darkr

Revocation for random domains is kind of a moo point as chrome doesn’t do OCSP default, just CRLsets that are pushed out with browser releases, that probably won’t include your domain.

Better instead just to have shorter TTL certs.

some air-water heat pumps _can_ run in cooling mode, but speaking to a heating engineer the other week he recommended not doing this for exactly this reason.

I presume you’re talking about air source heat pumps here. Some will go down that far, but it’s not common. If installed in a location where winters will routinely see temperatures below -10/15 degrees C, it’s going to be far more efficient to do a ground source heat pump, ideally with a deep bore hole where you can get a heat source that is continually 10-20 degrees C

> There is little to no advantage to being the first bank to implement YubiKey 2FA

Ideally they’d just implement passkeys (webauthn/fido). More secure, and it works with iOS, android, 1password, and yubikeys

Another option, if you’ve got the ceiling height is a proper 4 post lift. Expensive, but you can justify it by doubling your car storage space.

Until you fall into it when you’re not paying attention!

Sounds like an ad agency to me!

Try stepping into a management role for a while, ideally one in which you have lots of dealings with less technical parts of a business. Even if it's not for you, at least you'll have gained some insights into that side of things, and more importantly - lots of real world exposure to spreadsheets!

If we've learned anything from Jurassic Park, it's that life...finds a way

We had a recent use case to log outbound TCP connections _excluding_ internal and known addresses from our k8s infrastructure, with the log including the process name/pid, uid a bunch of other metadata.

I wrote a tool that compiles to a small, statically linked binary (using CO-RE/libbpf), deployed to every node as a DaemonSet. It just works and uses minimal CPU and memory resources.

Wow, even adjusted for inflation that's like £40k. You'd be struggling to find a warehouse anywhere near central for £4M these days.

I have no idea what car you’re driving or what safety features it has.. but more importantly, your response to a crash caused by your own carelessness is to be morally indignant… towards your car?

There was no danger to life in this scenario. It’s not for the car to figure out how to “not do this”, it’s for you.

dtrace is a far more comprehensive tool than strace. The common complaint on MacOS is that SIP by default will not allow you to use it. The same issue occurs on Linux when you're running SELinux or similar.

A simpler, but less targeted approach that works in case you're not tracking token issuance by ID is to maintain a list of maps of entity (e.g user) ID to minimum issue time. This way you can revoke all earlier tokens for a user ID with a single record, and not have to keep track of issued tokens.

> How much does it cost to upgrade from 1TB to 10TB?

£10/month

The standard monthly quota plans are 1TB and 10TB for residential, and 2TB and 20TB for SOHO/business, which is pretty workable for most use cases.

Compared to some residential ISPs where I've seen caps as low as 15GB/month..

Your local router, if correctly configured should do fragmentation. But in 95% of use cases, jumbo frames aren’t worth the hassle.

I was using a ~2011 x220 as my personal laptop until 2021 or so, when I replaced it with an X1 carbon. This lasted almost 2 years until it stopped charging, and Lenovo wanted more than the laptop was worth to repair it.

I've since switched back to the x220. Whilst I miss the extra memory and CPU grunt, it gets the job done. When this one finally dies I'm not sure what will replace it, but it certainly won't be another Lenovo.

Can’t speak for innovation, but on efficiency; in terms of percentage of GDP spend (which is also significantly greater per capita on the US side); the US spends greater than 65% more of GDP than Portugal on healthcare but has among the worst overall outcomes of the ”developed” world.

It is the most expensive healthcare system in the world that provides excellent healthcare for the richest people in the world (perhaps in the top 3 for this category of “customer”), but in terms of efficiency, outcomes, and statistics that matter for the general population, it is barely in the top 30.

Most likely this would not stand up in court, given a proficient legal team. I imagine that the hobbyist developer had neither the money nor the inclination to mount a legal defence against a multi-billion dollar company though.

Actually it's primarily due to NDP and EUI-64. Eliminating ARP is a very good thing for reasons of scalability, reliability and security.

As a general rule, if you're deploying IPv6 subnets sized as anything other than /64, you're doing it wrong

I manage this with conditional includes in ~/.gitconfig:

  [includeIf "gitdir:~/work/client1/"]
   path = ~/work/client1/.gitconfig
  [includeIf "gitdir:~/work/client2/"]
   path = ~/work/client2/.gitconfig

It's a problem introduced at least in part by SPAs. When the application runs entirely in the client browser, save for a few API calls (that may be shared between multiple pages) it's difficult to tell which pages are actually being viewed, unless you have the client application report back to you (or to Google)

It does; but (at least in the UK) smoking and obesity are not only the two largest contributors to early deaths, but also by far the largest contributors to inequality of life expectancy between socioeconomic groups.

> 802.1q VLAN tags: access versus trunk

I think the parent was saying that these are Cisco specific terms; more generic terms would be "untagged" + "tagged".

CentOS (and it's forks) never backported security fixes for old software versions; it was always RedHat that took on this grunt work.

Even within that 12-24 month timeline, security fixes are commonly only backported where there is a significant enough security risk in a significant enough package. More resource on this mundane but important task is sorely needed

> Now I need to write a dockerfile, loads of manifests, know about ingresses, use whatever custom tooling and abstractions they've built on top of the cloud provider.

Doesn’t sound like there’s a whole lot of platform engineering here.

The general aim for a platform engineering team should be a UI/CLI that allows a dev to get a new service into production in minutes. Metrics, tracing, monitoring, alert routing, logging, DB, CI/CD, service/RPC stubs etc all done for you so you can get to writing code fast and not worry about the tower of complexity underlying all of this.

UK contempt of court laws prohibit "publications" from influencing any future trial (publications taken to mean any communication addressed to the public - including twitter etc).