terom

18 ms·

151.
by terom 5y ago
You need one of those per AZ, and multiples of that if you split up projects across VPCs or AWS accounts. AWS accounts and VPCs are free, so NAT gateways can form a significant part of the per-account/VPC base cost, which can be a sign
152.
by terom 5y ago
With the +1€/month (+VAT) price increase for the CX11 instances, I'd happily drop the public IPv4 address from most of my instances for a 1€/month discount.
153.
by terom 5y ago
Looks like they are also raising pricing for the cheapest cloud instances, and additional Floating IPv4 addresses. CX11 is up +40%, CPX11 is up +14% and Floating IPv4 addresses are up +200%. Existing instances/floating IPs will stay at
154.
by terom 5y ago
Is there an announcement for this somewhere? The marketing page [1] still lists the same €2.49 + VAT /month price for the cheapest CX11. [1] https://www.hetzner.com/cloud?country=ot
155.
by terom 5y ago
Based on links in the other hackernews thread, it was quick-formatted, but a filesystem containing qemu disk images was recovered: [1] The YouTube video is in French without English CC subtitles, but there's screenshots of exploring wh
156.
by terom 5y ago
Apparently with plaintext customer data. > Lechelle said Scaleway worked with the YouTuber to recover the disk. The French-language video creator has written to Scaleway with assurances they have not copied the information contained on
157.
IPv4 pricing(docs.hetzner.com)
533 points by terom 5y ago|530 comments
158.
by terom 5y ago
It sounds like it was a hardware issue [1]. First rule of electronics applies: thou shalt check voltages. > [Update] We're conducting follow-up maintenance to address power supply issues from our earlier service disruption. All prod
159.
by terom 5y ago
Their pricing page seems to be a little confusing, but [1] does state that wildcard certs issued via ACME are free of charge. The SSL.com [2] pricing model, OTOH... > By using ZeroSSL's ACME feature, you will be able to generate an
160.
by terom 5y ago
Interesting, given the examples in this article and [1] of confusion and miscommunication caused by differences in how different platforms depict the same emoji. So in the context of online dating, does that mean that humans are now selecti
161.
by terom 5y ago
That just means that enabling `prevent_destroy` later on will a) destroy the resource b) create a new resource with a different name and `prevent_destroy` enabled. Plus the combinatorial explosion of all possible conditions. Not a good tric
162.
by terom 5y ago
And apparently one of the vulnerabilities exploited in this attack had been discovered and reported to Kaseya by independent researchers back in April: https://news.ycombinator.com/item?id=27763202
163.
by terom 5y ago
The Dutch Institute for Vulnerability Disclosure apparently discovered and reported a series of security vulnerabilities in Kaseya VSA at the start of April. Kaseya published a series of fixes for these vulnerabilities in April, May and Jun
164.
DIVD CSIRT: Kaseya VSA Limited Disclosure(csirt.divd.nl)
3 points by terom 5y ago|1 comments
165.
by terom 5y ago
It's also interesting to note that their initial on-prem VSA fix/updates will include disabling some functionality: https://helpdesk.kaseya.com/hc/en-gb/articles/4403440684689-... > We will be re
166.
by terom 5y ago
https://www.reddit.com/r/msp/comments/ocggbv/comment/h3u5j2e the Reddit comments from Huntress Labs contain more concrete interim technical details from their investigations. * `/dl.asp` authen
167.
by terom 5y ago
Reading further along in the forum, the `walter` thing sounds like it's only present in test code and comments. The actual backdoor looks like the `jisoosocoolhbsmgnt` session ID [1] that was removed in the update [2]. It looks like a
168.
by terom 5y ago
https://developer.fastly.com/learning/concepts/request-colla... fastly's VCL docs are interesting, particularly the bit about request queueing and `Cache-Control: private`. This sounds exactly like the kind o
169.
by terom 5y ago
The neat way to re-run a layer daily is to use a build arg: FROM debian ARG APT_UPDATE_DATE RUN apt-get update && apt-get upgrade -y Then `docker build --build-arg APT_UPDATE_DATE=$(date +%Y%m%d)` will always re-run th
170.
by terom 5y ago
Looking at the icanhazip.com site, I wonder how much any kind of rate-limiting per address/block would even help. At the HTTP level it's probably cheaper to just return the HTTP 200 response. I suppose if you're doing TLS han
171.
by terom 5y ago
welp > "On the commercial side, we don't see such a big issue," she told POLITICO. "But of course, there is the issue of access to data from the national security agencies, and we have to be absolutely sure that there
172.
by terom 5y ago
Indeed, based on the caa.gov.by domain this is presumably an authentic/official Belarus release, so you need to interpret it as such - it's their version of the story.
173.
by terom 5y ago
The caa.gov.by news release has a much more complete (Belarusian-sourced) transcript than the edited Reuters one: http://caa.gov.by/ru/news-ru/view/1-203/ EDIT: copy-pasta from (Belarusian) source https
174.
by terom 5y ago
The context here seems to be that this is the first night of the return to 24h service, but the system was out of use at 2am in the morning. Have the vendors previously been using the night-time service break for maintenance operations?
175.
by terom 5y ago
Did any of the Apollo moon missions actually return into a (stable?) Earth orbit, as opposed to just direct atmospheric re-entry?
176.
by terom 5y ago
Had to re-read the photo caption a couple of times: > A module that launched with the rocket, Tianhe, is expected to re-enter Earth's orbit on May 9. I suppose having the space station module re-enter Earth orbit would be a good thi
177.
by terom 5y ago
I will never forget the embarrassment of visiting the electronics store as a kid, and naively asking for a DB-9 sex changer :D
178.
by terom 5y ago
AWS Lambda is a great replacement for cronjobs when gluing various AWS infrastructure components together, but I would hesitate to use it for an actual application. Pre-packaged lambda functions are a pain to deal with if you're standa
179.
by terom 5y ago
The linked news site changed the title. You can still see the original in the linked URL: chinese-technology-company-huawei-eavesdropped-dutch-mobile-network-kpn
180.
by terom 5y ago
Agreed, as a random HN commenter it's way too easy to trivialize the complexity in audit logging such a complex system. Such audit logs are very much dependent on the integrity of the system generating them, and the vendor themselves i

More ›