corford

17 ms·

211.
by corford 6y ago
text file in a veracrypt container (the password to which is only in my head). Authy for MFA.
212.
by corford 6y ago
>Brexit is like the Aesop's fable of the greedy dog dropping its bone into the water in the attempt to grab its reflection. I love this. It feels very apt (said from a UK expat, watching his country slowly unravel from afar)
213.
by corford 6y ago
On the other hand, I can see the other more powerful Security Council countries leaving and setting up something else (to which the UK, now a rather middling power, will not be invited).
214.
by corford 6y ago
Depends on what you want but a very solid free CDN and DNS option is: host your site on netlify and use dns.he.net for your nameservers. Another good DNS option is dnsimple.com or, indeed, EasyDNS. For even more redundancy, use one provider
215.
by corford 6y ago
That's more like it. Actually, I've just checked and my ISP here in Portugal (MEO) is now offering 1Gbit down / 200Mbit up, no caps, 1 month minimum contract length for €45.99 (... seems I need to move package!).
216.
by corford 6y ago
Memory's hazy (it might have been a year or two before 1999) but I remember in the UK buying a domain from Network Solutions with a credit card but then I had to fax a signed document to their US office to actually authenticate ownersh
217.
by corford 6y ago
Tbh, none of those numbers look good from where I'm sitting. I pay €45/month for 80Mb down/20Mb up fibre. Granted I'm in a city (in Portugal). My parents in rural France pay €39/month for 20Mb down / 8Mb up. No
218.
by corford 6y ago
Second this. You'll be surprised at the flexibility they show if you ask (and have a genuine problem).
219.
by corford 6y ago
It's an article about a book that surely will cover that info if you buy and read it.
220.
by corford 6y ago
For software, I know https://en.wikipedia.org/wiki/HTCondor is used quite frequently in academia for distributed workloads.
221.
by corford 6y ago
>They are suggesting that what is built will not survive a very long time. I suspect that thanks to the recent jumps forward (language itself, common best practices, tooling) that this argument doesn't hold as much weight as it once
222.
by corford 6y ago
I've been programming since the late 90s and as recently as one or two years ago I would have agreed with a lot of this. However, having recently come back to JS and currently in the midst of developing a large, complex non-frontend ap
223.
by corford 6y ago
FWIW, where I work we're going with Nomad over K8S. It gives us everything we want and nothing more (plus it's from a source we trust and love: HashiCorp). The nice thing with Nomad is, thanks to it's straightforward design&#
224.
by corford 6y ago
>The internet is decentralized and "coordinated embrace" is not realistic or practical. I disagree, see the success of: letsencrypt, the wide spread use of 8.8.8.8 and 1.1.1.1; dkim/spf/dmarc; imaps, pop3s, tls ldap.
225.
by corford 6y ago
>browsers, the most important application, are already bought in That's an interesting way to phrase it. The RFC for DoH is co-authored by Mozilla. They didn't buy in, they created it.
226.
by corford 6y ago
Then DoH isn't going to help you very much. Move country or use a VPN.
227.
by corford 6y ago
DoH isn't meant to provide any privacy beyond the first resolver anyway. DNSSEC gives you trust to the root servers, DNSCurve gives you privacy between supporting upstream resolvers.
228.
by corford 6y ago
If you don't trust your ISP, you are savvy enough to use a). a different resolver or b). a VPN. In both cases, the decision is opt-in (which is what it should be). Edit: or option c). apply pressure to your government representatives t
229.
by corford 6y ago
What irritates me about DoH is it's lazy. I get the impression Google, Mozilla etc. are genuinely irritated with crappy networks and invasive ISPs meddling with DNS traffic. What I don't accept is their decision to abuse their mar
230.
by corford 6y ago
This change represents a potential thin edge of an unsavory wedge.
231.
by corford 6y ago
Pretty marginal gains at the expense of eventually centralising most of the world's DNS lookups through a handful of FAANGs.
232.
by corford 6y ago
If there was a coordinated embrace and move to DoT (at least for the "last mile" part between end users and resolvers), network operators wouldn't be able to get away with blocking it (see secure IMAP, secure POP etc. for sim
233.
by corford 6y ago
For how long?
234.
by corford 7y ago
It's true. Would be great if JustEat and others posted similar data.
235.
by corford 7y ago
Great summary. This should be upvoted - it covers most of the debate happening in this thread.
236.
by corford 7y ago
Might be in here: https://www.youtube.com/watch?v=cAE8-e5_EKY
237.
by corford 7y ago
When was the last time port 995 or 993 were blocked? If the same adoption happened with DoT, ISPs wouldn't have the option - customers wouldn't accept it.
238.
by corford 7y ago
This is very cool. Thanks for the great explanation!
239.
by corford 7y ago
DNSCurve sounds quite nice (I'm not at all familiar with it tbh). I agree something along those lines with DNSSEC for the last hop to the root would do it. To be honest my main gripe is with DoH. For non-last-mile privacy/trust, t
240.
by corford 7y ago
DoT would also mitigate it in a similar fashion. In both cases mitigate doesn't really have much meaning since, sans VPN, ISPs that are inclined to do so will quite happily continue to find ways to infer where you're browsing to (

More ›