This is literally true, it is the worst conceivable vulnerability, total access to your k8s cluster by hitting a URL, how about a 10 instead of 9.8, these comments are wild.
851 karma · joined January 15, 2013
Here's a simple test:
`kubectl exec -it` a pod:
curl -k --fail https://ingress-nginx-controller-admission.ingress-nginx.svc...
If you see 400 Bad Request, that means this pod has access to the admission controller.
How easy would it be to find an avenue to make a request to the admission controller for anything running on your k8s cluster? (maybe your service takes any kind of URL and makes a request on your server...there's infinite possibilities of exploiting this.)
I am rethinking my choice in using ingress-nginx entirely, perhaps it's time to find a simpler solution that has more secure defaults.
Am I the only one who feels like developers really need to be a bit more vocal in defending themselves, their craft, and even their sanity? Are we quiet because of the large salaries in the space?
I suppose the biggest question is how do you defend the craft but at the same time keep the advantage of automation and AI? (is it unions?)
That's my theory anyway. I remember when Instagram Reels was just awful and all the suggestions sucked, now it's actually good.
Surprising outcome, but very similar to what happened with Snapchat. Everyone used Snapchat and suddenly Instagram added Stories and over time people just used Instagram again when Instagram polished Stories enough.
Hmm, I guess Meta is unstoppable in the social media space.
If I want to see my monthly expenses (total), it doesn't let me. It just shows me how much I need to save this much in each bucket.
Weird.
I stop drinking coffee and BAM, I sleep like a baby. It doesn't MATTER when I drink it, I can drink it at 6AM and I will not have a good deep sleep. I am unsure if this is coincidence, but I also notice I remember way less dreams when I am on caffeine than not. I also find it's a compounding effect which is why it's slightly annoying.
If I drink 1 cup, in 2 weeks, my sleep will be fine so I will think, okay, it's not the caffeine. Then I will continue drinking it for weeks and suddenly I haven't had a good nights rest in weeks and I'm wondering what is going on. Not having deep sleep for weeks really has a big impact on your stress levels, memory, emotional well being and general energy levels.
The annoying part is coffee is so good for productivity so I go through cycles (also you start to think it's the stress not the caffeine that's causing the sleep issue!)
Weeks of stressful work - drink more caffeine to get all the work done - bad sleep, bad mood, bad energy levels, aka all the negative affects from not having enough deep sleep.
Weeks of less stressful work, no caffeine, great sleep, great mood/energy levels, etc.
I've always convinced myself that not drinking caffeine for deep sleep is just placebo, but I've tested it so many times that it just can't be.
Is there a way to test if you're a slower metabolizer? I know my partner can drink 3 cups and she is totally fine, lucky her! I'm 100% convinced I am, but it would be cool to test by some sort of blood/urine test?
The augmented reality shifting to virtual with the dial is so genius. I feel like a kid, and that's rare to feel these days. Love it, dream on Apple!
Can you imagine how annoying it would be to deal with 1,000 cheap customers that expect the world? Maybe they should sell it at $100/mo and sell it to only 100 people that really care about the problem.
Maybe just sell it to a business for $200/mo for all developers, they would only need 50 businesses to make $10,000/month and they would also remove the annoying, cheap, high expectation developer out of the equation.
Developers and engineers are probably the worst customer to have, insane expectations, complain about everything, criticize everything and use a magnifying glass to point out any issues, black/white thinking etc.
My theory is writing code has all of these expectations in it. You need to be highly critical, black/white (or you would drift into a world of options.) have insane expectations (or your manager gets mad at you.) etc. All great qualities for writing code, but the worst qualities for a customer.
I'm a developer too by the way, so please don't be offended, I've been there and done that, the other side is much nicer. For example, I activated my iCloud to 2TB at $10/mo instead of making a custom backup solution that I can run for $2/mo. Would I have done that years ago? Yes and the result would have been me spending 80 hours building the backup system that can't even get my photos back on my phone properly.
What I'm trying to say is, it's sad to watch developers suffer for a small amount of money per month. I honestly believe it's a failure of the people who manage developers. I may be reaching here, but I think a lot of developers have been treated poorly in general from managers, projects and high expectations. They are rarely rewarded properly which is actual recognition for the work they do. It's not free massages, free lunches and cool workspaces. As a result, I believe developers are the givers and the companies and managers are the takers. The takers siphon the life out of developers and to the point where they're so risk averse they won't even spend $100 to go to a spa to relieve some stress. They're so risk averse they won't even spend $30/month to make their lives easier.
What am I saying? Developers SPEND some money on yourselves. You DESERVE IT for the hard work you do. Stop being so risk averse just because the work you do is so.
Rant over.
