Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
eeZah7Ux
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
69 ms
·
721.
▲
by
eeZah7Ux
7y ago
COBOL is still in demand and highly paid.
722.
▲
by
eeZah7Ux
7y ago
Kubernetes is the 2020's equivalent of "nobody gets fired for buying IBM" of 1980s.
723.
▲
by
eeZah7Ux
7y ago
> Rotate secrets automatically every few hours Good advice! > Repave servers and applications every few hours. This means redeploying the same software – if an attacker has compromised a server, the deploy will wipe out the attacker’s
724.
▲
by
eeZah7Ux
7y ago
Not at all, it's very valuable. It constantly clears out old credentials.
725.
▲
by
eeZah7Ux
7y ago
No, it does not have the same semantics of exceptions.
726.
▲
by
eeZah7Ux
7y ago
> This is squarely in conspiracy theory realm. Nothing in the Snowden documents or other leaks hinted at this (except for the NSA snooping on unencrypted internal links, which is useless now that everyone encrypts everything). This is ab
727.
▲
by
eeZah7Ux
7y ago
Why "Locked-down" in the title? It's pointless.
728.
▲
by
eeZah7Ux
7y ago
> Panicking is, in many ways, the best-case scenario for code that contains a bug. The very opposite: it's among the worst behaviors, short of creating a vulnerability. From any modern languages we should expect an exception to be r
729.
▲
by
eeZah7Ux
7y ago
Not to mention that native apps can be properly reviewed and vetted by Linux distributions. And have a tiny codebase compared to a browser. And even tinier compared to a browser + all the potentially hostile javascript, css, html, sng, png
730.
▲
by
eeZah7Ux
7y ago
It's not just more vulnerable, it's incredibly so.
731.
▲
by
eeZah7Ux
7y ago
Buying an old e-reader has many advantages. It's 4x cheaper than this project and has even a battery.
732.
▲
by
eeZah7Ux
7y ago
Are you hinting at some politician?
733.
▲
by
eeZah7Ux
7y ago
That's a huge false dichotomy.
734.
▲
by
eeZah7Ux
7y ago
> It's really a failing of operating system security Please stop the gaslighting. Virtual machines and sandboxes existed decades before browsers.
735.
▲
by
eeZah7Ux
7y ago
Despite the idiotic downvotes, you are absolutely right. Browsers are terrible. No other applications or OS components are so monolithic expose the same attack surface.
736.
▲
by
eeZah7Ux
7y ago
No, there isn't, and going for the quasi-monopolist only encourages lock-in.
737.
▲
by
eeZah7Ux
7y ago
> Shared libraries can be linked by name and version constraints "Grab random libraries and never update them again" leads to the same security disaster of containers. It's crucial to have large communities AKA Linux distr
738.
▲
by
eeZah7Ux
7y ago
> packaging software alongside all its dependencies That's why containers are a security disaster. And they also make it impossible to do system administration with reasonable resources.
739.
▲
by
eeZah7Ux
7y ago
Docker? No thanks.
740.
▲
by
eeZah7Ux
7y ago
Splitting data by access pattern is still valuable today: setting permissions, using different filesystems and so on
741.
▲
by
eeZah7Ux
7y ago
A: explain software ethics B: spyware bad A: come on, that's one sided and dogmatic
742.
▲
by
eeZah7Ux
7y ago
Not much.
743.
▲
by
eeZah7Ux
7y ago
Spot on!
744.
▲
by
eeZah7Ux
7y ago
It's on a server and you have less control over it.
745.
▲
by
eeZah7Ux
7y ago
I used all of them and they are really overrated. Also they are not solving much.
746.
▲
by
eeZah7Ux
7y ago
Where's the innovation compared to LXC and wget?
747.
▲
by
eeZah7Ux
7y ago
Absolutely spot on. They could try to sell find, grep and less. Most of the recent "hip" devops tools replace 100 lines of homegrown python with 10000 lines of lock-in and hype.
748.
▲
by
eeZah7Ux
7y ago
> If you were to change the cipher you are using from one day to the next one, you would need to upgrade your WireGuard software on all those laptops, phones, etc. at the same time. That is literally impossible. Administrators who have t
749.
▲
by
eeZah7Ux
7y ago
> There is a sub-project called "wg-dynamic" which adds a user-space daemon to overcome this shortcoming. A massive design flaw because of the use-cases stated above, but it is even worse that IPv6 is all about dynamic addressi
750.
▲
by
eeZah7Ux
7y ago
It's really lacking in Linux distributions
More ›