kevin_nisbet

7 ms·

31.
by kevin_nisbet 8mo ago
Thanks for sharing, this was a great read. And it brought up some old memories, of fighting with telecom vendors about how their calculated their memory usage. At that time you only really got what the vendors gave you. I think the most fun
32.
by kevin_nisbet 9mo ago
> I chose managed services specifically to avoid ops emergencies. We're a tiny startup paying the premium so someone else handles this. Instead, I spent late night hours debugging VPC routing issues in a networking layer I don'
33.
by kevin_nisbet 11mo ago
> I see, this sheds some new light on your initial concerns. I'm aware an attacker can keep pretending to be inside an environment once they've seen it. I wasn't accounting for a scenario where an attacker has a huge datab
34.
by kevin_nisbet 11mo ago
I'm not as sure and would want to consider the angles a bit more. I ponder how effective this would be against an adversary sufficiently motivated to look like they're not using a VPN. And then does it result in a false sense of t
35.
by kevin_nisbet 1y ago
I'm with you, I think most people might think they don't need this reliability, until they do. I'm sure there is some subset of clusters where the claim is correct. But from the article, turning off fsync and expecting to onl
36.
by kevin_nisbet 1y ago
Yup, even for smaller business stuff. For a non-profit I'm on the board of, the staff wanted a more useful printer/copy machine than just a store bought thing, it's a small office, so I said sure find something and let us kno
37.
by kevin_nisbet 1y ago
I don’t know about node but a fun abuse of this is background tasks can still sometimes run on a busy lambda as the same process will unsuspend and resuspend the same process. So you can abuse this sometimes for non essential background tas
38.
by kevin_nisbet 2y ago
My ISP does this as well, provides Huawei modems with hardcoded backdoor passwords that can easily be found online. So yup, I've got a dedicated firewall between my networks and the modem. With slow updates and backdoors, I'd incl
39.
by kevin_nisbet 2y ago
I kind of like what the folks in British Columbia are doing for their EV prototypes for Semi Trucks (technically a hybrid, EV with onboard generator): https://www.edisonmotors.ca/topsy
40.
by kevin_nisbet 2y ago
I don't know if the point should be that people won't use a startup bank, just that the assets being directed to the startups/disruptors are not presently threatening to the big banks. I would suspect this is currently the ca
41.
by kevin_nisbet 2y ago
+1 on recommending the Mom Test, it's one of the most important books I've read. I'd say in addition to entrepreneurs, it's an important book for product teams / product engineers to understand what the Mom Test tea
42.
by kevin_nisbet 2y ago
Yea, thinking about it for a minute I would expect limited threat models this tool would help with. I think for broad attacks, this would only be somewhat effective if deployed on tens of millions of hosts so it becomes impractical because
43.
by kevin_nisbet 2y ago
Probably. I'm not sure what you have in mind, but WireGuard would just be an intermediate network layer, so it would be up to however you're configuring multi-wan routing would still be apply/available.
44.
by kevin_nisbet 2y ago
This is a good explanation, I've had to explain this topic a few times as well, it seems like it's one of those topics that is very missunderstood. To just expand a bit, I believe some of the confusion around printing of money com
45.
by kevin_nisbet 2y ago
I suspect there is also another angle, which is are the tests maintainable as well? Like you said, if you're not testing intent, this might be one more thing to maintain. In another view, this might just be a fancy way of doing snapsho
46.
by kevin_nisbet 2y ago
This is along the lines of how one of the wireless telecom products I really liked worked. Each running process had a backup on another blade in the chassis. All internal state was replicated. And the process was written in a crash only fas
47.
by kevin_nisbet 2y ago
I'm with you, I imagine it's mostly people just drawing parallels, they can figure out how to get a web certificate so think SSH is the same thing. The second order problem I've found is when you dig in there are plenty of pe
48.
by kevin_nisbet 2y ago
Agreed. Also if they get the ultra wide streaming of a macbook support shipped might change the equation for me as well. If it works as a productivity tool I can stomach the price.
49.
by kevin_nisbet 2y ago
The funny? thing is, this isn't the only YC company I've seen do this.
50.
by kevin_nisbet 2y ago
Well, my concern started to grow when two things happened: - My sister who is not in a tech field asked me how blockchain worked since she had heard about it - A server at a restaurant was describing that they help people buy their first bi
51.
by kevin_nisbet 2y ago
I agree, this is an incredibly valid approach for some companies and startups. If you benefit by being frugal and are doing something that doesn't need incredible availability, a rack of servers in a colo doesn't cost much and you
52.
by kevin_nisbet 2y ago
One technique I've introduced but I don't have a long enough track record to know how effective is using a friction log when onboarding. The core idea is to ask the person joining to keep a log of anytime something wasn't obv
53.
by kevin_nisbet 2y ago
That's a good one. One of my personal favorites was a device that truncated long passwords in the set password function. Didn't take too long to figure out what happened but I was worried for a moment I wouldn't be able to un
54.
by kevin_nisbet 2y ago
Is there any possibility there is a problem with the 429 response? So something is converting to say a bad gateway error because it doesn’t like the 429? Not trying to criticize if this was already checked. Just something I’d try to double
55.
by kevin_nisbet 2y ago
Maybe a noise implementation? http://www.noiseprotocol.org/ Iirc this is what wireguard is based on and wireguard would be a great project to learn the crypto choices from.
56.
by kevin_nisbet 2y ago
Trying to bring an open mind, I could see a number of plausible scenarios where an engineer could do this, with various degrees of legitimacy. It's certainly a complicated subject, but I think in general companies are really good, espe
57.
by kevin_nisbet 2y ago
I hate to dispute with someone like Brendan Gregg, but I'm hoping vendors in this space take a more holistic approach to investigating the complete failure chain. I personally tend to get cautious when there is a proposal that x will s
58.
by kevin_nisbet 2y ago
I'm not sure this is correct, I suspect this works on a similar principal as something like gvisor where as I understand it syscalls are redirected to another userspace program. In gvisors case the kernel basically get's re-implem
59.
by kevin_nisbet 2y ago
I haven't personally seen this particular case either but I have no doubt it could happen. I've seen orgs where a blameless type culture isn't natural, and I've had to explain to the leadership that publicly humiliating
60.
by kevin_nisbet 2y ago
We did this in the Gravity Kubernetes Distribution (which development is shut down), but we had to for the use case. Since the distribution was used to take kubernetes applications behind the firewall with no internet access we needed the r

More ›