aflukasz

9 ms·

61.
by aflukasz 2y ago
You are right, there is a performance and resources aspect to this. When I've given those two particular monitoring examples, I should probably put more emphasis on the word "unexpected", which by its nature reduces cost clos
62.
by aflukasz 2y ago
When it comes to "what" to monitor, many usual suspects already posted in this thread, so in an attempt not to repeat what's there already, I will mention just the following (will somewhat assume Linux/systemd): - system
63.
by aflukasz 2y ago
I'm not in a position to judge this author's work as a whole, as this is not my area of expertise. I know this person as an author of "super memo" algorithms for spaced repetition learning, so yes, he most likely have a
64.
by aflukasz 2y ago
If you are interested in similar research, take a look at https://supermemo.guru (somewhat hidden "about" page: https://supermemo.guru/wiki/SuperMemo_Guru:About ). Author spent quite some time on t
65.
by aflukasz 2y ago
I will share one data point that just popped to my mind, maybe it will be useful to someone. About 10 years ago, my colleague and I were interviewing a guy for SWE role. He wanted to learn about presence of pressure, difficult deadlines and
66.
by aflukasz 2y ago
I like this observation. And it fascinates me each time I see some self proclaimed conscious entity arguing that this just simply cannot be.
67.
by aflukasz 2y ago
Actually, not encoded slashes in the paths are not that unheard of as one might think. As an example, this is actual Wikipedia article about... the meaning of "two slashes": https://en.wikipedia.org/wiki/&#x2F
68.
by aflukasz 2y ago
By the way, simple honeypot on Linux using auditd: just set a rule like `-w /etc/secret-file -p rxwa -k some.tag` and use your mechanism of choice to watch logs/journal for the occurrence of `some.tag` string. `-p rxwa` cause
69.
by aflukasz 2y ago
Can you propose an example of a compensating control for an "antivirus" that had a chance to pass? Would you propose something like custom SELinux/Apparmor setup + maybe auditd with alerting? Or some Windows equivalent of tho
70.
by aflukasz 2y ago
Right, but now your are exposing HA proxy socket to the Internet. Why is that better?
71.
by aflukasz 2y ago
> (Please tell me that exists now, or why it’s a bad idea.) Regarding the only-after semantics: - HTTP has "Delta encoding in HTTP": https://www.rfc-editor.org/rfc/rfc3229 (2002), - usage for feeds propose
72.
by aflukasz 2y ago
So this is effectively like ProxyJump, just with the jump node exposed over SSL and backed by HAProxy binary instead of OpenSSH? What benefits do you see? I mean, you still expose some binary that implements authentication and authorization
73.
by aflukasz 2y ago
I believe knowing existing user name or using host-depended value does not matter. The exploit tries to interrupt handlers that are being run due to login grace period timing out - so we are already at a point where authentication workflow
74.
by aflukasz 2y ago
> Doesn't wireguard then have the same challenge as SSH? Isn't that just pushing the problem around? Yeah, it's actually weird how frequently in those discussions people say some version of "just use vpn". I gues
75.
by aflukasz 2y ago
Just remember that only first connection, the one creating ControlMaster socket, is being authenticated, subsequent ones are not.
76.
by aflukasz 2y ago
Plus, what your are declaring is often times not the state you desire but... action you want to take. Say you use `apt.name: [pkg1, pkg2]`, run it, then remove `pkg2` from the list. Running this again won't remove `pkg2` from your syst
77.
by aflukasz 3y ago
You do have some control (quite typically?): https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/placemen... , https://docs.hetzner.com/cloud/placement-groups/overview .
78.
rustup in official apt repositories: starting from Debian 13 and Ubuntu 24.04(rust-lang.github.io)
70 points by aflukasz 3y ago|20 comments
79.
by aflukasz 3y ago
Was just about to write that AWS does that, but no, it's only for MS SQL Server: https://babelfishpg.org/ , https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide... .
80.
by aflukasz 3y ago
I recommend Postgres FM podcast, e.g. available as video on Postgres TV yt channel. Good content on its own, and many resources of this kind are linked in the episode notes. I believe one of the authors even helped Gitlab specifically with
81.
by aflukasz 3y ago
BTW, if nothing changed the last year or two, then even if you want to run in a single AZ, but also to have (automatically) replicated RDS instance, then I believe the replica MUST be in another AZ. Meaning that any potential failover puts
82.
by aflukasz 3y ago
> By keeping the whole WAL. Not exactly. Pgbackrest can do incremental backups that are restored by applying file system level diffs (stored in incremental backup) to the base backup. WALs are only involved at the very last step when res
83.
by aflukasz 3y ago
At filesystem level, yes, but worth noting that since v2.46 (from May 2023) it can also work with block level granularity: https://pgbackrest.org/configuration.html#section-repository...
84.
by aflukasz 3y ago
Related: There is 10+ years old Python issue about implementing "AIA chaising" to handle server misconfigurations as described in this article: https://github.com/python/cpython/issues/62817 . The ar
85.
by aflukasz 3y ago
Any use cases in particular?
86.
Attestable, Confidential Workloads with Libkrun and AMD SEV-SNP(virtee.io)
1 points by aflukasz 3y ago|0 comments
87.
by aflukasz 3y ago
> With the source code available and the primary contributor clear, what more could anyone want? Reproducible builds. :)
88.
by aflukasz 3y ago
In a typical installation, being in a docker group gives you access to a socket that controls docker daemon and that daemon runs as root. `sudo` is not important in this context. Thankfully there is rootless mode for some time now: https:&
89.
by aflukasz 3y ago
Abstract: "We describe a case in Australia of human neural larva migrans caused by the ascarid Ophidascaris robertsi, for which Australian carpet pythons are definitive hosts. We made the diagnosis after a live nematode was removed fro
90.
Human Neural Larva Migrans Caused by Ophidascaris Robertsi Ascarid(wwwnc.cdc.gov)
2 points by aflukasz 3y ago|1 comments

More ›