freeqaz

41 ms·

541.
The De-obfuscated Protestware code from node-ipc that wiped Russian computers(lunasec.io)
20 points by freeqaz 5y ago|6 comments
542.
by freeqaz 5y ago
Direct link to Code: https://www.lunasec.io/docs/blog/node-ipc-protestware#a-look... Edit: I tried to link directly there but it didn't work. The "hash fragment" in my submitted URL doesn't act
543.
by freeqaz 5y ago
That's a very cool deployment method to just use rsync like that! Simple and very composable. And now I feel self-conscious about my pile of AWS and Docker!
544.
by freeqaz 5y ago
I'm guessing that there are just many data sets, and each one is in the TBs of size.
545.
by freeqaz 5y ago
I'll shill a little and answer this question: Short-term: The only way out of this is to review + whitelist every package before it hits the NPM registry. This is something my company is building and we did a write up about it (and N
546.
by freeqaz 5y ago
Congrats on the launch! I'm curious about how this compares to existing Auth microservice solutions like Ory Kratos[0][1]. For the "short-lived tokens" that you mention, is that similar to Ory Kratos used with Ory Oathkeeper[
547.
by freeqaz 5y ago
This definitely depends. I'm at a startup and I'm close enough to the business that having features DOES matter, so releasing them has material value. There are metrics to follow, but there are also individual customers asking for
548.
by freeqaz 5y ago
The deleted tweets are in the article under a different section.
549.
by freeqaz 5y ago
Awesome, thank you! I must have missed it while scrolling through the swoopy animations.
550.
by freeqaz 5y ago
What's the camera like on this one? I owned the last-gen SE and it's camera was the main reason that I upgraded to the 13 Mini. It was truly awful -- it made my Pixel 2 XL's camera seem WAY, WAY better than what the SE had. L
551.
by freeqaz 5y ago
(Removing this because the thread is flagged now)
552.
by freeqaz 5y ago
Would buying an option be less risky for the broker? Even when they enable "risk management" do you think they would halt option trading? I'm no expert so I'm just speculating here. IIRC, an option is you making an agree
553.
by freeqaz 5y ago
I will check this out. Thank you! I'll also make sure that the "Docker Awesome" list has this info too. I bet there are some cool projects there (and the OPs GitHub project should be added too, come to think of it).
554.
by freeqaz 5y ago
Ahhh, okay thank you for clarifying. The "stacked notifications", especially if something fails, makes total sense. That is what made it "click" in my head where Courier fits in the stack. I remember Troy explaining this
555.
by freeqaz 5y ago
Thanks for the help. I'm just trying to think about how it'd work. It's probably more useful for the cloud version of our product, thinking about it more. At least if we're using Courier primarily to notify leads/cu
556.
by freeqaz 5y ago
It's potentially possible. I'd have to look at it again to verify. What we were struggling with were "conditional services" like running Integration Tests. We only wanted to add that container to the cluster when we want
557.
by freeqaz 5y ago
I'm also glad to see Courier doing well a few years after we first spoke about it. With our pivot to LunaSec since then, we might even be a future customer soon! Lots of webhooks in the future as we start needing to integrate with vari
558.
by freeqaz 5y ago
Hahaha yes! I had to add all of that to our code as well. I also had to write a "wait-for-file.sh" script for a mechanism to pass config values. (We use LocalStack to host an AWS env locally and the S3 bucket name is random.) In D
559.
by freeqaz 5y ago
Have you thought about taking an approach similar to the AWS CDK with CloudFormation? Aka the whole "infrastructure as code" movement? I'm not sure how that would work with the whole "lifecycle hooks" you've me
560.
by freeqaz 5y ago
I've definitely experienced the problems of using Docker Compose for local dev. Oh, that file changed? Control-C to kill the whole cluster. Wait until the DB flushes. Start it again. And if you just want to restart one service? Well yo
561.
by freeqaz 5y ago
Surprisingly, just changing the port is highly effective. Scanning every ipv4 address still chews bandwidth even for just a handful of ports. Add ipv6 into the mix and it's straight up infeasible to scan for even ONE port on every host
562.
by freeqaz 5y ago
Re: Freezers, yeah, I agree with this. Volume to surface area doesn't scale linearly[0], so you can build something like a giant sphere or cylinder and lose a relatively small amount of energy. Commercial freezers are also frequently b
563.
by freeqaz 5y ago
Adding to this, if you post a re-post you will be redirected to the old thread instead of your new one. So you will know that you're reposting! (I was a little embarrassed when this happens to me at first, but I have gotten over it now
564.
by freeqaz 5y ago
It's all about the way you frame it to yourself. Technically, even writing docs is marketing. If you feel "corrupted" when writing docs, then I'm truly sorry. If not, then just try to reframe it in your mind as "wri
565.
Node runtime that sandboxes all NPM dependencies by default(github.com)
2 points by freeqaz 5y ago|1 comments
566.
by freeqaz 5y ago
I was poking around on the internet a bit earlier and I found this project. It looks pretty cool, and I figured perhaps a few of y'all might find it cool too! I have no idea if it actually sandboxes networking by default. This other pr
567.
by freeqaz 5y ago
What about on mobile?
568.
by freeqaz 5y ago
Wow, thank you very much for the detailed comment! What you're saying here makes a ton of sense, and I really appreciate the words you chose to describe the philosophy behind Open Source. "Gift" is very apt. That is exactly w
569.
by freeqaz 5y ago
What are some examples, just to clarify? Do you mean how often Open Source is just about tinkering vs companies care more about quality/tests? Who would be the proper "audience" to manage Open Source projects, if not the crea
570.
by freeqaz 5y ago
I really love Qubes. I've tried to run it a few times and it's not _quite_ there for daily use relative to Arch, at least for me, but the "simplicity" of the OS in terms of VMs is actually something I still miss. For exa

More ›