cimnine

Via https://lobste.rs/s/ipt1em/github_actions_needs_oidc_audienc...

Takeaway from this:

If you operate your own DNS, choose an NS within the same TLD als the domain you resolve: `example.COM` -> `ns.example.COM`, `example.NET` -> `ns.example.NET`, `example.ORG` -> `ns.example.ORG`

It'd be great if a CDN like Cloudflare handed out matching NS records for their most popular TLDs. This would probably speed up DNS resolution time (a little).

So e.g. `*.ns.cloudflare.com` for COM, `*.ns.cloudflare.net` for NET, `*.ns.cloudflare.org` for ORG, etc.

At least for Cloudflare, I believe they have these domains (`cloudflare.TLD`) for most of the important TLDs anyway. And the actual resolvers could be the same servers/IPs, afaict. It's mostly _just_ the (glue) records.

(I know, nothing is _just_ done on a CDN scale. Like, they'd need to also add the logic for handing out the correct NS names for the respective TLDs, which NS.TLD to fall back on for TLDs that they don't operate their own NS in, how to handle this for their bring-your-own-* customers, etc.)

I'm thinking similarly, but not via PCIe, but via USB: There are plenty of USB->VGA and USB->HDMI adapters that contain a dumb graphics card. So, embedd one of these and grab the video signal internally.

Thereby, plugging in just a single USB cable would deliver the power needed, keyboard, video and mouse. And bonus for an emulated USB-Stick/DVD drive.

What I don't know if these USB video cards are initialized during early boot and usable during the UEFI/BIOS phase. Is that why they grab the HDMI?

The OS of PS4 and PS5 is apparently based on FreeBSD. Netflix uses FreeBSD for its CDN servers. pfSense and OPNsense are popular firewalls that are based on FreeBSD.

See also https://en.wikipedia.org/wiki/List_of_products_based_on_Free...

Talk to https://www.codey.ch/.

I've written a short blogpost about how to link SSH Keys to Git identities: https://brainfood.xyz/post/20241030-use-a-specific-ssh-key-i...

I still prefer ifconfig.co, which is open-source (BSD-3), supports IPv6 as well and has a nice JSON response as well.

I think it's good advice to not pass secrets through environment variables. Env vars leak a lot. Think php_info, Sentry, java vm dumps, etc. Also, env vars leak into sub-processes if you don't pay extra attention. Instead, read secrets from a vault or from a file-system from _inside_ your process. See also [1] (or [2] which discusses [1]). Dotnet does this pretty good with user secrets [3].

[1] https://blog.diogomonica.com/2017/03/27/why-you-shouldnt-use... [2] https://security.stackexchange.com/questions/197784/is-it-un... [3] https://learn.microsoft.com/en-us/aspnet/core/security/app-s...

Nope.

Yes, and I like to combine two established concepts instead of rolling my own: URI and UUIDv7. So my IDs become `uri:customer_shortname:product_or_project_name:entity_type:uuid`. An example ID could be `uri:cust:super_duper_erp:invoice:018fe87b-b1fc-7b6f-a09c-74b9ef7f4196`. It's even possible to cascade such IDs, for example: `uri:cust:super_duper_erp:invoice:018fe87b-b1fc-7b6f-a09c-74b9ef7f4196:line_item:018fe882-43b2-77bb-8050-a1139303bb65`.

It's immediately clear, when I see an ID in a log somewhere or when a customer sends me an ID to debug something, to which customer, system and entity such an ID belongs.

UUIDv7 is monotonic, so it's nice for the database. Those IDs are not as 'human-readable' for the average Joe, but for me as an engineer it's a bliss.

Often I also encode ID's I retrieve from external systems this way: `uri:3rd_party_vendor:system_name:entity_type:external_id` (e.g. `uri:ycombinator:hackernews:item:40580549:comment:40582365` might refer to this comment).

> And another one! I actually used this regularly on my PC to remember places I'd gone to on trips, or back in time.

Me too. High-noon to engage Google Takeout [1] – so that I at least have a copy of all that data.

Off-topic: TIL, that Google Takeout can do regular backups automatically for up to one year when you link it to some cloud storage account (GDrive, Dropbox, One Drive, Box).

[1] https://takeout.google.com

So, this begs the question when we'll see ML put in place to avoid AdBlocker detection. Or ads as we know them just disappear from the web and are replaced with other kinds of ML-enabled ads. I imagine deep-fake models used for interchangeable product placement in videos or pictures or so.

Thanks. I wasn't aware this was submitted recently already.