News for hackers. Stuff that matters.

plange

Re:Kubernetes Failure Stories on Thursday February 11, 2021 @05:46PM (#26108458)
Donated by Joe Beda himself.
Re:GitHub is now free for teams on Tuesday April 14, 2020 @03:01PM (#22870044)
Gitlab states it wants to go public this year

https://about.gitlab.com/handbook/being-a-public-company/

> men. people

Otherwise i agree. Having just spent a week on-site at a client, you just notice a lot more problems (or start to understand the details of previously identified problems) that are in your capacity to fix.

Re:Oxide Computer Company: Initial boot sequence on Monday December 02, 2019 @11:43AM (#21684072)
They are starting in a garage https://blog.jessfraz.com/post/born-in-a-garage/

Read up before you make unfounded claims

Already happened. OpenNIC had to move the users from .free over to .libre
Re:Richard Stallman’s Exit Heralds a New Era in Tech on Sunday September 22, 2019 @02:53PM (#21043137)
I agree with everything you said, but this movement has been going on for a long time but and has been very bad at... hisss.. marketing.

These are complex topics and people don't want to put in the effort to understand them so this needs some top-shelf selling power. And there's no money to be made. Just freedom (as in speech).

Re:Allow 0.0.0.0/8 as a valid address range on Saturday July 13, 2019 @06:11PM (#20430482)
From the commit message:

> 0.0.0.0/32 is still prohibited, of course.

Re:Ask HN: Who is hiring? (July 2019) on Tuesday July 09, 2019 @10:29AM (#20392071)
How is this different than ticketswap?
Re:Show HN: Hydra – Open-Source OAuth2 Server on Monday July 01, 2019 @05:53PM (#20330120)
This is NIH syndrome. You're way better off following the standards, and likely implementing standard libraries to actually make use of them.
You can do both.
Worked at a startup that unfortunately went under, trying to reuse heat generated in datacenters. (saves on electricity spend on airco and saves on having to generate heat elsewhere)

Luckily some competitors still exist: https://www.cloudandheat.com/ https://www.qarnot.com/fr/home-fr/

Journalists do that all the time, it's literally part of the job. Though it is rare to see because there are repercussions.
Re:What SSH Hacking Attempts Look Like on Saturday May 05, 2018 @10:16AM (#17001880)
you should probably upgrade that kernel
Confusion prevention squad:

> That is to get to 3.3.3.3 A 3.3.0.0/16 route takes precedence over a 3.0.0.0/32 route.

I think you mean:

> That is to get to 3.3.3.3 A 3.3.0.0/16 route takes precedence over a 3.0.0.0/8 route.

a /32 is _more_ specific.

Re:Beyond CI/CD: GitLab's DevOps Vision (2017) on Monday March 19, 2018 @01:01PM (#16620119)
I had this exact same problem with the way i & my team approached our kubernetes clusters. I come from a network management background and in that space we all know of a tool called RANCID. A simple tool that logged into your switches/routers, made a dump & removed counters/oscillating data and stored it into CVS.

This predates infra-as-code.. it took years before someone wrote a clone that used Git instead of CVS

Made something stupidly similar for kubernetes: https://github.com/pieterlange/kube-backup

Thanks not only for making this, but also describing your process in a blog.

I use ngx_http_auth_request_module a lot and used haproxy a lot in the past but it's currently too limiting for my usecases - now i know it supports lua we're in a whole different ballgame.

Re:Using a Yubikey for GPG and SSH on Sunday January 14, 2018 @05:28PM (#16146873)
They still haven't licensed their code, which makes it very hard to use.
Re:On the Usability of Deploying HTTPS [pdf] on Saturday July 01, 2017 @01:42PM (#14678040)
There's some good resources out there, the problem here is that most people simply don't care or don't think it's part of their job to fix these things.

https://mozilla.github.io/server-side-tls/ssl-config-generat...

https://cipherli.st/

Re:By installing NAT, MIT stifles innovation on Monday June 26, 2017 @12:53PM (#14638234)
NAT is not security at all.
Re:AWS Security Primer on Sunday June 25, 2017 @03:20PM (#14631651)
Classic mistake. Except it's not really a mistake, but a conscious decision by whoever was in charge at the time (with the main focus probably being growing the company and not hurting current customers).

How do we fix that though? Standards seem like the only solution but they either don't move fast enough or the early birds (in this case amazon, but another prime example is microsoft) become so entrenched they set the standard themselves.

My own answer up until now has been to work in linux and open standards jobs (now kubernetes) but this requires increasing amounts of effort.

Re:Debian 9 Stretch released on Sunday June 18, 2017 @07:33AM (#14580202)
Unstable over testing? Really? Why? :-)

I've been running stretch on a lenovo carbon x1 for the last 2 years and it's been one of the first problem-free experiences running linux on the desktop (linux user for.. 18 years). Really awesome. Thanks!

> The easiest way to do that probably results in a callback to Big Daddy G every time I access anything sensitive and I'm cool with that.

Why?!

Re:Escalation of Privilege Advisory on Monday May 01, 2017 @05:51PM (#14242037)
I'd wager we haven't seen the last bug yet, if ever.
You are completely right up to the point that people are able to update their phones.
Re:HipChat security notice on Monday April 24, 2017 @05:29PM (#14188481)
Nothing in life is free.

Quality software doesn't create itself out of thin air (yet, if ever). That means someone has to make an investment.

You don't have to invest in the upkeep of the foundation of your house, but if some bugs, say termites, were to sneak in you can't blame the original builders for the donated foundation.

Please downvote for the bad analogy.

Re:HipChat security notice on Monday April 24, 2017 @05:07PM (#14188309)
Yes, possibly.
Re:HipChat security notice on Monday April 24, 2017 @05:05PM (#14188289)
Sorry, i wasn't trying to imply they shifted blame. But atlassian does bare the legal&moral burden of securing their product here.
Re:HipChat security notice on Monday April 24, 2017 @04:58PM (#14188243)
Then you would be fine with the standard boilerplate "your data is secure with us"?

I'm happy they say this.. now i'd like some sort of proof :-)

Older »