Developers have high incomes, but are quite frankly, extremely cheap. And I actually mean cheap and not frugal. They will spend 40 hours/week for months to save $5/mo. There's basically no logic apart from that developers have a poor concept of time and money and are spending averse (again, cheap.)
In this case, this tool is $30/mo, or about $360 / year, what is that, 3 dinners for 2 people in a year? The tool may save the developer, let's say 3-4 hours / week and at 52 * 3 or about 156 hours of savings a year. At even 30 an hour, it's saved the developer $4,680, or at 60/hour, close to $10,000, but I can guarantee that 99% of developers will not spend $30/month to make their lives easier.
My only recommendation is try to sell this product to businesses and maybe offer them a deal based on the amount of developers they have. So sell it do a dev shop with 10 developers at $20/developer / per month. Businesses understand the time/money tradeoff and are not cheap.
Developers, my only word of advice, is seriously.. stop being so cheap and spend some money to make your lives easier.
Recently, I was looking for Espresso Machines and found https://www.home-barista.com/forums/ which is actually powered by PhpBB.
The amount of knowledge and information on that forum is changing the way I research products and search for things on the internet. I've learned so much deep knowledge on espresso machines and I've gone down rabbit holes of how water affects espresso machines.
It gave me a deep feeling of how awful Google and reddit are at having good quality information from experts. The users on the barista forums are just experts and have been around the forum for a very long time.
It's almost like Reddit and Google are fast food and Home Barista (and other forums that use PhpBB and similar technologies) are quality, home cooked meal past down from generations of knowledge.
Now I exclusively try to find forums for a specific topic and try to find the experts on those forums to get my information, usually through a forum.
Long live PhpBB and forums and these experts on there, it's a breath of fresh air exploring the internet away from the major social media products (including Google honestly.)
Note:
The fact that home-barista is using PhpBB is purely ironic, I did not know it was, this post just reminded me of a forum that had a wealth of information and that forums are great even in 2023, heh!
Dear <Manager>
Wishing you a very Merry Christmas and a Happy New Year! May your days be filled with joy, laughter, and lots of eggnog. Speaking of eggnog, have you heard the one about the manager who tried to manage a team of developers? He kept telling them to "commit" to their work, but they just kept "pushing" him aside.
Cheers, <Developer>
Seems like a landmine of licenses.
So it appears there are indeed two versions:
- VSCode (OSS) from GitHub (unable to access the Extension Marketplace.)
- VSCode from Microsoft (able to access the Extension Marketplace BUT you must agree to their terms here https://code.visualstudio.com/license.)
I did not know there were two versions. So I think the issue still remains for using Remote Development under the VSCode from Microsoft. You break their license by using it since I think VSCode Server runs when you use Remote - SSH.
Honestly, this seems like a fair compromise from Microsoft. VSCode and VSCode Server is fully open source but you must develop your own Extension Marketplace or install extensions on-behalf of your users... they need a business moat somewhere, others may disagree tho.
I guess for my own usage of Remote SSH, I should build everything from source (which seems a bit silly considering everyone else is using Remote SSH.) but seems silly to also open yourself to legal trouble.
Same issue as you, ladder really made me want to play. I was top 11 in NA and in terms of my rank I was top 0.01%. People in the game would always invite me and constantly want to play with me. It's super rewarding being super good at something.
The issue is, with these competitive games, is that they take everything away from you and make your life unbalanced. I don't have an answer from you, apart from quitting entirely seemed like the wrong approach to me. At the end of the day, you're playing the game for a reason, it brings you joy in some way, and this week of not playing taught me that I love everything else in life and I also want to continue to play competitively, it just needs to be balanced (so weekends only.)
If weekends only lead to me also playing throughout the week, then I'm going to cut it off entirely, but for now, I think a balanced approach is best.
Thinking about why I play really helped me and not playing during the week reminded me of why I love the game and hate the game at the same time. I hate the game because everything in my life is better right now, work, relationship, body, stress levels, etc. You would be surprised how much energy your mind exerts being the best at a game.
The reason I love the game reminds me that life is so boring sometimes, I was just watching random YouTube videos and such as they're nothing compared to being the top 0.01% of a game. The ups, the downs, the competitiveness, the feeling of finally getting to the top of the game is unreal. The fact that the game just takes you out of reality, no thinking about work stresses, relationship stresses, it's just all magically gone. Your mind is just on a 1 way track to winning in the game. Amazing. Life is so short, sometimes it's great to get away.
I don't have an answer for you really, we're in the same spot. I hope we find a balance between playing our games and living our lives. Harmony. It's the only way, or you're sacrificing something :)
On the bright side, I still use Emacs bindings in Visual Studio Code. Maybe I should spin up Emacs again and give it another shot on my new M1 (maybe it can do the auto complete stuff faster now.)
