Znafon

12 ms·

121.
by Znafon 7y ago
How does keeping a short token in redis or other would make the application easier to DOS than any other resource?
122.
by Znafon 7y ago
In my experience, the idea that JWT is stateless is wrong. When your client log-out you will need to keep the token in a blacklist and check all requests against it to make sure it is not reused until it expires. Since you need to keep a li
123.
by Znafon 7y ago
> The fact that different professions earn different amounts of money is, in fact, an indicator that the higher paying professions have a shortage of people able to perform the work. If we have 2000 people, we need 1000 doctors and 1000
124.
by Znafon 7y ago
Why did you not use ECS with EC2 instead of patching HAProxy? With the Amazon AMI it is pretty straightforward.
125.
by Znafon 7y ago
Some work as started to have a built-in connection poller on January 2019 so it will probably be available in PostgreSQL someday.
126.
by Znafon 7y ago
> My only frustration with this release announcement is dropping Python 3.5 support now. Because Python 3.5 is not EOL and used in LTS OS releases that have vendor support through 2021, this forces us to choose between our policy of supp
127.
by Znafon 7y ago
People sign their vote, I'm not sure how the details work, you will need to look at the details of Devotee, look at https://lists.debian.org/debian-devel-announce/2019/04/msg00... and https:/&#x2F
128.
by Znafon 7y ago
I think you will find Debian election process interesting for what you are trying to do : https://www.debian.org/vote/2019/vote_001_tally.txt
129.
by Znafon 7y ago
We just got bite by a bug were Catalina would randomly delete some Wireguard tunnels. A temporary workaround to restore them has been published in the Wireguard client but Catalina doesn't feel stable at the moment.
130.
by Znafon 7y ago
You can get this with standard pip by setting the PIP_REQUIRE_VIRTUALENV env variable.
131.
by Znafon 7y ago
Thanks, this was exactly what I was looking for. I'll start experimenting with it :)
132.
by Znafon 7y ago
I think RDS has some very strong pros: - not so bad pricing - good defaults - no need to worry regarding the backups and easy disaster recovery - some monitoring out of the box - support TLS with a valid cert out of the box -
133.
by Znafon 7y ago
> RDS not supporting custom extension is RDS problem and frankly I wouldn't recommend using RDS. We are using RDS and would like to have a standard PostgreSQL instead. Is there some community supported AMIs that could help us to get
134.
by Znafon 7y ago
You may want to have a look at ORCHIDv2 which uses a subset of IPv6 to distribute cryptographic identifiers. I think you could use them for this purpose.
135.
by Znafon 7y ago
Is DHCP useful to enforce network policy? What about users who manually set their DNS servers? Wouldn't be a proxy checking the SNI of connections you open better?
136.
by Znafon 7y ago
We do, we found that having a no releases on Friday policy was just an excuse and diverting us from actually improving our CI/CD, monitoring and alerting infrastructure. We invested work on those and try to deploy as we can. It works g
137.
by Znafon 7y ago
> I realize that the UNIX philosophy (everything is a file) is dead Was it ever alive? As far as I know lo0, eth0 and others where never accessible as a file interface and we still rely on them. Is there something to gain to give them a
138.
by Znafon 7y ago
Morality is subjective, Seth Vargo thinks the way ICE enforces the law is not appropriate and choose not to help them. Wether or not you share his moral beliefs does not seem important to me, you can recode chef-sugar if you think the way I
139.
by Znafon 7y ago
This makes sense,all organizations are different and it is true that all changes to the kernel tree are publicly ACK-ed before geetting committed. Maybe we could make a note of the public key that pushed each commit to the repo so we get th
140.
by Znafon 7y ago
You would already get a conflict as the history of the repo changed and signing all commits as some drawbacks as Torvalds explained here: http://git.661346.n2.nabble.com/GPG-signing-for-git-commit-t... I'm not sure it&
141.
by Znafon 7y ago
You may be interested in Sentry's data scrubber to remove things like credit card numbers, password and API keys: https://github.com/getsentry/sentry/blob/95767d455b8004ec4b4...
142.
by Znafon 7y ago
I'm working on this to add TOTP support, I will publish it when it's ready, you may be able to reuse some parts of the implementation.
143.
by Znafon 7y ago
Wg-quick from the same project as Wireguard supports pre/post-up/down Hooks. You should be able to very easily write a post-up hook that read the rules from the server and a pre-down one that delete them. Since your are connected
144.
by Znafon 7y ago
I think my issue what binding Consul to docker0 while Docker is starting. Half the time the interface wasn't ready. I don't remember exactly how I fixed it but with SystemD you can just specify a dependency.
145.
by Znafon 7y ago
I think I had one where one service was trying to bind to a network interface that wasn't ready, maybe docker0. It was painful to find and fix.
146.
by Znafon 7y ago
> When I want to write a script that runs on startup, I expect that I can just put (or link) it in some directory where the scripts are that get started on startup This is not very specific, have you never had any race-condition with thi
147.
by Znafon 7y ago
If reading the message require those 5 HSM, how does your recipient can read your message?
148.
by Znafon 7y ago
There is some reference to this in French: > Les droits d'enregistrement de Karajan n'étant pas disponibles, c'est la version de Karl Böhm, avec l'orchestre philharmonique de Vienne, qui fut créditée au générique. Mai
149.
by Znafon 7y ago
Yes! And Kubrick knew this: for "2001: A Space Odyssey" he bought the right of "Also Sprach Zarathustra" directed by Böhm and replaced it at the last minute by the one directed by Karajan hoping no one would notice.
150.
by Znafon 7y ago
You can get phised to enter your two factor in a random web forms but it is not possible to do this with U2F ( https://en.wikipedia.org/wiki/Universal_2nd_Factor ). For example, Google reported that deploying U2F blocked

More ›