blorgle

7 ms·

1.
by blorgle 4y ago
Brave has built in adblocking and I think Firefox Focus does as well. No ads on YouTube.
2.
by blorgle 4y ago
Jeff Snider from Alhambra Partners routinely makes this distinction: https://alhambrapartners.com/2021/10/13/perfect-time-to-revi... They have a great podcast: https://podcasts.apple.com/au&#x
3.
by blorgle 4y ago
I used to work for a startup that quickly grew to become one of the biggest Lambda users in my country (according to AWS). The entire business was serverless, not just Lambda but backend DynamoDB, APIGW, Cloudfront, etc. There was maybe 2 E
4.
by blorgle 5y ago
Yeah, seems dumb "economist" thinking. The idea that "if someone gives up and walks away, everyone behind them benefits" is a absurd on two fronts.The stall owner clearly doesn't benefit from a lost sale. Mulled win
5.
by blorgle 5y ago
You shouldn't pass unescaped/untrusted input into a subshell but your suggestion doesn't solve for every case. It protects against ";" but not path traversal with "../../../../../foo&#x
6.
by blorgle 5y ago
This issue with the backups happened to me as well. I managed to solve it by disabling iCloud Backup which deletes all the backups, then re-enabling it. I think essentially what happens is some stuff gets backed up, and even if you delete t
7.
by blorgle 5y ago
network namespaces and any reverse proxy :)
8.
by blorgle 5y ago
It's not the inflation component which is killing real personal income (ex transfer receipts)...it's the bad modelling which is used to generate current estimates that are subject to revisions. The revisions show the real picture,
9.
by blorgle 8y ago
When I had to do some pf work, googling around rendered this project which uses pf to provide network segmentation for jails and edge firewalling. Was quite useful learning reference: https://github.com/sinner-/ansible-
10.
by blorgle 9y ago
I grew up using Debian and later Ubuntu, longer than 10 years on those distros as a kid and into my career as a sysadmin/operations person. Ubuntu LTS was my main workhorse form about 10.04 through to ~14.04.3. Late 2015 I decided I wa
11.
Brad Spengler accuses KSPP of plagiarism (again)(openwall.com)
4 points by blorgle 9y ago|0 comments
12.
by blorgle 9y ago
This looks SO cool! Kind of like Erlang but at a different level, so you can model both inter-node systems (like Erlang) but also intra-node systems (like USB3 drivers)! As someone who has been thinking a lot recently about SPARK/Ada
13.
by blorgle 9y ago
Spotify should consider implementing Consul :P
14.
by blorgle 10y ago
Even though there were two patches submitted in 2013 and 2014 to switch to ChaCha: https://lists.freebsd.org/pipermail/freebsd-bugs/2013-Octobe... https://lists.freebsd.org/pipermail/freebsd-h
15.
2017 and FreeBSD is still using RC4 in arc4random(svnweb.freebsd.org)
1 points by blorgle 10y ago|1 comments
16.
by blorgle 10y ago
I was a team lead for an IBM operations team for 6 months in 2016. Aside from my first two days, I worked from home the entire duration of the role, based in Sydney. Most of my staff were in China, with handoff to the next shift in Europe (
17.
by blorgle 10y ago
I am a big fan of grsec, RBAC and sandboxing stuff. But let's be real here people! Those are good features on servers where there isn't a giant security black-hole called X, where any local exploit of the app can turn it into a co
18.
by blorgle 10y ago
> I don't think, or get the impression, that this would be used for full-system virtualization. It seems to be more targeted toward an AWS Lambda sort of usage pattern; a micro-VM that spins up to serve one API request, or to act as
19.
by blorgle 10y ago
I have been following ZeroVM since it's inception and often go to the website and stare longingly at my screen thinking of amazing things it could do (when coupled with OpenStack Swift to make "ZeroCloud"). If you look at my
20.
by blorgle 10y ago
It doesn't matter whether you use WhatsApp, Facebook Messenger "Secret Conversations" or even Signal app (or PGP or any public key based communications system)!. If you are not verifying key fingerprints out of band, then you
21.
by blorgle 10y ago
Confirm, it's just a DNS block like previous attempts by the AU Gov to block stuff. If you're on a Apple device you probably need to use VPN to specify an alternate DNS and either route your traffic through that VPN as well or jus
22.
by blorgle 10y ago
> First off, the replication thing. It is true that ES, C*, and Mongo replicate within their cluster mostly automatically. However, this is not without cost. It takes non-trivial amounts of network capacity, disk I/O, and CPU cycles
23.
by blorgle 10y ago
This doesn't really make much sense to me. If your systems support software level replication (Elasticsearch, Cassandra, MySQL, MongoDB all do) then why do you need persistent storage? You just need container scheduling anti-affinity a
24.
by blorgle 10y ago
This is some serious FUD, pretty standard for Newsweeks bitcoin reporting, which included harassment of Dorian Nakomoto. This is probably an unpopular opinion on HN, but let's face it, P2P protocols like bitcoin are relatively easy to
25.
by blorgle 10y ago
Coming from OpenStack land where Ceph is used heavily, it's well known that you shouldn't run production Ceph on VMs and that CephFS (which is like an NFS endpoint for Ceph itself) has never been as robust as the underlying Rados
26.
by blorgle 10y ago
If you're going to build serverless thing to take advantage of market hype why not at least try and build one that has data locality like ZeroVM/ZeroCloud ( http://www.zerovm.org/zerocloud.html ) and Manta ( https:&
27.
by blorgle 10y ago
Sounds like zerovm? http://www.zerovm.org/
28.
by blorgle 10y ago
OpenSSH in normal configurations will respond to all requests with an open socket regardless of whether that request is signed or not. Worst case scenario like OpenSSH Unprivileged Remote Code Execution, or Heartbleed style attack. OpenSSH
29.
by blorgle 10y ago
I personally don't think iptables or switching ports is a viable solution and always use the following policy: All the internal services should never be exposed to the internet and only accept connections from signed packets using IPse
30.
by blorgle 11y ago
My 2c is that this seems like an interesting project, but at some point lots of important Ubuntu packages (especially daemons) will be rolling out with systemd unit files and so on, it will be a lot of work to maintain BSD init scripts. It

More ›