smarx007

13 ms·

121.
by smarx007 2y ago
I think exposing 8080:8080 would result in sockets bound to 0.0.0.0:8080 in either Docker or Podman. You still need 127.0.0.1:8080:8080 for the socket binding to be 127.0.0.1:8080 in Podman. The only difference is that Podman would not punc
122.
by smarx007 2y ago
I think podman does not punch holes in the firewall as opposed to docker. I.e., to expose a container on port 8080 on the WAN in podman, you need to both expose 8080:8080 and use, for example, firewalld to open port 8080. Which I consider a
123.
by smarx007 2y ago
Is there a tool/tutorial that assumes that I already have a running docker compose setup instead of starting with some toy examples? Basically, I am totally excited about using systemd that I already have on my system instead of adding
124.
by smarx007 2y ago
Interesting, in my mind Swarm was more or less dead and the next step after docker+compose or podman+quadlet was k3s. I will check out Rove, thanks!
125.
by smarx007 2y ago
Your understanding is correct, unfortunately. Not only that, the developers are also reluctant to make 127.0.0.1:####:#### the default in their READMEs and docker-compose.yml files because UsEr cOnVeNiEnCe, e.g. https://github.co
126.
by smarx007 2y ago
This Tiger? https://www.youtube.com/watch?v=u8I6qt_Z0Cg
127.
by smarx007 2y ago
I would love to read a write-up on that! Are you doing something like https://tailscale.com/blog/docker-tailscale-guide ?
128.
by smarx007 2y ago
I guess you did not read the link I posted initially. When you set up a firewall on a machine to block all incoming traffic on all ports except 443 and then run docker compose exposing port 8000:8000 and put a reverse proxy like caddy/
129.
by smarx007 2y ago
Ideally, yes. But in reality, this means that if you just want to have 1 little EC2 VM on AWS running Docker, you now need to create a VM, a VPC, an NLB/ALB in front of the VPC ($20/mo+, right?) and assign a public IP address to t
130.
by smarx007 2y ago
Docker has a known security issue with port exposure in that it punches holes through the firewall without asking your permission, see https://github.com/moby/moby/issues/4737 I usually expose ports like `127
131.
by smarx007 2y ago
Well, I always read reviews by ignoring all 1-star reviews first. Most 1-star reviews are made by disgruntled customers to grab customer service attention, a practice I detest. For example, one of the 1-star reviews says that a printer does
132.
by smarx007 2y ago
This is even better as it allows you to glue the printouts on a diary page instead of discarding them, e.g. https://www.youtube.com/watch?v=7kMFWM64gVQ
133.
by smarx007 2y ago
Epson still makes new ones: https://epson.com/For-Work/Printers/Impact-Dot-Matrix/LX-350...
134.
by smarx007 2y ago
The classic: https://news.ycombinator.com/item?id=9224
135.
by smarx007 2y ago
Nothing is as permanent as something temporary. Congrats on a great new undertaking!
136.
by smarx007 2y ago
You are right, my choice of words was poor. The vuln is exactly as you describe, and it's the malicious payload that was not in the codebase (cache poisoning which is not detectable by reviewing the code of the repo).
137.
by smarx007 2y ago
The vulnerability was not in the source code of the repo. See https://blog.yossarian.net/2024/12/06/zizmor-ultralytics-inj... for a deeper analysis - a great read!
138.
by smarx007 2y ago
How does it compare to LMAX Disruptor if you have any experience with both?
139.
by smarx007 2y ago
The title says ASCII Delimited Text not ASCII Delimited Binary Data. For the purposes of CSV, I consider text to be anything that satisfies the regex ^\P{Cc}+$ ( https://www.compart.com/en/unicode/category/Cc )
140.
by smarx007 2y ago
ctrl+_ to separate cells, ctrl+^ to separate rows - works perfectly in notepad++. I think the proposal can be improved by using ctrl+^ followed by a newline as a row separator, it looks much more readable plus will allow various line-based
141.
by smarx007 2y ago
Good luck certifying an automotive or an industrial system that can lead to loss of life or severe disruption if it malfunctions. As far as I am aware, QNX, VxWorks, and CMSIS have all been used in systems that passed certifications. As IoT
142.
by smarx007 2y ago
For real-time systems, QNX should be compared to FreeRTOS, CMSIS/RTX, VxWorks, or, if you after the new cool stuff, Zephyr, perhaps, but not Linux.
143.
by smarx007 2y ago
https://azure.microsoft.com/en-us/blog/drasi-microsofts-newe...
144.
by smarx007 2y ago
> This update is as minimal as possible to fix the security issue. What is the actual issue? CVE number?
145.
by smarx007 2y ago
https://demo.sourcebot.dev/search?query=repo%3ATaqlaAI%2Fsou... but there are a few things that need fixing, at least repo redirects and case-insensitive `repo:` arguments.
146.
by smarx007 2y ago
Yes, I think Zig is the most suitable language (of Zig, Rust, Go, ...) to replace C in various (systems-related) contexts including embedded/RTOS.
147.
by smarx007 2y ago
Memory corruption, now on Android! Just gonna leave this here: https://safecpp.org/draft.html#the-call-for-memory-safety P.S. Was discussed on HN recently: https://news.ycombinator.com/item?id=41528124 P.P.
148.
by smarx007 2y ago
How did you solve the fact that Hetzner's instances do not have Elasticsearch set up for full-text search?
149.
by smarx007 2y ago
"Layman's Guide" ... Matt Layman This is The ultimate clickbait. Bravo!
150.
by smarx007 2y ago
2nd tab, page size button

More ›