zzyzxd

98 ms·

121.
by zzyzxd 3y ago
I don't know how many people believe the two words are interchangeable (vs balancing factors), but one of your worst security nightmares could be when your employees fight against your security team. Making things inconvenience is one
122.
by zzyzxd 3y ago
> If they had stuck with the old model, a breach would have no chance of impacting users, but now, we're left scratching our heads and speculating about the true extent of the damage. Well, since 1P clients are not open sourced, you
123.
by zzyzxd 3y ago
Not a maintainer, but in my own opinion: - `Application` is a special CRD. You can define one application to control namespaced resources in more than one namespace, cluster-wide resources, or even resources in another cluster if the contro
124.
by zzyzxd 3y ago
Or disconnect the printer completely, attach a rpi to the printer's USB port, and install CUPS. Network level security is already difficult enough even for professionals, it's nearly impossible to really "secure" consume
125.
by zzyzxd 3y ago
I find it's a bit annoying that almost all their images assume root access by default. Their init script does a bunch of things as root and only switch to a non-root user at the very last step before starting the main process if some m
126.
by zzyzxd 3y ago
Going to the office is not that bad for me, _most_ of the time. - But once or twice every month, I forget to bring something I need to the office (phone, earphone, water bottle, keys...etc) and that makes that day suck. - Sometimes it rains
127.
by zzyzxd 3y ago
Well, as long as the exchange is not going down right now, there's still money to make and they will just keep trading. However, there's no reason to keep your assets on exchange if you are not actively trading them. I know many t
128.
by zzyzxd 3y ago
Here we go again, a lot of comments saying k8s and gitops are too complex. IMHO, your ops team can accidentally delete your data one way or another regardless. Today it was moving files to a wrong directory in git, yesterday it could have b
129.
by zzyzxd 4y ago
Because 1. My homelab has a lot of crappy hardware with zero enterprise support. And when a server fails, I need to be able to easily swap it out. And I don't want to make it a full time job for myself to maintain it. 2. I did knock so
130.
by zzyzxd 4y ago
Yup, when I said that I was half way there, I was trying to use ansible to deploy a nginx systemd unit on every node to load-balancing requests to API servers. Many other distributions can do this with a static pod managed by local kubelet,
131.
by zzyzxd 4y ago
Yes, I did. Unfortunately, that playbook only supports single master.
132.
by zzyzxd 4y ago
I tried k3s several times in the past few years but I still can't use it in my homelab: 1. the project claims to be production ready and support HA control plane setup, but there's no solution for API load balancing out of box. Ho
133.
by zzyzxd 4y ago
Not sure if it's just me, but I have not used a RSS reader as a serious reading software for years. Instead, I only use a RSS reader software to quickly go through all the unread items and send interesting articles to a read-later or b
134.
by zzyzxd 4y ago
I will be very sad on the day when Google decides to kill Waze. It is the only Google product I use and I will never abandon it because of one personal reason: it allows users to record custom voice for directions. My wife recorded her voic
135.
by zzyzxd 4y ago
"some random stranger in a remote datacenter going through some spinning disks" is too hard to correlate for average people. This is an invisible threat to them. If I give the person in the example a name and face, e.g. "Offi
136.
by zzyzxd 4y ago
You would be surprised how common this is. Lots of startup companies also love to brag about how many xooglers they have recruited. I once interviewed at a startup and the CTO introduced himself as "xoogler". After the interview I
137.
by zzyzxd 4y ago
> Cloudflare is not a public service Do we consider stuff like DNS, BGP to be public service? I mean, Cloudflare can affect everyone who uses Internet.
138.
by zzyzxd 4y ago
To me, and some tech friends I know who actually understand the implementation, the CSAM debacle is more about control and freedom, and not about privacy. I am not paranoid enough to worry about hash collision, so I am not worried about one
139.
by zzyzxd 4y ago
> You would never do so for normal internet activity like Google searches, Twitter or Facebook Websites from Google search result are verified by my browser via HTTPS certs. On twitter or facebook, users usually trust the centralized aut
140.
by zzyzxd 4y ago
I know there are community maintained container images. "They" don't have an official one though. In fact I run it in a container as well, but I configures it to talk to an external mongodb cluster. I need it to be an externa
141.
by zzyzxd 4y ago
I am not 100% happy with it but it is the best prosumer option I can find without making managing home network a full time job for myself. Security wise it is not great, but I don't think it is worse than other consumer products (tplin
142.
by zzyzxd 4y ago
> but once you buy into managed K8s you have a non agnostic management set That's not true. k8s has cloud agnostic API specs, and it does not care about implementations. Whether to use vendor specific implementations is totally up t
143.
by zzyzxd 4y ago
Out of curiosity, I took a look at the author's commits on github[1] just to see how bad a person's commits can be when they think "Commit Messages Don't Matter" ... Surprisingly, most of his commits were not bad at
144.
by zzyzxd 4y ago
I think a lot of measures mentioned in the article are not good recommendations, not only many are way harder than "low" or "low-medium" difficulty, IMHO, some recommendations have serious security tradeoffs that may not
145.
by zzyzxd 4y ago
Zendesk has been like this for me since forever. Every time I need to use it to talk to a vendor, I roll my eyes for 2 seconds and open my backup browser which does not have 3rd party cookie restriction.
146.
by zzyzxd 4y ago
> Using the word “private” as “anything that isn’t on a cloud” is a low bar, in my opinion. I agree it's not a high bar, and I appreciate that some developers have higher security standard than others. But I think "anything tha
147.
by zzyzxd 4y ago
I was purchasing a car at local Honda dealership and the salesman refused to believe that my email address was honda@mydomain.com. He just insisted that I should tell him my "real" email address. If it happens today, I would just
148.
by zzyzxd 4y ago
Chase is the only US bank I know that provides a proper API for plaid to connect to (plaid redirects you to chase.com for login, you acknowledge, and then give plaid an oauth token for read-only access). I don't have an impression that
149.
by zzyzxd 4y ago
I am not sure why people bring up the homebrew author's case to justify the argument that "leetcode question = bad intervew question". I mean, I hate many of those leetcode puzzles, but "inverting a binary tree" is
150.
by zzyzxd 4y ago
Comparing to: 1. search for a package that does X 2. scan the search result and find the package that really does X 3. learn to use the package's API 4. import the package in the code 5. use it Isn't it much easier to just copy-pa

More ›