tetha

10 ms·

91.
by tetha 9mo ago
I'm now somewhat interested in the study to see how they accounted for possible hidden factors. If a team lead or manager spent the time to track birthdays and took time out of their day to have a 10 minute chat with someone on their b
92.
by tetha 9mo ago
This has been my understanding for e.g. European chips as well: First you subsidize and support the creation of currently not commercially viable chip fabs on-shore. Literally handing companies money under some obligation into the future. E
93.
by tetha 9mo ago
> The rules are interpretable as it being illegal to access data with a publically available password using this password, so we're going to apply them, despite it being patently absurd. I very much agree. I do think that this kind
94.
by tetha 9mo ago
Thank you for providing an example that is exactly showing how messed up this is: > Der Vorsitzende Richter gab zu Protokoll, dass alleine die Tatsache, dass die Software ein Passwort für die Verbindung gesetzt habe, bedeute, dass ein Bl
95.
by tetha 9mo ago
I'm a broken record about this by now, but stories like these keep reminding me how broken the law is for ethical hackers in Germany. If an ethical hacker found something like this in Germany, it would from my knowledge not be clear if
96.
by tetha 9mo ago
PostgreSQL has 2 memory-related parameters you need to set for larger instances - work_mem and shared_buffers, as these need to be set to a percentage of the VMs memory to utilize it well. However, pretty much every PostgreSQL setup guide n
97.
by tetha 9mo ago
And now that I've read that the second time, this is very close to various kinds of therapy. For example, anxiety exists and sometimes occurs, and it means parts of me are trying to be very careful and precise about something. This can
98.
by tetha 9mo ago
Unless you replace the entire workforce, you'd be surprised how much organizational work and soft skills are involved in an infrastructure at scale. Like sure, there is a bunch of stuff like monitoring, alerting that is telling us that
99.
by tetha 9mo ago
As the sibling comment says, in my experience, the difficulty of formalizing the problem varies greatly between different areas. Probability theory is another notorious field in which modelling a problem correctly can be very subtle and dif
100.
by tetha 9mo ago
This however misses an important point: 3 is not in our control. 3 in general is controlled by math-people, and that 3 in particular is probably in the hands of a legal/regulation department. That's a much more important informati
101.
by tetha 9mo ago
> sorry, i’ve basically done an unprompted code review. i feel like a bit of a dick now. That's all fine. Just note that this was one of the easiest examples I could find. For example, for reasons out of my control, the individual n
102.
by tetha 9mo ago
> That's explaining "what" but also implicitly "why" - because that's how double-entry works and that's the tolerance banks allow for settlement delays. You can't really extract that into a method
103.
by tetha 9mo ago
I don't have a blog (yet). Which of the two to three parts are you interested in? :)
104.
by tetha 9mo ago
I have a few internal services on which I like to crank transport security to 11. No port 80, only TLS 1.3, only modern ciphers. You'd be surprised how much confusion not opening port 80 caused across technical people. And I've le
105.
by tetha 9mo ago
I've written, tested and debugged low-level java concurrency code involving atomics, the memory safety model and other nasty things. All the way down to considerations if data races are a problem or just redundant work and similar thin
106.
by tetha 9mo ago
> A good example: Here in North America I'll jaywalk without a thought if there's no traffic. In Germany, you'll get grandmothers calling you a child-killer for setting a bad example if you did the same. This varies wildly
107.
by tetha 9mo ago
> If this certificate is so critical, they should also have something that alerts if you’re still serving a certificate with less than 2 weeks validity - by that time you should have already obtained and rotated in a new certificate. Thi
108.
by tetha 10mo ago
I was about to comment this as well. I listen to a lot of music on the side, but Chris Boltendahl of Grave Digger said something that stuck with me. Btw, Grave Digger are not making Heavy Metal inspired by Heavy Metal, they were there makin
109.
by tetha 10mo ago
This is something that hit me during my master thesis the first time: I was entirely free to choose my work time, work mode. Since the prof was very hands-off too, only the result after 6 months mattered. That was quite the weird time. But
110.
by tetha 10mo ago
Personally, I only trust an image manipulation tool to put down solid colored blocks, or something that does not involve the source pixels when deciding on the redacted pixel. Formats like PDF are just so complicated to trust.
111.
by tetha 10mo ago
One thing this is missing: Standardization and probably the ECS' idea of "related" fields. A common problem in a log aggregation is the question if you query for user.id, user_id, userID, buyer.user.id, buyer.id, buyer_user_
112.
by tetha 10mo ago
Heh, I read Graphite as the monitoring tool[1] and was very confused for a second what they want with that old thing. 1: https://graphiteapp.org/
113.
by tetha 10mo ago
I'm assuming you meant statically/dynamically type checked languages. Generic functions to not ignore types. An `inThere::a list -> a -> bool` very much enforces that the list passed in, as well as the element have the same
114.
by tetha 10mo ago
In my operational team, I'm following a third model, inspired by german trade workers. You have juniors, journeymen and masters. Juniors are generally clueless and need to be told what to do, specifically. This is very much the level o
115.
by tetha 10mo ago
Luckily, at work we are this layer of bureaucracy and compliance. I'm very much pushing the agenda and idea that managing a stateful, mutable linux VM is a complex skill on it's own and incurs toil that's both recurring and h
116.
by tetha 10mo ago
This kinda change also has some different gears turning in my head. At $0.002 / build-minute, some of our large software integration tests would cost us around 15 - 20 cents. Some of our ansible integration tests would be 5 - 10 cents
117.
by tetha 10mo ago
Our internal CAs run 72 hour TTLs, because we figured "why not" 5-6 years ago, and now everyone is too stubborn to stop. You'd be surprised how much software is bad at handling certificates well. It ranges from old systems li
118.
by tetha 10mo ago
One of the more tractable examples here is the information what cell towers your cell phone is connected to. On it's own, it doesn't tell you that much. But if you have this from 2-3 people, you can start inferring if they are mee
119.
by tetha 10mo ago
On the other hand, everything you ship outside of a clearly established golden path is a maintenance burden that piles and piles and piles. And these maintenance burdens tend to gradually slow the org down until they cause rather catastroph
120.
by tetha 10mo ago
Hm, we have a few very repetitive terraform projects to setup structured infrastructure clusters. For those, we just use ansible with a bunch of templating to generate a configurable, HCL-based terraform module and version that. It's a

More ›