Chromium's code is fairly straightforward to read, unlike IE's older network stack. He says he joined the IE team largely to see why Office's "clip of the day" would not change, printed the network stack's source, and found about six bugs, with about 100 other suspect spots circled.
  • The decade's main browser fight is over becoming a full app platform. Lawrence says one camp wants the web to match native capability, while security and privacy are why the web succeeded; his view is that it has to be both, or the web stays a second-class citizen. He cites the rule that iOS browsers must use WebKit, which he says has shortcomings against Blink and Gecko, as a restriction the European Union is now questioning.
  • IE's complexity lay in its compatibility ecosystem, not just its code. He says IE carried decades-old hacks (one for a CompuServe 1.0 beta) that nobody dared remove in case a line-of-business app relied on them. The day after he returned to Microsoft from the Chrome team he was asked whether to re-platform on Chromium, and he backed it; he puts a modern browser at about 12 million lines of C++ plus about as much test code.
  • Chromium's layering keeps work simple, except for cross-cutting changes. Lawrence describes "content" (the base for building a multi-process browser), "Chrome" (the browser UI around it) and optional "components" such as the spell checker; Edge took the Chrome layer too, because Microsoft had no Win32 browser front end since IE. His hardest change carried one Boolean (whether a user had edited a form field on an HTTP page) across about 48 files, and he credits the modularity with making Electron and clean testing with fakes and mocks possible.
  • Search revenue funds browsers and explains many of their decisions. Citing public figures from Mozilla and others, Lawrence says one point of browser market share is worth roughly $100–200 million a year, and that Google reportedly pays Apple about $12 billion a year to be the iPhone's search engine. He infers Chrome is worth tens of billions to Google, which is why browsers carry huge teams and why each defaults to its payer's search engine.
Scott HanselmanHachyderm's Kris Nova on running a Mastodon Server - Hanselminutes Podcast 872
synopsis

Kris Nova, who works at GitHub after Azure, ends the conversation committed to keeping Hachyderm, the Mastodon server they started in a rack at home, open to new users until perhaps 200,000, having moved it to Hetzner because a home connection could not carry its outbound traffic. Along the way Nova argues that Mastodon's performance problems lie in how it schedules work and touches its data, and that followers lost in migration are a cost of federation rather than a bug.

Hardware without gatekeeping. Nova keeps the rack to stay in touch with building things, but says it reflects ten years of savings and no kids and should not be a prerequisite for anyone. Hanselman offers his six Raspberry Pis running k3s, set up with Alex Ellis's k3sup, as a way in for about $150.

Slowing down on purpose. Records played through a tube receiver, a side lasting about 15 minutes, help Nova's ADHD; they now schedule this time and recommend counting your smiles. Their book Hacking Capitalism began as the context a technical book on distributed operating systems needed first.

Dangerous things, cautiously. Skateboarding, Nova says, taught them calculated risk and recovery, which is why exposing a home IP felt manageable; they want juniors to have the same freedom to fail, provided they write things down like scientists. Hanselman's gloss is that psychological safety means not flipping the bozo bit on someone who asks a question.

Why it stayed open. Hachyderm grew from about 700 users on November 3, 2022 to 30,000 weeks later. Nova would not turn away people leaving Twitter, which they had treated like an RPG status bar. Growth outran the rack: decade-old Dell PowerEdges went in straight off the moving truck, and the problem became cutting over without days of downtime. One day brought a terabyte of egress against 200 Mb of upload; bad disks slowed media, Sidekiq queues backed up, and memory filled.

Inside Mastodon. Nova has rebuilt federation on a laptop and finds the queues arbitrary and overlapping, like old cron jobs, tuned by hand. The Rails code reads and writes whenever it likes, which they call the biggest opportunity for improvement. They avoid Kubernetes for now, despite a working Helm chart, to understand the application before possibly rewriting parts.

