zzyzxd

10 ms·

91.
by zzyzxd 3y ago
But you can take someone else's cattle, modify it and make a different cattle. The whole point of container's overlay filesystem is that you can do stuff, take a snapshot so that you can always get back to this point, and then do
92.
by zzyzxd 3y ago
> Though we don’t have the finer details of the DDoS story, it serves as yet another warning for device owners to do their best to keep their devices, firmware, and software updated; monitor their networks for suspicious activity; instal
93.
by zzyzxd 3y ago
I get what you are saying. But managing a .local domain is way harder to get right (Your internal CA, certificate house keeping on all kinds of devices and software running on them, your internal websites talking to an external IdP, VPN and
94.
by zzyzxd 3y ago
> Somebody forgets to renew the domain or thinks there's nothing there because it doesn't resolve from the public internet Not sure about others, but I am not gonna trust that person to manage my .local network regardless. &gt
95.
by zzyzxd 3y ago
When a person tells another person "you need to do X" or "I did Y and it didn't work on my machine", they sometimes ignore important details due to their own curse of knowledge. That's when I need a shared term
96.
by zzyzxd 3y ago
> many tech companies really are overstaffed > and can get away with far fewer employees I can't tell whether Twitter was really overstaffed or not, but I don't agree with people who use "see, twitter.com is still stabl
97.
by zzyzxd 3y ago
I find this to be a common defense in depth trap. A lot of engineering effort get threw at the wrong layer, when the problem can be much more efficiently solved on another layer. It renders the whole organization working in fear -- When you
98.
by zzyzxd 3y ago
An employment ended by the employer in less than a year because the employer "changed their plan" (according to the former employee) doesn't look like a success to me.
99.
by zzyzxd 3y ago
You may enjoy learning and using different implementations for networking, storage, DNS, containerization...from time to time. But I just learnt Kubernetes and suddenly all those implementations become interchangeable and my knowledge is tr
100.
by zzyzxd 3y ago
IMHO they are the same wins. Because behind all these, the real value is standardization. Kubernetes offers standard APIs and all the vendors fall in line with their own implementations. As a result, the software I run in my homelab for fre
101.
by zzyzxd 3y ago
Ubiquiti did that[1], didn't work out so well[2]. 1. https://www.home-assistant.io/blog/2018/04/12/ubiquiti-and-h... 2. https://www.home-assistant.io/blog/2019/05/03&#
102.
by zzyzxd 3y ago
> Self-hosting has Become Easier > Self-hosting has become more reliable Docker and Kubernetes really are the two best things happened to me in my selfhosting journey. They made billion dollar enterprise grade tech approachable in my
103.
by zzyzxd 3y ago
- You can have multiple upstream DNS servers. Don't have to always query one single vendor. - Local caching reduces upstream queries significantly, making it much harder for upstream to profile you. - Encrypt DNS traffic for incompatib
104.
by zzyzxd 3y ago
Well, the OP already realized that they often refer to the same thing, and was just curious about the fundamental differences. > Side notes on pseudo-ttys, ioctl, virtual condoles, and control sequences when the OP posted an elementary q
105.
by zzyzxd 3y ago
Most of laptops still have fans these days. They just spin less because the machine is much more powerful. Maybe reading 100MB/s is not as concerning as 30 years ago? My M1 macbook still gives me fan noise occasionally, like when I for
106.
by zzyzxd 3y ago
> This is actually an example of the opposite. How much time does she spend going inside the bank, waiting in line, and asking a person for help over the course of her life? Is it really less than the amount of time it takes to learn to
107.
by zzyzxd 3y ago
It depends. Every time I joined a new company, I dreamed that they would have a robot trained with data from their 15 documentation sites, 3 ticketing systems, and some emails and chat history. I will happily ask all kinds of stupid questi
108.
by zzyzxd 3y ago
> helm is at it's best when you need to _publicly distribute_ a complex application I would say, helm is at it's best when you need to _publicly distribute_ a complex application, AND the majority of the users on the receiving
109.
by zzyzxd 3y ago
Ubiquiti has always been pushing the remote management feature pretty hard. But recently they are also making some really nice VPN features. I hope incident like this would further change their standpoint and actually make local account acc
110.
by zzyzxd 3y ago
When I bought the UDM-SE, I too was excited thinking it as an "upgrade". Only later realized it couldn't even do BGP like their entry level gateway products.
111.
by zzyzxd 3y ago
I still like minimizing container image sizes for the security and performance benefits. It's just not a strong enough reason to choose a different linux distro for your production environment. In other words, switching to alpine is th
112.
by zzyzxd 3y ago
> but the real problem is the mandatory node draining that causes downtime/disruption. > ... > In theory, there's nothing stopping you from just updating the kubelet binary on every node. I am pretty sure Kubernetes itsel
113.
by zzyzxd 3y ago
Yup. At my last company, Kubernetes was the only place where software was not 2+ years behind upstream because of this and I appreciate it a lot. And its API deprecation policy [1] made upgrade not so painful (if upgrades frequently break y
114.
by zzyzxd 3y ago
I am not sure if managing groovy/xml job definitions in a giant yaml file (where all your Jenkins core/plugin configuration live) is easier than Jenkinsfile in repositories. Jenkins Job Builder can't configure plugins. There
115.
by zzyzxd 3y ago
> There is a plugin for everything under the sun Yeah, that's the biggest problem. Almost every thing you need for a CI system comes in the format of a plugin, because Jenkins core is too simple. You can't always say no to your
116.
by zzyzxd 3y ago
I have grinded leetcode and worked at FAANG, so I understand the common signals interviewers look for. But that's only because I spent a lot of time on FAANG style interview prep. I don't know why the interviewer had to give that
117.
by zzyzxd 3y ago
> After a candidate puts forth the O(n²), I smile politely and I wait. I am really hoping the next words that come out of their mouth are “…but the complexity of this is O(n²) so can I do better?” > Occasionally, a candidate will thin
118.
by zzyzxd 3y ago
I am not familiar with regulation in this space, but why should a domain registrar care about a URL shortener that has a pointer to another malicious domain? They can ban the destination malicious domain obviously, but censoring an URL shor
119.
by zzyzxd 3y ago
Somehow this reminds me about the famous "I can do rsync and FTP, why do I need Dropbox" comment:) MFA is basically protecting the system when one of the factors (e.g. password) is compromised. It's not about how many network
120.
by zzyzxd 3y ago
devices -> AdGuard Home -> NextDNS, And devices -> NextDNS as a fallback. I see a lot of mentions for Pi-Hole, which is more or less the same thing as AdGuard Home. I just like AdGuard Home a little bit more: - single binary go app

More ›