2bluesc

12 ms·

91.
by 2bluesc 3y ago
I'd never heard of Technitium, but was intrigued looking at. Was thinking "hmmm what could I do with this" and then had to refrain from creating another project just because. TBH I find Docker networking a struggle and usual
92.
by 2bluesc 3y ago
I know this can be done manually (and I do), but the issue with that is that: 1. It's manual 2. Single point of failure of this server that was needed My point was that MagicDNS is implemented in the Tailscale client on each machine (
93.
by 2bluesc 3y ago
For servers sure, but things like `tailscale` exist to save every laptop and cell phone from looking like a devops project. Furthermore you could extend this argument almost every other cloud service with a primary feature of "convenie
94.
by 2bluesc 3y ago
The missing feature from Tailscale for me is the ability to host a Tailscale only DNS zone. They have Magic DNS, but that only works for individual Tailscale nodes. I want multiple DNA records pointing to a single Tailscale node. Would be e
95.
by 2bluesc 3y ago
Setting up a few p2p wg VPNs is manageable. However, when you have 10 nodes and need to add one more node, you now need to update all other nodes so they can speak p2p. Management with scale is the struggle.
96.
by 2bluesc 3y ago
Had similar feelings and did like it more then I thought I could. My escape hatch from the monopoly is headscale[0] which I can self host. [0] https://github.com/juanfont/headscale
97.
by 2bluesc 3y ago
There's a lot of repeated stuff for no reason. The congestion control and loss recovery sections are a struggle to read. Ctrl-f "uses a combination of congestion control and loss recovery to recover from packet loss" or &quot
98.
by 2bluesc 3y ago
Should note this only applies to AUR packages and `-git` mostly because of missing archive hashes. AUR packages pinned to mutable tags are easiest to hijack.
99.
Seized Genesis Market data is now searchable in Have I Been Pwned(troyhunt.com)
105 points by 2bluesc 4y ago|19 comments
100.
We’re no longer sunsetting the free team plan(docker.com)
370 points by 2bluesc 4y ago|229 comments
101.
by 2bluesc 4y ago
This is something I've thought about. We don't really have the resources and I'd rather pay Gitlab to manage this on a day to day. If we did self host, it couldn't be Gitlab as I fear they'd pull the plug on these
102.
by 2bluesc 4y ago
Ironically, the IPv4 address for gitlab.com in my region is on a blocklist this morning[0]: $ drill -Q @1.1.1.1 gitlab.com 172.65.251.78 $ drill -Q @8.8.8.8 gitlab.com 172.65.251.78 $ curl -s https://iplist
103.
by 2bluesc 4y ago
> Yes, they are adding features nobody asked for like crazy, just to be able to check more boxes in some feature matrix. This. If people want "DevOpsSec" then make it a feature or addon tier. I'm certainly in favor of mor
104.
by 2bluesc 4y ago
This is on my todo list after wrestling docker almost in to compliance with nftables. Even so, I still have some issue with ports forwarded to docker services not NATting correctly and instead show up with a source IP of the docker bridge.
105.
by 2bluesc 4y ago
Did you use or try Zen Ledger? If so, they had a breach and have been very quiet about it too [0] [0] https://news.ycombinator.com/item?id=34543078
106.
by 2bluesc 4y ago
This is the link from the post to their vendor with more details: https://www.klaviyo.com/blog/august-2022-security-incident It appears this happened on August 3, over 5 months ago!
107.
AWS CloudTrail vulnerability: Undocumented API allows CloudTrail bypass(securitylabs.datadoghq.com)
13 points by 2bluesc 4y ago|0 comments
108.
by 2bluesc 4y ago
> ## Patch > Since the vulnerable operation in nft_payload_copy_vlan should account for the encapsulated VLAN tag, I suspect that the last plus sign should have been a minus since it prevents any wrapping. > ## Mitigating the bug &
109.
CVE-2023-0179: Linux kernel stack buffer overflow in nftables: PoC and writeup(seclists.org)
3 points by 2bluesc 4y ago|1 comments
110.
Escaping from Bhyve(synacktiv.com)
3 points by 2bluesc 4y ago|0 comments
111.
Global Spyware Scandal: Exposing Pegasus(pbs.org)
92 points by 2bluesc 4y ago|26 comments
112.
by 2bluesc 4y ago
Sounds more like extortion
113.
by 2bluesc 4y ago
> Twitter or Elon Musk if you are reading this you are already risking a GDPR fine over 5.4m breach imaging the fine of 400m users breach source Your best option to avoid paying $276 million USD in GDPR breach fines like facebook did (du
114.
by 2bluesc 4y ago
Is there a site that published this you can share?
115.
by 2bluesc 4y ago
I suppose this is how such things start.
116.
Netdata 1.37.0: Infinite scalability, database tiering, and much more(blog.netdata.cloud)
9 points by 2bluesc 4y ago|2 comments
117.
Vultr: Reduced Bandwidth Pricing, 2TB/Mo Free Egress, Free Ingress, Global Pool(vultr.com)
3 points by 2bluesc 4y ago|0 comments
118.
by 2bluesc 4y ago
I'm surprised they don't allow exit nodes to function as funnel servers. Seems to me this would save them the hassle of dealing with the bandwidth.
119.
by 2bluesc 4y ago
I'd love to learn what the bandwidth limits are.
120.
Brave New Trusted Boot World(0pointer.net)
156 points by 2bluesc 4y ago|166 comments

More ›