louwrentius

6 ms·

31.
by louwrentius 4mo ago
Author: I've had multiple HN hits and the Pi4 (on residential gigabit fiber) never got any significant load.
32.
by louwrentius 4mo ago
Smart Glasses are for creepy men who want to make pictures of women without their consent in secret. I hope these glasses will be banned. Lawmaker Cifrová Ostrihoňová said that, from a gender-based violence perspective, it is "simp
33.
by louwrentius 4mo ago
I'm so sad that there's no backstory to this huge throve of old computers. Where are all these machines from? Who owned them, and why? Why were they all there in storage, in a hangar. Would have been even more interesting.
34.
I Think Rutger Bregman and the School for Moral Ambition Are Full of Shit(louwrentius.com)
42 points by louwrentius 4mo ago|18 comments
35.
Rutger Bregman and His School for Moral Ambition Lacks Moral Ambition(louwrentius.com)
3 points by louwrentius 4mo ago|0 comments
36.
by louwrentius 4mo ago
I would not use containers in the first place as this adds added complexity and overhead in the first place.
37.
by louwrentius 4mo ago
I wasn't talking about an office environment. I'm talking server-to-server communication. Like all the internal infrastructure to support a web application. Maybe I should have been more explicit about that. How a new device boots
38.
by louwrentius 4mo ago
> Whatever does the canonical management is the piece that when it breaks everything breaks. That is absolutely true. I believe that a solution where you provision a text file with an updated ip address or /etc/hosts file is in
39.
by louwrentius 4mo ago
You don't need to setup one cert for 127.0.0.1 as stated by the parent comment.
40.
by louwrentius 4mo ago
It's interesting as I really address all these things in the article. Not explicitly PTR and SRV, MX records, but these aren't essential within your internal infrastructure. No need to look at MX records if I can just straight up
41.
by louwrentius 4mo ago
Why would some form of service discovery be required? No need to discover things if you can push said information in configuration updates using tools like Ansible, pyinfra, and so on?
42.
by louwrentius 4mo ago
I do state in the article that in the examples DNS isn't the root-cause, but the blast radius is very significant. Regardless of the topic of external/internal services, isn't it remarkable that a group of very smart and well
43.
by louwrentius 4mo ago
Tell me please what the problem is exactly
44.
by louwrentius 4mo ago
Why is that madness and not amazing? Isn’t the simplicity beautiful? Managing /etc/hosts with a tool like Ansible?
45.
by louwrentius 4mo ago
Certs support ip addresses? However, /etc/hosts would solve the issue probably, unless I’m missing something
46.
by louwrentius 4mo ago
Proposed solution: update the inventory and run your Ansible playbook/role agains your infrastructure (or subset). I don’t see the issue, to be frank.
47.
by louwrentius 4mo ago
Serious response: how is templating out /etc/hosts with Ansible not 10x simpler than setting up an additional service that only introduces additional risk?
48.
by louwrentius 4mo ago
- note I was talking about internal infrastructure, not public services - DNS load balancing is not that important for internal services in most Cases? Would only use it if alternatives won’t work. - the virtual host issue is really adresse
49.
DNS is for people, not for IT infrastructure(louwrentius.com)
63 points by louwrentius 5mo ago|98 comments
50.
by louwrentius 5mo ago
Maybe I’m missing something but because of this kind of risk, an old fashioned virtual machine feels like a more robust security boundary.
51.
by louwrentius 5mo ago
I agree, but Capitalism is inherently an unequal system, one group of people own the capital and the rest doesn't. And nobody talks about where that initial capital came from (large-scale theft, wage theft, slavery, and so on). That me
52.
by louwrentius 5mo ago
What would this cost?
53.
by louwrentius 5mo ago
Just for a moment, try to imagine how much wind, solar and battery storage can be bought with the money required to build just one regular nuclear power plant (gigawatt output). The real thing delaying the energy transition is politics, w
54.
by louwrentius 5mo ago
The humanitarian impact of this embargo is just one of the many stains on the USA that can never be removed.
55.
by louwrentius 5mo ago
> This disk was probably dying. I did some research, and a RAID wouldn’t have saved it either, RAID protects against drive failure, not against silent page corruption that gets faithfully replicated to every mirror. I dispute this was a
56.
by louwrentius 5mo ago
I tested on a fully up-to-date Debian 13 and the exploit works. The mitigation also works / confirmed.
57.
by louwrentius 5mo ago
I would probably recommend to look into NVMe over TCP over iSCSI, especially for fast NVMe drives.
58.
by louwrentius 6mo ago
This is the site that runs their blog on solar power, and was an inspiration for me to do the same (now my setup powers my home too). Love the site and all the various concepts about sustainability.
59.
by louwrentius 7mo ago
I've created a blog post about this: https://louwrentius.com/raspberry-pi-as-a-router-using-a-sin...
60.
by louwrentius 7mo ago
I have gigabit fiber and none of this is an issue. VLAN hopping is only possible due to misconfiguration. I'd like to be proven otherwise if that's not the case. VLANs are used EVERYWHERE where it matters. And no, the single port

More ›