edgan

8 ms·

61.
by edgan 11y ago
The article says it was an internal issue, not DDoS or hacking.
62.
by edgan 11y ago
I am surprised that Netflix uses UltraDNS when they use AWS and they could be using Route53.
63.
by edgan 11y ago
The us-east-1 region gets treated differently than all other regions by AWS. Part of the reason it gets treated differently it is the default, and hence the most popular. It also doesn't help that it is on the east coast, and experienc
64.
by edgan 11y ago
Omnibus packages are a horrible idea. They are security issues waiting to happen. A great example is the Chef server rpm. It is a 500mb mini distribution in one package. It has copies of perl, python, Ruby, and Erlang in it. If any of these
65.
by edgan 11y ago
Ext4 does support larger than 16tb filesystems. df -h | grep md127 ; mount | grep md127 /dev/md127 26T 14T 12T 55% /home/data /dev/md127 on /home/data type ext4 (rw,relatime,stripe=1792,dat
66.
by edgan 11y ago
Looks like Amazon's EC2 ELBs have a common 1024 DH. I don't see a way to fix it without moving away from ELBs, or getting Amazon to fix it.
67.
by edgan 11y ago
I personally use ssls.com. It is slightly cheaper than namecheap.com for multiple year, and it is actually namecheap.com by another name. On a side note, I would only buy one year certificates at this point, because Lets Encrypt is about to
68.
by edgan 11y ago
My issue with them is their client ssl certificate is cumbersome, and at least their free service is regularly down for "maintenance"
69.
by edgan 11y ago
My solution for npm is to use fpm to make rpms of node modules. But this is fucked by node modules pull in all their dependencies into their own tree, and because a module will want semvers > 3, but npm wants semvers < 2.2. Hence you
70.
by edgan 11y ago
You are right. Lack of it will be the next wave of security problems
71.
by edgan 12y ago
As a operations person, this is the wrong way to go. The VPN becomes a single point of failure. Attempts at HA fail in my experience. Also solutions like stunnel create a separate process that has to be managed. If I have one for redis, and
72.
by edgan 12y ago
I bet this will be used by the FBI in the short term. They secretly track cars. A camera in the car would make this even easier.