Migration and federation. Moving followers needs an HTTP-signature handshake with every instance, so a neglected server's queue may never finish. Hanselman's 850 stranded followers cluster on mastodon.online and qoto.org, and there is no admin retry. Nova calls it a consequence of federation and advises large accounts to choose an aware instance or run their own; when Hanselman says he does not take his following seriously, Nova points to streamers whose followers are their income.

  • Nova kept Hachyderm open rather than turn Twitter refugees away. The server went from about 700 users on November 3, 2022 to 30,000 a couple of weeks later; Nova says people were breaking up with a part of their identity and they "didn't have it in me to say no". They intend to keep sign-ups open until perhaps 200,000 users, closing only briefly, as during recent DDoS threats; a legal entity is being formed behind it.
  • Upload bandwidth at home, not compute, forced the move off the rack. One day saw a terabyte of egress against a small-business line advertised at a gigabit down and 200 Mb up, so serving users saturated the upload; the instance is moving to Hetzner bare-metal "auction servers". Nova describes cascading failures: bad disks slowed media reads, the Sidekiq queues behind them filled, and memory filled after that.
  • Mastodon's waste is unscheduled queues and unplanned database access. Nova finds the Sidekiq queues arbitrary and overlapping, like old cron jobs, and tuned by hand (threads times concurrency kept under the DB pool); the Rails code reads and writes whenever it likes, which they call the biggest opportunity for improvement. They chose not to run it on Kubernetes, despite a Helm chart others use successfully, so they understand the application before possibly rewriting parts.
  • Followers lost in migration are stalled federation handshakes, not losses. Every instance must re-verify each follow with HTTP signatures, so a neglected server's queue may never finish; Hanselman's 850 stranded followers sat on mastodon.online and qoto.org, and Nova says there is no admin button to retry. They call this a consequence of federation and advise large accounts to join an instance aware of it or run their own.
  • Seniors should give juniors room to fail safely. Nova credits skateboarding with teaching them to take calculated risks and recover, which is why exposing a home server to the internet felt manageable, and wants that freedom for early-career people provided they work like scientists and write things down. Hanselman's own gloss is that psychological safety means not "flipping the bozo bit" on someone who asks a question.
Polis PanditHistory Repeats Itself in Ukraine
  • This post includes paid content that is not available publicly. See the original source.
Crosstalk SolutionsDo This RIGHT NOW If You Use LastPass! Your Passwords are at Risk!
  • The attacker took LastPass's backup copies of customer vault data. As reported, a breach in August yielded source code and technical data, which the hacker used to compromise an employee and obtain credentials and keys for a cloud backup storage service, separate from LastPass's main network, holding backups of company and user data.
  • Stored passwords are encrypted, but weak master passwords can be cracked. LastPass says vault usernames, passwords, secure notes and form-fill data are AES-256 encrypted and need the master password, which it never knows; website URLs were unencrypted. The host warns weak master passwords could be brute-forced, expects phishing aimed at master passwords, and tells viewers not to believe LastPass's claim that strong ones face no danger.
  • Changing the master password alone does not protect stored accounts. The host says to set a strong master password or passphrase and enable two-factor authentication, but then to change every password in the vault, most sensitive first (email, banking, cryptocurrency), and turn on two-factor authentication on each site wherever possible.
  • The host's view is that users should reconsider LastPass altogether. He calls the breach entirely unacceptable for a company holding that level of responsibility over secure data, and asks viewers for alternatives rather than naming one.
Crosstalk SolutionsWhat Is WiFi 6? Should You Upgrade?
