zimbatm

28 ms·

331.
by zimbatm 8y ago
I would love it if all terminals agreed and implemented libsixel or another graphics format. libsixel is not supported by urxvt, alacritty, any VTE-based terminals as far as I know. iTerm2 has a custom base64-encodig based image format. the
332.
by zimbatm 8y ago
this is perfect for mounting the Pi filesystem :) https://github.com/philipl/pifs
333.
by zimbatm 8y ago
Any sufficiently-complex program is bound to re-implement an inferior version of Erlang OTP :-p Quickly you find out that recording the list of process / task / ... , including the relationship between each is a useful thing to ha
334.
by zimbatm 8y ago
That's why it's good to separate the marketing website from the main product to different domains. When you can. * www.mydomain.com - install Google Tag Manager, let the marketing people go crazy * app.mydomain.com - all tracking
335.
by zimbatm 8y ago
There is also tons of good stuff at https://neocities.org/browse NeoCities is an attempt to revive the GeoCities days
336.
by zimbatm 8y ago
$20.- is actually quite cheap for a total invasion of privacy. You can rent out just your Facebook account for $500.- per month[1]. [1]: http://fbdollars.com/
337.
by zimbatm 8y ago
The article does a poor job at putting the numbers in perspective. How much is it compared to other industries like Pharmaceutical or the aggro industry?
338.
by zimbatm 8y ago
It's a bit like https://zeit.co/now without the CLI that builds and pushes the images.
339.
by zimbatm 8y ago
Here are two lesser-know tricks that can be quite handy: Using () instead of {} for the functions body allows to isolate it: foo=5 bar() ( cd / foo=7 ) bar echo $PWD # not / but the current direct
340.
by zimbatm 8y ago
0. run shellcheck and fix all the warnings Using shellcheck will give the developer more confidence in their code, and also learn through the feedback it gives
341.
by zimbatm 8y ago
It's hard to know what kind of information could leak in advance. It gives the attacker more information on your surrounding. They could take mug shots to craft a fake profile. Or maybe see a credit card flashing by... it doesn't
342.
by zimbatm 8y ago
Balena seems to have a developed a docker-native solution; not sure how it's implemented though. https://www.balena.io/docs/learn/deploy/delta/
343.
by zimbatm 8y ago
The only good thing about the Dockerfile format is that most developers can write one easily. Here are a list of a few issues: * Dependencies are best represented as a tree. Dockerfile forces to linearize that tree. * It's not possible
344.
by zimbatm 8y ago
> how to stop it When faced with egregious business practices the best option is to switch company. What guarantees do we have that GoDaddy won't toggle the switch back at some point, or introduce other trackers? There are plenty of
345.
by zimbatm 8y ago
This might be a good thing actually. If huge content distribution platforms like YouTube and Facebook are not viable anymore, it might put a renewed wind in the sails of self-hosting systems. Getting the Internet back to it's distribut
346.
by zimbatm 8y ago
As a DevOps consultant; if Amazon is already setup as a vendor, I would just use DocumentDB. Setting up a vendor can be a major hassle and is not worth the saving of a few $$ per month. It's also much cheaper than spinning up and manag
347.
by zimbatm 8y ago
Unrelated but .dev is a new Google TLD where all the domains have HSTS enabled by default. https://shop.gandi.net/en/domain/suggest?search=hackernews.d...
348.
by zimbatm 8y ago
Why? Because the W3C is a factory the never stops churning out specs. It's quite telling that even Microsoft was not able to keep-up with the complexity and decided to piggy-back on the biggest investor. If we want less mono-culture, t
349.
by zimbatm 8y ago
Can everyone get a bank account in Sweden? I don't know if the experience of giving some physical money to someone necessarily translates well. Do you know if people actually bother to read/scan the "Swish" number to do
350.
by zimbatm 8y ago
+1 for pointing at the irony but it's not really true. 1. Hardware design flaws are not irremediable and will be fixed in time. 2. It's still very useful to run software that is trusted to not be malicious and/but not truste
351.
by zimbatm 8y ago
Another side-effect is for donations. In London it's possible to live without any cash. Even markets are accepting cards now. There are often charities that are asking for money at the entrances of the tube. The UK is depending quite h
352.
by zimbatm 8y ago
The DNS zone would be public and tied to a real domain. So both private and public clients would be able to query Eg: ci.myorg-int.com -> 10.11.12.13 One advantage of such method is that it is possible to re-use the public CA infr
353.
by zimbatm 8y ago
But then you need to make sure that the automated cert renewal system is still working...
354.
by zimbatm 8y ago
Has anyone worked at a company where Change Management was so good that there was no possible backdoor? Every system change would have to be approved by at least one other engineer and there is no ssh/sudo access on production systems?
355.
by zimbatm 8y ago
That's fine. Secrets are market as "sensitive" and not displayed in the plan output.
356.
by zimbatm 8y ago
Don't get me wrong, I am very much in that camp too and spend a lot of my time contributing to F/OSS projects. Having the freedom to tweak, debug and improve software is awesome. My main objection here is that there are a lot of i
357.
by zimbatm 8y ago
> Movim is easy to deploy > Movim is lightweight (only a few megabytes) and can be deployed on any server. We are providing a Docker image, a Debian package or a simple installation tutorial if you want to deploy it yourself. I imagin
358.
by zimbatm 8y ago
Anther solution is to store secrets in the Terraform state and use a secured state backend (eg: S3+KMS) to share them. It makes key sharing and rotation a bit easier while not promoting copy-and-paste. You can use the "random" pro
359.
by zimbatm 8y ago
Vault provides an audit log. Since each process gets their own token it allows to correlate which machine/container got compromised. I think we will see more tooling being developed around that in the future to make the search more eff
360.
by zimbatm 8y ago
True. Maybe it's a general property of infrastructure-as-code code.

More ›