mac-chaffee

11 ms·

61.
by mac-chaffee 4y ago
I really feel like people don't value intrusion detection enough. Why was Heroku's intrusion detection system "rely on Github's intrusion detection system"?
62.
by mac-chaffee 4y ago
Ahh Cisco Registered Envelope Service! I reported that internally when I worked there, and I wasn't the first. You'd expect this to be just some ancient software, but I found an internal Jira where someone was provisioning dozens
63.
by mac-chaffee 4y ago
Great concept for an article, but the discussion about each film is quite surface-level. Feels like I just read the wikipedia summary for each film rather than a critical analysis.
64.
by mac-chaffee 4y ago
Agreed. The people saying self-hosting is easy would do well to read this: https://utcc.utoronto.ca/~cks/space/blog/sysadmin/RunningSer...
65.
by mac-chaffee 4y ago
There's another article linked which has more of the quote from the attorney: https://linknky.com/news/2022/04/14/man-awarded-450k-after-f... > “Basically what the argument was is he was fired fo
66.
by mac-chaffee 5y ago
Seems like a lot of the argument rests on "Steady, Switchy, Sticky" being the only possible options and their probabilities adding up to 1. That may seem to be a valid assumption because those correspond to all possible values of
67.
by mac-chaffee 5y ago
The lack of protections for graduate student workers is shocking IMO, especially in student housing. Grad student workers of course don't get paid vacation, sick time, or anything like that. But you can't even just lower your hour
68.
by mac-chaffee 5y ago
If BusyBox did implement that kind of fallback, they'd need to set a default timeout. So the whole thing would still be broken because every other request would be delayed by the timeout.
69.
by mac-chaffee 5y ago
I lost a lot of the blind faith I had in people who make http servers when I realized some network configurations just can't be expressed. Like next.js's "Production Server"[1] uses Node's builtin server, which does
70.
by mac-chaffee 5y ago
I think people forget that unavailability can be caused by non-technical things like changing terms of service. It's easy to recognize that you shouldn't run something critical on a piece of software considered "beta", b
71.
by mac-chaffee 5y ago
The micro package ecosystem is also self-reinforcing: some micro packages were created by the same developers who have spun ownership of these things into more lucrative positions. I've tried to get rid of micro packages in the depende
72.
by mac-chaffee 5y ago
You can get resilience from hardware failure and shorter downtime windows if a host needs to be rebooted since the database will immediately start up on another node. A good Kubernetes cluster will also give you centralized logging/mon
73.
by mac-chaffee 5y ago
This version is more up-to-date and has a readme: https://github.com/UTINKA/Terraria Having looked at a few games' source code, are there really any complex games with pretty code? With as many subsystems, items,
74.
by mac-chaffee 5y ago
Why the need for a perfect gyroscope that can spin for 24 hours? Why not use a motor to counteract the slow-down without affecting the rotation? Science museums sometimes do this to their Foucault Pendulums so they don't need to keep r
75.
by mac-chaffee 5y ago
Conscientious has more than one definition. Yes, that is one of them. I'm referring to the other definition which does involve right and wrong: https://www.dictionary.com/browse/conscientious
76.
by mac-chaffee 5y ago
I'm surprised they are using "conscientiousness" exclusively in the sense of being careful and nothing about knowing right from wrong. There are so many jobs in the tech industry that a truly conscientious person should steer
77.
by mac-chaffee 5y ago
If you have trouble sleeping with the fan noise, the CO2 fire suppressant will put you right to sleep :)
78.
by mac-chaffee 5y ago
I'm related to one. The whole reason he got into it is the YouTube algorithm recommended him some videos on the subject one day. He's in that group of people who have been fleeing the tradition platforms[1] that you and I probably
79.
by mac-chaffee 5y ago
In Kubernetes 1.22+, you can use ephemeral containers: https://kubernetes.io/docs/tasks/debug-application-cluster/d...
80.
by mac-chaffee 5y ago
The parent library in that situation was a popular library with a whole team of contributors who could reject malicious PRs. But a PR that just updates every dependency (including a malicious update to the tiny library) can easily go unnoti
81.
by mac-chaffee 5y ago
There are tons of tiny libraries that have gotten themselves into the dependency chain of popular libraries, and any attempt to remove them is treated as a turf war. I've tried to remove single-line dependencies only to have the PR rej
82.
by mac-chaffee 5y ago
I'd argue you don't even own the database entry. You own _a private key for a wallet that appears in_ the database entry for the hash of the image. But to truly _own_ something, all the cryptographic guarantees in the world won&#x
83.
by mac-chaffee 5y ago
Yep, we recently moved from DigiCert to LE and someone was alarmed at the certificate transparency logs, until we scrolled down the page to reveal the same logs from DigiCert. Wildcards hide it somewhat, but DigiCert charges per subdomain n
84.
by mac-chaffee 5y ago
QoS classes are only used "to make decisions about scheduling and evicting Pods." It still uses the Completely Fair Scheduler, which is where the problem came from (as far as I understand).
85.
by mac-chaffee 5y ago
> In particular, traditional legacy IT infrastructures are ridiculously overpriced. (If you're using commercial virtualization platforms and/or SAN storage, then you're overpaying by as much as a factor of 10, and getting
86.
by mac-chaffee 5y ago
> This trend is also supported by Kubernetes as this is a technology which is hard to master. Maybe this is rich coming from a Kubernetes person, but sounds like the tide is turning against this viewpoint. Running Kubernetes itself is de
87.
by mac-chaffee 5y ago
Here's the alleged original Jira ticket: https://issues.apache.org/jira/browse/LOG4J2-313 PS: Don't post snarky comments on an 8-year old Jira ticket, please.
88.
by mac-chaffee 5y ago
Yes, on-prem is generally cheaper in the long-run. For example, my company recently purchased $400k worth of hardware that would cost $80k/month if it was all EC2. There's amortized costs of the supporting infra (cooling, power) a
89.
by mac-chaffee 5y ago
My last outage was a power outage on a sunny day that lasted slightly longer than our battery backups. Without economies of scale, installing/maintaining extra generators for a small self-managed data center is prohibitively expensive.
90.
by mac-chaffee 5y ago
No, the API just changed slightly: https://kubernetes.io/docs/reference/using-api/deprecation-g... Edited the phrasing to make that clearer.

More ›