> running apps that are mandatory to participate in modern society This right here is why I no longer consider custom ROMs. My phone is a tool critical to my daily life and I need it to function correctly nearly 100% of…
Yeah, I am always going to interpret that sort of thing as performative. There seems to be whole corporate mythology that is absolutely sure there are a bunch of cheap, low-effort things managers can do to raise morale…
Yes. I have a family member that has had many hospital stays over the last few years, and one of the most obnoxious things is that the staff just lets everything beep. The last time we were in the emergency room the…
I've noticed that for some reason developers really like using logs in place of actual metrics. We use Datadog, and multiple times now I have seen devs add additional logging to an application just so they can then…
I like most of these patterns and have used them all before, but a word of caution using UUID primary keys: performance will suffer for large tables unless you take extra care. Truly random values such as UUIDv4 result…
Maybe some people don't remember anymore, but there was a time when Ruby was HN's favorite language. I miss those days. I kind of get why everybody leaned into Python instead, but I'm never going to be happy about it.
If you manage to avoid scope creep then sure, static YAML has advantages. But that's not usually what happens, is it? The minute you allow users to execute an outside program -- which is strictly necessary for a CI/CD…
FTA: > The Fix: Use a full modern programming language, with its existing testing frameworks and tooling. I was reading the article and thinking myself "a lot of this is fixed if the pipeline is just a Python script."…
True. On the other hand, if you control the clients and can guarantee their behavior then DNS load balancing is highly effective. A place I used to work had internal DNS servers with hundreds of millions of records with…
It is very difficult to misconfigure Wireguard -- there's just not that much to tune aside from MTU. We've had a 1 Gbps tunnel between AWS and OVH for years and it worked mostly fine, except for the handful of times…
We've run Wireguard tunnels that max out at 1 Gbps in AWS for years with no issues (on the AWS side, anyways). It seems like things get hairy once you want to do more than that.
I did not. I'm not terribly familiar with it, but it doesn't look like I can do general routing with it, right? My end goal is to route between two subnets.
> The retransmit-in-retransmit behavior is precisely the issue. But you're concerned about an issue I do not have. In practice retransmits are rare between my endpoints, and if they did occur poor performance is…
I've just spent the last month learning exactly why I definitely do want a TCP over TCP VPN. The short answer is almost every cloud vendor assumes you're doing TCP, and they've taken the "unreliable" part of UDP to…
The documentation is atrocious, and usually won't say things like "label your program unconfined_t" because they don't want you to do that ever. Also, tutorials -- even RedHat's -- are always some variation of "here's…
I've been considering switching from Fastmail to Proton for Mail/Calendar/Contacts, but I didn't realize their bridge didn't do CalDAV or CardDAV. Also, apparently the bridge is desktop-only -- no mobile? That's kind of…
I presume the uptick I've noticed of "weed is really bad, actually" articles filling my news feed and social media is a response to the imminent classification changes in the US in an attempt to sway public opinion. I…
I've previously worked for a place that ran most of their production network "on-prem". They had a few thousand physical machines spread across 6 or so colocation sites on three continents. I enjoyed that job immensely;…
Chef vs Ansible was the first example that popped into my mind. I had a very love/hate relationship with Chef when I used it, but writing cookbooks was definitely one of the good parts.
Sony's network has been compromised something like a half dozen times over the last decade or so. They can't seem to secure their systems. Bad behavior aside, it's probably not a good idea to give them any sensitive…
I'm moving towards this for my current workplace. SSH will only be allowed via VPN, only to a bastion, and that bastion will not permit agent forwarding, or really much of anything other than ProxyJump. I'm baffled that…
My M2 Macbook Air has been flawless about sleep, but I set "Wake for network access" to "Never" so maybe I'm just avoiding Apple's issues there. At least it can be disabled; with Windows Modern Standby it was impossible…
> OEMs like Dell could try using a MacBook and mimic the trackpad. You know what's crazy about the trackpad situation? You can put Windows or Linux on a real live Macbook and the trackpad gets worse. Everybody except…
As bad as MacOS is the competition is generally worse. Windows and Linux laptops can't sleep/wake or power manage correctly, trackpad behavior is mediocre at best, bad HiDPI support, and so on. It's a lot easier to fix…
Agreed. I've been using Gandi as my domain registrar of choice for years now. No complaints.
