eeZi

6 ms·

1.
by eeZi 9y ago
This is precisely why we need projects like Grsecurity.
2.
by eeZi 9y ago
German equivalent, must read if you're a climber and know the language: http://www.bergundsteigen.at/ Austria, Switzerland and Germany have a very long rock climbing history (unsurprisingly), and their respective climb
3.
by eeZi 9y ago
Different story, then.
4.
by eeZi 9y ago
But YubiKeys are built on a hardened hardware security module instead of a general purpose phone operating system with full network connectivity and a huge attack surface. Having a UI does not increase security in a meaningful way. The atta
5.
by eeZi 9y ago
You don't need either Kubernetes or OpenShift if all you need is 2-3 instances. Just write an Ansible playbook. That being said, I do run a few 2-3 node OpenShift clusters and the additional complexity was well worth it.
6.
by eeZi 9y ago
For anyone interested in Kubernetes: Red Hat's OpenShift is worth taking a look at. It's upstream Kubernetes + a PaaS framework built in top of it. It takes care of role-based access control, has a secured Docker registry (prevent
7.
by eeZi 9y ago
It resulted in random, hard to reproduce ENOSPC errors down the line without either data or metadata being anywhere close to full. Neither us nor the btrfs developers that took a look at it were able to figure out what exactly went wrong,
8.
by eeZi 9y ago
Streaming means parsing a bunch of untrusted data. What if ffmpeg/gstreamer/Clementine has a security issue? It happened before. With a Chrome App, it sits in a (really strong) sandbox and would need to escape the sandbox first. W
9.
by eeZi 9y ago
Red Hat is trying to address this with their Debezium project: http://debezium.io/
10.
by eeZi 9y ago
JetBrains DataGrip comes close and supports many different SQL dialects (it's also comes with IntelliJ as the SQL plugin).
11.
by eeZi 9y ago
You can do that with regular web apps - just create a desktop shortcut in the Chrome menu ("More").
12.
by eeZi 9y ago
Signal Desktop and Cleanflight are open source. And sometimes, you have no choice - there's no FOSS alternative to TeamViewer, and thanks to it running inside Chrome, I no longer have to run a Windows VM. The web based SSH client is pu
13.
by eeZi 9y ago
Hah, that's a funny thread. I've heard that Google is using Chromebooks for engineers with production access. Makes a lot of sense sense since Chrome OS is much easier to secure than a normal Linux distribution.
14.
by eeZi 9y ago
But that's only Chrome OS. Chrome Apps were great because they worked on all (desktop) platforms.
15.
by eeZi 9y ago
Agreed, the SSH client is a bit of an outlier since you have that natively. I still listed it for completeness, I do use it, after all.
16.
by eeZi 9y ago
Chrome OS has no native SSH client, but Google published a NaCL based SSH client: https://chrome.google.com/webstore/detail/secure-shell/pnhec... It's useful outside of Chrome OS if you have a security p
17.
by eeZi 9y ago
I'm running btrfs in production with a very heavy workload with millions of files and all sorts of different access patterns. Regular deduplication runs, too. We're probably one of the largest btrfs users. Had a LOT of unplanned d
18.
by eeZi 9y ago
This one I'm fine with since WebAssembly is a worthy replacement, but I'm still annoyed at Google discontinuing Chrome Apps. Some examples of specialized apps I use all the time that would require a native app otherwise: - Signal
19.
by eeZi 10y ago
Can anyone recommend this? https://github.com/bitly/oauth2_proxy
20.
by eeZi 10y ago
Now that's it's open source, it should be easy to fix it.
21.
by eeZi 10y ago
Facebook in Germany doesn't have those alt tags.
22.
by eeZi 10y ago
Google Trends chart: https://www.google.com/trends/explore?date=all&q=python%203
23.
by eeZi 10y ago
Can confirm. Ported our internal stuff and it was much easier and faster than expected.
24.
by eeZi 10y ago
Lots of incentives for us: - clean Unicode support which prevents mistakes which used to bite us in production - native async syntax, compatible with Tornado - asynchronous generators (yield from a coroutine!) - pathlib and os.scandir - typ
25.
by eeZi 10y ago
For Ansible, it's important to differentiate between the master and client side code. Client side code has to run on everything starting with CentOS 6, so they have to stick with Python 2 for a long time. For the Ansible master (which
26.
by eeZi 10y ago
Same here. Haven't had a single Unicode bug in production since we switched to Python 3. Also, chained exceptions (extremely valuable in walled-off production environment). Type annotations actually work and have prevented a number of
27.
by eeZi 10y ago
All major distributions have completed their switch to Python 3 or ship it already. This is Canonical's stance: > All Ubuntu/Canonical driven development should be targeting Python 3 right now, and all new code should be Python
28.
by eeZi 10y ago
> It's also the case that Debian accepts binary packages built on the developer's personal machine Pretty common - many community distros do. Arch Linux too. Worrying for obvious reasons. At least they're putting in an act
29.
by eeZi 10y ago
> Irrelevant - it's way beyond repair. Doesn't mean we shouldn't try, since we're not getting rid of if anytime soon. Google's Certificate Transparency is a great approach.
30.
by eeZi 10y ago
WhatsApp messed it up particularly bad, but it's not the only example. The point is that there was no private access to the SD card. If you had large files that did not fit on the internal storage, using the shared external storage w

More ›