tetha

55 ms·

361.
by tetha 2y ago
I have similar experiences. I've been digging into this more over the years and my two conclusions are: (a) Linux memory management is overall rather complex and contains many rather subtle decisions that speed up systems. (b) Most rec
362.
by tetha 2y ago
Mh, I'm probably comparing apples to oranges and such. But the last 2-3 times I setup a config management, I made sure to configure the local firewalls as deny-all by default, except for some necessities, like SSH access. And then you
363.
by tetha 2y ago
Mh. One thing I observe at work is: Increasing what I call the technical relativistic speed of deployments to insane levels is either impossible or trivial. Like, we have C++ code in the company with bindings to WIN32 APIs. We're not t
364.
by tetha 2y ago
So many "Security Researchers" are just throwing ZAP at websites and dumping the result into the security@ mail, because there might be minor security improvements by setting yet another obscure browser security header for cases t
365.
by tetha 2y ago
Maybe I'm naive and brainwashed and so on. But one of the big selling point of crypto was that you don't get "under the opressive control of banks and the state" and such. And, I can get the merit of that idea. Banks can
366.
by tetha 2y ago
This is the strategy we're adopting at work. People are currently implementing a simple self-service for common SAML and OIDC providers, like O365 and such. This will be free and recommended for all customers to use, because I believe
367.
by tetha 2y ago
There is also a similar thing many experienced people complain about: Eventually, you'll have to be able to explain the cost and merit of a technical decision in business terms. Like, yeah I'm able to explain our postgres HA setup
368.
by tetha 2y ago
Hm, I would agree more with the overall headline and conclusion if it was about time spent reading code. The best code and code bases allow you to quickly understand how they are structured and don't necessarily hold subtle, nasty surp
369.
by tetha 2y ago
Lübecks university has several projects[1] using swarms of robots for automatic cartography, water measurements and such. Autonomous accurate navigation under water is quite complicated, because after a certain point you need to start relyi
370.
by tetha 2y ago
> Either they decide to intentionally enable it or not. There are no accidents , when stuff like this needs to go through a committee of people for approval before it makes it into production. Absolutely. And all of them decided to screw
371.
by tetha 2y ago
I've written a whitepaper about our encryption at rest at work, which includes a bit of considerations about the threats considered. The first important part is: Encryption at rest protects higher levels of the stack from access by low
372.
by tetha 2y ago
Mh, we have a similar thing on our website at work, but people who found serious issues still got compensated. One big reason to put this out there: Otherwise you get so many drive-by disclosures. Throw ZAP at the domain, copy all of the lo
373.
by tetha 2y ago
Curiously enough, the youtuber who tried this with windows XP did the same thing with Windows 98 [1]. And it gets hit by strange packets and scans, but that system was fine even when running for a day or two. 1: https://www.youtu
374.
by tetha 2y ago
Hm. This is a lot of "isn't" and not a lot of "is", limiting the usefulness. For example, something we as a platform team contribute to our products success is data safety, backups and archiving. Our dev-teams are j
375.
by tetha 2y ago
Oh yeah we've had those as well. I kinda feel two things about these at the same time. At a practical level, these situations sucked. Someone had to search for the common expression, look at each instance, decide to change it to the ce
376.
by tetha 2y ago
This is why some advice from Sandy Metz really stuck with me. It is not a problem to /have/ the same code 2, 3 or even 4 times in a code base. In fact, sometimes just straight up copy-paste driven development can be a valid develo
377.
by tetha 2y ago
From what I've been reading up to a degree, you want to be in a windowless, low-airflow situation for a day or two so the nuclear particles in the air can settle down. It's not radiation free at that point, but you're mostly
378.
by tetha 2y ago
Most of us are hopefully also improving at what they do. Our config management has a bunch of stuff written by me that's perfectly functional and works overall. But after a year or two working with the tool, I would call it pretty bad
379.
by tetha 2y ago
Also, farmers have room to put down wind turbines on their land. Quite a few of them up here in northern germany have picked up subsidies and are now generating power from just a few square meters of land. One larger farming business also h
380.
by tetha 2y ago
> the player is holding his hand near the bridge (back of the strings) with the side of the palm resting on the strings to suppress all the harmonics so you only get the fundamental tone and it has this sort of muffled quality (because a
381.
by tetha 2y ago
> So you can have a whole board full of people that studied history and art and French, and they sit there making our cloud decisions. And they simply don’t know. > And if there had been more nerds in that room, some of these things w
382.
by tetha 2y ago
>"openssh does not directly use liblzma. However debian and several other distributions patch openssh to support systemd notification, and libsystemd does depend on lzma. Arch does not directly link openssh to liblzma", so at l
383.
by tetha 2y ago
I'd also be interested, at least for internal bug reports and such. From what I can see, jam.dev is collecting what I collect for dev-teams anyhow, just faster and more comprehensive. But this would possibly move customer data in reque
384.
by tetha 2y ago
> I'm afraid that's not going to happen. It was a mistake to ship with all plugins built by default. This will be painful for a year as users annoyingly do not read the NEWS files they should be reading but there's little
385.
by tetha 2y ago
Ah, so this is similar to the Terraform CDK approach? In Terraform CDK, you use a language like python to compute the set of resources and such you want to have, and then hand that over to the terraform core, which does the usual terraform
386.
by tetha 2y ago
I've ended up with similar thoughts about automated testing in games too. I really enjoy having automated tests and automated tests solve problems. Like, I absolutely love our molecule test suite for our infrastructure code and it give
387.
by tetha 2y ago
I'm not sure if you're aware of how much irreducible complexity the overall government apparatus deals with. Yeah there are simple things that can be improved, like not using physical mail, and better appointment handling and such
388.
by tetha 2y ago
This reminds me of a fun bug from back in the day in university, implementing an experimental stream-based language. The out-of-memory errors were very disconnected, because they occured in the VM - comparing it to the JVM, but without a re
389.
by tetha 2y ago
There is also this entirely crazy "NES reverse emulation"[1] Here someone replaces the cartridge with a modern computer and then... weird things start happening. Such as using a NES to present effectively a powerpoint presentation
390.
by tetha 2y ago
Ah, it was looking like that to me, thanks for confirming. Like, if I force dig to use some public DNS, I get the newly registered IPs but if I use my fritzbox as the DNS server, it gives me itself / NXDomains, except for hostnames con

More ›