tetha

87 ms·

931.
by tetha 6y ago
Hm. I'm fully aware that I'm currently turning into a bearded DBA. And I may be just misreading the article and I probably don't understand the article. But, I started being somewhat confused by something: > Fortunately, I
932.
by tetha 6y ago
Those are the advantage and the problem of nomad. We're using it a lot by now. Nomad, or rather, a Nomad/Consul/Vault stack doesn't have these things included. You need to go and pick a consul-aware loadbalancer like tra
933.
by tetha 6y ago
I'm utterly confused there as well. Decent grills I've owned consisted of three metal poles, a chain, a grill. Maybe a metal frame, a metal pan, a grill. Technically, I don't think I'd need much more than a bunch of st
934.
by tetha 6y ago
Also, they are trained and educated to recognize if this doesn't work. Speaking from experience there. They'll try to gain trust, which is necessary. Actual licensed therapists have two things going in there. You can go and meet t
935.
by tetha 6y ago
> Would I suggest it to others? No. There were other issues I had with the plan, more societal. And it was frustrating to not be able to focus on something for more than 3.5 hours at a time. But it certainly was an interesting time. This
936.
by tetha 6y ago
Writing code is one thing though. Now you have to figure out how to run a CI on a build server. Deployment on your production systems, be it containers or even not. Monitoring, alerting, profiling, tuning under load. You have to support a n
937.
by tetha 7y ago
Monitoring feels like that as well. You usually end up with a more imperative part to execute a check or to pull data and push it to a monitoring system. "Call this API / read this file. For each line / json key, mangle into
938.
by tetha 7y ago
The thing there is: I'm split on that. I know plenty of small businesses and their owners. Bars, local cafes, all kinds of little startups, small construction companies, small companies in manufacturing. These businesses had no chance
939.
by tetha 7y ago
As I've started putting it: Make your infrastructure and systems hard. Then don't tell anyone the details.
940.
by tetha 7y ago
Yup. I recently setup a new VM on a new cloud provider at work and that poor thing got hammered with 2-4 authentication requests per minute from the get-go. By the time the UI of the cloud provider displayed the VM as running, there'd
941.
by tetha 7y ago
Seems to be fairly standard indeed - elastic, mysql, postgres, .. all do the same thing. If reloading works properly, our hashicorp vault-based TLS stack could handle that out of the box including aggressive rotation. TLS authentication isn
942.
by tetha 7y ago
I know this is inappropriate.. but to me, it sounds like a fascinating and hilarious dystopian visions... there'd be entire legal teams dedicated to find, and claim and defend the corporate specific ways to implement.. a range check (N
943.
by tetha 7y ago
The danger of these kinds of threats is not limited to exposure of personal information, though. For example, take a look at Norsk Hydro. A ransomware situation took down the control systems of an aluminum plant. The company mostly got luck
944.
by tetha 7y ago
As cynical as I may sound, but cybersecurity threats like this will continue to be ignored until they sufficiently escalate into consequences. And that statement, while obvious, is darker than it seems. Companies going under aren't suf
945.
by tetha 7y ago
Oh. You are correct. I don't know how I ended up with PI there.
946.
by tetha 7y ago
I've discovered their efforts to archive old dos games... fully playable in the browser through a dosbox build in WASM as far as I know. That's a really impressive cooperation of very old and very new technology - 16 bit up to the
947.
by tetha 7y ago
But that's vendors, not containers. You can say exactly the same about vendors on a VM - applications running as root, bad passwords set, reboots impossible, patching impossible, backups... Or a virtual appliance. Or a third party appl
948.
by tetha 7y ago
> The connection between the server and the client are normally encrypted Keyword: Normally. What about DNS? DNS without DNSSEC via an untrusted AP cannot be trusted, that's for certain. Hence, you recommend your user to activate VP
949.
by tetha 7y ago
I don't know. Maybe I'm a miserable cynic by now, but too many big names have been burning my good-will. I've been disappointed by too many names by now. Blizzard, Ubisoft, Bethesda, EA. Valve hasn't done so by not publi
950.
by tetha 7y ago
To me, the scary part about this is: After Equifax, this is another big hack... and practically, it's one layer of defense and that's it. Shellshock, one password, everything's fucked. And yes, expletives are appropriate ther
951.
by tetha 7y ago
After some work with go, I wouldn't call it simplicity that much. Simplicity has too many implications and expectations and by now, I'd call simplicity context dependent. In the right context, spring boot can simplify backend code
952.
by tetha 7y ago
Ugh. Maybe I'm in a different world by now, but I dislike such statements on multiple levels. > This typically comes with assertions such as "data is the new oil" and "once we have our dataset and models the Big Tech
953.
by tetha 7y ago
Yep, older java versions had some ridiculous caching of both positive and negative DNS responses. That was some weird problem to troubleshoot. We ended up writing our own caching then, back in Java7ish. And the first version of our DNS ca
954.
by tetha 7y ago
In this case we're talking about 5 VMs running php-fpm and no nginx in sight, so these VMs aren't immediately affected by said exploit. Also, these VMs only consume some public, unauthenticated APIs of the company and render the c
955.
by tetha 7y ago
Hmm, so looking at the exploit and the patch... do I read it right: There is a buffer underflow in php-fpm if the environment variables SCRIPT_FILENAME and PATH_INFO have a state that violates an assumption. And currently a widespread confi
956.
by tetha 7y ago
> This helps ops people because it allows them to think about infrastructure as abstract resources rather than as a collection of individual machines with specific designations. With k8s, individual machines become a homogenized resource
957.
by tetha 7y ago
I think good documentation needs to be written with a few decisions in mind: What role, what kind of person is this section written for, and what kind of task does the reader have at the moment? There should be sections on familiarizing you
958.
by tetha 7y ago
> To heroku's credit... I'm not sure if I can remember this kind of widespread outage ever happening before. Against heroku's side... I'm not sure what a heroku-deploying customer would be expected, by heroku, to do,
959.
by tetha 7y ago
I've spend 3 years building a java code base with a class of requests having an average response time of < 1 ms. And the entire application had a 99%q response time of < 10ms. Including GC and everything. Quite honestly, after a
960.
by tetha 7y ago
I'm in germany and I have a friend who lives here with his family, but they are still british citizens. So, from our side of the channel: Pretty much everyone in their situation has been contacted by the german government - temporary a

More ›