thequailman
Re:WireGuard is in net-next
on Monday December 09, 2019 @08:38AM (#21742482)
WireGuard is actually pretty awful from an IT security org perspective. There are no logs when someone connects or is trying to connect, so auditing or troubleshooting becomes extremely difficult short of packet captures. Additionally, there is no concept of two step auth, so if your key is compromised, anyone can connect without anyone knowing about the compromise.
If security companies adopt WireGuard, expect things like PulseSecure to remain as a wrapper around WireGuard. They'll at least standardize on a performant and verifiable VPN solution.
Re:Deploy-your-own-SaaS: “only yours” cloud services for everyday needs
on Saturday December 07, 2019 @09:32AM (#21730431)
How turn key do you expect the self hosted option to be? If it contains a lot of other software like SQL and Redis, would you be comfortable installing it or would you expect the option to bundle it in some kind of installer? Would you be OK with using a container, or would you want binaries?
Re:Deploy-your-own-SaaS: “only yours” cloud services for everyday needs
on Saturday December 07, 2019 @08:46AM (#21730243)
Is there really a market for a self hosted B2C SaaS options? Would it be enough of a differentiator to drive business away from competitors?
Re:When XML Beats JSON: UI Layouts
on Wednesday October 30, 2019 @09:22AM (#21397376)
While not really JSON, HyperScript[1] is much easier to grok than XML to me. It allows you to define layouts really naturally using standard JS objects. Mithril[2] specifically implements it really well.
Re:Ask HN: What do you self-host?
on Saturday October 12, 2019 @11:17PM (#21238121)
How are you doing multi tenant MinIO?
Re:Monzo: How our security team handle secrets
on Friday October 11, 2019 @07:01PM (#21229235)
To me, this represents a fatal flaw in Vault's architecture. What it does should be table stakes/standardized and operate in a distributed fashion via integration into the underlying secrets engines. I'm honestly surprised the CNCF hasn't found a project out there to challenge Vault, we desperately need alternatives.
Re:Square’s Growth Framework for Engineers and Engineering Managers
on Thursday July 25, 2019 @09:26PM (#20531537)
That's not necessarily a good thing. Sometimes ex-engineer managers are the worst kind of manager due to their own misconceptions or arrogance.
Re:Upgrading my home server
on Sunday July 21, 2019 @05:10PM (#20493697)
My setup: AMD ryzen tower with 32GB ram and multi port PCI NICs running Debian. Internet comes into the onboard NIC, and I VLAN out the NICs to downstream devices. Server itself doesn't run anything directly, instead I use nspawn "VMs" connected to the same VLANs as necessary. I rsync to a raspberry pi with a USB HDD at a relatives house.
Re:Cloudflare Network Performance Issues
on Tuesday July 02, 2019 @10:02AM (#20335124)
This seems to be impacting NPM for me.
Re:Ask HN: Freelancer? Seeking freelancer? (January 2019)
on Wednesday January 02, 2019 @11:53AM (#18807588)
SEEKING WORK - Remote Kubernetes/Google Cloud Platform/Amazon Web Services consulting. Focused on implementation and training--I help teams integrate new technologies into their existing stacks.
US-based, flexibles hours and scheduling. Long term or short term projects.
Re:The greatest musical flowchart battle in history
on Thursday July 16, 2015 @01:44PM (#9898706)
This is one of the worst advertising campaigns I've ever experienced.
Re:Handling 1M Requests per Minute with Go
on Tuesday July 07, 2015 @12:41PM (#9846512)
This is terrible advice. Golang may have a flavor-of-the-week status in some people's minds, but it's a language that really deserves more credit. It is really easy to program and learn, and it does a lot of stuff other languages rely on third party programs for. With each release, nagging issues (namely around garbage collection) are getting resolved, but it's more than production ready. To ignore Golang right now would be akin to ignoring Java back in the early 2000s in my opinion.