ibotty

27 ms·

271.
by ibotty 10y ago
Is there a recent-ish comparison with ceph's radosgw?
272.
by ibotty 10y ago
Intra-browser-communication does not often follow a spec though. Of course, replacing a parser (for video formats, or css) is easier because of standards, but how to composite parts of an html site? That's not covered by standards.
273.
by ibotty 10y ago
That still does not answer whether it's possible to name a project "moby-foo" for, say, an integration of moby with foo.
274.
by ibotty 10y ago
ssh
275.
by ibotty 10y ago
SELinux does, I don't know about App armour. Dockerized NGiNX will give you root in the container, which will give you root on the host easily. If you run NGiNX as non-root-container, you are better off: You can't escalate. You ru
276.
by ibotty 10y ago
care to give a few examples?
277.
by ibotty 10y ago
To be fair, most proxies are in-kernel in the form of *NAT.
278.
by ibotty 10y ago
I am very interested in a comparison by prometheus developers. Brian Brazil recently wrote about optimization to prometheus' time series storage.
279.
by ibotty 10y ago
I think they mean a nix-like binary cache for packages that get build multiple times (for different projects).
280.
by ibotty 10y ago
unfortunately concourse when not deployed with bosh does not have any automation (spawning workers, auto-discovery).
281.
by ibotty 10y ago
Js engines are really fast. The stuff they run is bad.
282.
by ibotty 10y ago
... but most graphics cards can't. 2D accel as in X has not been supported in graphics cards since the matrox generation afair.
283.
by ibotty 10y ago
> Seriously, when's the last time you wrote a program that relied on the ability of the display server to draw stippled lines? or someone?
284.
by ibotty 10y ago
Why do you think you need duplication of hundreds of structs?
285.
by ibotty 10y ago
Thank you for being great and apologizing!
286.
by ibotty 10y ago
It's way more configurable. Different class.
287.
by ibotty 10y ago
Unfortunately that is less and less possible due to multicast DNS which hijacked that TLD.
288.
by ibotty 10y ago
Bright idea! Using someone elses Computer To generate your password!
289.
by ibotty 10y ago
An aside: I like writing the log message in logfmt: https://brandur.org/logfmt
290.
by ibotty 10y ago
Adding noise is not going to help much. You can just run the test many times and you can use statistics. The only thing helping is deterministic noise: For every security-related thing, you have a deterministic delay. That way you can not a
291.
by ibotty 10y ago
That's deprecated though and afaik, that's only the client-side authentication, not the server-side. That still relies on CAs, with all the disadvantages.
292.
by ibotty 10y ago
No. Disregarding technicalities of which there are many, the most important difference is that with ssh you either get the host key through a different secure channel or "trust on first use" (TOFU). With HTTPS you trust certificat
293.
by ibotty 10y ago
Which --coincidentally-- is exactly the problem with it.
294.
by ibotty 10y ago
Well, NoSQL usually does not have much to do with relational algebra. That means, it usually is _very_ different.
295.
by ibotty 10y ago
"Gamergate hero Sargon of Akkad", seriously?
296.
by ibotty 10y ago
It's nonsense that there is unchecked immigration. Far from it. See frontex ops in the Mediterranean sea for one of many cruel examples. There is free movement of people _within_ the EU. But that's hardly headline at this point.
297.
by ibotty 10y ago
> Docker on FreeBSD utilizes the Linux compatibility layer. It was introduced in 2015. It is officially experimental. Huh!? I remember running unmodified Linux binaries on FreeBSD (and other BSDs) in the late 90s. Maybe it was not suitab
298.
by ibotty 10y ago
No. The difference is, that with network block devices you are usually only allow accessing the block device once. That's an easier problem than mapping POSIX file system semantics!
299.
by ibotty 10y ago
Thank you for linking it! Great post.
300.
by ibotty 10y ago
On slow storage systemd has some problems. Afair you can configure it to not be as parallel. That ought to help.

More ›