aarmenaa

6 ms·

1.
by aarmenaa 2mo ago
> running apps that are mandatory to participate in modern society This right here is why I no longer consider custom ROMs. My phone is a tool critical to my daily life and I need it to function correctly nearly 100% of the time. Custo
2.
by aarmenaa 8mo ago
Yeah, I am always going to interpret that sort of thing as performative. There seems to be whole corporate mythology that is absolutely sure there are a bunch of cheap, low-effort things managers can do to raise morale and get more produ
3.
by aarmenaa 1y ago
Yes. I have a family member that has had many hospital stays over the last few years, and one of the most obnoxious things is that the staff just lets everything beep. The last time we were in the emergency room the blood pressure monit
4.
by aarmenaa 1y ago
I've noticed that for some reason developers really like using logs in place of actual metrics. We use Datadog, and multiple times now I have seen devs add additional logging to an application just so they can then create a monitor th
5.
by aarmenaa 2y ago
I like most of these patterns and have used them all before, but a word of caution using UUID primary keys: performance will suffer for large tables unless you take extra care. Truly random values such as UUIDv4 result in very inefficient
6.
by aarmenaa 2y ago
Maybe some people don't remember anymore, but there was a time when Ruby was HN's favorite language. I miss those days. I kind of get why everybody leaned into Python instead, but I'm never going to be happy about it.
7.
by aarmenaa 2y ago
If you manage to avoid scope creep then sure, static YAML has advantages. But that's not usually what happens, is it? The minute you allow users to execute an outside program -- which is strictly necessary for a CI/CD system --
8.
by aarmenaa 2y ago
FTA: > The Fix: Use a full modern programming language, with its existing testing frameworks and tooling. I was reading the article and thinking myself "a lot of this is fixed if the pipeline is just a Python script." And real
9.
by aarmenaa 2y ago
True. On the other hand, if you control the clients and can guarantee their behavior then DNS load balancing is highly effective. A place I used to work had internal DNS servers with hundreds of millions of records with 60 second TTLs for
10.
by aarmenaa 2y ago
It is very difficult to misconfigure Wireguard -- there's just not that much to tune aside from MTU. We've had a 1 Gbps tunnel between AWS and OVH for years and it worked mostly fine, except for the handful of times OVH's
11.
by aarmenaa 2y ago
Sorry, I misremembered the issue. Looking at my notes the issue is they don't allow disabling their NAT-T implementation, which detects NAT scenarios and automatically forces encapsulation on port 4500/udp. The issue is that eve
12.
by aarmenaa 2y ago
We've run Wireguard tunnels that max out at 1 Gbps in AWS for years with no issues (on the AWS side, anyways). It seems like things get hairy once you want to do more than that.
13.
by aarmenaa 2y ago
I did not. I'm not terribly familiar with it, but it doesn't look like I can do general routing with it, right? My end goal is to route between two subnets.
14.
by aarmenaa 2y ago
> The retransmit-in-retransmit behavior is precisely the issue. But you're concerned about an issue I do not have. In practice retransmits are rare between my endpoints, and if they did occur poor performance is acceptable for some
15.
by aarmenaa 2y ago
I've just spent the last month learning exactly why I definitely do want a TCP over TCP VPN. The short answer is almost every cloud vendor assumes you're doing TCP, and they've taken the "unreliable" part of UDP to
16.
by aarmenaa 2y ago
The documentation is atrocious, and usually won't say things like "label your program unconfined_t" because they don't want you to do that ever. Also, tutorials -- even RedHat's -- are always some variation of &quo
17.
by aarmenaa 2y ago
I've been considering switching from Fastmail to Proton for Mail/Calendar/Contacts, but I didn't realize their bridge didn't do CalDAV or CardDAV. Also, apparently the bridge is desktop-only -- no mobile? That&#x2
18.
by aarmenaa 2y ago
I presume the uptick I've noticed of "weed is really bad, actually" articles filling my news feed and social media is a response to the imminent classification changes in the US in an attempt to sway public opinion. I can on
19.
by aarmenaa 3y ago
I've previously worked for a place that ran most of their production network "on-prem". They had a few thousand physical machines spread across 6 or so colocation sites on three continents. I enjoyed that job immensely; I&#
20.
by aarmenaa 3y ago
Chef vs Ansible was the first example that popped into my mind. I had a very love/hate relationship with Chef when I used it, but writing cookbooks was definitely one of the good parts.
21.
by aarmenaa 3y ago
Sony's network has been compromised something like a half dozen times over the last decade or so. They can't seem to secure their systems. Bad behavior aside, it's probably not a good idea to give them any sensitive informa
22.
by aarmenaa 3y ago
I'm moving towards this for my current workplace. SSH will only be allowed via VPN, only to a bastion, and that bastion will not permit agent forwarding, or really much of anything other than ProxyJump. I'm baffled that agent fo
23.
by aarmenaa 3y ago
My M2 Macbook Air has been flawless about sleep, but I set "Wake for network access" to "Never" so maybe I'm just avoiding Apple's issues there. At least it can be disabled; with Windows Modern Standby it wa
24.
by aarmenaa 3y ago
> OEMs like Dell could try using a MacBook and mimic the trackpad. You know what's crazy about the trackpad situation? You can put Windows or Linux on a real live Macbook and the trackpad gets worse . Everybody except Apple just
25.
by aarmenaa 3y ago
As bad as MacOS is the competition is generally worse. Windows and Linux laptops can't sleep/wake or power manage correctly, trackpad behavior is mediocre at best, bad HiDPI support, and so on. It's a lot easier to fix up s
26.
by aarmenaa 4y ago
Agreed. I've been using Gandi as my domain registrar of choice for years now. No complaints.
27.
by aarmenaa 5y ago
I went with this combo as well. My requirement was to sync my password database across multiple platforms (Windows, Linux, MacOS, and Android). KeePassXC works great on all the desktop OSes, and there's a couple choices for Android a
28.
by aarmenaa 5y ago
I looked into this a while back and Syncthing does not have an iOS app.
29.
by aarmenaa 5y ago
I got sucked into Satisfactory a while back. After about 100 hours in the game, I was standing at the top of a cliff looking at my creation and said to myself "I'm the worst ecological disaster this planet has ever seen." I&
30.
by aarmenaa 5y ago
We're moving towards dual DNS providers. We've been bit by DNS hosting failures too many times, and they're always painful because everything, including monitoring and control systems, end up dead or inaccessible. Not to me

More ›