nixgeek

51 ms·

1. 571.▲
   by nixgeek 10y ago

   What's the communication path between untrusted <-> trusted components look like and are you doing anything special which might prevent the vulnerabilities which Project Zero recently reported in 1Password[1], LastPass[2], Dashla
2. 572.▲
   by nixgeek 10y ago

   Are you able to go into details about implementation, particularly around libraries used in building the iOS and macOS applications, and their pedigrees? I'd argue that the implementation (or library) matters just as much as the standa
3. 573.▲
   by nixgeek 10y ago

   Feels a bit like MPLS being Layer 2 and Layer 3. I think it protects you against someone who's capable of sniffing your password on the wire somehow, since every login will require a unique code, and the secret is not transmitted, but
4. 574.▲
   by nixgeek 10y ago

   Looks neat. What's the elevator pitch on why to use this, over and above existing solutions like 1Password or LastPass?
5. 575.▲
   by nixgeek 10y ago

   I know at least two 500TB+ clusters running on IaaS and don't think "only way to scale Ceph" is to buy and rack machines. In an earlier comment you said EBS only goes to 16TB and that is "an order of magnitude less"
6. 576.▲
   by nixgeek 10y ago

   I kinda disagree, see my other comment on logistical models, this isn't 5000+ system scale or even 500+ system scale. There's non-trivial cost involved in simply being staffed to accommodate the model you propose, all of the ODM&#
7. 577.▲
   by nixgeek 10y ago

   Relevant: http://githubengineering.com/introducing-dgit/
8. 578.▲
   by nixgeek 10y ago

   I think that's a false assumption. Especially in 2016. Unless something changed dramatically at GitHub they're a 100% solid-state fleet since 2012 when they started down the "building their datacenter cages" journey. Whi
9. 579.▲
   by nixgeek 10y ago

   This is fair and buying at end of quarter or end of year is often the little extra kick needed to get Dell/HP to compete. One of my main beefs with Supermicro is their tooling around remote patching and configuration of BIOS and other
10. 580.▲
    by nixgeek 10y ago

    This actually works fairly well given it was just launched. Definitely not at feature parity with other providers yet. Only a limited selection of instance shapes available and most are "extremely large" (vs. what GitLab is runnin
11. 581.▲
    by nixgeek 10y ago

    Fetch a quote from Supermicro and tell your Dell or HP folks that you'll buy that if they don't match the price. If you're large enough, then you should be talking to other folks including Wiwynn, ZT, Quanta, Celestica, et al
12. 582.▲
    by nixgeek 10y ago

    I think this is a pessimistic view of Google Cloud given the revenues they're now making from it. A more interesting question would be about Rackspace and SoftLayer, the former of which has been taken private and the latter was acquire
13. 583.▲
    by nixgeek 10y ago

    Sure and GitHub also has literally an order of magnitude more infrastructure than is being discussed in these proposals and retains Amazon Web Services and Direct Connect for a bunch of really good reasons. Transparency from GitLab is exc
14. 584.▲
    by nixgeek 10y ago

    I'm not sure why you're so surprised, this is standard logistics management for warranty replacement services. Manufacturer specifically asks customer to keep it informed where the equipment is physically located, and then preposi
15. 585.▲
    by nixgeek 10y ago

    I'm hoping the Surface Pro 5 vs. MacBook Pro 13" (Late 2016) will be a more interesting comparison next year, but this conclusion seems to say "It's a wash" (he bought MBP, because he's invested in that ecosyst
16. 586.▲
    by nixgeek 10y ago

    If you're in us-east-1 then you potentially do actually rely on Dyn even for the amazonaws.com instance hostnames. https://gist.github.com/agh/4e20df0d2d3bfa189477569b77f72e24
17. 587.▲
    by nixgeek 10y ago

    Not sure if people are confusing Amazon with AWS in this case. $ dig +short ns amazon.com ns1.p31.dynect.net. pdns1.ultradns.net. ns4.p31.dynect.net. pdns6.ultradns.co.uk. ns3.p31.dynect.net. ns2.p31.dynect.net.
18. 588.▲
    by nixgeek 10y ago

    Bear in mind for the first ~90 days you won't be able to get servers from an API call within "120 seconds" (marketing fluff) because they'll hold each order for manual approval. Recent and still very frustrating pains fo
19. 589.▲
    by nixgeek 10y ago

    In the context of macOS, shipping out even a 75MB bundle of trusted certificates is "not significant". Bundling it into the browser would increase the download size by a substantial percentage, but 75MB as a 'security update&
20. 590.▲
    by nixgeek 10y ago

    No support for "plugins" as far as authentication, or to elaborate a bit, how do you go about running the 'auth' component in multiple VPC and have some degree of sync? Perhaps a use case for an underlying LDAP directory
21. 591.▲
    by nixgeek 10y ago

    Security sensitive workloads are often not virtualised because it opens them up to "What are the other virtual machines doing?". There've been a number of Xen and KVM issues over the years, including a couple which may have r
22. 592.▲
    by nixgeek 10y ago

    None of the 'Generation 2' stuff uses Nimbula.
23. 593.▲
    by nixgeek 10y ago

    Homebrew. Now they are merging Caskroom upstream this is a one-stop shop for installing stuff.
24. 594.▲
    An Ode to Boring: Creating an Open and Stable Container World(medium.com)

    3 points by nixgeek 10y ago|0 comments
25. 595.▲
    by nixgeek 10y ago

    Kinda don't get why DigitalOcean "forked" rather than solving the long-term retention problem by working with upstream, especially given the number of comments which state "Development in this area should be done in Prom
26. 596.▲
    by nixgeek 10y ago

    Mitchell, I appreciate what you do with Consul and Vault. Starting with Vagrant, you've made the world a little bit better and your sales growth is no surprise. I've not had much luck with Terraform, I never really "got it&qu
27. 597.▲
    by nixgeek 10y ago

    I'd be interested in any data which backs this up. Things like ZooKeeper have been around a lot longer and are definitely also in widespread usage.
28. 598.▲
    by nixgeek 10y ago

    Seemingly every couple of days, someone on Twitter whom I follow will exclaim "Oh noes, Terraform did something bad". Seems like a 'principle of least surprise' violation. Is that something others have observed?
29. 599.▲
    by nixgeek 10y ago

    Why would you waste an extremely valuable exploit on a bounty worth under $6000 USD?
30. 600.▲
    by nixgeek 10y ago

    Not sure if sarcastic or serious. It seems to me that a major problem for Open Source in 2016 is assumption of support from the originating entity or person. Does this base assumption not risk alienating individuals and organisations into s