tetha

54 ms·

781.
by tetha 5y ago
cloud-init does help us, once we have a working linux, but we can also bake the static route into a base image. The problem is that preseed is a very minimal linux environment and either relies on DHCP to work, or to use the usual network c
782.
by tetha 5y ago
In our experience, this strongly depends on the services involved, as well as the scale. For example, for our own service: If you have a hundred or two hundred licenses, you can drop our system on a linux box and usually you have to throw a
783.
by tetha 5y ago
Yup. The database schema of one of our products uses a tenant_id in most tables to separate customers logically. I've eventually gotten a tenant exporter to work. Practically, this requires some deep and nasty digging through the infor
784.
by tetha 5y ago
Even though this is a bit tricky on the hetzner cloud, because it requires the addition of a static route[1] to access the internet which isn't pushed by the DHCP, and I haven't been able to fully automate that in debians preseed
785.
by tetha 5y ago
It's the DNS-01 challenge[1]. This reduces the challenge to using some DNS provider with an API supported by a client[2] / [3], as well as the server needing to be able to reach the LE-API. We use this with the CNAME delegation in
786.
by tetha 5y ago
As an example, many customers are asking to connect our SaaS solutions to their internal network via some site2site tunnel, so they can just keep their legacy databases like they are. However, our implementation consultants have tried doing
787.
by tetha 5y ago
Oh RFPs are an everlasting source of fun in B2B. Like, we've received the wrong questionaire once. It contained the question what we would do if armed forces intruded into our secured facilities to seize assets. We eventually settled o
788.
by tetha 5y ago
Do note that you have offloaded a good chunk of state management into EBS volumes via CSI. Attaching the CSI volumes is one thing, running the disks hosting the volumes is another thing.
789.
by tetha 5y ago
I severely wish for SELinux to have better documentation. I can and I have worked myself into dense and hard topics with little documentation, but SELinux is it's own thing. I can totally see how SELinux could improve the security of a
790.
by tetha 5y ago
I'm not even sure if we have to consider retribution why this is a bad idea. There is no control over the blast radius this has. It could hit anything, from a military or criminal system (possibly doing something you could consider goo
791.
by tetha 5y ago
Mh, for me it's a bit of a process of getting to know people, and to educate people how to get what they want from me quickly. Somehow that sounds arrogant. The thing is, if people ask me a direct, simple question via chat, I can answe
792.
by tetha 5y ago
That makes sense. I've been wondering if we've been doing something subtly awkward with our internal tooling. However, most are just using the 8 or 16 color palette with a simple convention like "Use red (or technically, colo
793.
by tetha 5y ago
If you can casually write an algorithm to break a modern cryptographic hash in 10 guesses... I would like to know. Because then I have to decide if I want to be a very good friend of you, once you get rich, or if I want to stay as far away
794.
by tetha 5y ago
I think you should watch your language, young person.
795.
by tetha 5y ago
> * Kinesys Freestyle 2 keyboard (wired, I hate wireless things, I never want to think about batteries) I very much second that choice in keyboard, I had the freestyle 2, and now I also have the new mechanical version of it. I have reall
796.
by tetha 5y ago
Hm. If it's in your car, yeah. Though if I put a thing like that in my window, you'd have to rummage through 20 - 50 flats to find the source of that SSID to identify the creator. With zero legal reason to search my flat over my n
797.
by tetha 5y ago
> Or a currency conversion machine where you can shove USDs in the slot to get EURs, but if you shove EURs in, to the shredder they go, This example is kinda funny. If your bank notes were accidentally damaged in germany, you could send
798.
by tetha 5y ago
And that is even an argument on top I didn't even mean. > You can even retrospectively apply reasonable person type arguments no? Yeah. A significant part of a traditional contract revolves around defining the entities and behaviors
799.
by tetha 5y ago
Hm, but wouldn't smart contracts have to be as complex as a non-smart contract, if a smart contract were to replace the dumb contract? If I'm looking at the regular B2B contracts I'm supporting at work, even normal contracts
800.
by tetha 5y ago
It depends somewhat on the organizational skillset you have, in my opinion. Current workplace is considering a fully self-hosted stack as a unique selling point for the customers and segments we're in. That means, we have storage and l
801.
by tetha 5y ago
After a certain length of outage, you have to start prioritizing differently though. I only have our own anecdotes there. But if someone was at a problem for 8 - 12 consecutive hours under pressure, the quality of their work is going to dro
802.
by tetha 5y ago
Yup. I am concerned, because it sounds like a lack of mentoring on a technical and an organizational level. I've made similar mistakes and I dislike it, but my lesson is: a junior should have mentors they can lean upon and draw into me
803.
by tetha 5y ago
Most of our customers use these kinds of chat bots as an addition to their portfolio of support channels a user can use. If you don't like it, use another channel you prefer.
804.
by tetha 5y ago
This is what our NLP teams are indeed working on. Sales prefers to describe it in more colorful ways, but practically, they are developing a more natural interface to an initial decision tree - you don't press 5 for a connectivity issu
805.
by tetha 5y ago
I've also had a really suprising experience with my linux gaming setup: Playing old retro windows game has become easier, because wine can run a suprising amount of things. I recently itched to play Civ2 and after some wrangling with t
806.
by tetha 5y ago
But is that actually different from trying to get any budget for e.g. IT security software, redundancy, backups or any kind of nonfunctional investment in an IT network - especially in smaller shops? Putting up my ignorant penny-pincher hat
807.
by tetha 5y ago
That's fairly normal. I'd rather patch everything 5 times in a row to get rid of one RCE at a time, rather than running with a 10/10 vulnerability for 5 days so the application can make sure to root out all possible problems.
808.
by tetha 5y ago
Yup. This is why I think that microservices require a stronger operational plattform, but then it enables new and more effective ways of developing new tunctionality. Our internal software plattform is getting to a point so it can answer mo
809.
by tetha 5y ago
After ~12 hours of getting this mitigated at work, yeah. The only things I could imagine much worse would be broken RSA, or something like this in the linux network stack. Even something in SSHD would be less bad, because SSHDs tend to be p
810.
by tetha 5y ago
This one could possibly hit past the backend and hit tools like sentry, a log aggregation and such, through an unaffected backend.

More ›