I’ve been reporting so many that Google sent me a high spam report alert…
Not sure what to do, I was going to open a ticket with Google. I haven’t experienced any spam with google for over 10 years, something changed for sure.
For me, it's the feeling of accomplishment and pride that keeps me going. Regardless of the projects success, I'm proud that I've worked on something for so long and seeing it improve everyday is satisfying. There's nothing really else out there that gives me the feeling. If you ignore the success of the project (whether that's monetization or popularity.) and focus on the fun and beauty of improving something every day, it lets you go pretty far and long.
At the end of the day, you always have that project that you worked on and improved on every day. You can look back at it, show it to people, etc, and it almost seems bigger than you.
Apple is doing a fantastic job right now and I believe they're going to do great in the next 10 years because of one really simple fact:
Apple makes great products that just work and look great. No other company has been able to do that. I was just gifted a Fitbit and it failed about 5 times to pair to my phone. I restarted both the device (5x) and phone and it finally worked. How easy do you think it was for my girlfriend to setup her Apple watch? That's when I was reminded why Apple is #1.
I think Apple should continue what they're doing, create great products that just work and look great. It doesn't matter what the next 10 years looks like if they can continue doing that and I really think they can.
Facebook: Number of friends
Instagram: Number of followers
Twitter: Number of followers
Snapchat: Number of friends
YouTube: Unsure exactly, but hard to go viral
TikTok: Value of your content
Consistently on TikTok you see very popular users with millions of followers only get a few thousand views.
That’s the best part of TikTok. You make good content, and the platform puts you to the top. Your popularity does not matter. Everyone gets a fair chance. It’s absolutely fantastic.
GME news travelled absurdly quickly. The two events lined up too well.
The greed here is on Elasticsearch and not on AWS. If you wanted to have a closed source piece of software that you have the only rights to monetize, then you should have closed it off from the beginning instead of taking all the work from the OSS community and giving the rights for ONLY you to monetize it.
- I have no idea, but I could try answering this through thinking through the problem. Generally a linked list has a pointer to from one item to the other. An array list I assume uses arrays for holding the items using indexes.
What are the available operations generally for a data structure?
Search - Search would be O(1) in array list and O(N) in linked list, can't be this.
Insert - Insert in a linked list is actually quite quick if you have the node since you could just move the pointers. For an array list, you would have to shift everything over. I think this is the answer.
Remove - Same deal as Insert.
Did I get this right?
- Because processes cannot access each others memory, the OS prevents from happening. A pointer is a pointer to an address in memory so you generally cannot do this. In terms of where would this work, umm, maybe in an old OS that didn't have the protection, or perhaps dynamically linking libs?
- Neither, it's pass by copy from what I recall. Or something of the sorts. Maybe call by sharing? I would just explain how it works since that's easier, generally everything in Java is copied, so it's pass by value in the traditional sense. But when you think pass by value, are objects copied? The answer is no, objects copy their pointer instead in Java. So when you modify a passed object, it does modify the underlying data in that object, but you can never re-assign the object.
- Nope, I don't think so. From what I recall, I've always had programs fail to run if I use the same IP + Port + Interface. You can do virtual hosts in Apache/Nginx tho where you can handle multiple different domains on the same port.
- Volatile is generally used when working with threading. I cannot fully recall what it is, but it's required in thread safety. I would generally use thread safety operations and data structures instead here, but I do recall having to use volatile a few times.
- I don't know how a breakpoint works exactly, but it's a marker placed in code and when a debugger runs into it, it stops the process. I assume since the Java code gets converted to byte code for the JVM to process, it would be a byte code added between the lines where the breakpoint lives.
Note: haven't used Java in 4 years.
Your life is like a game. In this game, you have different stats and you must increase each stat. For example, in a typical game you may have:
- Health - Attack Level - Money - Magic Level
In games, you try to increase each of these stats to create the best and strongest character. Life is very similar, but the stats are:
- Work - Social Life - Money - Fun - Relationship - Family - Sleep - Exercise - Relaxation
If all you do is spent all your time on Work, all the other stats will be lacking and ultimately you will have a weak character. Your work may be at 99/100, but your Sleep may be 20/100, or your relationship/family may be 40/100. So, the way I switch off work is that at 1:00PM I take 1 hour off of work (no matter what.) and I do not feel bad about it because it is ultimately increasing my Relaxation/Fun stat. At 5:30PM, I stop work entirely to focus on everything else in life such as Fun, Relationships, Family, Exercise, Social Life.
I find it very strange how well this model works for me. I literally separate work entirely at 5:30PM because I know life is more than just about the Work stat, it's about all the stats combined and you must work on each one to beat the game or be a strong character at the game of life.
Thanks for sharing this, made my morning and took me away from development work for once!