Recent submissions

Comment · 8 years ago
There are lots of Open Source projects that will do what you are asking. Here is the first top hit on using bind to do that - https://github.com/wrouesnel/dns-over-https-proxy

However I disagree that it is a bad idea and that the implementation is bad. Regardless of how software _should_ behave, Firefox operates in how software is actually run for their users. DNS is a source of security vulnerabilities and headaches.

Demanding a higher level abstraction is not always an option for many, but using Firefox often is. This is especially important for mobile, where a lot of people don't have access or knowledge to set in place a system wide proxy after rooting their phones, but it is very easy to install Firefox mobile.

What about web browser usage on library or campus computers? Often they will have several browsers installed as well.

The point is that making security more available and easier to use where it matters most is a good idea.

Comment · 8 years ago
> forced upgrades

I think the forced upgrades were a good thing. The security model on Windows 10 and continued support of updates to 10 is overall a Good Thing for the average Windows User. The majority of users on Windows run their systems in extremely non-secure ways and skip updates and upgrades completely. This is a danger to the internet as a whole.

To me it ultimately comes down to this: I can't force my older relatives to update their machines or even stop them from running ancient versions of Windows. On that front, Windows 10 made things better.

Comment · 9 years ago
Usually Football pays for itself.
Comment · 9 years ago
In addition to more vacation days, maternity leave, etc
Comment · 9 years ago
A simple solution in this vein is to white list your the EIP addresses of your NAT. This would give access to all resources in a private subnet (this is useful for Lambda's running in subnets).
Comment · 9 years ago
Vault is really wonderful to work with, and its integration with consul makes it phenomenally powerful.
Comment · 9 years ago
> And somehow in the more affluent parts of the city where I live, Comcast, Google and AT&T are all competing. AT&T and Google are both offering gigabit internet for $70 a month.

Google is offering service in limited areas of 8 cities and have put on hold any future expansion. That is not comparative to the rest of the country and shouldn't be used as an example of competition. The country has no real competition for internet service providers.

Comment · 10 years ago
Can you cite this?
Comment · 10 years ago
That would actually be perfect for long range interstellar probes. A constant source of energy for thousands of years, even that small, would propel a craft to reasonably high speeds. Give a spacecraft a few pounds and you'd have something really great.
Comment · 10 years ago

  > I was riding my bike the day after the procedure.
Please do not spread terrible medical advice which you were surely told not to do. That's great you turned out fine but it is not ethical to promote such behavior.

Think of it as someone saying their children turned out fine without immunizations. Your words can become incredibly dangerous once you begin questioning doctors if you are not trained or have added knowledge in the area of specialty.

Comment · 10 years ago
I think I'm a little confused by what you are asking - are you wanting to run a consul server and agent on the same instance? You can do that and specify an ID appropriate to the consul service type for multi-tenancy situations of master nodes and client nodes. But that would be up to you given your deployment environments.

Are you wanting to have a single consul service running for the whole environment (as client and server)? If you're running an HA environment you should really have dedicated master nodes and non-voting clients for service discovery on instances. The member states of consul clusters have an IP and ID, are you saying that the IP could be mixed with a different ID (it could in the cloud, but upon connecting to the leader it would update its registered information).

Are you talking about cleaning up old instances registered in the cluster? Or that there could be a single master node which has a broken network connection to the other master nodes, so sees different cluster status information? In that case, you should be monitoring all your services. Always. There are a lot of tools out there which will clean up and correct voting clusters in those situations. We use Sensu and Kubernetes checks / services for a lot of monitoring and automatic reaction to changes in cluster health.

Comment · 10 years ago
You are correct and I came here to say the same. Additionally I've seen issues working with etcd in that it is a pain to manage, with situations coming about of split cluster issues where the data becomes corrupted and needs to be manually merged together. That is a bad situation to be in, and usually it is better to develop for failure, especially in cloud environments. You can get split-brain problems on any clustered agreement replication, etcd is not a special case.
Comment · 10 years ago
You can specify a custom ID. I use ID's such as AWS instance ID for clusters in Amazon.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton