HNHacker News
TopNewBestAskShowJobs

plange

61 karma · joined July 25, 2016

submissionscomments
plange··on Kubernetes Failure Stories
Donated by Joe Beda himself.
plange··on GitHub is now free for teams
Gitlab states it wants to go public this year

https://about.gitlab.com/handbook/being-a-public-company/

plange··on Coronavirus Forces World’s Largest Work-from-Home Experiment
> men. people

Otherwise i agree. Having just spent a week on-site at a client, you just notice a lot more problems (or start to understand the details of previously identified problems) that are in your capacity to fix.

plange··on Oxide Computer Company: Initial boot sequence
They are starting in a garage https://blog.jessfraz.com/post/born-in-a-garage/

Read up before you make unfounded claims

plange··on ICANN races towards regulatory capture: the great .org heist
Already happened. OpenNIC had to move the users from .free over to .libre
plange··on Visa, Mastercard, Stripe, and eBay exit Facebook’s Libra project
http://www.salimvirani.com/facebook/

https://www.cnbc.com/2019/08/23/facebook-releases-new-cambri...

http://www.theguardian.com/technology/2014/jul/06/we-shouldn...

plange··on Richard Stallman’s Exit Heralds a New Era in Tech
I agree with everything you said, but this movement has been going on for a long time but and has been very bad at... hisss.. marketing.

These are complex topics and people don't want to put in the effort to understand them so this needs some top-shelf selling power. And there's no money to be made. Just freedom (as in speech).

plange··on Allow 0.0.0.0/8 as a valid address range
From the commit message:

> 0.0.0.0/32 is still prohibited, of course.

plange··on Ask HN: Who is hiring? (July 2019)
How is this different than ticketswap?
plange··on Show HN: Hydra – Open-Source OAuth2 Server
This is NIH syndrome. You're way better off following the standards, and likely implementing standard libraries to actually make use of them.
plange··on Ask HN: What jobs can a software engineer take to tackle climate change?
You can do both.
plange··on Ask HN: What jobs can a software engineer take to tackle climate change?
Worked at a startup that unfortunately went under, trying to reuse heat generated in datacenters. (saves on electricity spend on airco and saves on having to generate heat elsewhere)

Luckily some competitors still exist: https://www.cloudandheat.com/ https://www.qarnot.com/fr/home-fr/

plange··on Ask HN: What jobs can a software engineer take to tackle climate change?
ecosia.org
plange··on Assange Indicted Under Espionage Act, Raising First Amendment Issues
Journalists do that all the time, it's literally part of the job. Though it is rare to see because there are repercussions.
plange··on What SSH Hacking Attempts Look Like
you should probably upgrade that kernel
plange··on Hijack of Amazon’s domain service used to reroute web traffic for two hours
Confusion prevention squad:

> That is to get to 3.3.3.3 A 3.3.0.0/16 route takes precedence over a 3.0.0.0/32 route.

I think you mean:

> That is to get to 3.3.3.3 A 3.3.0.0/16 route takes precedence over a 3.0.0.0/8 route.

a /32 is _more_ specific.

plange··on Beyond CI/CD: GitLab's DevOps Vision (2017)
I had this exact same problem with the way i & my team approached our kubernetes clusters. I come from a network management background and in that space we all know of a tool called RANCID. A simple tool that logged into your switches/routers, made a dump & removed counters/oscillating data and stored it into CVS.

This predates infra-as-code.. it took years before someone wrote a clone that used Git instead of CVS

Made something stupidly similar for kubernetes: https://github.com/pieterlange/kube-backup

plange··on Show HN: Haproxy-auth-request – HTTP access control using subrequests
Thanks not only for making this, but also describing your process in a blog.

I use ngx_http_auth_request_module a lot and used haproxy a lot in the past but it's currently too limiting for my usecases - now i know it supports lua we're in a whole different ballgame.

plange··on Using a Yubikey for GPG and SSH
They still haven't licensed their code, which makes it very hard to use.
plange··on On the Usability of Deploying HTTPS [pdf]
There's some good resources out there, the problem here is that most people simply don't care or don't think it's part of their job to fix these things.

https://mozilla.github.io/server-side-tls/ssl-config-generat...

https://cipherli.st/

plange··on By installing NAT, MIT stifles innovation
NAT is not security at all.
plange··on AWS Security Primer
Classic mistake. Except it's not really a mistake, but a conscious decision by whoever was in charge at the time (with the main focus probably being growing the company and not hurting current customers).

How do we fix that though? Standards seem like the only solution but they either don't move fast enough or the early birds (in this case amazon, but another prime example is microsoft) become so entrenched they set the standard themselves.

My own answer up until now has been to work in linux and open standards jobs (now kubernetes) but this requires increasing amounts of effort.

plange··on Debian 9 Stretch released
Unstable over testing? Really? Why? :-)

I've been running stretch on a lenovo carbon x1 for the last 2 years and it's been one of the first problem-free experiences running linux on the desktop (linux user for.. 18 years). Really awesome. Thanks!

plange··on Show HN: Kryptonite – a new home for your SSH private key
> The easiest way to do that probably results in a callback to Big Daddy G every time I access anything sensitive and I'm cool with that.

Why?!

plange··on Escalation of Privilege Advisory
I'd wager we haven't seen the last bug yet, if ever.
plange··on Show HN: Kryptonite – a new home for your SSH private key
You are completely right up to the point that people are able to update their phones.
plange··on HipChat security notice
Nothing in life is free.

Quality software doesn't create itself out of thin air (yet, if ever). That means someone has to make an investment.

You don't have to invest in the upkeep of the foundation of your house, but if some bugs, say termites, were to sneak in you can't blame the original builders for the donated foundation.

Please downvote for the bad analogy.

plange··on HipChat security notice
Yes, possibly.
plange··on HipChat security notice
Sorry, i wasn't trying to imply they shifted blame. But atlassian does bare the legal&moral burden of securing their product here.
plange··on HipChat security notice
Then you would be fine with the standard boilerplate "your data is secure with us"?

I'm happy they say this.. now i'd like some sort of proof :-)

Page 1 of 2Next →