CountVonGuetzli

5 ms·

1.
Ask HN: How are you stopping supply chain attacks via compromised dev keys?
5 points by CountVonGuetzli 5mo ago|0 comments
2.
by CountVonGuetzli 6mo ago
I didn't know OnShape had such a feature. Will check it out! What you describe is one of the main reasons why I use Rhino3D. It can be scripted via the Grasshopper plugin, which integrates really nicely with Rhino and its primitives. S
3.
by CountVonGuetzli 7mo ago
Wat, how have I never heard of this! Very cool. Do you have any insights you could share on your own setup, what worked well and what didn't? Are you just storing information in plaintext, or do you use some visualization libraries to
4.
by CountVonGuetzli 8mo ago
I recently used the AI feature in n8n to write a code node to parse some data, which worked really well. Feels more like LLMs are enhancing low-code solutions. Also, I see great value in not having to take care of the runtime itself. Sure,
5.
by CountVonGuetzli 10mo ago
Arial is licensed font, distributed by monotype.
6.
by CountVonGuetzli 10mo ago
You mean rack mounts for humans?
7.
by CountVonGuetzli 11mo ago
For us, introducing a simple device and location validation system (track which users log in with which devices and from where), combined with breached password detection from HIBP, which both can trigger an email validation code flow, prac
8.
by CountVonGuetzli 2y ago
Thats what we did as well, via wolfram alpha. I.e. we were too lazy to look up everything ourselves and just asked it straight up how long of a roundtrip it would be between two destinations via fiber. We checked one result and it was spot
9.
by CountVonGuetzli 2y ago
It would be really cool if it didn't just show the ping, but how much worse it is compared to the theoretical optimum (speed of light in fiber optic medium, which I believe is about 30% slower than c). I raise this because I've be
10.
by CountVonGuetzli 2y ago
I recommend this book as well (absolute beginner here). Learned to see the world a bit differently because of it.
11.
by CountVonGuetzli 2y ago
Also, if for example the SaaS you’re running sends a lot of system emails that really shouldn’t end up in spam filters, you can’t afford to let things like marketing campaigns negatively influence your domain’s spam score. Easier and safer
12.
by CountVonGuetzli 3y ago
After doing the first-time CTO thing three years ago in an established company with over 100 engineers, I think these two are the minimum required reading: An Elegant Puzzle: Systems of Eng Management ( https://lethain.com/el
13.
by CountVonGuetzli 3y ago
Having seen the parts tracking system of a european helicopter manufacturer: They had the most insanely detailed parts tracking system (including certa for every part and sub-assembly and supplier) I have ever seen. I would be surprised if
14.
by CountVonGuetzli 3y ago
Interesting that this is enough evidence to the contrary for you. To me that looks more like what they say, not what they do, and is a well crafted smoke screen. They still seem to be acting as if they’re purely interested in extracting ma
15.
by CountVonGuetzli 3y ago
Yes, Milton Friedman, 1970, New York Times: https://www.nytimes.com/1970/09/13/archives/a-friedman-doctr... Wikipedia has a summary on the idea behind the essay https://en.wikipedia.org/w
16.
by CountVonGuetzli 3y ago
Not sure where you’re getting your information from, but I feel like the opposite is true. If you want to work remotely, they even have a remote working contract specifically designed for that case. Maybe what looks archaic to you is that u
17.
by CountVonGuetzli 3y ago
I’ve had similar issues and recently made a big step forward by doing one thing: I publish my posts but don’t list them and block search engines from scraping /posts via robots.txt. It’s not a safe way to hide content by any means, but
18.
by CountVonGuetzli 6y ago
Hmm no, sorry. We only ever had a small number of realms. I would be cautious and test it with the number of realms you intend to use it with. We used locust ( https://locust.io/ ) successfully to do loadtesting on a few of k
19.
by CountVonGuetzli 6y ago
Yeah, no issues here either in containers. We did have to make some custom tooling at the time to get all configuration files under source control though
20.
by CountVonGuetzli 6y ago
Not really. But we also haven't had any issues that required taking a closer look. We're used to hosting JVM stuff since our devs produce a lot of scala code. I'm looking forward to them switching to Quarkus, which will make
21.
by CountVonGuetzli 6y ago
No issues with reliability. We did some load testing and noticed that the first thing to become a bottleneck was the database, after running 4k concurrent logins or so. I suspect we'd have to introduce propper postgres connection pooli
22.
by CountVonGuetzli 6y ago
TL;DR: We use Keycloak with millions of users and it works fine. You don't have to shell out for outsourced auth if you would consider a self-hosted solution. You also don't need a team to run it. I work for a large organization t
23.
by CountVonGuetzli 6y ago
I learned the hard way that other companies than Google also contribute to the blacklist. A site I was working on got falsely flagged by netcraft.com (which they admitted after I spent a week explaining it to them). They do some kind of act
24.
by CountVonGuetzli 7y ago
Can't wait to not have to faff about with configuring strongswan/ipsec for roadwarrior configurations anymore. Setting up WireGuard server and clients on notebooks and phones was a breeze. Really a huge leap for me in terms of usa
25.
by CountVonGuetzli 7y ago
First time in a long time I actually enjoyed using front-end tech. Elm sparks joy, similar to Ruby/Rails did back in the day <3.
26.
by CountVonGuetzli 8y ago
Apply here. Pretty sure they pay better and their office is nearby (Valbonne). If they ask, tell them yo're making 6k/month now: https://careers.ricardo.ch/jobs/151179-ingenieur-front-end-s...