  • Wi-Fi 6 improves crowded networks, not single-device speed or range. The host calls per-device speed gains the big misconception about 802.11ax: a fully Wi-Fi 6 device with a decent antenna may gain a little, but the standard's features squeeze more total throughput from the airwaves as device count rises. It uses both 2.4 GHz and 5 GHz; Wi-Fi 6E adds the newly opened 6 GHz band.
  • Several features add capacity by sharing the channel more efficiently. Multi-user MIMO goes from 4x4 in Wi-Fi 5 to 8x8; OFDMA splits bandwidth into subcarriers so devices transmit simultaneously with variable-size packets; QAM rises from 256 to 1024 symbols. A new 160 MHz channel width raises data rates but is more interference-prone, so the host says to measure the local spectrum before choosing it.
  • Other features cut interference and save client battery. BSS colouring lets nearby access points share a channel unless they share a colour; enhanced beamforming targets individual devices more precisely, raising beams from four to eight; target wait time and the uplink resource scheduler tell devices when to transmit and sleep, which matters most for phones and IoT devices.
  • The host says most existing Wi-Fi 5 networks need not upgrade. Home users rarely have the density to notice, and he runs a mix of Wi-Fi 5 and 6 access points himself without issue; a business with around a hundred devices sees little benefit either. Event centres, theatres, churches and stadiums with hundreds of people do benefit, and anyone buying new should buy Wi-Fi 6.
  • The host expects the next standard to be years from wide use. He says vendors already tout "Wi-Fi 7" but it is not formally recognized, that the next version is expected to be "Wi-Fi 8", 802.11be, with no Wi-Fi Alliance timeline, and notes Wi-Fi 6 arrived in 2019 but access points took a year or two to spread. He credits OpenAI's ChatGPT with helping research the video.
Polis PanditDon't Doxx Me, Bro!
  • This post includes paid content that is not available publicly. See the original source.
Crosstalk SolutionsHow To Make Money with Your Internet Connection
  • A portable paid hotspot could earn thousands at a disconnected event. The idea came from a three-day festival with no service where one booth sold internet at $20 for 10 minutes. His explicitly made-up numbers for a 10,000-person, three-day event (1% a day buying a 4-hour plan, 0.5% a 24-hour plan) give just under $3,300. He notes Starlink's terms explicitly prohibit resale and says he will not resell his own; LTE SIMs need their terms checked too.
  • The host recommends Starlink for RVs, with LTE or point-to-point as fallbacks. The RV service is portable, has no data caps and can be paused, at $135 a month for months used. Alternatives are an LTE router such as the Pepwave MAX BR1, which he calls one of "our most popular choices", with omni or directional antennas, or a line-of-sight link from a nearby neighbour's connection.
  • The whole kit runs from one PoE switch on a battery. A UniFi USW Lite 8 PoE powers an EdgeRouter X (via an 802.3af-to-24 V passive PoE converter), a Cloud Key Gen2 Plus for Protect, a G3 Flex camera as a theft deterrent and a UAP AC Mesh, at about 25 W. Starlink adds about 50 W; an EcoFlow Delta 1300 ran everything just under eight hours, and he judges solar impractical, leaving a generator or venue power.
  • UniFi's guest hotspot handles payment but its portal editor is unreliable. The EdgeRouter's WAN must be eth4 because eth0 takes PoE in; the guest VLAN 51 SSID uses a 10/5 Mbps profile, client isolation and Cisco FamilyShield DNS, which must be in the pre-authorization allow list. He set a 10-minute free trial, 4 hours for $5.99 and 24 hours for $9.95 through Stripe, and tested the cap. On UniFi Network 7.3.76, "apply changes" sometimes fails; Ubiquiti told him 7.4 will improve it.
  • A UniFi Dream Router adds application-layer blocking at lower power. The EdgeRouter setup cannot block streaming or torrenting, which he fears could bring piracy notices on his connection. The UDR's traffic management blocks peer-to-peer and media streaming, its "family" content filter blocks VPN, explicit and malicious domains, and it draws about 8 W. Against it: forum reports of lock-ups, rare stock, and his advice to carry two.
Technology and FriendsHimanshu Rao on Reliability, Performance, and Scalability in the Cloud [TECHNOLOGYANDFRIENDS 732]
synopsis

