gurrone

8 ms·

1.
Purpose a Wellbeing Economies Film Virtual Screening(permacultureeducationinstitute.org)
1 points by gurrone 1y ago|1 comments
2.
by gurrone 1y ago
The film is centered around the idea of establishing an alternative to the GDP as the metric to measure success of a country/society. The film follows mostly Katherine Trebeck on her journey of convincing countries to look beyond the G
3.
by gurrone 2y ago
Might be noteworthy that in recent enough k8s lifecycle.preStop.sleep.seconds is implemented https://github.com/kubernetes/enhancements/blob/master/keps/... so no longer any need to run an external
4.
by gurrone 3y ago
That is only partially true. So you spin up a GKE cluster, setup your deployment push it out via kubectl. OK your app is running but now you need access to it. The portable way is a Service Loadbalancer but it's just a TCP loadbalancer
5.
by gurrone 3y ago
... and mrsk is imperative compared to the declarative approach of swarm and k8s. Especially if you go all in on gcp and use gke + config-connector + fluxcd or argocd and all the other controller, it takes time to know and understand how su
6.
by gurrone 4y ago
That just made me look at Google Cloud again, and it's depressing to see. At least some types of load balancer do support dual-stack setups, but not if you configure them via GKE with the k8s ingress controller. If you use that one you
7.
by gurrone 4y ago
Would use OpenBSD + unbound to get NAT64 + DNS64. I'd prefer a dual-stack setup with RFC1918 IPv4 internally + a NAT44 gateway and IPv6 "just" on top. Drawback: if you find yourself to have to do a lot of firewalling it essen
8.
by gurrone 4y ago
20 years ago it was the lack of IPv6 support on the CPE holding IPv6 on the server side back, nowadays it's a lack of IPv6 at major SaaS providers causing issues. In most of the scenarios I was involved in we made sure that the CDN in
9.
by gurrone 4y ago
Same if you're lead climbing, there is a small chance (if you left a longish tail end) to clip the wrong part of the rope. If if it does not directly result in a dangerous fall you might trap yourself inside a quickdraw.
10.
Why Postfix is called Postfix and IBM secure mailer(marc.info)
80 points by gurrone 4y ago|24 comments
11.
by gurrone 5y ago
Ironically I lately had a payment service provider handing me newly generated ecdsa ssh keys where ed25519 should be supported to the best of my knowledge. And fluxcd moved from rsa to ecdsa by https://github.com/fluxcd&#x2F
12.
by gurrone 5y ago
Also an interesting option is using deb822 sources.list format and inline the key https://lists.debian.org/debian-devel/2021/11/msg00026.html Still a bit ugly depending on the point of view you take but a 3rd
13.
by gurrone 6y ago
The original video footage which belongs to the article series is frightening https://vimeo.com/136529193
14.
by gurrone 6y ago
Bitbucket has it as well. When you move from Bitbucket to Github your PR workflow in the WebUI feels utterly complicated and way harder to review. I already started to use gh a few month ago and that finally puts some sanity into working wi
15.
by gurrone 6y ago
In 2019 someone from Elastic also tried to highlight the issue and various models at the market right now in a talk https://media.ccc.de/v/froscon2019-2463-open_source_as_a_bus... My main take away was "it's
16.
by gurrone 6y ago
Well still the default mta on Debian, so it has some userbase, at least as a local mta. Might catch some by surprise, but maybe those systems should not have had direct exposure to the internet in the first place.
17.
by gurrone 6y ago
I find it amazing how often ad blocking is discussed here, and start to wonder how many peeps hanging out here on the other hand depend indirectly on ad revenue to pay bills? There are obviously the big corps Facebook and Google, but also m
18.
by gurrone 6y ago
Yes it's trade off as usual. The main benefit I see is on networks where you've a mix of good and bad traffic and you would still like to offer the service to the few good users. I see this a lot on networks hosting a lot of free
19.
by gurrone 6y ago
I guess this is very true. Our quite elaborate Cloudflare Firewall setup combining bot management scores with GeoIP and network information to decide on the action has solve rates below 0.5% on most rules. The only case where we see up to 3
20.
Crc32 Calculation Broken in Haproxy(marc.info)
1 points by gurrone 7y ago|0 comments
21.
by gurrone 7y ago
Yeah recent credential stuffing attacks I witnessed showed that blocking traffic based on AS numbers is very helpful. If your attacker is stupid User-Agent based blocks can be surprisingly effective as well. Beside of that rate-limiting, an
22.
by gurrone 7y ago
Still they place FreeBSD running on prem hardware in the ISP PoPs as a caching layer because it absolutely makes sense. https://papers.freebsd.org/2019/FOSDEM/looney-Netflix_and_Fr...
23.
by gurrone 7y ago
nginx behaves RfC conform. So if you sent it a SIGHUP it will try to respawn all workers by closing (from the server side) all open connections. The problem is that this behaviour confuses some HTTP libs/connection pooler more then oth
24.
by gurrone 8y ago
If you ever get to the southern Alps of Italy you'll find a lot more lost places barely accessible by foot, if at all. Also a lot of old mines, contraband trails and houses can be found in the area around Iselle close to the Swiss bord
25.
Starting an honest conversation about advertisements(theminimalists.com)
3 points by gurrone 8y ago|0 comments
26.
by gurrone 8y ago
I would like to add: Do they understand that it's impossible to delete anything that got commited to the block chain once a block is accepted? I mean at least if they think about a blockchain in the sense of the Bitcoin blockchain. Imp
27.
by gurrone 9y ago
I see this is working for a constantly developing project like browsers. But imagine you just stoped to work on your side project for a year. Now you come back and would just like to add a new feature. You start with updating all your libra
28.
by gurrone 9y ago
Might be interesting for some of you, Hauke from LEDE posted a few insides over at LWN: https://lwn.net/Articles/735316/ https://lwn.net/Articles/735317/ tl;dr updated packages of dnsmas
29.
by gurrone 9y ago
I would like to add that you can usually in place upgrade from OpenWRT to LEDE. Though making a config backup and a backup of the list of additional packages you installed is highly recommended. Beside of that just flash and reinstall all a
30.
by gurrone 10y ago
From my own experience lifesize voice and video quality is so awful that anything from an egineering company should be superior. Also the stability of the lifesize appliance is horrible. Often enough we've to reboot them before every m

More ›