lsofzz

6 ms·

61.
by lsofzz 6y ago
I looked around but didn't find it. Thanks a lot.
62.
by lsofzz 6y ago
> Especially when ARM Graviton 2's vCPU on AWS are actual CPU core while Intel / AMD instances are CPU thread. Thank you for that information. Is there a reference that documents this somewhere?
63.
by lsofzz 6y ago
> What would you think about sandboxing all media related components? You have to be very _specific_ when you say _sandboxing_. Since, the attack surface is mostly at the decoding layer - there are at least few dozen ways to sandbox the
64.
by lsofzz 6y ago
> Follow the blog: https://codecs.multimedia.cx/ but there's no source code release yet AFAIK. Nice; though the documentation/blog is quite hard to follow :)
65.
by lsofzz 6y ago
> No need to assume anything. The article starts out: Aha. Reading now.
66.
by lsofzz 6y ago
For any tool authors, jepsen is invaluable piece <3. A lot of software in the messaging/storage space has undergone jepsen test and I for one am grateful to Jepsen's author Kyle Kingsbury for his incredible work in setting thei
67.
by lsofzz 6y ago
> A foolish consistency is the hobgoblin of little minds . . . Didn't quite get the connection here. Care to elaborate? :)
68.
by lsofzz 6y ago
I assume this is a play on the word "firecracker"? :D https://github.com/firecracker-microvm/firecracker
69.
by lsofzz 6y ago
> Doesn't this apply to really any sort of isolated environment? What's wrong with chroot vs a vm? If you are implying _PoC GTFO_, then definitely I do not have anything to suggest today that either is secure but I would rather
70.
by lsofzz 6y ago
> Chroot vulnerabilities have been discovered and fixed over time, as any security issue in an operating system is. It's not accurate to say that they are insecure in a blanket fashion especially these days. My opinion is that we sh
71.
by lsofzz 6y ago
Nice. Would it not be possible to source data for other countries?
72.
by lsofzz 6y ago
Oh bummer
73.
by lsofzz 6y ago
> I'm not your son, nor am I talking about what DevOps "is about", but about what is became in practice, which you would have understood hadn't you rushed to reply in the most condescending tone you managed to invoke.
74.
by lsofzz 6y ago
It's hard to know exactly how bloated SSL/TLS libraries have become without actually taking the time to research them but some of the folks behind `LibreSSL` seem to know crypto well enough.
75.
by lsofzz 6y ago
> Would a company like Amazon not have full time lawyers retained on salary instead of relying on outside counsel with that conflict? That was a good laugh for a bit. Thanks. I read the first few words of yours as: Would a company li
76.
by lsofzz 6y ago
> Nomad has been brought forth in a lot of comments, and it has a feature that nobody brought up yet, I think. It's multi-platform. It currently has official task runners for Docker, Isolated/Raw Fork/Exec, Java, and Qemu.
77.
by lsofzz 6y ago
> I tried using Nomad once after being a little worn out by Kubernetes' complexity. For some reason, the Nomad abstractions didn't click on the first couple attempts. In comparison, Kubernetes' abstractions mapped 1:1 to m
78.
by lsofzz 6y ago
> I think this is a big failing of the DevOps movement as a whole (at least what DevOps became in practice — devs doing ops) which results in things like passwordless mongodb exposed to the internet... Hardly. If anything at all, it tell
79.
by lsofzz 6y ago
> Thank you. I use most of this, I've been using it for years and I just don't talk about it because it's hard to argue when people just want to force an idea that k8s is "really the best way of doing things". I
80.
by lsofzz 6y ago
> So if you'll indulge me -- this list is exactly why a system like Kubernetes is valuable and why I think personally that it contains a lot of essential complexity. Yes. I would agree to your statement precisely as an answer to @
81.
by lsofzz 6y ago
> No. We can fix things one at a time. Master/slave doesn't upset me but it does upset some people. Ok, if they're willing to put in the effort to update the code and all the docs then I'm willing to adopt the new ter
82.
by lsofzz 6y ago
> Good thing I don't have a master's degree. Hah. Exactly.
83.
by lsofzz 6y ago
I'd also say `man` from the unix manual <- yep, would you consider that to be the elephant in the room? If I had to hazard a guess, we are all a bunch of technologists/engineers/tinkerers who deal with technical stuffs; no
84.
by lsofzz 6y ago
> That's the beauty of identity politics. No matter what you say, you are always going to encroach on someone's identity. > Whoever promoted it, was a machiavellian genius. People can't rebel if they keep each other in
85.
by lsofzz 6y ago
> Unix is seriously uncool with young people at the moment. I intend to turn that around and articles like this offer good material. I offer you my well wishes on that.
86.
by lsofzz 6y ago
I think this reply needs more up votes! ;)
87.
by lsofzz 6y ago
Why not a littel bit more? ;) set -euf -o pipefail
88.
by lsofzz 6y ago
> I strongly disagree although, just like you, I have no evidence to support my claim Haha. Fair enough!
89.
by lsofzz 6y ago
> This is where you need to use awk. I think need is a strong statement in this context. echo $(( 1 + $(grep 'cpu cores' /proc/cpuinfo | head -1 | awk -F ':' '{print $2}') )) Choosing she
90.
by lsofzz 6y ago
> - Bash is awful (should be replaced with Python, and there are so many Python-based shells now that reify that opinion) You know that no one uses Bash these days right? Fish shell, Zsh are the much newer and friendlier shells these day

More ›