tetha

37 ms·

451.
by tetha 3y ago
You make me wonder if this isn't the marketing/sales vs dev/ops misalignment. Marketing and Sales focus on the good parts of our software. Simple usability, high stability, great reactive customer support, ... Apparently, dur
452.
by tetha 3y ago
This is very much the way I'm pushing in our internal development platform: I want to offer as little middlewares as possible, but as many as necessary. And ideally these systems are boring, established tech covering a lot of use cases
453.
by tetha 3y ago
I have also found CVSS scores to over- or underestimate the impact of vulnerabilities so much.. I might as well flip a coin. And while I probably should be informed more, I really consider that a problem in the output of the security commun
454.
by tetha 3y ago
Mh, my main concern is: Both the weirdest absurd and non-exploitable things as well as the most trivially exploitable thing are just being run through all kinds of news channels as security vulnerabilities and out-of-bound writes and such.
455.
by tetha 3y ago
It's one of the better ways to avoid getting scammed: Try to validate the communication in ways without relying on any information they gave you. If someone claims to be a police officer and hands you a number to call to see if they ar
456.
by tetha 3y ago
> This flexibility also means that non standard code is easier to write in perl. The tool gets a bad reputation at the hands of poor coding practices. A higher level of trust and self-discipline is needed. And this becomes a problem in t
457.
by tetha 3y ago
> I think, as the original commenter also wrote, this might be worth it in much slower paces projects that is run in another cadence / over mailing lists. Very much this. If I'm modifying some rather obvious and ovreall simple
458.
by tetha 3y ago
Yeah, and systemd is an excellent example there. I can totally understand the issues of unification there, and very much understand issues with poetterings perfectionist attitude to some issues. But do you know how much time I've spent
459.
by tetha 3y ago
Hm, interesting. To me, team fit, curiosity and, depending on the level of seniority I'm looking for, an impression of experience are the most important things in an interview. The latter might look like you could fake it with ChatGPT,
460.
by tetha 3y ago
In a team of individuals, the term isn't necessarily "blameless". I'd never hold a weird or accidental outage against you personally. The major question would be: Why did that happen? However, you're forever going t
461.
by tetha 3y ago
I know that. You're missing the second part there. I have been asked by customers about the reliability of our software platform if major german cities have been hit with either nuclear, natural or military disaster. It's that lev
462.
by tetha 3y ago
Yeah, I fell into my usual security questionaire wording there. I'm not even contradicting you there. You can go as fast as you can go. Even if every atom in the current estimation of the universe had a couple thousand computations ava
463.
by tetha 3y ago
Offline vs online brute forcing, as I like to call it. As others have said, if you have the hashes, you can brute force them offline and there won't be any limits on how fast it can go besides your algorithms and compute resources. But
464.
by tetha 3y ago
DEVOPS_BORAT contains a lot of truth if you think about it, hah. Our sarcastic team-motto is very much this: https://twitter.com/DEVOPS_BORAT/status/41587168870797312
465.
by tetha 3y ago
I mean, I'm talking from a b2b and an on-prem/world of many differently capable clouds, so I'm most likely a dinosaur anyway. We have established code bases for domains. We've been looking at lambdas or FaaS for quite a
466.
by tetha 3y ago
I've been in the same mindset as you, but I've changed my mind a bit. Personally and at work, I've started to think about two-ish security classes. The first are the top security things, e.g. my password manager or my github
467.
by tetha 3y ago
I'll give the podcast a listen tomorrow :) But, even if you only have a single action available, isn't communication with the customer key? We've pulled customer systems offline, and parts of the customer were glad because we
468.
by tetha 3y ago
I find it somewhat chilling how their original colo left them to hang and dry. Maybe I'm weird, but I'd consider colo to be a closer cooperation than just renting some virtual servers from wherever. And just getting told "Yup
469.
by tetha 3y ago
Yeh. Or, during a complex investigation, you need to setup a hypothesis explaining these spikes in order to eventually establish causality surrounding these spikes. And once you have causality, you can start fixing. For example, I've h
470.
by tetha 3y ago
> I have a saying I really like to throw around, which is “if you don’t know why/how you fixed it, you may not have” There is coincidental function, and planned function. If you just throw numbers at a configuration parameter until
471.
by tetha 3y ago
Mh, I work quite a bit in the OPs-side and monitoring and observability are part of my job, for a bit of time now too. I'll say: Effective observability, monitoring and alerting of complex systems is a really hard problem. Like, you lo
472.
by tetha 3y ago
I'm kind of wondering the same thing learning my guitar: Maybe a good thing is to approach an issue with different ways your head has to think about it. Like, yes. I can just spaced repetition the heck out of the notes on the fretboard
473.
by tetha 3y ago
As an example, for postgres, we have: Backups on a pgbackrest node directly next to the postgres cluster. This way, if the an application figures a good migration would include TRUNCATE and DROP TABLE or terrible UPDATEs, a restore can be d
474.
by tetha 3y ago
I've worked with people who did work with successfully employed event sources architectures. One thing there is: These were massive engineering departments in very large companies. Think of several dozen data processing teams, each ver
475.
by tetha 3y ago
Mhhm. It's also a reason why we're making sure our developers have an easy time integrating into the platforms authn and authz systems. For example, if you need an admin interface, it should be just a library include and some besp
476.
by tetha 3y ago
Vegetation can also help to break velocity. People fell out of planes and survived by falling into trees and snow underneath. The smaller branches of the trees very much acted like a crumple zone on a car - giving way and breaking, but taki
477.
by tetha 3y ago
Mh, if you are on a somewhat trustworthy network - like your home WLAN - and need to get some files from a host on that network to another once, there is <python3 -m http.server>. Lookup your local IP, port 8000 is open, the PWD is be
478.
by tetha 3y ago
> And another problem is that commercial game development moves very quickly, relative to OS. Like, 0 AD had its initial release in 2010, and it's currently still in alpha. Age of Empires 4, a similar commercial game, went through t
479.
by tetha 3y ago
> But it is weird that we don't see better open source games, because good storytellers have no problems giving their work away for free. There is an overabundance of great writing on the internet. But taking a solid plot and turnin
480.
by tetha 3y ago
It is also a good idea to test the restore procedures and documentation as well. Don't have the grizzled old storage admin / DBA test the backup. They know a million and one weird necessary workarounds and just execute them. Howev

More ›