zzyzxd

12 ms·

61.
by zzyzxd 2y ago
The script even installs docker with apt by itself (which, I think, is the only reason they require Ubuntu as the OS -- to not to deal with any other package manager variants)... I mean, why? Just let people install docker however they like
62.
by zzyzxd 2y ago
Selfhosting is my hobby but I am also an SRE. I am hesitant to do this because the instruction is "too easy" -- "Simply open your firewall, download and run this installer.sh with sudo on your server and that's it!"
63.
by zzyzxd 2y ago
It's actually very easy to understand. Employee salary is fixed expense your company is always prepared to pay every month. Buying new software is extra new cost, which needs justification and procurement process.
64.
by zzyzxd 2y ago
I believe. Because I know companies like this have almost never spent resources to attempt to improve WFH environment. Remote work is hard, you need technology, culture, and people all working together to make it efficient. You can't j
65.
by zzyzxd 2y ago
This was one of the points Neil Postman made in "Technopoly", 30 years ago. Every new technology introduced to the society is a negotiation with the culture. It may bring some benefits, but will also re-define or even takes someth
66.
by zzyzxd 2y ago
There can be many different approaches and it largely depends on the capability of your own team and the infra. Personally, I would first take a look at Cluster API, and see if it's feasible to use one of supported providers, either FO
67.
by zzyzxd 2y ago
I think it's fine if you are happy with your crontab/systemd based system. But the author already has a k8s cluster with storage and VM automatically provisioned in a declarative way, so what's wrong with that? crontab/s
68.
You Can No Longer Sign Up for Reddit Without Giving Your Email Address(old.reddit.com)
10 points by zzyzxd 2y ago|3 comments
69.
by zzyzxd 2y ago
At one company I used to work for, we had boring, airgapped systems that just worked all the time, until one day security team demanded that we must install this endpoint security software. Usually, they would fight tooth and nail to preven
70.
by zzyzxd 2y ago
USPS Informed Delivery emails have tracking pixels. But all the mail scans are just attachments to the emails. You can configure email client to not load any remote content and the they will still get rendered pretty nicely. I was pretty su
71.
by zzyzxd 2y ago
I keep my credit frozen all the time, but still keep getting alerts about new "no credit check" bank accounts from companies like chime.com. Then I give them my PII again just to verify and close those accounts, even though I don&
72.
by zzyzxd 2y ago
> Verbose logs are simply a pain in the arse, unless you have a massive processing system. but even then it just either kneecaps your observation window, or makes your queries take ages. which is why this blog post brags about their capa
73.
by zzyzxd 2y ago
> Most log messages are useless 99.99% of the time. Best likely outcome is that its turned into a metric. The once in the blue moon outcome is that it tells you what went wrong when something crashed. If it crashes, it's probably so
74.
by zzyzxd 2y ago
Well, personally, not more ruined than before. I find most of the header pictures in online articles (not limited to tech posts) useless anyways... I saw Postgres post with a picture of elephants from Africa, Docker post with a picture of a
75.
by zzyzxd 2y ago
It actually depends on what the interviewer wants to see in the candidate. Memorizing a specific implementation? Test their experience and skill for a new design? Or just some sort of personality test and see if they are honest? As a candid
76.
by zzyzxd 2y ago
To process all your tasks, it cost the same to either run 100 EC2 instances for an hour, or 10 EC2 instances for 10 hours. It's much easier than before to design a stateless scalable system, so people would rather scale out and get thi
77.
by zzyzxd 2y ago
I like sealed secrets ( https://github.com/bitnami-labs/sealed-secrets ) a lot. It's like 1Password, but for apps in kubernetes. You only need to secure a private key, and can throw encrypted secrets in a public git
78.
by zzyzxd 3y ago
Fear of complexity is the number one reason why many "simple" homebrew solutions were born to solve simple problems at time, from what I observed in recent years across a few companies I worked for. The hard truth is, fewer simple
79.
by zzyzxd 3y ago
isn't that a feature? kagi search requires sign-in, so it's not private and should not be used in a private browsing session.
80.
by zzyzxd 3y ago
After disabling it on the UI, your device may still cache the DNS records for a few minutes. There's no immediate feedback on whether disabling adblocking changed anything. It is extremely tedious especially for non-technical users, an
81.
by zzyzxd 3y ago
That's why you should call what you store in git the _desired_ state, not anything else. A git repository is not a live database. It's a collection of static text files that change less often than your live system. There will be b
82.
by zzyzxd 3y ago
> Our team regularly faced the need to create almost identical charts, so when we had 14 identical microservices in one project Has it come across your mind that helm charts may not be the right abstraction for your team?
83.
by zzyzxd 3y ago
GitOps is just like "DevOps" -- you don't really know what it means to a specific org until you talk to them, because people interpret it differently based on their own understanding (or if they have a horse in this race). To
84.
by zzyzxd 3y ago
Let me talk to your engineers, not salesperson. I've never had good experience with salesperson. Almost every time I ask them "can your product do X?" I get answers like "yes" or "no but our engineers can make
85.
by zzyzxd 3y ago
rpi is still super useful for me in many cases, just not as a regular desktop. And I don't understand why they keep trying to sell it as one.
86.
by zzyzxd 3y ago
These services attempt to teach users to guess whether email content has malicious intention. But if an email from no-reply@chase.com says someone emptied your saving, you can't just laugh it off. From a technical perspective, in order
87.
by zzyzxd 3y ago
> I'd use AWS + ECR + ECS personally. Stay away from kubernetes until you have a fairly large deployment as it requires huge administrative overhead to keep it up to date and well managed and a lot of knowledge overhead. > ... &g
88.
by zzyzxd 3y ago
compliance != security. Good luck telling the auditor about zero trust.
89.
by zzyzxd 3y ago
A few years ago I decided to run everything at home in kubernetes and started doing GitOps in a public github repository. Doing everything in public makes it quite easy to talk to people about it: If I need help with some open source softwa
90.
by zzyzxd 3y ago
direct IP connection is coming: https://community.ui.com/questions/Unifi-Protect-Mobile-acce... but even with this, it's still an security camera app that can't send push notification without cloud access.

More ›