mbreese

32 ms·

601.
by mbreese 2y ago
Small companies don’t have people whose only job is to hire other people. So yes, this is a large company problem. When you’re small, generally everyone is already involved in the hiring process and has a reason for making sure the roles ar
602.
by mbreese 2y ago
To add to this: - There aren't compelling new models to sell to existing customers. If you bought (not leased) a Tesla, there isn't much reason why you might want to upgrade. How long as the current Model S design been around? Eve
603.
by mbreese 2y ago
Can’t you also snapshot LVM volumes directly? So if you have an LVM volume, it shouldn’t matter what the filesystem is, provided it is sync’d… in theory. (I’ve only done this on VMs that could be paused before the snapshot, so YMMV.)
604.
by mbreese 2y ago
This is exactly what I’d advocate for. There are many things that run in kernel space that don’t need to. The Mac model with user-land hooks is one model. EBPF from Linux (and Windows?) is another. I’m sure the reason why Apple migrated was
605.
by mbreese 2y ago
There are other vendors. Microsoft could even reinstate CloudStrike at some point, but only after an extensive review process. And then probably require similar process reviews/checks for any other vendor that requires the same kernel
606.
by mbreese 2y ago
If many things had gone differently, this could have been avoided. But I’m looking at this from the Microsoft perspective. No matter how much people scream high and loud that it was a CloudStrike issue and not Microsoft’s fault, Microsoft i
607.
by mbreese 2y ago
At this point… yes. It would be one thing Microsoft could do to focus 100% of the attention/blame away from Windows and onto CloudStrike. And customers will want their pound of flesh from somewhere. Really, this should serve as a wake
608.
by mbreese 2y ago
Customers don’t always have a choice here. They could be restricted by compliance programs (PCI, et al) and be required under those terms to have auto updates on. Compliance also has to share some of the blame here, if best practices (loca
609.
by mbreese 2y ago
For me, number 1 is the worst of the bunch. You should always expect that there will be bugs in processes, input files, etc… the fact that their code wasn’t robust enough to recognize a corrupted file and not crash is inexcusable. Especiall
610.
by mbreese 2y ago
> And then it does not do any integrity check on the data it contains, which is a big no no for all untrusted data, whether user space or kernel. To me, this is the inexcusable sin. These updates should be signed and signatures validat
611.
by mbreese 2y ago
Many place did revert back to paper processes. But, it’s a disaster model that has to tested to make sure everyone can still function when your EMR goes down. Situations like this just reinforce that you can’t plan for if IT systems go do
612.
by mbreese 2y ago
Why the whataboutism? Yes, the Linux device driver has many of the same issues (monolithic drivers running in kernel space/memory). I’m not sure what the mitigations were in that case, but I’d be interested to know. But we both know th
613.
by mbreese 2y ago
A little yes, a little no. Was this problem caused by Microsoft? No. Why does this tool exist and must be installed on servers? Well, Windows OS design definitely plays a role here. Why does this software run in a critical path that can cau
614.
by mbreese 2y ago
Windows IT admins who don’t use or understand Linux/Mac. Who also buy at the enterprise level. And who probably have to install (perhaps unnecessary) endpoint protection to satisfy compliance checklists. The amount of Windows centric I
615.
by mbreese 2y ago
I’m convinced that one reason for this move by Apple was poor quality kernel extensions written by enterprise security companies. I had our enterprise virus/firewall program crash my Mac all the time. I eventually had to switch to a di
616.
by mbreese 2y ago
People use Teams and OneDrive because it’s “Free” when you use Office. IMO, that’s a bit of an anti-trust problem. Both have good competitors (arguably better competitors) that are getting squeezed because of the monopoly pricing with Offic
617.
by mbreese 2y ago
I think the authors point was that even though the mainframe was underpowered from a raw performance point of view, it augmented that performance with accessory units and processors. By offloading as much of the non-core functions (I/O
618.
by mbreese 2y ago
I wouldn't see that as a way to plan work, but rather to keep track of what you did or where you were. In general, I like the idea of ruthlessly tracking what I've done like this. But I think that it is still missing the context
619.
by mbreese 2y ago
Sorry, I was trying to refer to creating overly VPN networks with vendors. So in the ATT case, it would mean their DB vendor (I’m assuming) creating separate VPN networks for each of their customers to connect through (in addition to userna
620.
by mbreese 2y ago
For highly secured services, I completely see the rationale for a private overlayed network. Tailscale, et al are great for this, where you're only exposing services to members of the private network. The problems start when people mak
621.
by mbreese 2y ago
> indeed was best practice until recently But we should remember why it's not always considered best practices... you shouldn't assume that your private network is any more secure than the public network. When you have too ma
622.
by mbreese 2y ago
I think this is the best advice. The further you are away from your data store, the more you are relying on the used cases others have considered. Just because a library needs features that something like SQLite doesn’t provide doesn’t me
623.
by mbreese 2y ago
> There would genuinely be more maintenance required for the PostgreSQL server/daemon than the application itself. It just makes no sense. I think this is the key point the original post was missing. When you’re working on a proje
624.
by mbreese 2y ago
I have used circos plots many times in the past (genomics). They make for very pretty figures. But, like you said, the major problem with them is that they are difficult to accurately interpret. They are used often to compare whole genome r
625.
by mbreese 2y ago
For Verizon owned routers? For company owned and supported equipment, I can understand it. I might not like it, but I can understand it. Especially if they are on the hook for support. But, that’s why I run my own router for internet access
626.
by mbreese 2y ago
For the self executing JAR, I normally add a bash/shell stub for the header that ends with java -jar $0 The rest of it sets up the environment (JAVA_OPTS, -Xmx, etc).
627.
by mbreese 2y ago
Can you add a shebang line and have it truly be a script? I do self executing JARs with a bash stub/header all the time, but haven’t tried with this.
628.
by mbreese 2y ago
Before 3D printers were so common, the way you’d solve this problem was to buy an enclosure and modify it (cut out a hole) for the monitor to fit into. There are many options for prebuilt enclosure/cases, so I’m sure you could find one
629.
by mbreese 2y ago
Best line of the post: > And as it is with these types of bugs, finding the root cause is not trivial, but the fix almost always is.
630.
by mbreese 2y ago
It’s not about the HN visitor… it’s about the collaborator or grad student who might be on an entry level computer with 8GB of RAM and 256 GB of storage. The entire system needs to be easy for them to install and maintain. And even if I hav

More ›