> running apps that are mandatory to participate in modern society This right here is why I no longer consider custom ROMs. My phone is a tool critical to my daily life and I need it to function correctly nearly 100% of…
Yeah, I am always going to interpret that sort of thing as performative. There seems to be whole corporate mythology that is absolutely sure there are a bunch of cheap, low-effort things managers can do to raise morale…
Yes. I have a family member that has had many hospital stays over the last few years, and one of the most obnoxious things is that the staff just lets everything beep. The last time we were in the emergency room the…
I've noticed that for some reason developers really like using logs in place of actual metrics. We use Datadog, and multiple times now I have seen devs add additional logging to an application just so they can then…
I like most of these patterns and have used them all before, but a word of caution using UUID primary keys: performance will suffer for large tables unless you take extra care. Truly random values such as UUIDv4 result…
Maybe some people don't remember anymore, but there was a time when Ruby was HN's favorite language. I miss those days. I kind of get why everybody leaned into Python instead, but I'm never going to be happy about it.
If you manage to avoid scope creep then sure, static YAML has advantages. But that's not usually what happens, is it? The minute you allow users to execute an outside program -- which is strictly necessary for a CI/CD…
FTA: > The Fix: Use a full modern programming language, with its existing testing frameworks and tooling. I was reading the article and thinking myself "a lot of this is fixed if the pipeline is just a Python script."…
True. On the other hand, if you control the clients and can guarantee their behavior then DNS load balancing is highly effective. A place I used to work had internal DNS servers with hundreds of millions of records with…
It is very difficult to misconfigure Wireguard -- there's just not that much to tune aside from MTU. We've had a 1 Gbps tunnel between AWS and OVH for years and it worked mostly fine, except for the handful of times…
We've run Wireguard tunnels that max out at 1 Gbps in AWS for years with no issues (on the AWS side, anyways). It seems like things get hairy once you want to do more than that.
I did not. I'm not terribly familiar with it, but it doesn't look like I can do general routing with it, right? My end goal is to route between two subnets.
> The retransmit-in-retransmit behavior is precisely the issue. But you're concerned about an issue I do not have. In practice retransmits are rare between my endpoints, and if they did occur poor performance is…
I've just spent the last month learning exactly why I definitely do want a TCP over TCP VPN. The short answer is almost every cloud vendor assumes you're doing TCP, and they've taken the "unreliable" part of UDP to…
The documentation is atrocious, and usually won't say things like "label your program unconfined_t" because they don't want you to do that ever. Also, tutorials -- even RedHat's -- are always some variation of "here's…
I've been considering switching from Fastmail to Proton for Mail/Calendar/Contacts, but I didn't realize their bridge didn't do CalDAV or CardDAV. Also, apparently the bridge is desktop-only -- no mobile? That's kind of…
I presume the uptick I've noticed of "weed is really bad, actually" articles filling my news feed and social media is a response to the imminent classification changes in the US in an attempt to sway public opinion. I…
I've previously worked for a place that ran most of their production network "on-prem". They had a few thousand physical machines spread across 6 or so colocation sites on three continents. I enjoyed that job immensely;…
Chef vs Ansible was the first example that popped into my mind. I had a very love/hate relationship with Chef when I used it, but writing cookbooks was definitely one of the good parts.
Sony's network has been compromised something like a half dozen times over the last decade or so. They can't seem to secure their systems. Bad behavior aside, it's probably not a good idea to give them any sensitive…
I'm moving towards this for my current workplace. SSH will only be allowed via VPN, only to a bastion, and that bastion will not permit agent forwarding, or really much of anything other than ProxyJump. I'm baffled that…
My M2 Macbook Air has been flawless about sleep, but I set "Wake for network access" to "Never" so maybe I'm just avoiding Apple's issues there. At least it can be disabled; with Windows Modern Standby it was impossible…
> OEMs like Dell could try using a MacBook and mimic the trackpad. You know what's crazy about the trackpad situation? You can put Windows or Linux on a real live Macbook and the trackpad gets worse. Everybody except…
As bad as MacOS is the competition is generally worse. Windows and Linux laptops can't sleep/wake or power manage correctly, trackpad behavior is mediocre at best, bad HiDPI support, and so on. It's a lot easier to fix…
Agreed. I've been using Gandi as my domain registrar of choice for years now. No complaints.