justin_oaks

5 ms·

31.
by justin_oaks 2y ago
First, I agree with you. Dealing in nearly all crypto-currencies is financially irresponsible whether it's your own money or other people's. That said, perhaps Hanes would have been duped by an similar non-crypto scam. It seems th
32.
by justin_oaks 2y ago
"Past performance is not indicative of future results" People are unreliable. They change their behavior based on circumstance. The person who posted the pledge may well mean it right now, but then some things change and it all go
33.
by justin_oaks 2y ago
Thanks for the heads-up. I'm curious at what would be stored in the session to make it large enough to be a problem, but it's good to know to watch out for it.
34.
by justin_oaks 2y ago
I previously used openssl-based scripts to generate certificates to use for local development or applications on a private network. I have since moved to using the step CLI [1]. OpenSSL is powerful, but it's hard to figure out how to u
35.
by justin_oaks 2y ago
You act like an organization is a single person. The person saying "Sorry, I can't help you" when you visit Google headquarters is not the one ruining your income.
36.
by justin_oaks 2y ago
And they can have you trespassed. Hang around after that and the cops can arrest you.
37.
by justin_oaks 2y ago
Thanks. I've used oauth2-proxy with NGINX. So I could try to set up oauth2-proxy with Caddy in a similar way.
38.
by justin_oaks 2y ago
I was checking into using Caddy for new projects instead of NGINX or Apache HTTPD, but my new projects require OAuth2/OIDC authentication. It seems there's not built-in support for that kind of thing. There's the caddy-securi
39.
by justin_oaks 2y ago
I was an employee of a company providing security services. I can attest to that company being filled with generalist programmers. None were trained in security principles. None were security experts. And there was no security review.
40.
by justin_oaks 2y ago
Which makes me wonder if there is a way to simulate multiple repos while maintaining a mono repo. Or mirror a portion of a monorepo as a single repo. Obviously this would be a real pain to implement just to fix the underlying problem, but i
41.
by justin_oaks 2y ago
Yes the default certificate duration is so small as to be useless as a default. It's a pain to set the expiration in hours, but it does still allow you to set months or years of duration. You just have to calculate out how many hours t
42.
by justin_oaks 2y ago
In every organization I've been in, "later" meant "never".
43.
by justin_oaks 2y ago
Exactly. There's no "just" when you're adding an API. APIs require a lot of work and complexity to do right: APIs need to be well-designed or the client may need to make multiple API calls when one should suffice. Or the
44.
by justin_oaks 2y ago
I figure it's because AWS can get away with it.
45.
by justin_oaks 2y ago
I hope for a day where "Caveat emptor" will no longer be needed, but today is not that day!
46.
by justin_oaks 2y ago
And that's perfectly fine. Such people will get less favorable terms. Patrick's guide explicitly talks about how a lot of people don't want to negotiate. His argument is that if doing something distasteful for a short period
47.
by justin_oaks 2y ago
That 128KB only applies to non-standard S3 storage tiers (glacier, infrequent access, one zone, etc) S3 standard, which is likely what people would use for git storage, doesn't have that minimum file size charge. See the asterisk secti
48.
by justin_oaks 2y ago
My upgrade policy for everything: Significant security vulnerability? Upgrade Feature you need? Upgrade All other reasons: Don't upgrade. Upgrading takes effort and it is risky. The benefits must be worth the risks.
49.
by justin_oaks 2y ago
> It really feels like early 1990s vintage Unix software. It's clunky and arcane and it's hard to feel confident doing anything complex with it. How software "feels" is subjective. Can you be more specific?
50.
by justin_oaks 2y ago
> all the great productive feedback that awesome people give over the web Yup, sounds about like what you hear from your average keyboard warrior. I wish there were a "low effort" filter on comments. > I'm the opposite
51.
by justin_oaks 2y ago
Thanks for sharing! Just the idea of it is entertaining and makes me smile. > Not only did nobody use it but the response was universally discouraging and negative. What were the negative things that people said?
52.
by justin_oaks 2y ago
When I showed up, someone was writing "Cthulhu 2024!" I think we know what Cthulhu's campaign promises are.
53.
by justin_oaks 2y ago
It seems like the doctor has fallen victim to the politician's fallacy [0], summarized well on Wikipedia as 1. We must do something. 2. This is something. 3. Therefore, we must do this. People seem to feel like there's merit in &q
54.
by justin_oaks 2y ago
What are your credentials?
55.
by justin_oaks 2y ago
If I see a sell-by date, I only use it to compare between individual items. If there's a shelf with bread and two items have different sell-by dates, I choose the one with the later sell-by date.
56.
by justin_oaks 2y ago
So how does a diabetic get one of the older, worse insulins that they can afford? Certainly that's preferable to the better insulin that they can't afford.
57.
by justin_oaks 2y ago
I looked into Envoy a few years ago and found it difficult to get started. I recall the syntax involving long names that were hard to look up from the docs. I'm assuming some of those issues may be why it isnt as commonly talked about
58.
by justin_oaks 2y ago
Google may use many anti-competitive practices, but that doesn't make them wrong when pointing out specific anti-competitive practices in their competitors. I'd be quite pleased for ALL the big companies to point out their competi
59.
by justin_oaks 2y ago
I also don't like AWS's odd names, but there are competing priorities when choosing to name something. I thought of some things to consider when you're naming which may make you choose a (possibly terrible) proper noun instea
60.
by justin_oaks 2y ago
The sad thing is that politicians who get these laws passed don't want to collect data about whether the laws were successful. If they collect data and it turns out the laws aren't helpful or the laws are actually harmful, then th

More ›