Rao, a Microsoft partner cloud solution architect who leads SAP, high-performance computing and Epic on Azure, holds that a great user experience depends on performance and scale, but that reliability is the foundation and comes first. For business-critical workloads he finds the decisive performance layer is usually storage.

Reliability. Rao begins with failure mode analysis: what can fail, and what it costs the business. From that come availability metrics (SLA, RTO, RPO), set against what the cloud already provides. High availability then goes into every tier: servers paired across independent availability zones, clustering, database replication, disaster recovery, and continuous monitoring.

Capacity and the network edge. Performance starts with a capacity model drawn from business requirements, for SAP via Quick Sizer's benchmark. From the user to the first cloud endpoint, he moves compute and content closer through regions, CDN and caching, and uses VPN or ExpressRoute for hybrid traffic, as when one terabyte of SAP data must move in a four-hour window.

Compute and storage. From the endpoint to the application, Rao picks the right SKU and favours horizontal scaling with cloud autoscalers; Giard notes the application must handle parallel requests. Rao calls storage design "king": about seven in ten performance escalations he sees trace to it. Latency, not IOPS or throughput, is what gets missed, and he answers it with Ultra Disk, Premium SSD v2, NetApp Files, Write Accelerator, striping and proximity placement groups.

What excites him. Rao points to GraphQL and to the partner Databricks' lakehouse, where Delta Lake keeps all kinds of data in one place with an ACID layer. Its Photon engine combines data- and instruction-level parallelism, which he sees as the answer to CPU gains lagging storage gains.

