zentrus

5 ms·

1.
by zentrus 4y ago
Because they are "Red Hot"?
2.
by zentrus 4y ago
Airflow helped my team out a lot a couple years ago mainly for the simplicity of the topdown UI-based view of a complicated ETL AND the ability to retry parts of the ETL. We had lots of lessons learned. For instance, why does PythonOperator
3.
by zentrus 5y ago
Totally agree on hoping there is at least some movement forward on async--particularly async ORM. I love Django and DRF. It is my go-to for a lot of things, but the lack of async support is increasingly a problem for more organizations. H
4.
by zentrus 6y ago
Rapid7 | Senior Software Engineer | REMOTE or Arlington, VA | Full time The Rapid7 Labs team uses our experience, expertise, and passion for cyber security to establish a leading understanding of worldwide emerging attacker methodologies. I
5.
by zentrus 7y ago
I've messaged you guys a couple times, but never heard anything! I'm a seasoned Django developer, led some teams, and have a bit of experience in public health (mainly disease surveillance) platforms. I'm located in Austin.
6.
by zentrus 7y ago
Just fyi, depreciating the property isn't a choice in the US. When you sell, the government assumes you did depreciate on your previous tax returns. If you didn't, you missed out on those deductions and depreciation will be reclai
7.
by zentrus 10y ago
This is true, and I love DRF but I find it unfortunate then that the concept of Serializer exists. Tom Christie essentially says that Serializers can and should be used outside of views (REST) to decouple and encapsulate business logic. H
8.
by zentrus 12y ago
Very disappointing. In various parts of the world, data is not always available and SMS is. :(
9.
by zentrus 12y ago
Yes, you could. My only point is that PostgREST limits you in what you can do in terms of handling load.
10.
by zentrus 12y ago
I'm not sure if this is exactly where al2o3cr was going, but a Ruby (or whatever) application would normally include such things as caching and queueing. Despite the slowness of Ruby et al, I actually would expect a modern application
11.
by zentrus 12y ago
And Docker bought Fig, so it is likely it will continue to be supported and eventually even do multi-host container orchestration.
12.
by zentrus 12y ago
That's a good set of pitfalls to watch out for. Mainly, I just find it odd that in Django 1.7, they are using frozen models to mitigate some of these problems, but don't remove or freeze the base classes, therefore leaving the sa
13.
by zentrus 12y ago
Awesome that migrations are now in Django core. I do see some pitfalls regarding Historical Models though. The problem is that application code usually changes over time. Consider a deployment that hasn't been migrated in a long time
14.
by zentrus 12y ago
Thank you. This is closer to a much better upgrade path. The official documentation is really not a good way to have non-technical customers move from South to Django 1.7. With the new version of South, you could package both old South (
15.
by zentrus 12y ago
Also http://blitz.io
16.
by zentrus 12y ago
Yes. I think saying "you can't sacrifice correctness because of an inability to scale your database" is perhaps conveying the wrong message though. I mean, your very first point is about database scaling issues and the adva
17.
by zentrus 12y ago
Passing objects to Celery and not querying for fresh objects is not always a bad practice. If you have millions of rows in your database, querying for them is going to slow you way down. In essence, the same reason you shouldn't use
18.
by zentrus 12y ago
What happens if more traffic is coming in than Packetbeat can process? Either you are dropping that traffic or you are (perhaps unintentionally) blocking it, right?
19.
by zentrus 13y ago
Maybe I'm not following your response. What I'm saying is that there are reasons to use /dev/random at least after boot (to block for seed entropy). Saurik gives a real world example of the "cold boot" probl
20.
by zentrus 13y ago
As people have pointed out in this thread and other articles, clearly there can be issues with using /dev/urandom on boot where there is a lack of entropy. What I would love to know more than anything on this topic though, is whe
21.
by zentrus 13y ago
Be aware that this version of DDT is likely broken if you are using require.js or other AMD loaders. It may even fail in non-AMD environments if you are using jQuery. This appears to be related to DDT now loading its own jQuery in a non-A
22.
by zentrus 13y ago
Thank you for clarifying. Does the AeroFS Team Server also have upgrades that behave the same way?
23.
by zentrus 13y ago
Overall I think their approach for easy installation and configuration is a good one. I struggle with these same issues at my job--we sell products with a complex application stack to customers that often have no system administrators. Th
24.
by zentrus 13y ago
I for one agree with you. There are a few specific cases where client-side crypto has benefits regardless of the fact that you need to (at some point) trust the server. I think the best examples involve protecting history or data residing
25.
by zentrus 13y ago
Having the crypto code delivered by the server to provide real-time "end-to-end" security is surely a problem. But, I believe there is a specific use case where even not-so-perfect javascript crypto increases security in a signifi
26.
by zentrus 13y ago
Isn't the master key vulnerability related to the SIM card attack, and not to the app signature vulnerability? Maybe I'm reading the article wrong, but this article seems to be confusing two non-related vulnerabilities.
27.
by zentrus 13y ago
Have you read other articles relating to TLS security over the last several months? Keeping in mind BEAST and Lucky 13 and browser support, I would ask you which ones you would prioritize over RC4 and why?
28.
by zentrus 14y ago
I'm having trouble understanding how a wrapper for an arbitrary executable can be called "RESTful". Are there resources? Are there long-lived URIs? In the end, doesn't the implementation of the executable partly determine whether it is re
29.
by zentrus 14y ago
Actually, I found that they use ZRTP from their website. Phil Zimmerman wrote it and he is one of the SC founders. Wikipedia gives a nice overview: http://en.wikipedia.org/wiki/ZRTP
30.
by zentrus 14y ago
My main question is how are these keys generated and exchanged? Normal diffie-hellman is susceptible to man-in-the-middle attacks. You can eliminate this by adding public key certificates to the mix, but how would Silent Circle manage the

More ›