tetha

78 ms·

901.
by tetha 6y ago
Yes, I did not mean to imply it is a backup. You still need backups. However, that redundant storage takes care of .. well redundancy, if you need it. Storage with zero redundancy on the drive or the service level (think of ES) is stressful
902.
by tetha 6y ago
It depends how the vendor presents and handles it. I'm not aware how RS promises look. However, for example, the hetzner cloud has an explicit choice between triple-redundant ceph-based storage for VMs, or hypervisor local SSD storage.
903.
by tetha 6y ago
Yep, we use the integrated vault backend. In our case, we use lets encrypt to get certificates for vault and then bootstrap a vault cluster with internal storage. Then you have vault and you can use terraform to configure a consul TLS backe
904.
by tetha 6y ago
Besides the Docker practices - does someone have experience with OPA? This is the first time I've heard of that tool, but an extensible policy tool like that might solve a lot of challenges we have at work.
905.
by tetha 6y ago
This is when being the guy knowing a few database tricks is fun. We had one reporting query that ran for 13 hours or so, in a normal web request. Not very successful, but it tried its best. Running this through explain while thinking of dal
906.
by tetha 6y ago
This mirror why I've come over a lot of writing anxiety by using a notebook and writing by hand. It may be a bit weird, but eh. Pen and paper forces you to be a bit more deliberate for each word, because each word requires more care to
907.
by tetha 6y ago
You'll need to be careful what your N is and what you're counting. But lets assume the input is an array of n characters, n being an arbitrarily large but fixed positive number during a single invocation. And we're estimating
908.
by tetha 6y ago
> Also, perhaps file type limits could be imposed that mean at that files are only accessible to apps that can open them. Of course, I'd want my text editor to be able to open files across root file system, if I open it as root - so
909.
by tetha 6y ago
Another way to look at it: If A is a constant array and part of the program - and not an input, A.includes(x) is just a shorthand for a switch-case statement.
910.
by tetha 6y ago
This is one reason why I generally open an issue first. Lets talk about my problem first. Maybe I add a PR / branch / patch as a PoC. Maybe it gets closed with "No" a few month later. However, I don't see how that w
911.
by tetha 6y ago
> Is the minutes save per month worth the security risk it’s exposing me? Agree with that. Especially if a hard problem stumps me, it's very refreshing to actually focus on making coffee for a few minutes. It clears the head to so
912.
by tetha 6y ago
Lets just hope the heating pad has a temperature cutoff independent from the software, otherwise this turns a lot more scary.
913.
by tetha 6y ago
Hm. It's weird to dump growth and discovery into one pot, unless growth has a specific meaning there. You need to be able to add new users to a service... otherwise it's kind of empty, which defeats the point of a messaging servic
914.
by tetha 6y ago
I know these tasks all to well. Another good strategy I've found is to break it into small actionable pieces and do one of them. Like, don't have a task "Clean the entire place", that's big and scary. Clean up the s
915.
by tetha 6y ago
This is one of the reasons why I've started to call a good layer of concealment and deception on top of a hard system OPSEC rather than obscurity. It's a less ambiguous term and probably more accurate. For example, I have no troub
916.
by tetha 6y ago
Internally, we phrase it as "Make the system objectively hard, then don't tell all the details". Wasting an attackers time is a fine goal.
917.
by tetha 6y ago
Reliable 10mbps is a stable full hd stream and 5ish mbps to spare. Easily one stable video call or two at lower quality. It'll be annoying if you want to download the latest AAA shooter coming in at dozens and dozens of gigabytes, sure
918.
by tetha 6y ago
Hm. To me it sounds like they are ranting about micro controlling by too much detail in the jira. Sure, if you have to close 6 tickets for the same line of thought, it's annoying. So don't do that. And on top of that, the new jira
919.
by tetha 6y ago
As much as I oppose forcing people into the office, there is nothing intrinsically bad about being in the office. Two guys from our team are in a similar situation as you are and we've agreed on them taking up our office spots permanen
920.
by tetha 6y ago
I'm pretty sure this can be modeled with markov chains. Your vertices would be (x, y, f), f being facing. Edges are along the lines of (x, y, 0) - (x+1, y, {0,1,2,3}\1); (x, y, 1) - (x-1, y, {0,1,2,3}\0); (x, y, 2) - (x, y+1, {0,1,2,3}
921.
by tetha 6y ago
A manager at a customer told a pentester to take our system without telling anyone. As simple as that. The pentester did. We axed their system. This was elevated in ridiculousness, because said manager was backpedaling really, really hard a
922.
by tetha 6y ago
More of a b2b context. However, we've had an unannounced pentester achieve RCE on our systems. Not a fun situation. At that point, we were forced by our contracts, and data protection laws, and a CEO aware of all of these, to shut the
923.
by tetha 6y ago
> You've got to have a way better reason to do that to a language than just, "Hey, isn't this cool? And also, I miss the Python 2 vs Python 3 wars, so wouldn't it be fun to give that pot another stir for old time&#x27
924.
by tetha 6y ago
Fairly complete attack details are out already. https://research.checkpoint.com/2020/resolving-your-way-into... Including possible javascript vectors to trigger reflection attacks on LAN servers. Yey. This isn't g
925.
by tetha 6y ago
I think that's right. On a side node, if I recall my old python knowledge right the <1 - baz> and <1 - None> cases are only possible because -- well for one it uses only one object, so the fast check "key is elem"
926.
by tetha 6y ago
>If the response is defensiveness, evasiveness, or persuasive in any way, i.e. of the "it's not that bad" variety, run for the hills. This, on the other hand is technical, validating, and prompt. This resonates with me wit
927.
by tetha 6y ago
Except now you have to deal with javascript. It's hard enough to turn some operators towards an IaC approach, but throwing Javascript at them isn't going to help.
928.
by tetha 6y ago
This is going to make our AI team very happy because they can just dump experiments into the cluster at low-priority so those'll be done when those are done. It's also going to make the operators very unhappy because it'll be
929.
by tetha 6y ago
> I also touch python once in a blue moon. It's always frustrating. To get anything done, I need to install python, then install pip, then make a virtual env, then use pip to install the libraries the project needs in the virtual en
930.
by tetha 6y ago
Sqlite is single-writer for a single database. I mean. Of course, VHRanger, only your team will need to write to the database, and your team will make sure that only one person on your team will write to it. Eh. I've been there too man

More ›