News for hackers. Stuff that matters.

gbrayut

Re:Mass phishing emails pretending to be Y Combinator right now on Tuesday September 23, 2025 @08:54PM (#45354886)
Worth reporting the phishing domain(s) so they can potentially be red-banned https://safebrowsing.google.com/safebrowsing/report_phish/
There are a lot of other ways to bypass the Istio sidecar proxy, which is not designed to be a general egress boundary/firewall. See https://blog.howardjohn.info/posts/bypass-egress/
I connected an ESP8266 via serial protocol to the extra programming pins on a QMK based keypad (https://www.crowdsupply.com/anavi-technology/anavi-macro-pad...) so that it can have layers that directly trigger actions via Home Assistant API.

Also use the Bee Motion ESP32-S3 (https://www.crowdsupply.com/smart-bee-designs/bee-motion-s3) for their PIR motion sensing and running other sensors around the house.

And I have an old Wemos D1 mini connected to my Arduino based smart garage door that helps automate things like lock/unlocking the front door or triggering other presence based actions.

I highly recommend the https://dailytechnewsshow.com/ podcast by Tom Merritt which usually runs 30 minutes episodes, or their 5 minute Daily Tech Headlines version.
Re:Linode Managed Databases on Tuesday May 24, 2022 @09:56PM (#31499782)
Also more details in a solocon video (28 minutes) https://www.youtube.com/watch?v=jefxqvCWU6E&list=PLBOtlFtGzn...
Curious on your thoughts about the "Sovereign Cloud" features discussed at https://cloud.google.com/blog/products/identity-security/new...

Would having a 3rd party host the services in the EU meet your requirements? Or having data residency restrictions with strict key management, EU based support, and access transparency/approvals?

IMO Google is also taking this seriously, but I am genuinely curious if any off the above would meet your requirements.

Re:Strange domain names that developers bought on Thursday August 12, 2021 @02:18AM (#28152624)
Many TLDs don't count (letter dash letter) as a premium/reserved domain like they do for other dictionary words or 2-3 character domains. Looks like v-s.space is claimed but for example z-s was just $9.99 a year

I used that trick when .dev was launched and snagged a-z.dev for all my future domain name needs

Curious how this compares with something like Apache Airflow?

https://airflow.apache.org/docs/apache-airflow/stable/concep...

Re:Advice on self-directed IRAs and SAFEs on Friday April 23, 2021 @01:50AM (#26911365)
Strata was the custodian for LendingClub IRA accounts, but sounds like they have had some sort of falling out recently. Got an email this month about switching to https://www.altoira.com/ and then another from Strata trying to get me to stay. Now Stratas charging $100 fee for any accounts that didn't renew earlier this year.

I've only ever used their site when moving money in or out of the IRA but it's a pretty terrible UI and they don't seem to be very responsive. I've had a withdraw pending for over 4 weeks now trying to move money to another custodian.

You are probably better off finding a different approach.

Reminds me of a Windows installer I working on many years ago, that seemed to take a long time using CPU but otherwise not doing any real work. Turned out the SDK we were using tried to update the progress bar every kilobyte or something like that, and our near-gigabyte sized packages filled the message loop with a bunch of pointless updates (30.001% -> 30.002% but both displayed as 30%).

Once the vendor fixed the issue it shaved a few minutes off the install time that had previously just been a UI glitch (processing the large backlog of progress bar update messages).

Re:Bazel Removed from Kubernetes on Monday March 01, 2021 @07:26PM (#26310407)
https://twitter.com/BenTheElder/status/1366478663571529728

"This should not be taken terribly deeply as a judgement of bazel. Our other build (make) is full of issues, it's just impractical for us to continue to maintain both & for our usage & as voiced by our contributors we opted to stick to the build we've been releasing with for ages"

Re:Migrating a 40TB SQL Server Database on Thursday July 30, 2020 @01:15PM (#24000626)
Case in point, one of my favorite system architecture/design blog posts:

Providence: Failure Is Always An Option

https://jasonpunyon.com/blog/2015/02/12/providence-failure-i...

Which has one of my favorite quotes about scope creep:

Kevin and I have essentially become allergic to big projects. We attempt to practice “What can get done by Friday?” driven development. Keeping things small precludes a whole class of errors like “We need a new datastore”, ‘cause that ain’t gettin’ done by Friday. It’s hard to sink a week on something you weren’t supposed to be working on when all you have is a week.

Re:How to track costs in multi-tenant Amazon EKS clusters on Tuesday July 28, 2020 @08:29PM (#23982204)
Is there any way to setup a sharding solution for Prometheus? Like instances per AZ or that only scrape a certain set of nodes? On our larger clusters we had issues even with the optimized Prometheus instance in kubecost, and it's starting to look like metrics collection/processing may be a big driving force on our cluster scaling designs.
Re:SSH hacks – a little sanity for remote workers on Wednesday April 29, 2020 @09:59PM (#23026730)
One of my most used commands is Ctrl+d for closing the input stream and causing a remote or local shell session to exit

https://unix.stackexchange.com/q/110240/8692

Nice. Another option for tech remote jobs is https://stackoverflow.com/jobs/remote
Re:Kubernetes 1.18 on Wednesday March 25, 2020 @07:14PM (#22689324)
Kubernetes Deconstructed video https://vimeo.com/245778144/4d1d597c5e
Re:Reddit was down for over two hours on Thursday September 19, 2019 @12:15AM (#21013239)
Re:Cloudflare outage caused by bad software deploy on Tuesday July 02, 2019 @11:25PM (#20341359)
Probably something mundane like ^[\s\u200c]+|[\s\u200c]+$

That's the one that took down Stack Overflow a few years ago https://stackstatus.net/post/147710624694/outage-postmortem-...

Re:Google Cloud Networking Incident Postmortem on Friday June 07, 2019 @02:25AM (#20122119)
Anyone know of other public resources like the one from PagerDuty? The SRE book and workbook at https://landing.google.com/sre/books/ have some details, but curious if there are others people would recommend.
My last job used https://github.com/opserver/Opserver which had a pagerduty tab. Nice being able to see who was the on call and have instructions for when/how to page out.

It also has a "take on call for the next hour" button, which (for logged in users that matched a pagerduty user) would create an override for the next hour. Really handy when you are starting a change window and don't want to risk waking up the on call.

Neat! We use a similar Go based proxy for our tier 1 ingress and routing at Walmart Labs (global eCommerce), with Lua/Go plugins for edge/serverless style backends. It is a custom/proprietary codebase but the tech stack has served us very well. Great to see open source projects with similar use cases. I may have to play with this for use in some personal/hobby projects.

Older »