  • Build reliability first, then performance on top of it. Rao starts with failure mode analysis and the business cost of each failure, derives availability targets (SLA, RTO, RPO) and compares them with what the cloud guarantees, such as 99.99%. He then builds high availability into every tier: paired servers across Azure availability zones (at least three in most regions, each with its own power, cooling and network), clustering, database replication such as SQL Server Always On or Oracle Data Guard, plus disaster recovery and continuous monitoring.
  • Performance design starts from a capacity model of business requirements. Rao lists content types, user base and locations, and targets such as a one- to two-second load time, then sizes resources against them. For SAP he uses SAP's Quick Sizer, which turns concurrent users and data size into a platform-neutral benchmark that he uses to shop for matching VMs.
  • Close the user-to-cloud gap with proximity and private links. He moves compute or content near users via regions, CDN and Redis caching, and says site-to-site or point-to-site VPN mainly helps security rather than speed. For bulk loads, such as one terabyte of SAP data in a four-hour cutover window, he uses ExpressRoute, with committed bandwidth from 1–2 Gbps up to 100 Gbps (10 Gbps common); he says 7 or 8 of 10 large performance-oriented enterprise workloads use it, and nearly all of SAP.
  • Horizontal scaling suits massive loads, with cloud autoscaling doing the work. Rao prefers adding nodes over enlarging one machine, though he notes most people still scale SQL Server and Oracle vertically; Giard adds the caveat, which Rao accepts, that the code and database must handle parallel requests or sharding. He recommends VM scale sets with thresholds (for example CPU above 90%) and the built-in autoscaling of AKS, Container Instances and Container Apps.
  • Storage design is king for business-critical workloads. Rao says that in about seven of ten performance escalations he is pulled into, the fix is in storage design. He weighs IOPS, throughput and above all latency: 15,000 or 60,000 IOPS is no use at 7–8 ms when a database log drive such as SAP HANA's needs sub-millisecond. His tools are Ultra Disk, Premium SSD v2, Azure NetApp Files' ultra tier, the free Write Accelerator, striping data files across disks, and proximity placement groups to keep application and database servers physically close.
Polis PanditAn Oregon Adventure
  • This post includes paid content that is not available publicly. See the original source.
Crosstalk SolutionsNetwork in a Box! Video coming soon! #network #networking #starlink #Internet #homelab #unifi
  • Starlink draws most of the Network in a Box's power. The whole setup pulls about 70–75 W from an EcoFlow Delta, of which about 25 W is the boxed gear (USW Lite 8 PoE switch powering a Cloud Key Gen2, EdgeRouter X, a pole-mounted mesh access point and a camera) and the rest Starlink; the host estimates the battery keeps it online for about 10 to 12 hours.
Crosstalk SolutionsFull network - single power cord! #network #networking #homelab #unifi
  • A complete small network can run from one power cord. A USW Lite 8 PoE switch, drawing 24 to 26 W in total, powers a Cloud Key Gen2 Plus running Protect, a G3 Flex camera, a mesh access point, and an EdgeRouter X through an 802.3af-to-24 V passive PoE converter; only the WAN needs plugging in.
Technology and FriendsBeth Humphreys on Technical Leadership [TECHNOLOGYANDFRIENDS 731]
  • Leadership rests on influence, with or without formal authority. Humphreys, who leads a team of cross-solution architects in Microsoft's U.S. Global Partner Solutions organization, says that as an individual contributor managing the technical relationship with one global customer she had to align Microsoft's internal teams and the customer's teams on a shared goal, and create clarity on why each was being asked to act. She cites a panel of Microsoft distinguished engineers and technical fellows, one of whom called "leading with authority" a myth, and agrees: managers at every level still get things done by understanding what motivates people and what "give-gets" are on offer.
  • Asking others for help is a leadership skill, not cheating. Early on she felt she was cheating when she posted customer questions in Microsoft's internal MCS architect communities; a Microsoft leadership program taught her that pulling people in gives them a chance to have impact and broadens what you can do. She frames admitting what you don't know as courage, since knowing everything is as impossible as being perfect.
  • Technical people are motivated by recognition, learning and room to fail. Humphreys says she has only ever managed technical teams and treats that as a requirement when considering a role, because as a former technical person she knows the motive is often not money. Her first management job was a "triple whammy": first-time manager, at Microsoft, leading her former peers as account technology strategists, which changed the relationship because she now affected their pay, promotion and career; she learned to ask each person what motivates them.
  • You must find and own your mentoring relationships yourself. She kept a network of peer mentors inside and outside her organization, and does "speed mentorship," asking someone with a strength she lacks to walk her through how they think; she says going in with a stated purpose is the mentee's responsibility, and Giard adds that he once waited for mentors to come to him. As a manager, she assigns new team members peer mentors who can show them "what good looks like."
  • Learn leadership from people you recognize as good leaders. Asked where to start, she recommends the book Radical Candor, by Kim Malone Scott, for being clear about feedback while also encouraging people. Mostly she learns by approaching people she sees as great leaders, whether managers, distinguished engineers or early-career staff, and through Microsoft's internal leadership programs and communities.
Crosstalk SolutionsHow To Network a Massive LAN Party! PDXLAN 2022
  • PDXLAN's temporary network is built on enterprise gear with headroom. A Comcast 10 Gbps fiber feeds a 72-core MikroTik CCR1072, which the host saw barely strained at sustained 3–5 Gbps and a peak around 7.5 Gbps. A core switch with a 40 Gbps uplink sends 1 Gbps to two 48-port switches per table row; public Wi-Fi runs separately on a UDM Pro SE with DPI and two U6 Mesh access points, with Grafana, PRTG and a Discord bot alerting staff to offline switches.
  • A flat /16 for about 650 devices is oversized but harmless here. The admin told the host he chose it because it is easy. The host says a /22 would fit best, and that a /16's risks (oversized layer 2 tables, broadcast traffic swamping printers) appear only with tens of thousands of devices, which a four-day event with enterprise gear never approaches.
  • Torrenting users are automatically quarantined until they agree to rules. Internet-bound traffic is port-mirrored to a 2U Suricata server doing layer 7 filtering; on detecting peer-to-peer traffic it moves the user to a VLAN with no internet and a captive portal of event rules, returning them once they stop and accept the terms.
  • The torrent ban mainly protects the venue's internet connection. Beyond ticket terms and a possible, unlikely saturation of the 10 Gbps link, the host says the real concern is piracy: Comcast could send notices or disconnect the Clark County Event Center near Portland, Oregon, jeopardizing future events there. Legitimate torrent users are simply out of luck.
  • 1 Gbps uplinks to table switches are deliberate, not a bottleneck. Each 1 Gbps link serves 24 attendees on an event with 10 Gbps total, so the host argues 10 Gbps links would add nothing, while the 1 Gbps cap limits how much bandwidth any one user or table can take from others.