lima

27 ms·

361.
by lima 5y ago
Network performance is tied to the instance type on GCP, AWS and presumably Azure.
362.
by lima 5y ago
Yep. Azure is just awful. With Google SSO, I log in and do MFA once per year or so on trusted devices and any further prompt beyond that would be extremely suspicious . With Azure, I have to complete the sequence like a hundred times per d
363.
by lima 5y ago
One issue with SSE is that dumb enterprise middleboxes and Windows antivirus software break them :( They'll try to read the entire stream to completion and will hang forever.
364.
by lima 5y ago
Why not? It really strengthens the message.
365.
by lima 5y ago
There's a known, well-established but very low risk of Myocarditis with mRNA vaccines. Like you say, a single data point is useless.
366.
by lima 5y ago
It does that on Linux, too. Likes to mess with PulseAudio settings when you're not looking.
367.
by lima 5y ago
No SOL was created, the transfer was sent to a zero address.
368.
by lima 5y ago
You can shut down a centralized system when all node operators agree to do so, which happened here.
369.
by lima 5y ago
There's a number of market markers besides Jump, like Alameda Research.
370.
by lima 5y ago
Yes: https://etherscan.io/address/0x3ee18b2214aff97000d974cf647e7...
371.
by lima 5y ago
It's terrible even with GPU. VDI can die in a fire.
372.
by lima 5y ago
Note that has been a number of recent performance improvements in gVisor (VFS2, soon LisaFS). Here's a recent blog post about performance in a large production setup: https://gvisor.dev/blog/2021/12/02&#x
373.
by lima 5y ago
Tailscale works perfectly for this. There's a third party open source server, too: https://github.com/juanfont/headscale (I just use the free hosted backend, obviously you trust them to do the key exchange)
374.
by lima 5y ago
Even with gVisor you're still depending on things like the host kernel's scheduler and memory management.
375.
by lima 5y ago
And it's up and running! Nice job, USDS.
376.
by lima 5y ago
Thank you for taking the time to reply - happy to discuss this! :) > It's fair to say that gVisor performs better isolation on syscalls, but it's also fair to say that by adding Linux user-ns and procfs & sysfs emulation,
377.
by lima 5y ago
> We specifically need to run privileged containers so that we could run docker-in-docker for CI workloads, so rootless docker or podman wouldn't have helped. rootless docker works inside an unprivileged container (that's how o
378.
by lima 5y ago
LXD uses privileged containers, though - this exposes a lot more attack surface, since uid 0 inside the container equals uid 0 outside.
379.
by lima 5y ago
Never head of Sysbox before. At a first glance, the comparison table in their GitHub repo and on their website[1] has a number of inaccuracies which makes me question the quality of their engineering: — They claim that their solution has th
380.
by lima 5y ago
Facebook complies with most foreign government law enforcement requests.
381.
by lima 5y ago
But that's the point - Telegram refuses to honor these laws. There are court rulings demanding Telegram to remove content, which Telegram ignores, hence the threats of banning the entire platform.
382.
by lima 5y ago
It's a fine line, and it's why a functioning democracy and judicial system is so important in finding the right balance (and ensuring there's public oversight[2]). One of the most important values in German politics is the co
383.
by lima 5y ago
Yes, but there's limits - like similar interests in extremism, calls to violence, assassination plots...
384.
by lima 5y ago
This does not do what parent describes.
385.
by lima 5y ago
> A Cloud Storage bucket called cxl-services.appspot.com, which had hourly log files of all of the requests the cxl-services App Engine app has ever received, since 2017-10-18 up until today! These files could have contained some sensit
386.
by lima 5y ago
You probably already got checked for this, but just in case: this sounds like a textbook Raynaud's syndrome presentation.
387.
by lima 5y ago
Telegram is well-known for operating in grey areas.
388.
by lima 5y ago
I cited sources: https://news.ycombinator.com/item?id=29736480
389.
by lima 5y ago
It's certainly a topic with a lot of nuance, but in this particular case, there's no valid argument made and EIKE is known for deliberate misinformation. There is unanimous scientific consensus (a rare thing!) about climate change
390.
by lima 5y ago
Agreed - Germany has a similar north-south issue and NIMBYs protesting against construction of new high-capacity power lines aren't helping. The alarmism is misplaced, though. There's less excess capacity these days than some are

More ›