lvh

27 ms·

241.
by lvh 7y ago
Perhaps I’m missing your point but that sounds almost indistinguishable from a joint checking account?
242.
by lvh 7y ago
We've seen plenty of examples where people do this. Sometimes it's different teams (e.g. the ML team is namespaced away from the primary customer flow) and sometimes it's for different customers. Really, it sounds like we&#x2
243.
by lvh 7y ago
Key word: "internal" -- these aren't on the internet, Traefik does ALPN, which means the LB itself has to be on the Internet. (Or something else that leaks the cert to the LB, but that doesn't sound any less complicated
244.
by lvh 7y ago
Right: but one difference (which you sort of hint at) is that German is consistent in why something takes a particular case compared to Slavic languages (e.g. direction vs location), and at least the preposition is consistent. Is it "n
245.
by lvh 7y ago
Workload identity is a GCP-specific beta feature for mapping to GCP IAM, right?
246.
by lvh 7y ago
This highlights a sorta-weird consequence of this pricing change: suddenly pricing incentivizes you to use namespacing instead of clusters for separating environments. (As a security person: ugh.)
247.
by lvh 7y ago
It's kind of ridiculous internal load balancers can't get automatic certs. We've had to do a stupid dance just to get certs via the LE DNS challenge out of band, and then regularly install them on internal LBs.
248.
by lvh 7y ago
Anecdotal, I know, but for prospective Latacora customers this is absolutely not reflected in market share. It's AWS first, GCP second, Azure very distant third. I'd happily believe Azure is dominating in some segments where MS sh
249.
by lvh 7y ago
For what it's worth, we're seeing a GKE being the main reason prospective clients use GCP at Latacora, to a point where I'd say I was surprised if someone was on GCP but _not_ using GKE. Obviously that's a small subset o
250.
by lvh 7y ago
So your argument is you need a language with static typing to prevent defects, but also the language must be proverbially this tall to ride, and so you end up with, say, Java?
251.
by lvh 7y ago
Counterpoint: Erlang. Also, if "rigorous, non-optional" is good, why would you want _Java_ and not, I dunno, Haskell or ML or some other powerful type system? Is there any evidence this bug would have been prevented in Java? If an
252.
by lvh 7y ago
This suggests the outage was short. It lasted the entire trading day, during one of the largest single-day gains of the last few years, during one of the highest-volatility spikes of the decade.
253.
by lvh 7y ago
Why is an "exciting" (antonym to boring) language bad for this, and what makes a language "exciting"?
254.
by lvh 7y ago
A common adage is that the best service a brokerage can provide is to cut the phone lines during a crash :) Regardless: Robinhood is aimed at individual consumers, not sophisticated investors. It's not uncommon for prosumers to have se
255.
by lvh 7y ago
I was making a general comment about clang vs gcc: the push to clang was not exclusive to FreeBSD.
256.
by lvh 7y ago
I've ran every major BSD as a desktop OS and my first read was "what?! I knew Clang was getting good at pretending to be GCC nowadays but there's no way they've thrown it out of ports, right?!". And indeed, they hav
257.
by lvh 7y ago
The title does not say "FreeBSD has removed GCC from the base system". It says "FreeBSD has removed GCC", full stop. Ports are also managed by the FreeBSD project, as I'm sure you'll agree.
258.
by lvh 7y ago
Regardless of what the situation was back in 2007, one tends to imply the other over time: the version of GCC is ancient now (because of licensing issues) and of course clang will do better: it has an extra decade of compiler development.
259.
by lvh 7y ago
I don't know if this is what you were referring to, but for everyone else: this is actually super easy to add with Wireguard because Wireguard just uses Linux networking you can do things like: $ tc qdisc change dev eth0 root netem
260.
by lvh 7y ago
Depends on how you look at it. It's that particular old version of GCC in base because of licensing, yes -- but that old version is now effectively obsolete, so there's a technical reason (originally forced from licensing) to move
261.
by lvh 7y ago
CAA is a term of art for a standard encoded in DNS. It stands for "Certification Authority Authorization", but most people who know what a CAA record is probably do not recognize it written as words. (I know I would need to read i
262.
by lvh 7y ago
Point of order: removed GCC /from the base system/. Ports still have a range of GCCs and some ports still depend on GCC. The GCC in base was well over a decade old, and it was that particular version for the same reason macOS ship
263.
by lvh 7y ago
How do you use Newton’s method here to go faster than what I described? How do you treat a 20 byte hash as a floating point number? Unless you mean by dividing part of it at a time and interpolating linearly, which sounds like what I sugges
264.
by lvh 7y ago
You can do better than binary search here with interpolation search since the data is equidistributed. (You can do it for any data with a known distribution, but it's unlikely to be worth it for any data set that isn't linearly di
265.
by lvh 7y ago
Sure! If the thread had been posted on HN I'd raise similar skepticism :)
266.
by lvh 7y ago
You need both because severity and priority aren't necessarily set by the same people who have the same information. They're (of course) not completely orthogonal: generally there's a 1:1 map between severities and priorities
267.
by lvh 7y ago
“I’m not saying this will happen but it could” is a pretty standard fear-mongering hedge. (I don’t want to call what they’re doing fear mongering either because that suggests bad intent. I don’t think their intentions are bad. I just think
268.
by lvh 7y ago
By their own admission, they fail to quantify their findings. So, my issue is that they’re sound bites that a lot of people were predisposed to agree with (eg “American healthcare is bad and expensive”) and therefore unlikely to evaluate cr
269.
by lvh 7y ago
Because severity is usually a general measure (eg, to use an example from application security: XSS is usually a sev:med), but priority can be subject to a bunch of forces not known to the person who found the bug. You might find eg an expl
270.
by lvh 7y ago
Sure: the ProPublica article linked elsewhere in the thread about how the IRS keeps saying "we should just do Free File soup to nuts", Intuit does a bunch of lobbying, and the IRS goes "oh okay I guess we won't do Free F

More ›