karmarepellent

6 ms·

31.
by karmarepellent 2y ago
Yes, that's a fair point, it's part of their job to spend time in calls. Ironically this gives me even less confidence that I would be interested in what they offer. Maybe the mere fact that they conveyed the offer and spent an ho
32.
by karmarepellent 2y ago
Well there is marketing and then there is marketing. Given the fact most of us would be out of a job without advertising of some kind, I cannot condemn it the way you do. However I despise deceitful marketing as well. I am also not a big fa
33.
by karmarepellent 2y ago
Regarding SSH bastion hosts, apart from open-source and enterprise solutions that may add some valuable features, you can always get away with a properly configured SSH jump host using TcpForwarding to relay connections to the target host.
34.
by karmarepellent 2y ago
Regarding SSH, the MitM would generate a new host key for the actual host you try to connect to. meaning when the MitM existed in the first place and you trusted the host key then (adding it to your Known_hosts), you will not get any additi
35.
by karmarepellent 2y ago
In cases where I trust both the communication endpoints, e.g. an employee trying to SSH into an internal host, "trust" being established by other parameters that are not relevant to the firewall, why would I MitM such a connection
36.
by karmarepellent 2y ago
I agree with you in general, but to quote another point made in the article: > Engineers are not turned off by jargon—in fact, they like it. If a video or marketing-focused website tries to be clever, but without "fluff", and m
37.
by karmarepellent 2y ago
Sorry for drifting a little off-topic, but I think this is also true for recruitment. When I get messaged from recruiters, most try to get into a call or video conference right of the bat to discuss an open position that would "fit my
38.
by karmarepellent 2y ago
I think we have to make a distinction between "concepts" being out of date and tools being out of date. I would not consider the concept (or architectural decision) to run a system on a fleet of VMs as outdated. However tools (e.g
39.
by karmarepellent 2y ago
I would be hesitant to claim "the world is moving to" anything, really. Deployments that would now be called "traditional", so anything that does not run in a container but in a VM, will continue to exist for quite some
40.
by karmarepellent 2y ago
It is hard to make assumptions about what parent means by that statement, given that there are degrees in which a system can be "connected to the internet". For example, every request coming in or going out, as well as SSH access,
41.
by karmarepellent 2y ago
I think parent refers to the infrastructure that is required to (automatically?) sign certificates by an internal CA and managing the distribution of those certificates. I don't think verification is the issue.
42.
by karmarepellent 2y ago
I don't think it's always the software that is to blame. Sure there is software that wants to self-update and only accepts one upstream update source run by the vendor, instead of allowing users to run their own mirror and control
43.
by karmarepellent 2y ago
Just to add to this: Apart from the security aspect of hosting your software dependencies internally, it also gives you the added benefit of better availability and performance. As you mentioned in your other comment however, this presumes
44.
by karmarepellent 2y ago
I agree with you. Unfortunately my place of work has a habit of buying snake-oil security appliances as well which seems to magically absolve everyone from actually thinking about security deeply themselves. Rather ironically said appliance
45.
by karmarepellent 2y ago
> I understand the author is saying "it's not that easy" and I agree completely with that, but I don't agree that it means you're doing your job well. Could you elaborate what you mean by this? It seems to me th
46.
by karmarepellent 2y ago
I don't think it is for people who refuse to learn another entire ecosystem for a project. Although smaller in size, HTMX needs to be learned as well. And although it is advertised as being simple, I certainly had a few struggles with
47.
by karmarepellent 2y ago
Fair enough, I did not think about the IaC space when I wrote the comment. And I can absolutely see how a blame could take you to commits from a few years back. I was only thinking about the application code space where elaborate code comme
48.
by karmarepellent 2y ago
Well written GitHub issues and PRs that you can reference in your git commit also don't save you from commenting code. I mean please do not reference an issue in a code comments, but describing to other people what a function in genera
49.
by karmarepellent 2y ago
I don't know about the "git log should stand on its own". Chances are that when you finally migrate to another ticketing system and the ticket numbers in your commits "break" or become meaningless, you do not care m
50.
by karmarepellent 2y ago
Yes, it happens a lot to me as well. However it baffles me why I would ever want to download and install a tool when I could just read a man page and create an alias for curl and some args. It's a perfectly capable tool that comes with
51.
by karmarepellent 2y ago
The point of having man pages is that you don't have to remember "arcane spells of args". For huge manpages or manpages in general there is certainly a learning curve on how to read and apply them effectively. But it's a
52.
by karmarepellent 2y ago
I highly doubt that people employing this scheme are thinking it through though. Lets say you indeed engage with this email, not knowing its AI. Then when things are getting serious a human approaches you after all and you find out you were
53.
by karmarepellent 2y ago
At my place of work there is an internal project ongoing whose goal is to determine which tasks could immediately be improved by leveraging AI. Its a desperate try to get into AI in general even though the company does not employ any people
54.
by karmarepellent 2y ago
When I look into the website source of the book I just see static HTML and CSS as well as a few media queries. Why would you want to use htmx to serve a completely static website?
55.
by karmarepellent 2y ago
Yes, I don't get why people always tend to drift into thinking in extremes when it comes to new tech. Like when using htmx or similar tech you would absolutely need to implement every piece of logic in the backend. Well, you don't
56.
by karmarepellent 2y ago
You don't need to mix logic with templates. I just produce a context (result from database queries and some such) and pass it to a function that produces HTML from the data in the context. The data must not be changed in the templating
57.
by karmarepellent 2y ago
If you have multiple applications on different servers communicating with the same database, then yes you would need to run a database such as PostgreSQL. If you run a single application on a server that needs a database you might want to c
58.
by karmarepellent 2y ago
Yes PostgreSQL (and others) are a better choice in these scenarios. I think the point is that a lot of applications/systems might not even need this separation since a single server would be able to handle the load. In this case a loca
59.
by karmarepellent 2y ago
Actually I first thought this person was joking in their blog post. As you already mentioned almost every piece of advice in there is related to how to look good in others eyes. I would not dare interpreting too much into it but I do not th
60.
by karmarepellent 2y ago
I am no familiar with SSH certificates either. But if there is no revocation system in place, how can I be sure access from a person can be revoked? At our org we simply distribute SSH public keys via Puppet. So if some leaves, switches tea

More ›