adontz

11 ms·

91.
by adontz 3y ago
I know. This practice of having two user accounts sucks.
92.
by adontz 3y ago
I'd rather reask credentials before elevating effective access level. Just like sudo reasks password. I don't mean reasking MFA to access corporate intranet website with a blog no one reads, I mean reasking for administrative acc
93.
by adontz 3y ago
Kerberos is a) relatively complex to set up properly if its not a Windows in AD b) an SSO, not federated ID. Which means reasking MFA is not possible.
94.
by adontz 3y ago
I believe privileged access management is the proper way to manage access to a password protected systems. It is basically a terminal server, proxy, bastion or anything similar. You log in there with federated identity (for example AD) and
95.
by adontz 3y ago
Just want to add, that comparing to postgresql is a very modern view. There were other databases, not popular today, but quite popular back in the day. To name a few: DB2, InterBase, Firebird, Paradox, Access, SQL Server Compact. MySQL was
96.
by adontz 3y ago
Serious question. I have this question for, like 20 years already. Why would anyone start a new project with MySQL? Is it really superior in anything? I'm in industry for 20+ years and as far as I remember MySQL was always the worst an
97.
by adontz 3y ago
"We do not want the risk. The 3rd party must be accountable for this." Repeat ad infinitum. While it may look like that, dialog happens not because client representatives are dumb. It's because they are afraid.
98.
by adontz 3y ago
No. For instance SSH certificates are one level only, do not support trust chains, cross signing, and a lot of other x509 complexity.
99.
by adontz 3y ago
No, I'm thinking of SSH certificates. Here is the description of file format, it's nothing like x509 https://github.com/openssh/openssh-portable/blob/master/PROT...
100.
by adontz 3y ago
SSH certificates (I encourage using them!) are not x509, absolutely incompatible.
101.
by adontz 3y ago
I believe security models for HTTP and SSH are pretty different. HTTP is usually public and anonymous, SSH is usually private and authenticated. While QUIC is definitely a great technology for HTTP use case, I'm not so sure about SSH.
102.
by adontz 3y ago
"Consistency - This one doesn't really belong on ACID as a property of databases, as it is a property of the application." Damn, that is not good on so many levels. First of all, ACID are not properties of a database, they ar
103.
by adontz 3y ago
Now we need a decent client :-( Ideally, something with UX level of Telegram.
104.
by adontz 3y ago
https://en.wikipedia.org/wiki/United_States_antitrust_law
105.
by adontz 3y ago
I think there should be different types of channels for different types of viewers. While I appreciate VSause and Veritasium, Kurzgesagt as about equally informative, Sabine's quality humor makes her content very special.
106.
by adontz 3y ago
If one has CPU load for 50 pods, then it is not a usual project I guess? Average load should be thousands of requests per second I believe. So the question is how many applications have CPU load for 50 pods but also cannot saturate a single
107.
by adontz 3y ago
Fun fact: Eugene Roshal is author of both Far Manager and WinRAR. However Far Manager is distributed as a 7z archive.
108.
by adontz 3y ago
Is there no EU regulation against this?
109.
by adontz 3y ago
Is there nothing from UX perspective to improve? Like, absolutely nothing? Is it perfect then?
110.
by adontz 3y ago
I am shocked to see the design did not change a bit.
111.
by adontz 3y ago
Ransomware will work around this limit easily by spawning more processes, injecting itself into other valid processes, etc. System wide limit will just slow overall I/O and make everyone super angry. This suggestion is an utter bullshi
112.
by adontz 3y ago
>> It's the DevOps person with an endless ticket queue; it's the IAM policy that needs to be updated; it's the deployment failure that only the external part-time consultant knows how to debug; It's the endless bac
113.
by adontz 3y ago
> obviously police and ambulances (and fire trucks) doing their jobs don't have to follow the sign. Nope, not for me :-) But funny part is that it's so obvious for me, I'm surprised anyone else thinks otherwise.
114.
by adontz 3y ago
I never stated otherwise, IDK what are you not agreeing with.
115.
by adontz 3y ago
They have background in IT
116.
by adontz 3y ago
I see bisect as a git superpower. Also grep (with rev-list). It's like knowing regular expressions. Not that one writes regexps every day, but this knowledge/skill definitely uplifts one to the next level.
117.
by adontz 3y ago
It highly depends of culture of specific team. I've seen teams obsessed with "clean" history, rebasing and squashing everything they possibly could. I believe it's a matter of taste, I never understood the argument.
118.
by adontz 3y ago
After rebasing you basically have two versions of the same commit, and that is the root of the problem.
119.
by adontz 3y ago
I'm teaching Git in University. For all those who think that Git is easy, it's not. It takes a student about 20-30 hours to really understand all usual Git commands. I'm not talking about something bizarre like ls-remote, but
120.
by adontz 3y ago
183 after some recent cleanup

More ›